$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft File: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft (raw, json) Hash identifier: K8nVHDL4b0duxMaIQ1XFNjsDReqpWrBcmTrY6uNrF0o= Subject key identifier: 14:AF:62:18:EF:51:F1:B8:26:31:E2:C5:12:4D:D6:E2:FA:4E:1D:78 Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Certificate serial: 5E6D1AD85D2D4C9FF6B34E4BEE50125355AD0350 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 22:23:15 +0000 Manifest this update: Thu 24 Sep 2026 22:18:15 +0000 Manifest next update: Sat 26 Sep 2026 00:49:15 +0000 Files and hashes: 1: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=) 2: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: q7SyYWgacRS5rzIzN3lkEYg9DVcMVi1C+rpPj5LCLHE=) 3: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl (hash: lz92f6qwDqIpZoRdNH/qhD8Jf2Zp3OmlvTgc86N5djQ=) 4: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: Uq0zjp96KTXKbxSis8DhaT+OdD/bH8ZzigpO4G+X8Xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6d:1a:d8:5d:2d:4c:9f:f6:b3:4e:4b:ee:50:12:53:55:ad:03:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Validity Not Before: Sep 24 22:18:15 2026 GMT Not After : Sep 26 00:49:15 2026 GMT Subject: CN=14AF6218EF51F1B82631E2C5124DD6E2FA4E1D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:7e:65:45:bc:95:07:9c:c5:98:17:94:6d: 01:f1:c5:36:a1:72:ee:7f:21:50:3b:8d:b8:b6:4b: 70:19:02:dc:2e:42:aa:83:0f:46:3c:3c:43:b1:92: d8:4c:31:14:8a:dc:af:b1:c4:61:74:f6:a5:7c:6b: 2c:a5:9f:38:47:d1:3b:d0:6c:f1:28:4c:12:02:de: 9f:c2:b2:63:3f:36:bd:64:d0:4c:95:58:58:73:e2: bf:7d:ff:0f:7b:78:f5:99:f1:59:4f:15:e5:45:be: 46:f8:3c:2a:24:c4:fd:c9:1a:90:21:7d:39:ce:d0: a8:47:55:53:bc:33:ad:2a:0a:ec:39:47:f7:05:6f: 79:00:d1:c5:10:2f:cf:2b:ab:c3:7c:c4:f8:77:85: 7e:a9:f9:a6:60:4d:61:d8:c8:16:6f:e4:0b:99:98: b8:87:6e:e2:84:30:41:f7:73:8e:9c:93:b4:c1:6f: 14:f2:cd:05:7c:5c:d0:41:3e:a6:19:a8:bb:35:13: 35:33:7e:03:e8:e5:0f:a7:82:a5:c4:37:0f:3a:9d: eb:c3:77:bf:49:9c:72:3e:ec:81:65:c4:73:8e:7f: 62:be:be:84:8a:75:90:89:48:19:99:b5:94:d6:bd: 81:22:d5:7b:77:42:77:85:02:db:2d:10:71:6c:a7: 43:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AF:62:18:EF:51:F1:B8:26:31:E2:C5:12:4D:D6:E2:FA:4E:1D:78 X509v3 Authority Key Identifier: keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:76:41:c7:c9:3e:73:9e:a8:4f:27:a7:23:3c:c3:b1:d7:fa: e8:59:77:97:1e:9b:6f:82:d7:1e:b3:0d:a5:fa:c7:1f:d2:f4: 91:42:01:5a:96:79:8a:c4:36:04:ea:c8:db:56:89:9e:c4:10: 20:26:3d:4d:58:84:a5:e5:b8:c8:93:fd:10:9b:b8:95:8f:ca: 17:fc:d6:01:30:c6:79:01:91:0d:d7:f6:d0:4d:5c:5b:9a:ef: ee:ed:8c:56:f4:88:17:fa:6b:e3:eb:7e:4e:cd:67:91:e0:93: 2c:e9:7a:0e:4e:d2:6e:ab:c3:e6:dc:7e:0b:53:95:e2:52:6c: 82:de:ab:e4:8a:8f:ad:76:75:af:c6:93:bc:72:2b:36:7c:5c: ba:ff:e0:76:cd:c2:77:9b:aa:6e:20:0f:5d:da:33:ed:31:98: 49:fb:fd:a3:d8:7c:26:c1:1b:cc:89:09:5d:99:5e:3e:6c:ed: f2:a9:36:79:d3:55:f5:a6:2c:9f:7b:0e:10:d5:10:5e:04:be: bc:e9:cb:ee:50:48:b4:e7:37:54:f4:f4:18:05:72:f9:fa:6e: 9e:9e:04:c7:29:35:1a:5e:aa:1c:bd:ef:ba:e8:bf:dc:68:da: 47:33:e9:4f:e7:81:72:66:ea:b2:ca:f9:f0:64:05:56:c4:d5: 79:05:f6:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXm0a2F0tTJ/2s05L7lASU1WtA1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUx NTFEMTFBRTAeFw0yNjA5MjQyMjE4MTVaFw0yNjA5MjYwMDQ5MTVaMDMxMTAvBgNV BAMTKDE0QUY2MjE4RUY1MUYxQjgyNjMxRTJDNTEyNERENkUyRkE0RTFENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aX5lRbyVB5zFmBeUbQHxxTah cu5/IVA7jbi2S3AZAtwuQqqDD0Y8PEOxkthMMRSK3K+xxGF09qV8ayylnzhH0TvQ bPEoTBIC3p/CsmM/Nr1k0EyVWFhz4r99/w97ePWZ8VlPFeVFvkb4PCokxP3JGpAh fTnO0KhHVVO8M60qCuw5R/cFb3kA0cUQL88rq8N8xPh3hX6p+aZgTWHYyBZv5AuZ mLiHbuKEMEH3c46ck7TBbxTyzQV8XNBBPqYZqLs1EzUzfgPo5Q+ngqXENw86nevD d79JnHI+7IFlxHOOf2K+voSKdZCJSBmZtZTWvYEi1Xt3QneFAtstEHFsp0P/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFK9iGO9R8bgmMeLFEk3W4vpOHXgwHwYDVR0j BBgwFoAUcocbQvirHZyh9qE9HinNvhUdEa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExMjRlNmEtZjUxYi00NmQwLThlYTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJG OEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUxNTFEMTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mjg3MUI0MkY4QUIxRDlDQTFGNkExM0QxRTI5Q0RCRTE1MUQx MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNE QkUxNTFEMTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA12QcfJPnOeqE8npyM8w7HX+uhZd5cem2+C 1x6zDaX6xx/S9JFCAVqWeYrENgTqyNtWiZ7EECAmPU1YhKXluMiT/RCbuJWPyhf8 1gEwxnkBkQ3X9tBNXFua7+7tjFb0iBf6a+Prfk7NZ5Hgkyzpeg5O0m6rw+bcfgtT leJSbILeq+SKj612da/Gk7xyKzZ8XLr/4HbNwnebqm4gD13aM+0xmEn7/aPYfCbB G8yJCV2ZXj5s7fKpNnnTVfWmLJ97DhDVEF4Evrzpy+5QSLTnN1T09BgFcvn6bp6e BMcpNRpeqhy977rov9xo2kcz6U/ngXJm6rLK+fBkBVbE1XkF9l8= -----END CERTIFICATE-----Generated at Fri Sep 25 07:30:23 2026 by rpki-client