
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft
File: 72FDA859AF7750A564023AE4F6E8878FC184D64A.mft (raw, json)
Hash identifier: t3321yYn03elVbI1DmhX0oAjUeE06Bm+4tFB0Lx5Hss=
Subject key identifier: E2:44:58:8D:CA:90:2D:76:50:66:88:6F:38:49:1D:EE:7E:E3:BF:25
Authority key identifier: 72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A
Certificate issuer: /CN=72FDA859AF7750A564023AE4F6E8878FC184D64A
Certificate serial: 4B047DDDE9BB7377C2DC8D9F9E7E72A0F119270D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:56:35 +0000
Manifest this update: Tue 12 May 2026 05:51:35 +0000
Manifest next update: Wed 13 May 2026 06:04:35 +0000
Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: 89BQuo5qF9jY9pkwo8ogiyXzuxdhzpXGGix3yqTiFrw=)
2: 72FDA859AF7750A564023AE4F6E8878FC184D64A.crl (hash: D+97S9bGe/y1MwpiSrL9FWyLBVoIB132m3DR/PhLVcs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl
rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:04:7d:dd:e9:bb:73:77:c2:dc:8d:9f:9e:7e:72:a0:f1:19:27:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72FDA859AF7750A564023AE4F6E8878FC184D64A
Validity
Not Before: May 12 05:51:35 2026 GMT
Not After : May 13 06:04:35 2026 GMT
Subject: CN=E244588DCA902D765066886F38491DEE7EE3BF25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:36:34:ab:93:b0:2e:a0:ae:d5:61:0f:d8:
47:cc:f4:af:0a:dc:1f:62:a7:e6:b9:40:8a:bf:2b:
38:c7:6c:1e:c9:9a:b9:37:e4:68:6c:1f:24:2e:d9:
18:35:8c:f1:75:65:3f:77:2a:db:51:c5:90:6c:48:
ce:0f:f0:4d:7b:75:da:f6:95:84:85:f3:f7:a3:88:
0c:90:79:76:aa:ca:49:d9:f8:ce:72:97:27:06:a1:
19:f0:8a:9b:0a:84:fa:6c:fa:3f:e8:22:01:bd:1b:
1a:f1:8f:69:5d:c6:a3:cf:94:60:34:b2:0a:ba:e3:
81:c0:3f:9b:fc:84:be:26:62:d1:28:42:d3:dd:f2:
34:58:20:ed:dd:c1:2e:3b:81:3f:78:c8:40:d8:aa:
e2:4f:63:b6:9f:46:40:8e:63:d4:a4:de:5c:0f:66:
1c:d5:6d:34:57:38:52:ee:1a:5f:20:b4:b0:7a:ae:
b6:36:d9:56:01:6a:9c:31:35:fd:67:b7:83:dc:fa:
c0:37:4f:70:23:79:fa:28:98:cf:bf:96:a4:89:3a:
72:ed:21:09:79:20:c9:2c:16:b4:3b:54:fe:bb:4f:
13:c8:26:1c:cc:8e:71:e6:3d:40:6b:77:8a:63:87:
7f:13:b9:2b:8b:1d:89:37:c8:0a:2b:44:ca:46:dd:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:44:58:8D:CA:90:2D:76:50:66:88:6F:38:49:1D:EE:7E:E3:BF:25
X509v3 Authority Key Identifier:
keyid:72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0c:37:dc:83:96:be:ce:28:f1:86:64:79:b1:8b:a5:ff:35:
61:01:1e:76:66:7c:4a:6c:9a:ef:61:08:4b:80:35:6a:d4:36:
03:ff:fa:a8:68:7a:57:f5:2a:2a:5d:03:ea:b1:bd:d8:58:dd:
e6:79:d0:0b:aa:98:3a:84:02:9a:15:69:c9:20:1d:17:14:94:
31:02:b3:fe:5c:96:e9:77:da:a0:aa:0d:41:7a:3b:1d:d6:9e:
ac:46:63:58:07:b5:28:cc:52:83:fe:9b:5f:14:2f:d2:49:61:
1b:25:aa:f2:47:73:2b:4b:a4:cc:aa:d2:aa:93:cd:98:78:9d:
d8:4f:f4:ab:43:f7:50:a0:5c:70:65:23:04:dd:65:9c:0b:40:
e3:31:42:bb:03:20:59:e4:17:d0:28:10:62:6e:f5:f5:0c:98:
f4:95:d2:43:d6:db:f1:d6:52:d0:f3:bd:a0:86:c4:a8:dc:7a:
af:01:dc:eb:7a:c3:a3:f4:a4:b5:c0:ca:b9:f5:4f:ce:a6:6e:
2f:91:a8:b0:e0:49:d0:f4:dc:88:b5:21:91:8d:72:30:1c:97:
48:ee:b0:85:dc:9b:3b:a7:e8:4d:1e:f7:e6:1e:3e:15:24:d2:
15:13:81:5f:55:01:70:b3:4b:e7:92:08:8b:ed:16:97:b9:27:
b8:2b:6f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:36 2026 by rpki-client