$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft (raw, json) Hash identifier: IOttRxsRyBalCfQJfwAsNmmmytQb370u+iB06KmcSVo= Subject key identifier: B4:AB:65:CF:6D:D0:05:9A:61:9C:24:55:51:1F:EC:B3:43:43:3B:8A Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Certificate serial: 2B31CA5D895ACC694D50BDC87A24EEB268EA543F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:26:29 +0000 Manifest this update: Tue 12 May 2026 10:21:29 +0000 Manifest next update: Wed 13 May 2026 11:44:29 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=) 2: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl (hash: 7LpGgZAqZYX49ZihDTC5xerYej0ehiVOX22ji5KeNmc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:31:ca:5d:89:5a:cc:69:4d:50:bd:c8:7a:24:ee:b2:68:ea:54:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Validity Not Before: May 12 10:21:29 2026 GMT Not After : May 13 11:44:29 2026 GMT Subject: CN=B4AB65CF6DD0059A619C2455511FECB343433B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6c:e8:32:07:51:44:d1:2e:42:1f:d3:18:34: f9:e7:61:e2:0a:1a:3d:79:a1:38:70:6e:68:ae:a6: 76:8f:8e:6b:0a:1c:ad:3e:ae:1b:71:b5:9b:db:b5: 91:b3:50:f5:14:c5:66:83:89:d2:cf:a2:cc:52:91: 1d:e0:59:5f:37:bb:1c:77:1c:3d:1d:17:73:a9:c3: c4:94:74:f2:2a:3a:4a:c5:13:fc:40:f4:9b:8d:09: 9e:c6:46:bb:ba:b5:f5:e3:3a:cd:e3:95:44:32:56: c5:17:23:18:4c:1d:94:70:aa:b8:89:80:dd:80:37: 38:f7:b1:d1:81:a3:9d:f7:54:ef:99:68:58:8c:ad: 05:f0:f7:b0:8a:a0:bd:7f:18:28:59:47:9b:e6:69: d1:ad:63:2e:b5:36:47:e0:bb:77:0e:1b:b9:df:25: b7:59:38:37:05:03:4c:76:22:67:9e:12:a0:2f:cf: d1:5f:ff:3b:52:cc:9d:fe:77:47:a0:e6:52:8c:f1: ea:52:b3:5d:f7:5a:53:28:1d:2e:f7:fe:95:19:15: 54:2e:a0:8b:20:b9:38:92:07:2e:8d:25:ef:8f:0f: 35:16:f3:71:eb:6e:a1:1e:1a:9d:e5:e4:b8:c6:8a: 41:ac:63:50:1d:4e:a2:93:cd:e9:dc:90:b1:6f:5d: d2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AB:65:CF:6D:D0:05:9A:61:9C:24:55:51:1F:EC:B3:43:43:3B:8A X509v3 Authority Key Identifier: keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:8d:a4:38:bc:25:4c:85:e2:b3:e2:eb:0c:44:bf:4f:cd: 28:47:c5:ca:d4:9a:75:26:d5:03:2a:29:bb:60:6f:81:9d:26: a6:17:cc:15:ea:96:b6:28:50:d2:f5:57:28:7b:1f:de:d2:37: 44:6a:9f:f2:4f:6e:ac:f8:1f:e6:77:7e:0c:ff:4f:57:66:83: 4d:f6:2b:5b:c6:93:d8:10:44:ec:46:dc:12:f0:4d:4d:e9:bd: b3:7b:86:a7:28:ec:5a:dd:9a:4a:e4:3a:0e:56:83:fc:c7:f5: 73:08:08:38:5d:4a:ff:e7:62:5a:08:41:05:ef:ed:30:8a:d3: 7b:f6:4f:47:bf:c2:58:ac:93:ad:60:2c:13:ec:6d:e4:88:24: 3b:a6:3a:9e:f2:de:f0:d6:ca:a4:bb:af:4b:59:1a:1f:4b:b7: a4:d2:5b:ba:68:42:70:cf:fe:f3:70:2b:c2:a8:62:94:b5:20: ec:d2:ac:28:07:ae:f0:c5:72:33:d8:48:e7:f5:ed:c7:31:0f: ac:45:a5:99:f3:c4:2b:76:d7:80:6f:e9:3c:05:8d:6b:ea:5f: 96:8c:a4:d8:89:23:ae:f6:93:8c:f2:2b:ff:c1:27:a2:eb:ef: 51:2f:71:62:8f:76:30:34:e6:b8:bd:8b:6e:87:74:16:00:03: 0e:2e:fc:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzHKXYlazGlNUL3IeiTusmjqVD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVB RTQ5QUFCMDAeFw0yNjA1MTIxMDIxMjlaFw0yNjA1MTMxMTQ0MjlaMDMxMTAvBgNV BAMTKEI0QUI2NUNGNkREMDA1OUE2MTlDMjQ1NTUxMUZFQ0IzNDM0MzNCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJbOgyB1FE0S5CH9MYNPnnYeIK Gj15oThwbmiupnaPjmsKHK0+rhtxtZvbtZGzUPUUxWaDidLPosxSkR3gWV83uxx3 HD0dF3Opw8SUdPIqOkrFE/xA9JuNCZ7GRru6tfXjOs3jlUQyVsUXIxhMHZRwqriJ gN2ANzj3sdGBo533VO+ZaFiMrQXw97CKoL1/GChZR5vmadGtYy61Nkfgu3cOG7nf JbdZODcFA0x2ImeeEqAvz9Ff/ztSzJ3+d0eg5lKM8epSs133WlMoHS73/pUZFVQu oIsguTiSBy6NJe+PDzUW83HrbqEeGp3l5LjGikGsY1AdTqKTzenckLFvXdLlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtKtlz23QBZphnCRVUR/ss0NDO4owHwYDVR0j BBgwFoAUnXKMozMHNpDyp/a3fSzz/q5JqrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1ZTkxMzEtM2FiYy00YWJkLWJkOTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMz MzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVBRTQ5QUFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDcyOENBMzMzMDczNjkwRjJBN0Y2Qjc3RDJDRjNGRUFFNDlB QUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0Yz RkVBRTQ5QUFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTzjaQ4vCVMheKz4usMRL9PzShHxcrUmnUm 1QMqKbtgb4GdJqYXzBXqlrYoUNL1Vyh7H97SN0Rqn/JPbqz4H+Z3fgz/T1dmg032 K1vGk9gQROxG3BLwTU3pvbN7hqco7FrdmkrkOg5Wg/zH9XMICDhdSv/nYloIQQXv 7TCK03v2T0e/wlisk61gLBPsbeSIJDumOp7y3vDWyqS7r0tZGh9Lt6TSW7poQnDP /vNwK8KoYpS1IOzSrCgHrvDFcjPYSOf17ccxD6xFpZnzxCt214Bv6TwFjWvqX5aM pNiJI672k4zyK//BJ6Lr71EvcWKPdjA05ri9i26HdBYAAw4u/HY= -----END CERTIFICATE-----Generated at Wed May 13 00:44:02 2026 by rpki-client