$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft File: 72B692DB78B9A0070ADC5D2760764B22DC477644.mft (raw, json) Hash identifier: 3a4bGNoPKZutKp6hbawAp2oi3xpBBWlhtUiy4fjA/Rg= Subject key identifier: A4:3A:4A:06:47:52:87:C0:13:4A:3A:4C:69:77:97:7E:07:6B:C5:1A Authority key identifier: 72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44 Certificate issuer: /CN=72B692DB78B9A0070ADC5D2760764B22DC477644 Certificate serial: 6CC23E71DC3C2A7785E07B2D6CB611E13565A2D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:02:34 +0000 Manifest this update: Tue 12 May 2026 11:57:34 +0000 Manifest next update: Wed 13 May 2026 12:19:34 +0000 Files and hashes: 1: 72B692DB78B9A0070ADC5D2760764B22DC477644.crl (hash: aX8ura7vg5zXz/fHe80zuhuUJ4QbBg9Nd1ocKvKuma0=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: I+Fd63f55V3ik8xx1b7rLHKd/go+/DygZiRv3uP0tjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c2:3e:71:dc:3c:2a:77:85:e0:7b:2d:6c:b6:11:e1:35:65:a2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B692DB78B9A0070ADC5D2760764B22DC477644 Validity Not Before: May 12 11:57:34 2026 GMT Not After : May 13 12:19:34 2026 GMT Subject: CN=A43A4A06475287C0134A3A4C6977977E076BC51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:71:e3:6b:dc:4f:67:7f:0f:9f:7c:db:b5: 7f:9f:77:4e:82:8c:03:bc:d1:75:e7:c6:25:f4:27: ad:fe:3a:cb:bc:9e:61:58:a8:d4:78:e1:b1:3b:3d: 2f:04:f1:e6:89:a2:90:dc:4b:8f:5e:d7:b9:38:8e: b0:f2:32:e9:01:4c:d4:7b:22:41:5e:7c:de:38:af: 88:96:c8:c9:03:9a:1c:2f:27:69:a3:d4:e0:21:d5: 8b:a0:c4:88:db:ef:35:f2:64:7f:44:94:25:5a:55: 9c:9e:8c:8a:78:b8:9e:0e:e1:c8:4e:07:cc:c6:aa: 47:19:23:cc:ca:ce:1e:b4:8b:15:b2:cf:d8:08:ed: 63:81:76:36:f2:e0:73:d6:c7:14:c3:06:b6:2c:84: 81:51:ae:f7:19:fc:90:34:16:7e:e9:2c:b7:3c:21: e7:e2:c5:90:b9:eb:d0:76:35:a4:3f:06:22:20:36: 77:d5:d7:1b:3e:03:97:5b:67:1b:ad:73:72:f0:6c: 13:33:3a:d2:4c:92:9b:1b:ab:d5:d2:d1:5e:79:2c: 19:88:a1:ce:8a:c1:49:d2:f7:a2:c1:88:39:b7:ac: b2:80:06:5c:c5:a8:0b:c1:36:cf:63:e4:41:1e:10: 28:2f:3d:97:9e:8c:46:23:e0:71:9a:6d:f3:d6:94: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3A:4A:06:47:52:87:C0:13:4A:3A:4C:69:77:97:7E:07:6B:C5:1A X509v3 Authority Key Identifier: keyid:72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:3b:4c:a1:96:de:13:88:c5:87:45:31:f2:c0:cc:c4:f1:5a: 19:40:80:a8:ef:5c:ce:c7:98:be:52:03:44:0c:02:0b:1d:19: e5:eb:04:42:50:db:08:e6:b9:99:09:d0:d7:72:35:55:ed:a1: a3:27:d8:e3:41:59:81:0c:39:b9:28:9e:af:b6:ec:26:b3:6e: 40:56:8e:88:39:01:ed:b9:06:14:d9:5b:1a:1a:9c:81:3b:34: 03:d8:59:c4:8a:40:26:6c:49:50:c5:66:49:c3:08:73:4b:92: 36:3a:1c:77:dc:32:4d:10:cc:ae:20:a3:f1:6b:6c:35:c8:c9: 5a:96:d3:d8:e4:b5:a8:44:b5:2e:14:60:79:40:71:87:71:1d: 0c:e0:86:e3:a0:fe:8a:95:1b:b9:17:23:c3:04:c6:ed:ee:dd: 59:ef:2b:8a:ee:f0:3b:75:0d:d0:64:a3:23:ef:31:9a:53:f0: ff:70:83:13:6c:f8:dd:59:bc:6c:71:81:b3:ae:cd:1b:9f:4f: 38:00:52:b7:b7:f6:d9:59:43:a0:ba:43:d4:5c:87:af:2a:84: 9e:68:fe:6c:b9:e3:13:04:b8:87:40:e6:fe:68:ba:51:a8:54: a2:20:1e:2a:ad:8f:e6:b1:06:00:2f:c0:45:cd:a0:60:7d:67: dc:ba:25:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMI+cdw8KneF4HstbLYR4TVlotgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJE QzQ3NzY0NDAeFw0yNjA1MTIxMTU3MzRaFw0yNjA1MTMxMjE5MzRaMDMxMTAvBgNV BAMTKEE0M0E0QTA2NDc1Mjg3QzAxMzRBM0E0QzY5Nzc5NzdFMDc2QkM1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0XHja9xPZ38Pn3zbtX+fd06C jAO80XXnxiX0J63+Osu8nmFYqNR44bE7PS8E8eaJopDcS49e17k4jrDyMukBTNR7 IkFefN44r4iWyMkDmhwvJ2mj1OAh1YugxIjb7zXyZH9ElCVaVZyejIp4uJ4O4chO B8zGqkcZI8zKzh60ixWyz9gI7WOBdjby4HPWxxTDBrYshIFRrvcZ/JA0Fn7pLLc8 IefixZC569B2NaQ/BiIgNnfV1xs+A5dbZxutc3LwbBMzOtJMkpsbq9XS0V55LBmI oc6KwUnS96LBiDm3rLKABlzFqAvBNs9j5EEeECgvPZeejEYj4HGabfPWlAi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDpKBkdSh8ATSjpMaXeXfgdrxRowHwYDVR0j BBgwFoAUcraS23i5oAcK3F0nYHZLItxHdkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3 OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJEQzQ3NzY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkI2OTJEQjc4QjlBMDA3MEFEQzVEMjc2MDc2NEIyMkRDNDc3 NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRC MjJEQzQ3NzY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKc7TKGW3hOIxYdFMfLAzMTxWhlAgKjvXM7H mL5SA0QMAgsdGeXrBEJQ2wjmuZkJ0NdyNVXtoaMn2ONBWYEMObkonq+27CazbkBW jog5Ae25BhTZWxoanIE7NAPYWcSKQCZsSVDFZknDCHNLkjY6HHfcMk0QzK4go/Fr bDXIyVqW09jktahEtS4UYHlAcYdxHQzghuOg/oqVG7kXI8MExu3u3VnvK4ru8Dt1 DdBkoyPvMZpT8P9wgxNs+N1ZvGxxgbOuzRufTzgAUre39tlZQ6C6Q9Rch68qhJ5o /my54xMEuIdA5v5oulGoVKIgHiqtj+axBgAvwEXNoGB9Z9y6JfI= -----END CERTIFICATE-----Generated at Tue May 12 22:13:23 2026 by rpki-client