$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft File: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft (raw, json) Hash identifier: thUVmmxQMuAUPtKPhExvMy8UVd+KqF+jaxLkEfExlfc= Subject key identifier: 87:6C:D9:07:F8:BB:39:2B:11:FF:0C:14:14:A1:AB:9A:70:28:A6:56 Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Certificate serial: 378B390D6473516B28454694AD02BCB1D79D8BEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:13:47 +0000 Manifest this update: Wed 13 May 2026 00:08:47 +0000 Manifest next update: Thu 14 May 2026 03:40:47 +0000 Files and hashes: 1: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: Uq0zjp96KTXKbxSis8DhaT+OdD/bH8ZzigpO4G+X8Xo=) 2: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: q7SyYWgacRS5rzIzN3lkEYg9DVcMVi1C+rpPj5LCLHE=) 3: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl (hash: Gtm9al6uJp/GZy4A6Lf8Ek7vi68R1atznGfNe7QgOaE=) 4: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8b:39:0d:64:73:51:6b:28:45:46:94:ad:02:bc:b1:d7:9d:8b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Validity Not Before: May 13 00:08:47 2026 GMT Not After : May 14 03:40:47 2026 GMT Subject: CN=876CD907F8BB392B11FF0C1414A1AB9A7028A656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:b9:a6:46:37:45:74:43:29:29:99:df:c1: df:31:ab:9a:3b:1d:b2:bd:66:66:53:20:a5:8a:12: 26:52:eb:64:9c:ac:1d:df:9c:20:6f:ec:38:f4:62: 01:12:52:f0:24:63:3d:ee:89:a3:77:4b:e6:9c:fb: 9b:5e:50:e2:df:7d:7d:c5:08:d6:72:0c:6b:07:66: c5:f0:4e:c3:7f:22:19:69:67:98:7b:71:e6:ed:75: 2f:c4:5d:ea:f7:13:5b:14:a1:f8:60:e6:90:f4:56: d8:8b:c7:b0:2a:87:53:fe:84:55:16:cc:86:88:10: 22:b4:17:45:20:4a:72:bd:e3:b4:94:29:95:3a:0b: b0:e9:e6:3c:fc:b8:7b:65:bd:1c:cb:1c:4e:ec:a5: b4:51:fe:3b:a0:0b:a4:19:3e:f6:48:9f:9c:57:9c: e5:91:87:c6:53:bf:ce:89:9e:37:0b:ef:9d:49:94: cf:0f:a8:db:4a:64:f0:1f:ed:fd:4a:19:e8:b2:74: 8d:cb:5c:cd:b0:22:7a:c5:fd:93:47:bb:db:30:6a: 8a:e8:c3:5d:68:01:1a:dd:f5:63:4e:3f:a8:8b:58: b2:60:eb:43:ef:c7:54:f2:c8:cd:60:07:82:7e:a0: ff:5a:e2:fd:18:fe:06:58:88:dd:96:57:70:e5:7e: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6C:D9:07:F8:BB:39:2B:11:FF:0C:14:14:A1:AB:9A:70:28:A6:56 X509v3 Authority Key Identifier: keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b0:a4:5e:35:70:cc:bf:a0:02:00:85:64:13:c1:27:ce:d8: 09:2f:96:b2:7c:e5:b6:b8:5b:b2:90:03:67:54:fc:6e:20:a3: 95:02:eb:ea:2e:5c:bf:19:fd:d5:dc:4c:8f:f5:e3:7a:15:ce: c4:df:04:e5:f3:bf:56:dd:3c:4d:b7:5c:49:bd:64:d7:c4:c3: 16:53:39:c4:35:fd:41:b4:31:00:5d:1a:9b:9a:88:46:a7:eb: fd:f3:98:0f:21:7c:fb:63:47:ec:d2:9e:42:07:d6:68:75:75: e5:bb:a0:d6:98:8d:e7:ba:3c:ae:d6:d5:a1:a1:b2:ec:c0:e0: 87:90:ae:75:b3:f5:86:a1:f1:ad:05:ec:cc:fa:6b:40:ba:4f: e8:1f:a6:d5:33:22:3e:51:b5:6e:66:73:60:57:60:ce:1f:55: f9:24:37:74:35:b3:a4:4a:a8:22:e1:24:69:87:79:34:d3:6c: ce:38:97:a8:9d:9a:59:61:03:7b:a3:57:f5:c5:33:35:5f:67: 40:bd:8a:f1:b1:4d:3a:6b:9e:6a:62:04:a1:c2:30:64:71:8a: b0:9d:ad:5d:02:56:2b:6c:4a:4c:53:f5:fa:fc:99:30:67:f3: 7f:ce:51:42:81:59:0b:32:89:3b:2f:c6:42:0e:b9:ae:a7:4a: 8a:eb:3c:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4s5DWRzUWsoRUaUrQK8sdedi+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUx NTFEMTFBRTAeFw0yNjA1MTMwMDA4NDdaFw0yNjA1MTQwMzQwNDdaMDMxMTAvBgNV BAMTKDg3NkNEOTA3RjhCQjM5MkIxMUZGMEMxNDE0QTFBQjlBNzAyOEE2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABbmmRjdFdEMpKZnfwd8xq5o7 HbK9ZmZTIKWKEiZS62ScrB3fnCBv7Dj0YgESUvAkYz3uiaN3S+ac+5teUOLffX3F CNZyDGsHZsXwTsN/IhlpZ5h7cebtdS/EXer3E1sUofhg5pD0VtiLx7Aqh1P+hFUW zIaIECK0F0UgSnK947SUKZU6C7Dp5jz8uHtlvRzLHE7spbRR/jugC6QZPvZIn5xX nOWRh8ZTv86JnjcL751JlM8PqNtKZPAf7f1KGeiydI3LXM2wInrF/ZNHu9swaoro w11oARrd9WNOP6iLWLJg60Pvx1TyyM1gB4J+oP9a4v0Y/gZYiN2WV3DlfhLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh2zZB/i7OSsR/wwUFKGrmnAoplYwHwYDVR0j BBgwFoAUcocbQvirHZyh9qE9HinNvhUdEa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExMjRlNmEtZjUxYi00NmQwLThlYTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJG OEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUxNTFEMTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mjg3MUI0MkY4QUIxRDlDQTFGNkExM0QxRTI5Q0RCRTE1MUQx MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNE QkUxNTFEMTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOwpF41cMy/oAIAhWQTwSfO2AkvlrJ85ba4 W7KQA2dU/G4go5UC6+ouXL8Z/dXcTI/143oVzsTfBOXzv1bdPE23XEm9ZNfEwxZT OcQ1/UG0MQBdGpuaiEan6/3zmA8hfPtjR+zSnkIH1mh1deW7oNaYjee6PK7W1aGh suzA4IeQrnWz9Yah8a0F7Mz6a0C6T+gfptUzIj5RtW5mc2BXYM4fVfkkN3Q1s6RK qCLhJGmHeTTTbM44l6idmllhA3ujV/XFMzVfZ0C9ivGxTTprnmpiBKHCMGRxirCd rV0CVitsSkxT9fr8mTBn83/OUUKBWQsyiTsvxkIOua6nSorrPII= -----END CERTIFICATE-----Generated at Wed May 13 04:19:38 2026 by rpki-client