$ rpki-client -vvf rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft File: 72FDA859AF7750A564023AE4F6E8878FC184D64A.mft (raw, json) Hash identifier: tQZ54Zl17WVeIKhPXvi9aI+fuEPX2Kg/NGh3nb8uWlU= Subject key identifier: F8:80:D9:15:72:78:E4:3B:63:0B:AD:EB:7E:42:99:B6:3A:2B:C9:5C Authority key identifier: 72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A Certificate issuer: /CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Certificate serial: 4BB521656FD7266D0FAF6295A6B7DF1A34B53675 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:31:21 +0000 Manifest this update: Thu 23 Jul 2026 21:26:21 +0000 Manifest next update: Fri 24 Jul 2026 23:12:21 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: 89BQuo5qF9jY9pkwo8ogiyXzuxdhzpXGGix3yqTiFrw=) 2: 72FDA859AF7750A564023AE4F6E8878FC184D64A.crl (hash: CW2YlzximfbR3Qf41C3H8vEAdQXoHEz0mX5Dlhc53fo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b5:21:65:6f:d7:26:6d:0f:af:62:95:a6:b7:df:1a:34:b5:36:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Validity Not Before: Jul 23 21:26:21 2026 GMT Not After : Jul 24 23:12:21 2026 GMT Subject: CN=F880D9157278E43B630BADEB7E4299B63A2BC95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b2:e7:ee:77:dc:17:f3:13:08:ba:68:45:dc: 2a:19:66:64:56:7d:c7:63:5a:e7:18:fd:b2:b6:c2: 90:3f:c7:e8:34:18:45:d0:cf:11:4a:d4:82:12:f0: 01:2a:a7:bd:bd:0d:32:47:ab:f2:07:0b:c9:c3:2b: 73:08:2d:a9:b0:c2:48:70:e8:a3:89:4d:8b:85:d7: ee:e9:ce:32:e6:7a:30:e3:58:9d:20:a6:40:3b:80: 7d:91:03:0f:0e:97:07:64:63:b5:ac:57:b0:02:34: f5:fc:c3:d7:a4:f5:cd:14:27:2d:48:9b:4d:c3:7e: f8:d4:fc:bc:48:a1:99:9c:87:6e:b0:0b:02:0d:d2: 13:14:4f:b3:50:42:42:b5:f3:02:6a:14:11:47:89: be:68:2a:83:04:ec:11:5b:ab:f3:86:75:76:74:21: c0:f6:b0:cc:d9:82:94:99:90:be:3b:6f:39:8c:fd: fd:c4:9c:20:d2:70:65:ec:1c:00:2a:0d:33:74:e6: 80:72:a4:75:2b:74:c5:ce:4b:71:e2:b1:64:7a:a5: 23:0f:75:9b:82:db:15:d0:92:02:ab:e1:86:14:6d: 37:06:83:79:28:9f:9f:1a:14:80:b9:39:04:98:7f: 36:01:dc:1c:f1:e3:25:4f:7b:1f:b5:92:14:bb:9d: cf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:80:D9:15:72:78:E4:3B:63:0B:AD:EB:7E:42:99:B6:3A:2B:C9:5C X509v3 Authority Key Identifier: keyid:72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:68:27:0a:bc:69:3e:bf:68:25:e1:f7:ba:04:da:3d:3a:84: 44:21:2b:35:85:fa:e7:93:9a:8a:62:83:87:23:69:a7:1e:1f: f2:ef:a4:1a:4a:0d:ae:a3:f6:ba:13:d5:a6:79:30:0f:7a:f0: e4:37:41:8f:98:f8:5a:45:bd:4d:43:c1:49:af:74:47:5f:42: 9c:b1:16:ef:b2:7d:a7:b6:63:3b:52:f4:d3:8e:37:0a:d1:e4: 7a:a1:42:3f:73:69:47:4a:0e:7d:f3:de:a5:7a:7d:09:53:40: 04:fb:42:a0:02:a7:f3:97:1b:ad:7f:e2:d4:1a:8a:5d:61:1c: 91:0f:1b:38:d3:d3:ad:f9:10:1b:34:58:18:b1:95:e9:71:e5: 1d:c9:46:8e:90:ed:27:fc:1f:2a:ca:a0:e7:14:d6:8d:8f:db: 9b:81:de:40:b5:5c:14:64:ec:aa:08:96:6f:5b:89:23:12:12: e7:66:f1:73:46:2a:c2:2a:6d:5c:56:c0:f0:b5:c6:55:e7:00: 21:45:a8:6d:03:72:b3:da:b3:76:86:64:6d:a6:1f:df:3a:b6: b2:fd:c2:91:26:9b:04:41:e2:99:a6:9c:b5:51:76:dd:f3:72: 15:56:16:d5:4a:ce:e1:37:04:f9:ae:25:fa:e4:7c:95:61:7d: c8:b6:46:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7UhZW/XJm0Pr2KVprffGjS1NnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3OEZD MTg0RDY0QTAeFw0yNjA3MjMyMTI2MjFaFw0yNjA3MjQyMzEyMjFaMDMxMTAvBgNV BAMTKEY4ODBEOTE1NzI3OEU0M0I2MzBCQURFQjdFNDI5OUI2M0EyQkM5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzsufud9wX8xMIumhF3CoZZmRW fcdjWucY/bK2wpA/x+g0GEXQzxFK1IIS8AEqp729DTJHq/IHC8nDK3MILamwwkhw 6KOJTYuF1+7pzjLmejDjWJ0gpkA7gH2RAw8OlwdkY7WsV7ACNPX8w9ek9c0UJy1I m03DfvjU/LxIoZmch26wCwIN0hMUT7NQQkK18wJqFBFHib5oKoME7BFbq/OGdXZ0 IcD2sMzZgpSZkL47bzmM/f3EnCDScGXsHAAqDTN05oBypHUrdMXOS3HisWR6pSMP dZuC2xXQkgKr4YYUbTcGg3kon58aFIC5OQSYfzYB3Bzx4yVPex+1khS7nc+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+IDZFXJ45DtjC63rfkKZtjoryVwwHwYDVR0j BBgwFoAUcv2oWa93UKVkAjrk9uiHj8GE1kowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVjNTUzYjYtOWU1Ny00MGJkLThkOTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlB Rjc3NTBBNTY0MDIzQUU0RjZFODg3OEZDMTg0RDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZEQTg1OUFGNzc1MEE1NjQwMjNBRTRGNkU4ODc4RkMxODRE NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3 OEZDMTg0RDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpoJwq8aT6/aCXh97oE2j06hEQhKzWF+ueT mopig4cjaaceH/LvpBpKDa6j9roT1aZ5MA968OQ3QY+Y+FpFvU1DwUmvdEdfQpyx Fu+yfae2YztS9NOONwrR5HqhQj9zaUdKDn3z3qV6fQlTQAT7QqACp/OXG61/4tQa il1hHJEPGzjT0635EBs0WBixlelx5R3JRo6Q7Sf8HyrKoOcU1o2P25uB3kC1XBRk 7KoIlm9biSMSEudm8XNGKsIqbVxWwPC1xlXnACFFqG0DcrPas3aGZG2mH986trL9 wpEmmwRB4pmmnLVRdt3zchVWFtVKzuE3BPmuJfrkfJVhfci2RlE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:10 2026 by rpki-client