$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft File: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft (raw, json) Hash identifier: zSa8BIEF8IhfJb3V9w/85pP6eFTP8H0ZxXeYMvA85V8= Subject key identifier: 6E:4C:03:57:90:DC:01:1E:59:00:D6:C6:E7:FA:3B:F9:B6:18:B8:F1 Authority key identifier: 72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D Certificate issuer: /CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Certificate serial: 1EA9B8ED066B26C1E6792C2E3464788D4002F6EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:08:35 +0000 Manifest this update: Wed 23 Sep 2026 06:03:35 +0000 Manifest next update: Thu 24 Sep 2026 08:13:35 +0000 Files and hashes: 1: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl (hash: ZxbKMUg/fKGO9IKeY05Ydb6eEzVjsjUxJrfGvZzx+BI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a9:b8:ed:06:6b:26:c1:e6:79:2c:2e:34:64:78:8d:40:02:f6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Validity Not Before: Sep 23 06:03:35 2026 GMT Not After : Sep 24 08:13:35 2026 GMT Subject: CN=6E4C035790DC011E5900D6C6E7FA3BF9B618B8F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:b1:90:b8:7b:26:12:d7:f4:87:49:0d:42: 9c:e9:ca:41:00:fd:ef:94:61:94:a9:fa:37:10:a2: c3:db:04:28:e2:0d:46:60:91:39:e9:5a:54:92:ac: 05:3f:ac:c0:51:a6:cc:ae:6d:07:ba:a7:84:68:11: c2:d3:b3:11:02:86:2c:d8:f1:3d:6f:9b:27:85:a7: 5f:d2:73:53:58:de:e2:d0:23:e6:e9:b3:58:00:c4: 85:51:01:9d:b2:2a:16:30:d7:e3:1c:1e:72:33:ed: 55:d3:74:64:fe:f9:f8:fe:e7:de:b8:98:0c:36:0a: e4:e7:87:41:37:2e:57:cb:9e:05:41:b6:cf:92:72: 1a:4c:7c:be:e8:37:97:2a:36:0f:a2:90:7c:d7:84: ef:da:3f:fe:8a:87:be:8a:1c:be:b1:d3:0e:15:b6: 78:ab:54:c1:00:3d:6f:47:f8:52:aa:ba:51:7b:27: 36:38:b8:bf:fc:5d:b1:2b:8f:f5:c7:a9:7b:32:ef: a5:7f:6c:4b:a8:4c:e1:a8:ae:ed:32:21:d1:80:62: c3:18:e2:41:c2:72:67:3e:e0:b6:4d:9a:ce:0d:3e: c0:ec:89:7a:1a:cd:c5:b3:fe:46:dc:30:62:81:4a: d4:73:68:ed:17:86:34:6f:b0:dd:83:75:c3:8b:23: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4C:03:57:90:DC:01:1E:59:00:D6:C6:E7:FA:3B:F9:B6:18:B8:F1 X509v3 Authority Key Identifier: keyid:72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e8:25:bb:80:78:48:92:61:ea:9a:7e:16:c6:e1:d6:30:fa: d1:b5:bc:86:80:d0:ce:ff:c6:15:a2:0a:ff:55:4f:c0:14:aa: 0d:fb:37:cf:89:c6:49:4a:bc:fe:a7:94:81:2d:a6:c6:a4:82: b5:0c:54:60:7c:f6:f6:de:e4:6c:17:e5:3d:40:c4:16:a4:78: 1f:24:eb:80:61:54:26:17:13:dc:6f:f3:3e:dd:2b:85:4c:e6: eb:af:6b:f5:ab:4a:eb:e0:1f:83:1a:26:10:3b:ec:bb:11:24: 74:aa:39:f7:61:56:09:03:85:2e:02:c4:e6:71:90:4e:61:ca: d8:18:f9:58:1e:9c:dd:92:da:0b:e8:36:27:2f:d3:58:51:02: fc:38:a3:93:d4:fc:00:c4:f3:bf:76:f4:1f:e3:28:74:e8:66: 36:2a:7e:c6:27:b1:63:b5:9a:bf:ec:2f:81:46:39:e2:84:95: 90:48:4d:34:90:68:51:a8:cc:50:c9:31:d5:08:6b:8d:4b:ec: 41:91:93:2d:a9:6a:c7:5d:d7:59:78:64:ad:ef:b3:b6:b7:3a: 3a:4d:7d:8f:14:99:cd:00:d6:70:a2:f5:39:5f:4b:eb:af:cd: f5:fb:2a:93:bd:62:1e:d6:8a:53:12:69:be:79:fb:b6:55:65: ed:ff:78:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqm47QZrJsHmeSwuNGR4jUAC9uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQx QjU4NkM5RDAeFw0yNjA5MjMwNjAzMzVaFw0yNjA5MjQwODEzMzVaMDMxMTAvBgNV BAMTKDZFNEMwMzU3OTBEQzAxMUU1OTAwRDZDNkU3RkEzQkY5QjYxOEI4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpLGQuHsmEtf0h0kNQpzpykEA /e+UYZSp+jcQosPbBCjiDUZgkTnpWlSSrAU/rMBRpsyubQe6p4RoEcLTsxEChizY 8T1vmyeFp1/Sc1NY3uLQI+bps1gAxIVRAZ2yKhYw1+McHnIz7VXTdGT++fj+5964 mAw2CuTnh0E3LlfLngVBts+SchpMfL7oN5cqNg+ikHzXhO/aP/6Kh76KHL6x0w4V tnirVMEAPW9H+FKqulF7JzY4uL/8XbErj/XHqXsy76V/bEuoTOGoru0yIdGAYsMY 4kHCcmc+4LZNms4NPsDsiXoazcWz/kbcMGKBStRzaO0XhjRvsN2DdcOLI7zxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbkwDV5DcAR5ZANbG5/o7+bYYuPEwHwYDVR0j BBgwFoAUcorRcdPDHrIFIj/8PiwIHRtYbJ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM4MWU2ZWMtYzg3Yi00ZmRiLWEyZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFE M0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQxQjU4NkM5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjhBRDE3MUQzQzMxRUIyMDUyMjNGRkMzRTJDMDgxRDFCNTg2 QzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4 MUQxQjU4NkM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjoJbuAeEiSYeqafhbG4dYw+tG1vIaA0M7/ xhWiCv9VT8AUqg37N8+JxklKvP6nlIEtpsakgrUMVGB89vbe5GwX5T1AxBakeB8k 64BhVCYXE9xv8z7dK4VM5uuva/WrSuvgH4MaJhA77LsRJHSqOfdhVgkDhS4CxOZx kE5hytgY+VgenN2S2gvoNicv01hRAvw4o5PU/ADE87929B/jKHToZjYqfsYnsWO1 mr/sL4FGOeKElZBITTSQaFGozFDJMdUIa41L7EGRky2pasdd11l4ZK3vs7a3OjpN fY8Umc0A1nCi9TlfS+uvzfX7KpO9Yh7WilMSab55+7ZVZe3/eAo= -----END CERTIFICATE-----Generated at Wed Sep 23 22:14:01 2026 by rpki-client