$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft File: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft (raw, json) Hash identifier: TgexXAqpOM89tH/iHJQuI7itnZehoNnW0uMZYDFKxXk= Subject key identifier: 29:5A:20:25:B0:88:08:B3:F5:C6:58:E3:D3:FF:05:09:D4:7A:88:2F Authority key identifier: 72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 Certificate issuer: /CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Certificate serial: 2314414CDC082BE8D5AD9C2FF03A25934C2313DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:01:14 +0000 Manifest this update: Tue 12 May 2026 09:56:14 +0000 Manifest next update: Wed 13 May 2026 12:54:14 +0000 Files and hashes: 1: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: nCyY949MzU7hnQsLPWC6vzIr7exiuBneA4Uj38f4AKc=) 2: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl (hash: fn5usjeEC3g5ZHxoSNAqLB+BV1QFeio1NVz3btROlrk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:14:41:4c:dc:08:2b:e8:d5:ad:9c:2f:f0:3a:25:93:4c:23:13:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Validity Not Before: May 12 09:56:14 2026 GMT Not After : May 13 12:54:14 2026 GMT Subject: CN=295A2025B08808B3F5C658E3D3FF0509D47A882F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:2d:9a:c9:f2:fe:cf:bc:56:ac:53:c4:c6: 52:cf:c7:b5:44:79:2a:95:76:6c:db:d6:cd:df:a2: 85:99:35:ef:8c:01:41:12:4a:64:ce:32:24:5c:e3: c8:15:9f:3c:e4:e7:39:5a:9f:b4:db:82:6d:dd:00: 77:2c:ee:1a:e9:25:bd:7a:73:04:2f:4e:81:de:0f: 92:31:df:a8:a5:b9:2e:c5:a7:e8:25:f1:c3:23:59: bb:cf:7e:be:20:23:12:d9:ac:12:a3:be:eb:1a:5d: 12:49:d3:e9:09:9b:db:11:83:d9:e1:e7:02:a1:75: ec:c5:4a:fc:c9:91:66:28:a8:6c:41:32:79:2e:5d: fc:49:23:90:22:34:5d:7a:a9:89:5f:83:52:a3:db: d7:6f:22:1b:63:97:12:d2:75:c8:13:9d:e9:ea:c1: dd:80:e1:b3:5b:8a:2b:7a:0b:f6:10:81:af:92:f2: 23:d7:48:41:4f:04:b4:cb:a4:2b:fe:d9:15:74:91: db:7e:b5:a1:a7:d5:95:38:ff:b8:07:39:dd:f2:d2: 4c:1f:50:15:08:26:89:ee:11:ee:72:a1:5d:31:60: 8a:89:a5:55:6c:91:51:13:46:4a:01:3d:8d:31:09: 2a:11:97:76:0b:82:8e:84:5b:37:bd:c8:40:5b:ac: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5A:20:25:B0:88:08:B3:F5:C6:58:E3:D3:FF:05:09:D4:7A:88:2F X509v3 Authority Key Identifier: keyid:72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9f:4a:63:cb:a5:52:62:12:2c:0a:e2:64:b5:71:74:4a:fd: c7:e9:0f:55:a6:66:fc:ad:2e:aa:08:75:3d:22:61:52:8c:43: d1:6a:41:74:e2:c2:5f:81:4a:de:00:22:24:f1:3e:af:81:71: 65:d0:e3:ea:7e:98:c6:c4:9a:0f:e6:0c:f1:f4:be:fe:4d:38: 5d:b6:ec:aa:79:9c:47:93:8c:45:8a:ca:d8:58:cc:82:11:7c: 3d:73:b9:72:a2:27:b3:cf:70:5b:36:4a:c5:f4:a4:51:61:8e: 4a:9d:d0:03:9a:63:ba:d0:2a:8b:cd:c9:73:05:17:19:33:87: 7c:98:27:96:9d:82:d3:5b:4a:da:da:c1:6e:8a:84:59:f3:7e: 76:b6:4c:28:f7:1f:51:2e:d7:4f:44:ae:0d:85:4a:e2:87:97: ca:12:05:68:74:2d:7c:23:2b:48:3a:8d:0d:45:0d:62:8b:1a: ac:17:f4:0b:bb:1d:93:ef:9d:b2:dc:d1:f8:1e:9c:0c:4c:73: df:20:e7:63:8c:66:fc:fb:b2:21:97:e5:7c:31:f6:7f:d4:15: 10:b9:6d:b0:36:98:90:73:ed:9c:e7:82:0f:90:07:a9:67:b4: 41:2e:51:87:13:f9:3b:ee:f8:c0:b4:94:48:44:e0:24:47:31: 2e:01:58:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxRBTNwIK+jVrZwv8Dolk0wjE94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3NDFG QTg0QTI2OTAeFw0yNjA1MTIwOTU2MTRaFw0yNjA1MTMxMjU0MTRaMDMxMTAvBgNV BAMTKDI5NUEyMDI1QjA4ODA4QjNGNUM2NThFM0QzRkYwNTA5RDQ3QTg4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpC2ayfL+z7xWrFPExlLPx7VE eSqVdmzb1s3fooWZNe+MAUESSmTOMiRc48gVnzzk5zlan7Tbgm3dAHcs7hrpJb16 cwQvToHeD5Ix36iluS7Fp+gl8cMjWbvPfr4gIxLZrBKjvusaXRJJ0+kJm9sRg9nh 5wKhdezFSvzJkWYoqGxBMnkuXfxJI5AiNF16qYlfg1Kj29dvIhtjlxLSdcgTnenq wd2A4bNbiit6C/YQga+S8iPXSEFPBLTLpCv+2RV0kdt+taGn1ZU4/7gHOd3y0kwf UBUIJonuEe5yoV0xYIqJpVVskVETRkoBPY0xCSoRl3YLgo6EWze9yEBbrP93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKVogJbCICLP1xljj0/8FCdR6iC8wHwYDVR0j BBgwFoAUcsXiTOJNKYLCDexcM46XQfqEomkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENF MjREMjk4MkMyMERFQzVDMzM4RTk3NDFGQTg0QTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkM1RTI0Q0UyNEQyOTgyQzIwREVDNUMzMzhFOTc0MUZBODRB MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3 NDFGQTg0QTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOfSmPLpVJiEiwK4mS1cXRK/cfpD1WmZvyt LqoIdT0iYVKMQ9FqQXTiwl+BSt4AIiTxPq+BcWXQ4+p+mMbEmg/mDPH0vv5NOF22 7Kp5nEeTjEWKythYzIIRfD1zuXKiJ7PPcFs2SsX0pFFhjkqd0AOaY7rQKovNyXMF Fxkzh3yYJ5adgtNbStrawW6KhFnzfna2TCj3H1Eu109Erg2FSuKHl8oSBWh0LXwj K0g6jQ1FDWKLGqwX9Au7HZPvnbLc0fgenAxMc98g52OMZvz7siGX5Xwx9n/UFRC5 bbA2mJBz7Zzngg+QB6lntEEuUYcT+Tvu+MC0lEhE4CRHMS4BWMw= -----END CERTIFICATE-----Generated at Tue May 12 22:13:37 2026 by rpki-client