
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
File: 72B692DB78B9A0070ADC5D2760764B22DC477644.mft (raw, json)
Hash identifier: hhqJgJDh/R/tTWzt4X8MCWCOpJo4wi6OOqVTQS0y6W4=
Subject key identifier: 1A:4B:0A:5B:79:E8:83:63:7C:2D:BD:73:CC:4C:DF:42:C2:60:88:D8
Authority key identifier: 72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44
Certificate issuer: /CN=72B692DB78B9A0070ADC5D2760764B22DC477644
Certificate serial: 46A3742993BA034E83093632CCE6C9EE8A45821A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 23:40:16 +0000
Manifest this update: Wed 23 Sep 2026 23:35:16 +0000
Manifest next update: Fri 25 Sep 2026 03:20:16 +0000
Files and hashes: 1: 72B692DB78B9A0070ADC5D2760764B22DC477644.crl (hash: XqtPz9cLygSp//Y7fPt5EL9E2ATcDga1d0Dt7FsdXE8=)
2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: I+Fd63f55V3ik8xx1b7rLHKd/go+/DygZiRv3uP0tjM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl
rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 03:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a3:74:29:93:ba:03:4e:83:09:36:32:cc:e6:c9:ee:8a:45:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72B692DB78B9A0070ADC5D2760764B22DC477644
Validity
Not Before: Sep 23 23:35:16 2026 GMT
Not After : Sep 25 03:20:16 2026 GMT
Subject: CN=1A4B0A5B79E883637C2DBD73CC4CDF42C26088D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:29:67:a7:7e:2b:44:38:5a:18:40:3e:46:
89:ba:25:e7:43:8d:b0:b0:9f:6f:bd:3c:9a:48:a2:
b1:49:f0:dc:11:66:3a:16:91:d9:19:10:ca:ee:80:
8f:0d:17:0e:e8:07:1e:45:ee:d5:1f:81:4c:dc:ad:
ad:17:27:d2:fa:f3:58:68:cf:a3:68:78:68:ab:6d:
72:c6:72:7c:bb:49:51:a5:cb:88:b7:65:b3:cf:aa:
d5:f6:8b:d9:8f:ee:1a:c1:9e:a3:87:1d:b9:42:d3:
dd:69:1c:5e:10:07:d5:f9:ae:fd:ac:bb:b3:4b:71:
56:d9:e1:69:5a:f5:66:e2:b1:6f:e2:c3:4e:1a:82:
f7:41:04:ea:83:c8:9c:61:1d:05:50:e8:79:00:26:
36:c1:77:cb:7b:7d:ca:3c:61:41:66:af:97:f9:66:
d2:81:66:76:be:52:cb:36:12:9e:57:8b:1e:3a:26:
da:6c:77:82:11:58:fb:e7:20:f0:c9:b9:0c:f5:3e:
c1:cc:1d:6f:76:13:ac:11:61:80:0a:1e:2b:d1:41:
d7:41:90:71:04:28:f5:de:a1:4d:f9:a3:9e:9c:34:
d0:2a:27:7a:06:87:5f:d6:7e:76:36:db:1b:d0:1d:
9f:80:48:44:42:db:54:b1:11:81:23:8d:1d:2e:38:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4B:0A:5B:79:E8:83:63:7C:2D:BD:73:CC:4C:DF:42:C2:60:88:D8
X509v3 Authority Key Identifier:
keyid:72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:74:ac:92:ba:88:44:9b:9c:19:06:80:95:94:8e:68:eb:04:
6f:ca:03:66:99:f9:f8:24:5d:85:56:79:16:fb:95:5e:61:7b:
7e:60:6a:92:f7:f0:1f:42:41:4f:7b:05:45:ee:51:14:9e:ab:
b3:73:36:9d:4e:c8:54:e7:3e:f5:1b:f5:9d:ae:8b:46:7c:fb:
03:73:29:98:60:88:e5:f0:29:86:77:14:c3:3d:0c:30:e7:db:
99:69:2b:7f:9e:15:75:df:66:97:da:3b:79:d4:bb:e2:ca:32:
38:2a:5e:05:79:34:7f:2f:f0:64:2b:46:61:2e:33:d4:83:eb:
2f:52:a3:ab:6a:e7:1d:a8:78:4f:3a:5b:9d:1d:2a:89:d0:8b:
f6:d4:66:02:ce:4b:1f:56:40:3f:eb:2b:98:2f:7f:a3:85:e5:
09:7b:3b:cc:b2:51:76:0a:db:be:91:64:b0:cd:62:28:89:7c:
ac:48:59:e0:37:12:0d:10:1f:02:45:a2:58:e7:60:9c:0f:05:
0a:fe:04:2f:27:00:73:f6:7d:2c:30:ce:4a:e1:10:65:9b:97:
7f:18:76:51:c4:20:7d:ff:b7:04:8c:12:8d:35:10:0c:b9:a3:
07:6a:f9:da:51:90:10:9f:80:99:9c:ee:1b:5f:97:ab:3f:db:
3d:69:e5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:24:49 2026 by rpki-client