$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft File: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft (raw, json) Hash identifier: KqsBPO1t1HXenHNnFWAPG6Ox9vbIBL4EpfoNBMsDVjo= Subject key identifier: 00:9F:87:DD:87:A0:B7:53:F2:9A:0D:E1:1F:61:6B:87:05:F0:F9:E5 Authority key identifier: 72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D Certificate issuer: /CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Certificate serial: 698EB72C7A63A201E5F5E61F2A6F7E151F4B7572 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:13:40 +0000 Manifest this update: Thu 23 Jul 2026 19:08:40 +0000 Manifest next update: Fri 24 Jul 2026 21:22:40 +0000 Files and hashes: 1: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl (hash: 59jRrG3IWI+YTkDaAh5OgEtHbO63CHi9f3ghNPiyEy0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8e:b7:2c:7a:63:a2:01:e5:f5:e6:1f:2a:6f:7e:15:1f:4b:75:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Validity Not Before: Jul 23 19:08:40 2026 GMT Not After : Jul 24 21:22:40 2026 GMT Subject: CN=009F87DD87A0B753F29A0DE11F616B8705F0F9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:5f:ec:78:0e:3a:4d:c2:b0:45:24:89:3e: 21:38:95:b6:1d:c9:23:34:8c:97:ce:66:31:97:32: 5e:56:c2:7c:54:e5:49:1a:6d:2f:0c:93:43:3b:ac: 60:24:d4:69:55:aa:03:73:22:e8:31:42:a0:f3:9f: 04:76:17:1c:29:b1:3c:b2:f8:b8:34:cf:86:cd:dd: cb:91:21:97:2b:ab:89:95:cb:88:23:0a:b1:ac:f0: a4:33:16:a0:bf:c1:a8:48:34:91:b1:4e:b3:d6:7e: 9a:52:65:8b:8d:21:4b:0f:bf:d6:be:5d:c3:27:82: bc:a0:76:1c:e9:55:76:83:8e:fa:d5:ed:2c:50:2b: 04:1f:fc:87:2e:34:5b:2f:dd:27:26:2d:0e:f6:86: 89:21:c8:0d:13:9f:23:1a:7d:db:bc:35:6b:be:f8: 00:03:99:23:f7:d5:a3:f0:e4:5e:ce:f8:d2:3f:d2: 3a:9e:04:11:47:ae:fd:b3:d4:c0:da:ee:cf:8c:31: bb:4e:e0:92:87:3d:84:19:f3:bd:63:70:73:99:20: c9:b4:b7:f8:8d:20:18:93:d9:30:e0:87:c9:92:55: 72:2e:01:ee:c0:c1:a4:5f:f6:a5:e8:98:dc:81:c3: a4:ad:45:ce:c7:61:f5:f9:3c:fa:e2:ea:c5:94:95: 4b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:87:DD:87:A0:B7:53:F2:9A:0D:E1:1F:61:6B:87:05:F0:F9:E5 X509v3 Authority Key Identifier: keyid:72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:5f:90:5c:2e:ff:0d:54:8e:26:d9:52:06:e3:21:dc:18:92: 75:e4:55:2c:33:44:2b:35:a6:8b:fc:96:d1:be:4f:f5:eb:cb: 1f:e6:06:27:09:69:99:d5:17:06:cc:6b:5d:df:d3:32:cc:04: 9e:60:96:0c:15:26:6b:03:4d:e1:56:aa:12:d3:a4:b7:46:41: d3:cd:0b:27:d7:96:e6:6e:15:29:ee:fb:31:a6:c2:1b:71:ce: 2a:73:04:64:9e:51:9d:83:f5:79:db:3d:25:5e:1e:7c:af:f1: 26:06:a7:78:00:18:a3:56:d2:a6:d0:d4:0c:7c:73:58:7f:8e: e9:72:4c:8d:06:f1:f4:a3:f3:32:be:b0:62:c8:4c:54:a1:79: 73:ae:82:3d:1c:f5:16:1b:55:fc:ad:86:9c:69:c6:5e:c6:ec: fb:6a:5a:df:ad:da:c9:29:59:0b:24:4f:80:27:b7:61:b0:a0: 28:ea:5d:89:f7:d2:8a:44:9b:54:57:73:47:f5:78:80:95:07: 17:d4:89:5d:59:3f:02:25:39:f0:7b:63:5f:40:f0:6d:37:7a: 84:1d:cd:0f:57:8e:18:86:35:b9:14:21:03:57:83:2b:09:07: f0:06:02:4d:8b:2c:73:78:5c:1c:5c:19:4d:4e:4f:4e:bb:76: ad:10:e0:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaY63LHpjogHl9eYfKm9+FR9LdXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQx QjU4NkM5RDAeFw0yNjA3MjMxOTA4NDBaFw0yNjA3MjQyMTIyNDBaMDMxMTAvBgNV BAMTKDAwOUY4N0REODdBMEI3NTNGMjlBMERFMTFGNjE2Qjg3MDVGMEY5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pV/seA46TcKwRSSJPiE4lbYd ySM0jJfOZjGXMl5WwnxU5UkabS8Mk0M7rGAk1GlVqgNzIugxQqDznwR2FxwpsTyy +Lg0z4bN3cuRIZcrq4mVy4gjCrGs8KQzFqC/wahINJGxTrPWfppSZYuNIUsPv9a+ XcMngrygdhzpVXaDjvrV7SxQKwQf/IcuNFsv3ScmLQ72hokhyA0TnyMafdu8NWu+ +AADmSP31aPw5F7O+NI/0jqeBBFHrv2z1MDa7s+MMbtO4JKHPYQZ871jcHOZIMm0 t/iNIBiT2TDgh8mSVXIuAe7AwaRf9qXomNyBw6StRc7HYfX5PPri6sWUlUutAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAJ+H3Yegt1Pymg3hH2FrhwXw+eUwHwYDVR0j BBgwFoAUcorRcdPDHrIFIj/8PiwIHRtYbJ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM4MWU2ZWMtYzg3Yi00ZmRiLWEyZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFE M0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQxQjU4NkM5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjhBRDE3MUQzQzMxRUIyMDUyMjNGRkMzRTJDMDgxRDFCNTg2 QzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4 MUQxQjU4NkM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5fkFwu/w1UjibZUgbjIdwYknXkVSwzRCs1 pov8ltG+T/Xryx/mBicJaZnVFwbMa13f0zLMBJ5glgwVJmsDTeFWqhLTpLdGQdPN CyfXluZuFSnu+zGmwhtxzipzBGSeUZ2D9XnbPSVeHnyv8SYGp3gAGKNW0qbQ1Ax8 c1h/julyTI0G8fSj8zK+sGLITFSheXOugj0c9RYbVfythpxpxl7G7PtqWt+t2skp WQskT4Ant2GwoCjqXYn30opEm1RXc0f1eICVBxfUiV1ZPwIlOfB7Y19A8G03eoQd zQ9XjhiGNbkUIQNXgysJB/AGAk2LLHN4XBxcGU1OT067dq0Q4Dc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:14:16 2026 by rpki-client