$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft File: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft (raw, json) Hash identifier: WOMAhkKg/IPxxLCMqujF7I9g90bWIWI4GUxJYAmNokk= Subject key identifier: 44:A4:2A:4A:DE:DE:7B:74:6F:70:3E:F7:7E:4E:5C:F7:E8:73:B2:35 Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 Certificate issuer: /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Certificate serial: 3DBEF7969D778DABA61A1F4E51219E905EA0E7C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:01:51 +0000 Manifest this update: Thu 23 Jul 2026 21:56:51 +0000 Manifest next update: Fri 24 Jul 2026 22:02:51 +0000 Files and hashes: 1: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=) 2: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl (hash: k3ktbsUeKFTAFYr8hFsXNuKzmAs8mG2nkfbNLXo9WQ0=) 3: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: xliXiEUEZwSaL+L9KbxePpEFEAbRpcaYYQQzzGHYr2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:be:f7:96:9d:77:8d:ab:a6:1a:1f:4e:51:21:9e:90:5e:a0:e7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Validity Not Before: Jul 23 21:56:51 2026 GMT Not After : Jul 24 22:02:51 2026 GMT Subject: CN=44A42A4ADEDE7B746F703EF77E4E5CF7E873B235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:21:2d:5a:61:29:c9:d2:5b:3c:69:d2:e0: c3:cb:ca:2c:e5:7e:b1:96:1f:8b:9d:b7:0a:8b:e2: eb:e8:25:8e:a0:9e:d9:e6:68:6e:c3:e6:0b:77:da: 44:a6:28:81:b5:7e:08:c8:3d:35:2e:d7:eb:2a:5f: 16:25:73:56:6c:ca:fe:74:93:24:77:91:46:87:41: 80:d8:d8:72:56:de:a2:58:74:94:bf:13:13:bd:3d: ad:d6:4c:1d:fb:57:24:01:c7:65:52:f3:68:65:08: 50:19:84:70:56:29:e2:41:95:95:af:07:3c:b6:70: 7c:63:bf:72:56:b1:5e:5b:6c:48:68:7d:9b:b2:07: 26:b2:a6:9f:0b:f0:a0:04:a2:e7:fe:ea:ef:5a:83: 96:29:b7:b1:6d:dd:10:8a:89:4e:98:95:0e:e1:81: 74:a2:23:22:41:89:62:24:c6:e9:99:1a:a5:4a:e5: 24:41:f7:78:b9:41:60:ca:a7:13:dc:ce:08:31:f4: d2:27:a2:30:b3:4d:cb:67:d5:f2:48:e4:42:e7:05: c0:61:ba:43:90:3e:79:a1:69:0a:1f:82:84:49:03: 6a:fa:2b:a9:57:0c:3b:1c:16:d0:a0:6b:d8:57:b6: 18:b6:70:1d:0c:da:3a:44:1b:e8:6a:18:01:f0:71: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A4:2A:4A:DE:DE:7B:74:6F:70:3E:F7:7E:4E:5C:F7:E8:73:B2:35 X509v3 Authority Key Identifier: keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3d:1a:f4:0c:3f:a9:14:21:3a:67:d0:4b:fa:ca:cb:4b:02: d4:25:47:da:47:e2:fd:6c:44:18:24:c0:1f:87:a9:94:cc:9e: 34:b7:00:0b:af:55:f7:2c:e0:74:b4:a4:7d:98:6a:d3:32:d4: 1c:79:00:d5:03:87:01:a5:fe:ab:45:6d:9b:76:b4:78:3b:15: e6:f4:54:51:76:ff:75:a3:25:49:d0:41:04:06:2c:f1:46:a0: c1:db:33:15:76:85:33:89:c6:0c:76:96:da:30:82:6d:59:a0: 2a:bb:45:dd:7c:2f:51:d5:5f:8f:ad:9d:97:5b:f2:2f:c6:0f: 1c:a1:a5:e0:47:46:f0:16:28:e7:88:e2:6d:29:5a:bc:c5:64: 61:8a:07:9e:5c:62:40:85:53:5f:f4:38:f6:29:6e:b9:35:5c: c9:9d:91:f2:88:4d:e6:01:24:c0:43:db:16:76:e2:ce:d6:8d: 82:fc:69:2c:90:5f:9c:4f:0b:c6:2b:46:8e:2e:ed:60:90:8e: 70:48:4f:9d:c7:fe:c6:c9:fd:a0:7e:fc:19:f1:04:04:aa:8a: 37:08:97:cc:c2:94:51:84:fd:2d:fd:7c:cb:3f:aa:4b:d7:27: 98:c1:ec:d4:1c:52:0d:0c:f5:20:75:9d:dd:f9:ff:43:9b:42: 8f:6e:15:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPb73lp13jaumGh9OUSGekF6g58kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAx QUM4ODkxNDAeFw0yNjA3MjMyMTU2NTFaFw0yNjA3MjQyMjAyNTFaMDMxMTAvBgNV BAMTKDQ0QTQyQTRBREVERTdCNzQ2RjcwM0VGNzdFNEU1Q0Y3RTg3M0IyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2SEtWmEpydJbPGnS4MPLyizl frGWH4udtwqL4uvoJY6gntnmaG7D5gt32kSmKIG1fgjIPTUu1+sqXxYlc1Zsyv50 kyR3kUaHQYDY2HJW3qJYdJS/ExO9Pa3WTB37VyQBx2VS82hlCFAZhHBWKeJBlZWv Bzy2cHxjv3JWsV5bbEhofZuyByaypp8L8KAEouf+6u9ag5Ypt7Ft3RCKiU6YlQ7h gXSiIyJBiWIkxumZGqVK5SRB93i5QWDKpxPczggx9NInojCzTctn1fJI5ELnBcBh ukOQPnmhaQofgoRJA2r6K6lXDDscFtCga9hXthi2cB0M2jpEG+hqGAHwcUtJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKQqSt7ee3RvcD73fk5c9+hzsjUwHwYDVR0j BBgwFoAUdyjrB/nn9hyMBPjuT7ZS0BrIiRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E2MzFkNzctZjgwNS00MzljLTk4ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdG OUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAxQUM4ODkxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzI4RUIwN0Y5RTdGNjFDOEMwNEY4RUU0RkI2NTJEMDFBQzg4 OTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUy RDAxQUM4ODkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK89GvQMP6kUITpn0Ev6ystLAtQlR9pH4v1s RBgkwB+HqZTMnjS3AAuvVfcs4HS0pH2YatMy1Bx5ANUDhwGl/qtFbZt2tHg7Feb0 VFF2/3WjJUnQQQQGLPFGoMHbMxV2hTOJxgx2ltowgm1ZoCq7Rd18L1HVX4+tnZdb 8i/GDxyhpeBHRvAWKOeI4m0pWrzFZGGKB55cYkCFU1/0OPYpbrk1XMmdkfKITeYB JMBD2xZ24s7WjYL8aSyQX5xPC8YrRo4u7WCQjnBIT53H/sbJ/aB+/BnxBASqijcI l8zClFGE/S39fMs/qkvXJ5jB7NQcUg0M9SB1nd35/0ObQo9uFZo= -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:14 2026 by rpki-client