$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft (raw, json) Hash identifier: 1kIonnLsjyMaLSicVz5OWHlsWH9FsjChGkgOTDoujKE= Subject key identifier: 31:08:E5:5B:A3:A3:8A:CB:DD:98:CB:8D:B3:DA:52:E4:05:6B:48:2D Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Certificate serial: 65B4C65F87BB32F0C76F3E95C014C5C17B0A2BF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:40:32 +0000 Manifest this update: Thu 23 Jul 2026 12:35:32 +0000 Manifest next update: Fri 24 Jul 2026 15:36:32 +0000 Files and hashes: 1: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl (hash: mzjfIUdgXb2TK7TvlspMqmeuonjVKwhpIB925YIiECM=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b4:c6:5f:87:bb:32:f0:c7:6f:3e:95:c0:14:c5:c1:7b:0a:2b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Validity Not Before: Jul 23 12:35:32 2026 GMT Not After : Jul 24 15:36:32 2026 GMT Subject: CN=3108E55BA3A38ACBDD98CB8DB3DA52E4056B482D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:66:43:a3:ed:f8:cb:03:7a:13:0d:5d:bd: 7e:e2:18:b5:10:67:6a:b1:21:42:ff:82:64:15:ca: 9c:04:cb:96:c7:cf:d0:df:49:64:c2:9f:df:f6:02: 18:5c:6c:cb:88:c7:cb:b4:3a:d3:1f:1b:9b:5e:1b: ea:cc:f2:25:a7:cb:60:4c:0e:e0:e0:94:19:e7:ca: 00:bd:39:ff:77:f3:57:a4:e5:95:98:24:43:23:8e: 85:e1:2c:7e:ed:1f:ab:f8:29:8a:6c:c6:ae:c9:f1: 1f:72:7b:09:a8:04:86:ca:8b:3e:ed:43:97:6f:0a: a8:ab:b1:6a:ab:9b:13:ee:bd:0e:e5:71:bf:51:78: a3:d4:68:49:2e:ec:30:f4:03:ff:28:fd:66:8f:be: a4:35:3d:b8:21:aa:c8:a9:67:2b:9f:c5:16:a5:16: a3:1d:62:85:05:78:6a:42:a7:46:75:1f:eb:b6:50: f5:c0:b0:25:d4:46:fa:5f:16:84:62:4a:99:69:ff: f0:26:07:ef:53:d7:5e:9b:9b:ae:45:b5:8e:9a:c8: 7c:0f:d4:0d:fa:a8:40:3b:73:65:f0:30:be:da:0d: 2f:07:ba:74:17:b2:93:54:d6:d3:7c:46:b1:d4:b9: 28:58:4c:83:04:dc:74:b4:e5:10:c3:49:15:1e:f4: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:08:E5:5B:A3:A3:8A:CB:DD:98:CB:8D:B3:DA:52:E4:05:6B:48:2D X509v3 Authority Key Identifier: keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5c:73:75:f2:70:5b:82:be:ff:35:32:fb:16:e1:65:c7:8c: 47:a0:a3:cb:dd:5a:5d:cd:c1:12:35:47:a1:58:ac:47:be:8f: 65:61:31:fb:a8:cf:30:82:4a:ac:aa:c9:a5:d9:ab:aa:ce:ac: 5d:64:55:4e:2b:b1:08:9e:2b:a5:07:3c:7d:60:dd:99:05:20: f5:33:47:34:2d:7b:c6:21:8f:cc:8a:cb:9f:e6:59:5c:71:61: 6c:37:6c:25:6d:ae:9f:98:27:d4:64:af:c6:0b:dc:18:c0:e7: 48:96:b2:13:de:56:a6:56:48:0d:84:5b:7b:e9:95:0e:04:cb: d0:3d:12:fe:93:fd:2b:8e:61:86:89:18:f6:5a:01:4d:e1:6e: 42:15:bc:b2:14:75:0b:f1:3f:c9:94:8d:c1:3d:f8:2f:6e:d3: 34:fa:8a:6a:bd:45:0b:71:87:d0:25:b3:a9:d7:12:ea:4d:7a: c6:73:1b:c8:39:7c:50:53:9a:e7:e1:be:07:c7:fc:fe:92:b0: a8:6c:36:a2:97:89:72:ad:57:1b:39:37:6d:d6:db:f3:46:74: 4b:79:ee:aa:68:91:1c:4a:7e:b1:71:2c:f6:4f:5f:32:4e:49: 14:c2:fa:21:a6:03:81:33:69:a9:71:13:ff:cc:68:9d:2d:35: 53:05:50:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbTGX4e7MvDHbz6VwBTFwXsKK/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVB RTQ5QUFCMDAeFw0yNjA3MjMxMjM1MzJaFw0yNjA3MjQxNTM2MzJaMDMxMTAvBgNV BAMTKDMxMDhFNTVCQTNBMzhBQ0JERDk4Q0I4REIzREE1MkU0MDU2QjQ4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFy2ZDo+34ywN6Ew1dvX7iGLUQ Z2qxIUL/gmQVypwEy5bHz9DfSWTCn9/2AhhcbMuIx8u0OtMfG5teG+rM8iWny2BM DuDglBnnygC9Of9381ek5ZWYJEMjjoXhLH7tH6v4KYpsxq7J8R9yewmoBIbKiz7t Q5dvCqirsWqrmxPuvQ7lcb9ReKPUaEku7DD0A/8o/WaPvqQ1PbghqsipZyufxRal FqMdYoUFeGpCp0Z1H+u2UPXAsCXURvpfFoRiSplp//AmB+9T116bm65FtY6ayHwP 1A36qEA7c2XwML7aDS8HunQXspNU1tN8RrHUuShYTIME3HS05RDDSRUe9DtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMQjlW6OjisvdmMuNs9pS5AVrSC0wHwYDVR0j BBgwFoAUnXKMozMHNpDyp/a3fSzz/q5JqrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1ZTkxMzEtM2FiYy00YWJkLWJkOTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMz MzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVBRTQ5QUFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDcyOENBMzMzMDczNjkwRjJBN0Y2Qjc3RDJDRjNGRUFFNDlB QUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0Yz RkVBRTQ5QUFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdcc3XycFuCvv81MvsW4WXHjEego8vdWl3N wRI1R6FYrEe+j2VhMfuozzCCSqyqyaXZq6rOrF1kVU4rsQieK6UHPH1g3ZkFIPUz RzQte8Yhj8yKy5/mWVxxYWw3bCVtrp+YJ9Rkr8YL3BjA50iWshPeVqZWSA2EW3vp lQ4Ey9A9Ev6T/SuOYYaJGPZaAU3hbkIVvLIUdQvxP8mUjcE9+C9u0zT6imq9RQtx h9Als6nXEupNesZzG8g5fFBTmufhvgfH/P6SsKhsNqKXiXKtVxs5N23W2/NGdEt5 7qpokRxKfrFxLPZPXzJOSRTC+iGmA4EzaalxE//MaJ0tNVMFUBM= -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:42 2026 by rpki-client