$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft File: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft (raw, json) Hash identifier: S4RoaZdT966pgTSPALmf9PRmDut9O/ZkS2Htbxik4YE= Subject key identifier: B8:89:84:BF:8B:CF:35:8D:B7:6A:DB:E6:C4:04:00:FF:8E:9B:8B:51 Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 Certificate issuer: /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Certificate serial: 1D6928213AFEDE0C8AC1FBC67E3D72653EBC1111 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 17:56:32 +0000 Manifest this update: Tue 02 Jun 2026 17:51:32 +0000 Manifest next update: Wed 03 Jun 2026 19:06:32 +0000 Files and hashes: 1: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=) 2: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl (hash: jK6O4qfuQ8oAFgZDPPNabEHw9H4PpszzG7r/W7YY+6w=) 3: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: xliXiEUEZwSaL+L9KbxePpEFEAbRpcaYYQQzzGHYr2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:69:28:21:3a:fe:de:0c:8a:c1:fb:c6:7e:3d:72:65:3e:bc:11:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Validity Not Before: Jun 2 17:51:32 2026 GMT Not After : Jun 3 19:06:32 2026 GMT Subject: CN=B88984BF8BCF358DB76ADBE6C40400FF8E9B8B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:94:fe:e2:76:f4:e2:4b:72:6f:21:f7:9b: e5:32:8b:4a:a6:a6:79:ac:8c:7e:27:d9:e7:d3:1d: fd:d2:8f:6e:8b:65:a0:9c:91:8f:72:61:7c:a5:0f: dd:0b:02:29:0b:37:1b:f0:2a:7d:f5:39:f7:41:d3: 29:f0:fc:80:c0:0f:10:63:34:11:65:a0:24:73:46: 84:f1:7b:4c:37:92:01:be:75:bf:bc:18:71:0e:6f: ec:64:a8:e4:de:90:a8:37:31:24:cc:f4:0b:26:81: e2:69:23:80:e2:a0:a6:e9:35:79:36:fb:21:4a:20: b5:06:0e:ca:4f:47:9e:cf:22:78:fb:74:82:85:82: 11:cb:39:94:48:e9:67:1a:ec:5f:c0:97:62:89:8c: 01:8d:7f:47:a5:5e:5a:5a:8c:a8:d4:98:c5:fa:e1: 4c:54:3a:38:4d:22:39:1f:23:10:bc:55:f5:00:c7: 71:bb:a1:53:65:17:76:31:80:f3:01:cb:88:aa:86: 73:78:f5:1f:0b:1b:d9:58:f7:11:11:f9:ec:da:30: 09:3c:fe:8d:f4:e6:f0:d0:8e:ad:ad:2b:b1:37:69: fe:fb:e8:93:4e:9e:db:13:58:f5:ab:ab:22:ba:2a: c1:23:67:cc:42:4f:d6:85:25:dd:bf:95:33:87:84: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:89:84:BF:8B:CF:35:8D:B7:6A:DB:E6:C4:04:00:FF:8E:9B:8B:51 X509v3 Authority Key Identifier: keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1a:50:f4:a3:28:30:cb:a1:88:c6:24:b8:fc:1d:3b:6e:91: cf:84:ae:44:f8:ca:a2:9d:2a:51:41:95:09:21:1c:63:c6:65: 9c:67:79:8a:7f:12:a9:bc:2e:7d:d5:c7:16:25:f0:88:e4:bf: 8d:2b:39:84:07:2f:02:e1:d0:10:4e:20:d5:e8:e9:6c:92:48: 1b:3e:23:c2:82:46:71:00:c3:da:d1:74:46:a6:bb:03:f7:3a: 7d:79:43:d4:ca:2a:dd:c4:d9:51:b5:b0:8b:59:5b:d5:b7:b2: 7d:66:ca:f8:40:91:db:a2:00:f1:ba:18:56:68:35:9d:69:99: d5:f9:0f:f6:9f:35:2a:cb:d8:b4:02:15:9c:81:97:cb:04:45: 2f:36:a9:97:15:08:d7:0d:65:b1:94:32:2a:39:62:c8:35:3f: d4:19:49:77:a2:21:98:ba:5d:e2:85:0a:d8:ae:f5:6f:11:41: 27:25:4b:79:5f:4c:cd:59:e3:49:04:0d:73:ba:7f:02:2b:86: 89:9f:ba:09:13:fb:62:3b:22:16:e3:6e:86:83:93:8f:43:8f: d6:a7:fc:5d:ec:ce:00:2f:f5:0f:c9:10:d0:61:a4:6b:f9:28: e5:fe:45:f0:1e:bb:9e:52:1a:61:f1:f8:f6:fe:e6:0c:6f:02: 2e:1c:e1:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWkoITr+3gyKwfvGfj1yZT68EREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAx QUM4ODkxNDAeFw0yNjA2MDIxNzUxMzJaFw0yNjA2MDMxOTA2MzJaMDMxMTAvBgNV BAMTKEI4ODk4NEJGOEJDRjM1OERCNzZBREJFNkM0MDQwMEZGOEU5QjhCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgh5T+4nb04ktybyH3m+Uyi0qm pnmsjH4n2efTHf3Sj26LZaCckY9yYXylD90LAikLNxvwKn31OfdB0ynw/IDADxBj NBFloCRzRoTxe0w3kgG+db+8GHEOb+xkqOTekKg3MSTM9AsmgeJpI4DioKbpNXk2 +yFKILUGDspPR57PInj7dIKFghHLOZRI6Wca7F/Al2KJjAGNf0elXlpajKjUmMX6 4UxUOjhNIjkfIxC8VfUAx3G7oVNlF3YxgPMBy4iqhnN49R8LG9lY9xER+ezaMAk8 /o305vDQjq2tK7E3af776JNOntsTWPWrqyK6KsEjZ8xCT9aFJd2/lTOHhNsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuImEv4vPNY23atvmxAQA/46bi1EwHwYDVR0j BBgwFoAUdyjrB/nn9hyMBPjuT7ZS0BrIiRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E2MzFkNzctZjgwNS00MzljLTk4ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdG OUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAxQUM4ODkxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzI4RUIwN0Y5RTdGNjFDOEMwNEY4RUU0RkI2NTJEMDFBQzg4 OTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUy RDAxQUM4ODkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4aUPSjKDDLoYjGJLj8HTtukc+ErkT4yqKd KlFBlQkhHGPGZZxneYp/Eqm8Ln3VxxYl8Ijkv40rOYQHLwLh0BBOINXo6WySSBs+ I8KCRnEAw9rRdEamuwP3On15Q9TKKt3E2VG1sItZW9W3sn1myvhAkduiAPG6GFZo NZ1pmdX5D/afNSrL2LQCFZyBl8sERS82qZcVCNcNZbGUMio5Ysg1P9QZSXeiIZi6 XeKFCtiu9W8RQSclS3lfTM1Z40kEDXO6fwIrhomfugkT+2I7IhbjboaDk49Dj9an /F3szgAv9Q/JENBhpGv5KOX+RfAeu55SGmHx+Pb+5gxvAi4c4Xc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:07 2026 by rpki-client