$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft File: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft (raw, json) Hash identifier: w74xMuvzIyPzJRCjMG0RdKBd6zS88OTxGt4jBx+jzSk= Subject key identifier: 6E:29:93:57:51:55:91:96:51:CA:37:8A:4C:88:65:89:A0:87:86:AC Authority key identifier: 72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F Certificate issuer: /CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Certificate serial: 7E0B980A04ECE9F0975A322BEA03CA2FB3D3F61C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:09:35 +0000 Manifest this update: Tue 12 May 2026 08:04:35 +0000 Manifest next update: Wed 13 May 2026 09:29:35 +0000 Files and hashes: 1: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl (hash: as/ECUYDFyMnpr1Iols7mFyRooGFmGK9YAcZRa9+SUg=) 2: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (hash: PvyV39mz8mjiMF4MZkFF8Y2y+8ayLbmRxXXvZRdxwsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0b:98:0a:04:ec:e9:f0:97:5a:32:2b:ea:03:ca:2f:b3:d3:f6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Validity Not Before: May 12 08:04:35 2026 GMT Not After : May 13 09:29:35 2026 GMT Subject: CN=6E2993575155919651CA378A4C886589A08786AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:6b:5d:bb:c3:dd:51:a8:2e:91:71:af:f5: 49:84:ad:49:a6:00:4c:cb:31:a9:5f:7e:0b:93:1b: 88:4e:0b:74:52:c4:73:f6:6c:e8:86:e2:9b:40:ff: 15:f2:e0:25:ad:88:7c:ac:bd:2e:8d:17:43:c6:5e: 2b:af:8a:63:e4:24:a1:70:b8:62:4e:53:60:c0:7d: 63:63:19:ff:e0:d0:50:ba:f8:6b:a4:21:f5:ff:6e: 4e:6c:09:b4:74:04:14:85:1c:54:dd:0b:76:52:8a: 41:05:29:b3:4c:3b:8f:c7:05:08:23:98:0b:b8:2d: 0a:28:be:b0:e0:6b:98:93:9c:a2:aa:89:52:34:ab: 32:a1:ae:3b:3b:cc:c5:82:25:e1:be:eb:a0:e1:34: e8:97:eb:4c:22:63:e7:df:98:50:6a:d0:c7:ab:87: b0:b0:f8:d3:eb:fd:c9:5a:d6:67:6d:db:0f:d4:76: 91:aa:f0:3f:90:d1:7d:51:01:24:da:0d:0f:49:e0: fe:19:dc:db:7a:b5:cd:ba:33:1d:55:81:e0:a5:57: c9:93:57:03:0e:fd:87:fd:ef:79:d1:1c:72:0b:1c: 02:f8:31:f1:93:f2:20:63:3d:b6:68:4e:3c:b0:32: 50:92:f3:66:fa:12:46:a0:50:6f:70:89:d4:40:fc: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:29:93:57:51:55:91:96:51:CA:37:8A:4C:88:65:89:A0:87:86:AC X509v3 Authority Key Identifier: keyid:72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:e6:dc:8e:86:70:8f:28:91:2d:a2:05:b0:64:61:82:43:cb: 9a:7c:e0:c9:8d:ae:88:be:1b:00:bc:15:b1:58:6d:e3:c4:e8: 04:c0:45:b1:2b:23:23:24:b2:6a:b6:7f:8b:f8:ff:8c:e8:64: bf:df:e9:1d:1e:23:b4:e7:63:66:a8:c6:3a:32:2c:81:18:e5: 6b:07:72:28:c7:b6:b8:7c:6d:3b:d7:07:36:d6:9e:e9:1a:0c: be:95:71:b3:7a:b8:8e:81:58:77:23:76:83:83:90:a6:af:5f: e0:8b:a3:77:ea:ad:74:1d:b8:86:0a:b8:9d:88:68:43:e8:5f: 7d:ec:51:c0:0e:6f:48:f8:70:3f:5b:7d:1a:43:9b:5a:89:bf: da:2e:43:ef:9e:2a:9c:eb:b6:2b:2c:d3:9a:a6:1b:0e:80:9d: a0:05:71:9b:94:2f:67:6c:f4:58:aa:e9:c1:79:7c:f3:3b:f0: da:54:25:53:50:e5:84:f7:ed:9a:a8:37:7d:c9:eb:ff:75:41: 13:93:73:a5:4d:64:94:46:9d:86:3e:42:8d:f2:b2:06:fc:26: b6:97:a0:ed:99:91:3a:d9:06:7d:11:60:de:20:1b:c7:a1:dc: e9:52:b7:76:91:19:64:d9:10:ff:81:e3:14:e9:74:fa:68:b7: 1c:e1:e2:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfguYCgTs6fCXWjIr6gPKL7PT9hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFE MTdCQjExRjAeFw0yNjA1MTIwODA0MzVaFw0yNjA1MTMwOTI5MzVaMDMxMTAvBgNV BAMTKDZFMjk5MzU3NTE1NTkxOTY1MUNBMzc4QTRDODg2NTg5QTA4Nzg2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKmtdu8PdUagukXGv9UmErUmm AEzLMalffguTG4hOC3RSxHP2bOiG4ptA/xXy4CWtiHysvS6NF0PGXiuvimPkJKFw uGJOU2DAfWNjGf/g0FC6+GukIfX/bk5sCbR0BBSFHFTdC3ZSikEFKbNMO4/HBQgj mAu4LQoovrDga5iTnKKqiVI0qzKhrjs7zMWCJeG+66DhNOiX60wiY+ffmFBq0Mer h7Cw+NPr/cla1mdt2w/UdpGq8D+Q0X1RASTaDQ9J4P4Z3Nt6tc26Mx1VgeClV8mT VwMO/Yf973nRHHILHAL4MfGT8iBjPbZoTjywMlCS82b6EkagUG9widRA/DpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbimTV1FVkZZRyjeKTIhliaCHhqwwHwYDVR0j BBgwFoAUcvv5aiHOLWHEs9aEbH/modF7sR8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBlYTUwNTYtMGZiYy00MDMyLTg2ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEy MUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFEMTdCQjExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZCRjk2QTIxQ0UyRDYxQzRCM0Q2ODQ2QzdGRTZBMUQxN0JC MTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBlYTUwNTYtMGZiYy00MDMyLTg2 ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2 QTFEMTdCQjExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANTm3I6GcI8okS2iBbBkYYJDy5p84MmNroi+ GwC8FbFYbePE6ATARbErIyMksmq2f4v4/4zoZL/f6R0eI7TnY2aoxjoyLIEY5WsH cijHtrh8bTvXBzbWnukaDL6VcbN6uI6BWHcjdoODkKavX+CLo3fqrXQduIYKuJ2I aEPoX33sUcAOb0j4cD9bfRpDm1qJv9ouQ++eKpzrtiss05qmGw6AnaAFcZuUL2ds 9Fiq6cF5fPM78NpUJVNQ5YT37ZqoN33J6/91QROTc6VNZJRGnYY+Qo3ysgb8JraX oO2ZkTrZBn0RYN4gG8eh3OlSt3aRGWTZEP+B4xTpdPpotxzh4hM= -----END CERTIFICATE-----Generated at Wed May 13 02:36:41 2026 by rpki-client