
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
File: 72B692DB78B9A0070ADC5D2760764B22DC477644.mft (raw, json)
Hash identifier: RYEp4DJpmiYRk1RIv0rU1gODuE35h1CEp404vCb4VqQ=
Subject key identifier: 17:11:77:32:EE:B7:E1:66:5D:6E:73:FC:61:A1:22:30:33:87:6A:C4
Authority key identifier: 72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44
Certificate issuer: /CN=72B692DB78B9A0070ADC5D2760764B22DC477644
Certificate serial: 70FED38BEE717E973F08A614DFB7A17A5D36B890
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 10:17:00 +0000
Manifest this update: Fri 24 Jul 2026 10:12:00 +0000
Manifest next update: Sat 25 Jul 2026 11:14:00 +0000
Files and hashes: 1: 72B692DB78B9A0070ADC5D2760764B22DC477644.crl (hash: WEGhVgkhlQ8K4V5lcq1u14F4S6iYiJLCAa4SNNA2s98=)
2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: I+Fd63f55V3ik8xx1b7rLHKd/go+/DygZiRv3uP0tjM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl
rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fe:d3:8b:ee:71:7e:97:3f:08:a6:14:df:b7:a1:7a:5d:36:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72B692DB78B9A0070ADC5D2760764B22DC477644
Validity
Not Before: Jul 24 10:12:00 2026 GMT
Not After : Jul 25 11:14:00 2026 GMT
Subject: CN=17117732EEB7E1665D6E73FC61A1223033876AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:3b:1a:28:32:cf:a1:e0:99:df:81:63:73:
b8:27:12:3d:a2:f0:c6:25:e6:5f:7b:c2:3d:fd:e5:
77:a8:10:f0:69:17:e9:60:59:a7:1a:34:32:11:46:
61:65:2e:df:5c:10:5d:6b:8b:14:01:b7:35:fb:07:
28:2f:f6:6a:9b:f5:90:fa:2e:e7:df:78:6a:92:93:
26:3b:28:cb:c7:03:35:a6:a7:6f:e7:21:21:c3:dd:
b2:20:e8:c6:02:77:41:85:d3:5e:10:98:1d:84:b9:
1b:9b:e7:7e:83:a8:14:9e:cb:14:aa:76:ce:48:7e:
33:99:e2:43:cd:ea:fa:95:9f:f1:d7:45:97:bb:24:
ec:f1:a1:84:ac:38:c1:64:f5:ff:cc:95:21:ec:4a:
74:e3:38:50:aa:0b:81:e4:9e:a1:0b:9e:d6:6c:e0:
6c:ae:13:05:65:e9:a8:93:21:df:63:59:ab:df:87:
20:da:43:6b:4f:a0:e1:c5:b0:be:49:ec:aa:16:3d:
12:57:da:e5:66:4d:41:14:1a:53:14:b8:85:a8:19:
92:b5:e5:c6:84:21:3a:3e:58:d8:e1:88:9b:38:33:
dd:9c:c6:78:8d:49:34:05:3e:44:11:1c:2f:e6:b9:
86:cf:43:f1:4f:40:37:ce:fb:b0:18:20:57:ec:8e:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:11:77:32:EE:B7:E1:66:5D:6E:73:FC:61:A1:22:30:33:87:6A:C4
X509v3 Authority Key Identifier:
keyid:72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:59:04:bb:d1:31:2d:eb:1f:ca:3c:db:43:04:1b:c9:80:bb:
ed:89:03:68:d5:33:ab:de:ec:fc:7c:dd:da:c7:b3:37:ff:23:
7d:25:4a:51:24:ec:e7:9e:70:98:01:29:d1:ca:37:5e:71:40:
d6:99:a2:ad:2e:f9:5e:23:20:29:cc:b4:b2:e7:c2:f5:e7:b6:
a1:55:20:08:ab:e8:a2:9b:01:b1:aa:4a:7d:ab:93:94:fc:c6:
e7:a7:68:5a:fd:70:99:ed:e6:7e:02:cc:d6:23:bb:cf:d0:09:
99:6d:7c:c8:b0:2f:cd:04:92:96:a1:d6:33:a3:57:c0:8d:31:
b6:73:5a:6a:6d:98:e0:6b:bc:8e:7a:52:91:ea:a1:28:08:04:
13:d4:7a:50:f9:a8:1c:8d:0c:1b:d0:b7:b2:6a:5c:71:c5:30:
4b:0d:9f:77:71:3e:87:ff:bb:57:49:ea:55:11:7a:ff:2b:57:
57:09:0c:f8:c3:c7:16:05:bc:6d:78:db:95:28:d1:74:9d:da:
ad:25:68:59:10:65:07:0f:6b:82:13:dd:30:c1:04:ca:f8:df:
65:8f:4e:6b:e3:2b:ad:ba:66:32:65:92:b2:98:5a:3f:55:6c:
3c:da:2d:6a:c2:8d:e3:83:ce:74:5e:e3:65:91:3c:8f:1e:3f:
c3:34:c3:c3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcP7Ti+5xfpc/CKYU37ehel02uJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJE
QzQ3NzY0NDAeFw0yNjA3MjQxMDEyMDBaFw0yNjA3MjUxMTE0MDBaMDMxMTAvBgNV
BAMTKDE3MTE3NzMyRUVCN0UxNjY1RDZFNzNGQzYxQTEyMjMwMzM4NzZBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9zsaKDLPoeCZ34Fjc7gnEj2i
8MYl5l97wj395XeoEPBpF+lgWacaNDIRRmFlLt9cEF1rixQBtzX7Bygv9mqb9ZD6
LuffeGqSkyY7KMvHAzWmp2/nISHD3bIg6MYCd0GF014QmB2EuRub536DqBSeyxSq
ds5IfjOZ4kPN6vqVn/HXRZe7JOzxoYSsOMFk9f/MlSHsSnTjOFCqC4HknqELntZs
4GyuEwVl6aiTId9jWavfhyDaQ2tPoOHFsL5J7KoWPRJX2uVmTUEUGlMUuIWoGZK1
5caEITo+WNjhiJs4M92cxniNSTQFPkQRHC/muYbPQ/FPQDfO+7AYIFfsjgKpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFxF3Mu634WZdbnP8YaEiMDOHasQwHwYDVR0j
BBgwFoAUcraS23i5oAcK3F0nYHZLItxHdkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3
OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJEQzQ3NzY0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MkI2OTJEQjc4QjlBMDA3MEFEQzVEMjc2MDc2NEIyMkRDNDc3
NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi
MjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRC
MjJEQzQ3NzY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH9ZBLvRMS3rH8o820MEG8mAu+2JA2jVM6ve
7Px83drHszf/I30lSlEk7OeecJgBKdHKN15xQNaZoq0u+V4jICnMtLLnwvXntqFV
IAir6KKbAbGqSn2rk5T8xuenaFr9cJnt5n4CzNYju8/QCZltfMiwL80Ekpah1jOj
V8CNMbZzWmptmOBrvI56UpHqoSgIBBPUelD5qByNDBvQt7JqXHHFMEsNn3dxPof/
u1dJ6lURev8rV1cJDPjDxxYFvG1425Uo0XSd2q0laFkQZQcPa4IT3TDBBMr432WP
TmvjK626ZjJlkrKYWj9VbDzaLWrCjeODznRe42WRPI8eP8M0w8M=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:17 2026 by rpki-client