$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft File: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft (raw, json) Hash identifier: bQMpNZO+75ck1L3GCnLTpxKok/YpyFUacY4cYtBHJQY= Subject key identifier: D7:DD:85:C7:40:32:8A:69:16:D6:FD:32:66:93:EB:50:B4:F8:09:F0 Authority key identifier: 72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F Certificate issuer: /CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Certificate serial: 023F7DAD1A99CB61721B5E88EE36B09E56488CD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 15:39:16 +0000 Manifest this update: Sat 26 Sep 2026 15:34:16 +0000 Manifest next update: Sun 27 Sep 2026 19:04:16 +0000 Files and hashes: 1: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl (hash: 6sm7xL24tvxp5jCsD0BPfca4jxKvOjVgsTA9Hc5fGmc=) 2: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (hash: PvyV39mz8mjiMF4MZkFF8Y2y+8ayLbmRxXXvZRdxwsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3f:7d:ad:1a:99:cb:61:72:1b:5e:88:ee:36:b0:9e:56:48:8c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Validity Not Before: Sep 26 15:34:16 2026 GMT Not After : Sep 27 19:04:16 2026 GMT Subject: CN=D7DD85C740328A6916D6FD326693EB50B4F809F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:b7:db:5f:c8:c7:25:4b:01:95:f8:fa:c7: 00:80:1f:64:b7:0f:62:f7:06:d2:ef:2f:2f:27:35: 1c:43:6b:98:7b:e2:a0:1d:ea:75:16:70:c3:de:8c: ba:54:0b:a3:53:1e:b6:4c:ce:13:00:af:68:22:95: 77:4e:40:c4:30:19:30:64:bb:d8:b5:53:69:56:17: 28:ca:54:6c:c3:59:13:37:d7:4b:a1:9d:25:c9:c2: a9:ae:35:1f:30:72:8d:de:80:df:20:60:68:4f:92: f6:6b:9a:85:ec:78:99:57:02:e1:3b:32:02:b3:94: f7:6a:eb:1e:c5:60:25:5c:ef:03:6a:af:67:9e:75: 8e:15:78:9f:26:cd:b3:02:1b:b3:83:75:26:cc:47: 65:57:a2:7b:f5:b3:3c:eb:46:8f:94:ff:93:62:af: 21:33:41:a1:cc:bf:09:5d:eb:1e:0b:29:36:73:ea: 9d:28:7b:be:10:b4:61:53:8e:3f:eb:5b:d1:3f:3a: df:7d:5e:fc:28:b7:55:fc:aa:a5:ad:d0:d7:43:86: 50:86:29:1c:0a:53:45:a5:7a:f4:79:37:9e:6f:c2: 93:86:1f:fb:d8:ac:c6:28:96:48:e9:32:b6:85:a7: 76:08:2c:b8:fb:d5:8a:ad:98:78:80:05:46:12:f0: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DD:85:C7:40:32:8A:69:16:D6:FD:32:66:93:EB:50:B4:F8:09:F0 X509v3 Authority Key Identifier: keyid:72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3e:82:f1:1b:95:c0:bc:90:17:d4:27:4b:3a:cc:41:30:65: 43:88:58:e5:03:0a:df:36:18:9f:b4:8a:cd:59:2e:3e:2c:b5: f7:a8:6d:c0:00:59:64:9e:36:54:60:2d:a6:a2:57:6e:a4:bf: 48:8f:cf:e9:d3:c5:78:68:b3:92:a3:8d:9e:90:6e:75:b1:aa: 17:ae:c2:79:3a:38:74:f8:c8:a5:82:b1:5a:cc:25:54:e9:53: 15:16:fb:91:74:e9:6d:5e:8b:a9:e0:cd:cc:bf:a4:5c:85:7f: 75:08:6d:d7:df:ae:b2:f2:e5:ff:79:2b:8d:c3:d9:77:6c:08: b5:41:c3:74:51:5a:17:b3:ae:54:cc:1a:c2:7a:e5:36:b0:4c: b6:de:49:90:0e:3f:1d:89:2d:1e:44:90:f4:16:0e:4f:b4:5f: 2d:b8:73:97:60:2c:28:fe:07:3e:8c:24:af:a1:62:26:17:5e: 23:20:66:50:5f:b9:d9:07:6e:fe:a4:77:81:48:5f:8e:bf:03: bd:07:59:ed:a6:53:05:da:a4:23:47:d1:cc:ec:dd:37:6c:0f: cf:aa:dd:79:c4:34:b3:82:59:03:de:66:6d:9d:24:22:ac:45: f8:ca:4f:7f:41:f9:14:96:3d:ab:44:0f:75:15:c3:6a:06:5d: 27:55:19:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAj99rRqZy2FyG16I7jawnlZIjNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFE MTdCQjExRjAeFw0yNjA5MjYxNTM0MTZaFw0yNjA5MjcxOTA0MTZaMDMxMTAvBgNV BAMTKEQ3REQ4NUM3NDAzMjhBNjkxNkQ2RkQzMjY2OTNFQjUwQjRGODA5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC977fbX8jHJUsBlfj6xwCAH2S3 D2L3BtLvLy8nNRxDa5h74qAd6nUWcMPejLpUC6NTHrZMzhMAr2gilXdOQMQwGTBk u9i1U2lWFyjKVGzDWRM310uhnSXJwqmuNR8wco3egN8gYGhPkvZrmoXseJlXAuE7 MgKzlPdq6x7FYCVc7wNqr2eedY4VeJ8mzbMCG7ODdSbMR2VXonv1szzrRo+U/5Ni ryEzQaHMvwld6x4LKTZz6p0oe74QtGFTjj/rW9E/Ot99Xvwot1X8qqWt0NdDhlCG KRwKU0WlevR5N55vwpOGH/vYrMYolkjpMraFp3YILLj71YqtmHiABUYS8PbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU192Fx0AyimkW1v0yZpPrULT4CfAwHwYDVR0j BBgwFoAUcvv5aiHOLWHEs9aEbH/modF7sR8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBlYTUwNTYtMGZiYy00MDMyLTg2ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEy MUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFEMTdCQjExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZCRjk2QTIxQ0UyRDYxQzRCM0Q2ODQ2QzdGRTZBMUQxN0JC MTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBlYTUwNTYtMGZiYy00MDMyLTg2 ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2 QTFEMTdCQjExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJs+gvEblcC8kBfUJ0s6zEEwZUOIWOUDCt82 GJ+0is1ZLj4stfeobcAAWWSeNlRgLaaiV26kv0iPz+nTxXhos5KjjZ6QbnWxqheu wnk6OHT4yKWCsVrMJVTpUxUW+5F06W1ei6ngzcy/pFyFf3UIbdffrrLy5f95K43D 2XdsCLVBw3RRWhezrlTMGsJ65TawTLbeSZAOPx2JLR5EkPQWDk+0Xy24c5dgLCj+ Bz6MJK+hYiYXXiMgZlBfudkHbv6kd4FIX46/A70HWe2mUwXapCNH0czs3TdsD8+q 3XnENLOCWQPeZm2dJCKsRfjKT39B+RSWPatED3UVw2oGXSdVGdw= -----END CERTIFICATE-----Generated at Sun Sep 27 00:31:35 2026 by rpki-client