$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft File: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft (raw, json) Hash identifier: jchUPCC3AHbJdcBfG/1C/nxoQW6olj6ZowJcEJm7G2I= Subject key identifier: 87:0C:34:51:56:40:4F:DC:26:CC:5D:2F:85:07:83:5A:9D:0C:FC:F8 Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Certificate serial: 192AF3ED1BF78332113C258C65AA788377A65B16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:08:08 +0000 Manifest this update: Fri 24 Jul 2026 03:03:08 +0000 Manifest next update: Sat 25 Jul 2026 04:25:08 +0000 Files and hashes: 1: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: q7SyYWgacRS5rzIzN3lkEYg9DVcMVi1C+rpPj5LCLHE=) 2: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=) 3: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: Uq0zjp96KTXKbxSis8DhaT+OdD/bH8ZzigpO4G+X8Xo=) 4: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl (hash: rw6BnzFxJS1JNIBBQHtiQurPh2lfeGcePP8ac1HA+9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2a:f3:ed:1b:f7:83:32:11:3c:25:8c:65:aa:78:83:77:a6:5b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Validity Not Before: Jul 24 03:03:08 2026 GMT Not After : Jul 25 04:25:08 2026 GMT Subject: CN=870C345156404FDC26CC5D2F8507835A9D0CFCF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:46:75:42:b1:99:aa:7f:fc:ab:0d:4b:89: 71:13:91:ed:1d:3e:6a:9a:e9:9f:a8:00:07:62:a8: b9:c6:36:d1:19:8b:52:b3:8d:65:93:54:67:a8:16: b4:30:a6:3c:a4:67:22:42:a7:88:bd:39:eb:29:e8: 5d:e5:98:4d:e4:87:7e:8e:85:2b:be:f1:85:e6:08: 5a:ea:28:ea:05:69:4e:a7:c9:a6:ff:f3:d9:52:74: 98:be:66:1a:35:a7:92:d1:8e:f7:44:00:6c:dd:c7: 7b:c3:83:76:c1:e0:f0:62:08:2a:db:f7:9d:4d:7d: 80:ba:86:69:92:46:4d:2d:fa:e3:5b:ca:96:34:7b: 25:1c:a5:88:c3:fa:cb:24:9c:d0:34:f2:f7:e8:1e: 9c:8f:5c:f0:27:ae:07:da:94:bc:3b:64:36:0b:77: a5:99:56:d8:94:7f:c5:e8:8b:20:a6:b9:01:32:a1: 1a:0a:d7:5a:98:7e:74:e8:fa:cb:e6:12:30:d3:d9: e5:87:d1:d0:16:a7:70:c7:37:db:94:2a:41:bf:14: 5c:bc:65:14:0a:57:07:87:6f:f4:25:6e:94:ed:b2: e9:5c:6e:74:37:4e:7f:5d:63:cc:d6:46:da:f5:5a: 7a:2b:6f:6b:29:d9:0a:f2:07:ed:b1:17:03:e5:e2: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0C:34:51:56:40:4F:DC:26:CC:5D:2F:85:07:83:5A:9D:0C:FC:F8 X509v3 Authority Key Identifier: keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7b:71:df:0a:a3:4f:58:91:fe:a0:91:d1:b6:79:28:29:93: a8:92:68:70:3a:92:b7:75:32:f6:ec:70:67:0e:2d:27:46:a9: 6d:c6:90:f3:c9:a9:2b:19:a5:4a:2b:13:c2:dc:06:82:8d:a7: ce:d5:e6:10:90:84:67:5a:49:26:fc:d7:f6:21:97:97:7c:35: bd:1f:78:b4:f7:94:88:4d:bd:af:5f:d9:ea:dd:9a:e7:4b:32: 32:d9:f3:17:26:db:8a:0e:af:a1:c3:61:9e:b9:d8:d4:a3:cd: 5d:c4:df:a9:94:15:2e:2d:dd:e5:39:e6:12:88:c7:4e:2e:81: 03:57:8e:d8:77:bb:67:40:b0:ff:ff:06:c7:0c:5f:e8:d0:13: 33:62:86:5d:1a:18:64:39:45:91:84:e2:88:97:80:e1:7a:81: 95:08:7e:ce:f5:0e:9d:6d:f3:b4:a7:c5:2c:41:ac:d2:64:d4: c7:51:d5:c0:bd:52:26:18:9e:88:f1:82:d7:a3:44:9f:12:1e: c4:f7:4e:7a:b6:8a:4e:bc:ad:92:de:3c:45:9b:d4:59:de:49: 09:95:20:2a:c4:83:fb:2f:c8:ed:55:fb:c8:9b:e5:d3:c3:1c: 50:a2:d3:6b:16:3a:32:2a:11:db:6b:29:a9:eb:6c:55:21:39: 17:ba:d0:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSrz7Rv3gzIRPCWMZap4g3emWxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUx NTFEMTFBRTAeFw0yNjA3MjQwMzAzMDhaFw0yNjA3MjUwNDI1MDhaMDMxMTAvBgNV BAMTKDg3MEMzNDUxNTY0MDRGREMyNkNDNUQyRjg1MDc4MzVBOUQwQ0ZDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBkZ1QrGZqn/8qw1LiXETke0d Pmqa6Z+oAAdiqLnGNtEZi1KzjWWTVGeoFrQwpjykZyJCp4i9Oesp6F3lmE3kh36O hSu+8YXmCFrqKOoFaU6nyab/89lSdJi+Zho1p5LRjvdEAGzdx3vDg3bB4PBiCCrb 951NfYC6hmmSRk0t+uNbypY0eyUcpYjD+ssknNA08vfoHpyPXPAnrgfalLw7ZDYL d6WZVtiUf8XoiyCmuQEyoRoK11qYfnTo+svmEjDT2eWH0dAWp3DHN9uUKkG/FFy8 ZRQKVweHb/QlbpTtsulcbnQ3Tn9dY8zWRtr1Wnorb2sp2QryB+2xFwPl4rnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhww0UVZAT9wmzF0vhQeDWp0M/PgwHwYDVR0j BBgwFoAUcocbQvirHZyh9qE9HinNvhUdEa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExMjRlNmEtZjUxYi00NmQwLThlYTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJG OEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUxNTFEMTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mjg3MUI0MkY4QUIxRDlDQTFGNkExM0QxRTI5Q0RCRTE1MUQx MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNE QkUxNTFEMTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABp7cd8Ko09Ykf6gkdG2eSgpk6iSaHA6krd1 MvbscGcOLSdGqW3GkPPJqSsZpUorE8LcBoKNp87V5hCQhGdaSSb81/Yhl5d8Nb0f eLT3lIhNva9f2erdmudLMjLZ8xcm24oOr6HDYZ652NSjzV3E36mUFS4t3eU55hKI x04ugQNXjth3u2dAsP//BscMX+jQEzNihl0aGGQ5RZGE4oiXgOF6gZUIfs71Dp1t 87SnxSxBrNJk1MdR1cC9UiYYnojxgtejRJ8SHsT3Tnq2ik68rZLePEWb1FneSQmV ICrEg/svyO1V+8ib5dPDHFCi02sWOjIqEdtrKanrbFUhORe60PQ= -----END CERTIFICATE-----Generated at Fri Jul 24 10:04:45 2026 by rpki-client