$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft File: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft (raw, json) Hash identifier: TfkCGUGC9PuIuaBlXjk1D3mVrdHx9ZF8VgqJ8PUcAYQ= Subject key identifier: B5:55:D1:6E:C1:E9:BC:F7:66:0B:2F:67:54:6F:12:17:FA:91:E9:47 Authority key identifier: 72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D Certificate issuer: /CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Certificate serial: 45C3A6DE9600138B06817480F8DA71E4D263183C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft Manifest number: 0D Signing time: Tue 12 May 2026 07:44:07 +0000 Manifest this update: Tue 12 May 2026 07:39:07 +0000 Manifest next update: Wed 13 May 2026 08:19:07 +0000 Files and hashes: 1: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl (hash: cSACRayERo2SddQp0MsUWiKAkeQyLYVkoeVRaXeHdC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c3:a6:de:96:00:13:8b:06:81:74:80:f8:da:71:e4:d2:63:18:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Validity Not Before: May 12 07:39:07 2026 GMT Not After : May 13 08:19:07 2026 GMT Subject: CN=B555D16EC1E9BCF7660B2F67546F1217FA91E947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:96:4b:38:34:ef:42:37:87:f3:97:8f:9a: 4d:ac:75:ab:3a:b0:f8:4c:30:5b:43:54:83:7a:d6: 56:63:83:4a:20:1f:23:7e:ca:19:7d:4f:cf:95:ce: de:f1:b7:2f:de:d3:4e:49:c2:02:20:15:38:d2:4e: b9:72:09:14:c1:d6:24:db:9c:e5:cc:3f:80:38:97: ea:66:c8:eb:20:4c:2b:86:f0:f5:aa:fa:9f:55:69: fc:39:05:12:f9:9a:ee:e6:f5:7d:da:b9:b3:fc:eb: 63:ca:65:68:a9:32:9f:ca:ea:1b:f2:78:6f:c3:09: 77:a4:d1:7a:54:a2:69:37:e8:81:e1:2e:cb:e8:34: d7:00:12:c3:62:8a:a0:41:87:ad:45:26:85:d3:53: 28:86:bb:31:78:12:ed:3f:23:25:bc:7e:ce:55:a5: a1:18:54:70:01:85:f3:f3:5e:e0:1b:56:c5:ee:11: 4a:14:79:e9:10:cc:3c:06:07:cb:01:fb:57:95:ec: 95:f8:79:de:6f:f1:36:60:c9:87:17:6e:1c:76:9c: 7a:31:a0:71:e9:89:d6:53:b1:3d:e9:20:5a:98:91: 2a:88:e2:98:ef:8b:12:4a:83:59:f2:e3:d8:04:af: c5:b6:7e:10:7c:3f:b9:ee:49:3c:6b:de:04:38:ea: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:55:D1:6E:C1:E9:BC:F7:66:0B:2F:67:54:6F:12:17:FA:91:E9:47 X509v3 Authority Key Identifier: keyid:72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:02:52:24:34:e2:68:ce:12:49:df:9c:4b:45:d6:db:c2:85: c0:8f:cb:c4:8c:44:19:85:b6:a0:59:ec:70:ba:33:e6:4a:6a: 08:84:86:f9:d9:1e:d2:18:d5:0b:c4:91:e3:7e:6d:41:1f:25: 65:7d:49:bf:1f:12:fc:c3:c7:d1:f4:e3:a5:3c:56:72:c8:b0: de:22:a5:da:1a:c4:69:59:b1:68:95:b5:b1:ce:66:f9:d5:56: 53:29:6c:f0:0b:62:fd:b9:dd:ea:f8:45:65:af:03:78:90:cb: 21:78:e6:1e:52:1b:5e:99:08:89:a7:17:71:22:38:90:68:c9: b8:4f:31:c9:0c:1d:da:10:88:8d:82:2c:38:3f:db:50:2a:59: d1:f8:2f:a5:f1:d9:ef:3b:ec:99:1a:45:7e:d0:1f:97:25:72: e3:33:7c:de:57:cc:6e:68:7c:c4:5d:f0:7f:35:a8:89:3a:79: af:46:4b:47:a8:61:9c:11:9c:90:4c:45:09:ce:51:f3:39:1a: 41:6e:21:8d:4e:45:79:0a:29:d7:26:a3:c7:f9:2e:78:8d:be: d5:f1:09:d5:43:33:5c:1f:0e:3a:fa:03:95:c7:77:01:5e:f3: 80:da:75:ea:ea:26:c4:ee:0d:38:0f:f8:8d:61:9d:6a:9c:7b: 6b:96:5b:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURcOm3pYAE4sGgXSA+Npx5NJjGDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQx QjU4NkM5RDAeFw0yNjA1MTIwNzM5MDdaFw0yNjA1MTMwODE5MDdaMDMxMTAvBgNV BAMTKEI1NTVEMTZFQzFFOUJDRjc2NjBCMkY2NzU0NkYxMjE3RkE5MUU5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFZZLODTvQjeH85ePmk2sdas6 sPhMMFtDVIN61lZjg0ogHyN+yhl9T8+Vzt7xty/e005JwgIgFTjSTrlyCRTB1iTb nOXMP4A4l+pmyOsgTCuG8PWq+p9Vafw5BRL5mu7m9X3aubP862PKZWipMp/K6hvy eG/DCXek0XpUomk36IHhLsvoNNcAEsNiiqBBh61FJoXTUyiGuzF4Eu0/IyW8fs5V paEYVHABhfPzXuAbVsXuEUoUeekQzDwGB8sB+1eV7JX4ed5v8TZgyYcXbhx2nHox oHHpidZTsT3pIFqYkSqI4pjvixJKg1ny49gEr8W2fhB8P7nuSTxr3gQ46gR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtVXRbsHpvPdmCy9nVG8SF/qR6UcwHwYDVR0j BBgwFoAUcorRcdPDHrIFIj/8PiwIHRtYbJ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM4MWU2ZWMtYzg3Yi00ZmRiLWEyZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFE M0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQxQjU4NkM5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjhBRDE3MUQzQzMxRUIyMDUyMjNGRkMzRTJDMDgxRDFCNTg2 QzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4 MUQxQjU4NkM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8CUiQ04mjOEknfnEtF1tvChcCPy8SMRBmF tqBZ7HC6M+ZKagiEhvnZHtIY1QvEkeN+bUEfJWV9Sb8fEvzDx9H046U8VnLIsN4i pdoaxGlZsWiVtbHOZvnVVlMpbPALYv253er4RWWvA3iQyyF45h5SG16ZCImnF3Ei OJBoybhPMckMHdoQiI2CLDg/21AqWdH4L6Xx2e877JkaRX7QH5clcuMzfN5XzG5o fMRd8H81qIk6ea9GS0eoYZwRnJBMRQnOUfM5GkFuIY1ORXkKKdcmo8f5LniNvtXx CdVDM1wfDjr6A5XHdwFe84DaderqJsTuDTgP+I1hnWqce2uWWyo= -----END CERTIFICATE-----Generated at Tue May 12 22:59:39 2026 by rpki-client