$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft File: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft (raw, json) Hash identifier: 5ZPjHHNfHMzEGGeee5Mp+qXH7GbAonQrW6wS8XmOGs4= Subject key identifier: D5:8D:EE:2B:D4:1F:4B:FD:A4:D8:DE:E8:7D:F1:FA:BB:72:17:17:47 Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 Certificate issuer: /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Certificate serial: 521F3196AB1F0FFA565848A2AF5BA65BA7784E25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:12 +0000 Manifest this update: Tue 12 May 2026 19:15:12 +0000 Manifest next update: Wed 13 May 2026 21:49:12 +0000 Files and hashes: 1: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl (hash: fPpjuE00RfqKh22DX/sMQKficKbg0kJUFPZuWcgq6aw=) 2: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: xliXiEUEZwSaL+L9KbxePpEFEAbRpcaYYQQzzGHYr2w=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1f:31:96:ab:1f:0f:fa:56:58:48:a2:af:5b:a6:5b:a7:78:4e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Validity Not Before: May 12 19:15:12 2026 GMT Not After : May 13 21:49:12 2026 GMT Subject: CN=D58DEE2BD41F4BFDA4D8DEE87DF1FABB72171747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a0:f5:4e:6c:bf:d6:c2:66:7d:0f:9c:ed:40: 46:64:4e:2d:cf:0e:99:f6:84:94:cd:a2:15:6a:81: 4a:cf:08:04:cf:f0:ab:36:b2:7e:fa:15:28:27:6a: 7e:e1:bc:60:a4:af:1a:d9:12:78:49:20:19:55:70: 4a:f2:6f:11:4a:9a:8e:0d:08:3e:bc:3a:f0:24:92: d8:1a:d9:8f:ce:0c:b2:b4:d0:e8:8a:28:55:d1:01: 86:16:3f:c1:f3:1f:19:df:26:6f:5c:06:f1:76:aa: c1:eb:8c:e4:f5:86:be:0f:d8:b0:9f:0c:4b:7c:33: 98:f6:e8:3f:49:fd:17:f2:c4:f0:ce:f7:73:fa:1f: d9:c5:e2:02:a0:c2:43:f9:81:93:d9:28:74:ad:29: b5:74:31:34:34:4f:db:0b:f6:48:82:15:bd:5f:56: 9d:a9:f0:94:05:7e:64:be:a1:6b:fc:c7:03:55:ad: 2c:ff:6b:7c:2f:c4:77:9b:74:aa:e9:a1:34:79:3c: a0:1c:a6:34:9c:3c:59:0b:32:9c:9c:65:e0:90:f6: fe:47:b3:56:35:78:1c:9a:e7:29:3e:0c:00:1d:7b: 4f:df:72:c2:9b:75:fa:5e:94:3e:b5:d3:4f:6f:89: f1:ed:a2:d0:37:fd:96:17:93:9c:07:94:3c:15:67: 67:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8D:EE:2B:D4:1F:4B:FD:A4:D8:DE:E8:7D:F1:FA:BB:72:17:17:47 X509v3 Authority Key Identifier: keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:86:7d:4c:15:25:a0:e8:c9:30:13:2d:58:36:c0:a4:2a:c7: 32:1d:1d:5b:a7:59:8f:00:42:3c:0f:e3:23:c9:38:9d:b8:b2: c3:00:7b:ba:c0:34:91:ba:81:41:09:dd:ca:06:11:f6:11:70: 31:ef:33:18:1a:1a:18:d1:75:c3:5e:f2:61:fc:bc:23:76:54: 1e:ab:39:2a:bd:e8:6a:ef:62:f1:1f:ef:6e:18:93:42:00:4a: c6:ea:7d:84:ee:b7:3d:1d:7c:49:aa:06:6a:09:d1:fa:b5:95: 56:cc:cf:0e:11:a9:96:e8:ee:ed:4a:fe:29:a5:a7:39:e8:a0: d3:30:ac:57:fb:88:cd:47:34:fc:46:6f:2c:4d:8b:73:ad:95: bf:1f:aa:8c:b7:56:2a:ab:3f:49:99:33:e8:5f:24:e0:f8:1d: ab:01:36:a2:e5:b7:29:20:3f:42:7a:76:43:d2:3d:50:03:a8: 10:f2:21:ba:72:89:a5:dd:36:90:20:18:7e:3c:4d:f8:c9:9d: 1a:9b:96:d6:3c:ff:c2:0a:0b:ca:be:b6:eb:97:54:97:9e:90: f4:56:33:22:7d:d2:bb:67:f5:8b:97:36:06:42:a3:e3:46:30: 17:71:61:63:32:83:0c:fd:04:29:e3:14:d5:93:43:32:43:fa: 82:e4:81:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUh8xlqsfD/pWWEiir1umW6d4TiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAx QUM4ODkxNDAeFw0yNjA1MTIxOTE1MTJaFw0yNjA1MTMyMTQ5MTJaMDMxMTAvBgNV BAMTKEQ1OERFRTJCRDQxRjRCRkRBNEQ4REVFODdERjFGQUJCNzIxNzE3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOoPVObL/WwmZ9D5ztQEZkTi3P Dpn2hJTNohVqgUrPCATP8Ks2sn76FSgnan7hvGCkrxrZEnhJIBlVcErybxFKmo4N CD68OvAkktga2Y/ODLK00OiKKFXRAYYWP8HzHxnfJm9cBvF2qsHrjOT1hr4P2LCf DEt8M5j26D9J/RfyxPDO93P6H9nF4gKgwkP5gZPZKHStKbV0MTQ0T9sL9kiCFb1f Vp2p8JQFfmS+oWv8xwNVrSz/a3wvxHebdKrpoTR5PKAcpjScPFkLMpycZeCQ9v5H s1Y1eBya5yk+DAAde0/fcsKbdfpelD61009vifHtotA3/ZYXk5wHlDwVZ2ffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Y3uK9QfS/2k2N7offH6u3IXF0cwHwYDVR0j BBgwFoAUdyjrB/nn9hyMBPjuT7ZS0BrIiRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E2MzFkNzctZjgwNS00MzljLTk4ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdG OUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAxQUM4ODkxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzI4RUIwN0Y5RTdGNjFDOEMwNEY4RUU0RkI2NTJEMDFBQzg4 OTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUy RDAxQUM4ODkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiGfUwVJaDoyTATLVg2wKQqxzIdHVunWY8A QjwP4yPJOJ24ssMAe7rANJG6gUEJ3coGEfYRcDHvMxgaGhjRdcNe8mH8vCN2VB6r OSq96GrvYvEf724Yk0IASsbqfYTutz0dfEmqBmoJ0fq1lVbMzw4RqZbo7u1K/iml pznooNMwrFf7iM1HNPxGbyxNi3Otlb8fqoy3ViqrP0mZM+hfJOD4HasBNqLltykg P0J6dkPSPVADqBDyIbpyiaXdNpAgGH48TfjJnRqbltY8/8IKC8q+tuuXVJeekPRW MyJ90rtn9YuXNgZCo+NGMBdxYWMygwz9BCnjFNWTQzJD+oLkgZs= -----END CERTIFICATE-----Generated at Tue May 12 22:19:36 2026 by rpki-client