$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft File: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft (raw, json) Hash identifier: tUKjHxO1KmR1P7wBXwo0jMhDI+iZtsxWeoZc4GFd9s8= Subject key identifier: 4D:DA:8D:9A:09:0C:DE:EE:20:6B:1B:DA:3F:02:C7:6F:75:DA:D1:8D Authority key identifier: 72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 Certificate issuer: /CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Certificate serial: 748998C10FFD6AB85F7F659587A9D3E52E5920DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:23:38 +0000 Manifest this update: Thu 24 Sep 2026 06:18:38 +0000 Manifest next update: Fri 25 Sep 2026 09:26:38 +0000 Files and hashes: 1: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: nCyY949MzU7hnQsLPWC6vzIr7exiuBneA4Uj38f4AKc=) 2: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl (hash: 6apV3LRDD9LQO+HS3FPP8UwyH1U0ffbcT49CBZwlLpQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:89:98:c1:0f:fd:6a:b8:5f:7f:65:95:87:a9:d3:e5:2e:59:20:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Validity Not Before: Sep 24 06:18:38 2026 GMT Not After : Sep 25 09:26:38 2026 GMT Subject: CN=4DDA8D9A090CDEEE206B1BDA3F02C76F75DAD18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:8b:60:9c:f8:8a:ab:68:5f:2a:58:56:03: 5c:0e:79:54:b7:f6:68:6f:7b:49:5e:a6:24:f2:8a: 6b:69:fd:e7:4d:0d:0a:ec:59:64:bb:f3:2a:61:8b: 0d:79:04:9d:f6:6f:3a:1f:fb:55:29:e0:b5:b9:27: c3:c0:2d:f4:45:53:82:92:ad:9e:7d:d9:a5:d5:93: 29:35:9c:25:4f:6f:e8:d2:d9:6d:7d:1b:8d:ca:f5: 3f:91:e0:5f:2b:ff:65:55:2c:3d:c8:74:8d:90:8c: f7:8c:11:55:5a:ef:74:9f:b6:08:0a:2c:43:9c:b8: 0d:3e:40:7a:80:fe:4a:32:14:8f:d2:9d:da:38:7c: 3c:9a:db:2e:c4:77:90:56:00:cc:80:9a:33:57:f5: 90:a7:d1:f4:1e:89:60:c0:09:a4:3e:08:c6:b5:ab: 90:f1:31:55:c1:4b:b0:ac:80:e9:52:13:fc:c0:ae: a4:84:77:86:f0:61:79:23:25:4b:72:c3:b5:46:80: e4:59:49:d1:3e:33:fe:03:a8:5c:30:27:7b:54:f3: 3f:a3:86:7c:b5:bb:44:99:9e:7c:98:5d:1f:3a:fd: fb:91:c3:b3:f2:a4:2a:7d:33:c1:01:64:e7:ca:b3: 84:d7:8c:da:eb:27:64:0b:ee:1e:8f:25:13:ba:e4: 68:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DA:8D:9A:09:0C:DE:EE:20:6B:1B:DA:3F:02:C7:6F:75:DA:D1:8D X509v3 Authority Key Identifier: keyid:72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bc:40:ee:93:32:d9:3b:96:ef:5e:e0:1a:94:15:df:d9:73: 9b:24:3c:ab:3b:fc:10:91:11:bf:2d:06:3f:bc:6d:e5:d6:cc: e2:27:fb:96:d7:ab:7b:89:71:60:f6:9c:70:f1:38:f2:18:07: 37:70:b5:d7:41:69:04:a5:7b:2a:26:18:b7:4d:c4:a3:a6:59: 42:f7:a9:46:ae:3d:1d:27:51:cd:6a:2d:1f:d5:4d:28:5f:cc: 7f:b8:b3:f7:24:73:d9:d4:9f:af:36:20:39:b1:46:bd:9d:36: 75:99:24:79:6e:f2:ea:42:c5:54:90:b5:4a:9e:49:2e:85:13: 5c:36:3f:90:7c:d5:43:97:69:ad:94:79:c9:88:9f:a4:c0:16: 8b:3c:52:85:dc:2e:04:f9:57:77:2a:73:01:2c:51:3f:9f:77: 51:53:25:8d:f5:15:22:8f:cf:35:7d:a8:f5:a5:76:67:12:be: c2:05:6e:1d:db:89:a9:64:1d:f4:d8:f2:c4:44:b7:85:ee:5c: 99:ae:52:2d:32:5b:92:db:26:28:c6:b8:9f:d9:85:aa:84:1c: 84:f6:a8:27:7a:73:7e:aa:a4:dc:c1:21:ad:c1:37:c1:8c:4e: 10:23:2b:48:8c:79:69:82:c7:e2:9d:6b:80:f6:fd:e1:20:88: b0:51:8e:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdImYwQ/9arhff2WVh6nT5S5ZIN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3NDFG QTg0QTI2OTAeFw0yNjA5MjQwNjE4MzhaFw0yNjA5MjUwOTI2MzhaMDMxMTAvBgNV BAMTKDREREE4RDlBMDkwQ0RFRUUyMDZCMUJEQTNGMDJDNzZGNzVEQUQxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN04tgnPiKq2hfKlhWA1wOeVS3 9mhve0lepiTyimtp/edNDQrsWWS78yphiw15BJ32bzof+1Up4LW5J8PALfRFU4KS rZ592aXVkyk1nCVPb+jS2W19G43K9T+R4F8r/2VVLD3IdI2QjPeMEVVa73SftggK LEOcuA0+QHqA/koyFI/Sndo4fDya2y7Ed5BWAMyAmjNX9ZCn0fQeiWDACaQ+CMa1 q5DxMVXBS7CsgOlSE/zArqSEd4bwYXkjJUtyw7VGgORZSdE+M/4DqFwwJ3tU8z+j hny1u0SZnnyYXR86/fuRw7PypCp9M8EBZOfKs4TXjNrrJ2QL7h6PJRO65GjBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdqNmgkM3u4gaxvaPwLHb3Xa0Y0wHwYDVR0j BBgwFoAUcsXiTOJNKYLCDexcM46XQfqEomkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENF MjREMjk4MkMyMERFQzVDMzM4RTk3NDFGQTg0QTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkM1RTI0Q0UyNEQyOTgyQzIwREVDNUMzMzhFOTc0MUZBODRB MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3 NDFGQTg0QTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE68QO6TMtk7lu9e4BqUFd/Zc5skPKs7/BCR Eb8tBj+8beXWzOIn+5bXq3uJcWD2nHDxOPIYBzdwtddBaQSleyomGLdNxKOmWUL3 qUauPR0nUc1qLR/VTShfzH+4s/ckc9nUn682IDmxRr2dNnWZJHlu8upCxVSQtUqe SS6FE1w2P5B81UOXaa2UecmIn6TAFos8UoXcLgT5V3cqcwEsUT+fd1FTJY31FSKP zzV9qPWldmcSvsIFbh3bialkHfTY8sREt4XuXJmuUi0yW5LbJijGuJ/ZhaqEHIT2 qCd6c36qpNzBIa3BN8GMThAjK0iMeWmCx+Kda4D2/eEgiLBRjpk= -----END CERTIFICATE-----Generated at Thu Sep 24 12:47:38 2026 by rpki-client