$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft File: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft (raw, json) Hash identifier: uRX8RheWooNRW9ys68EtUICc3AQe4+L64xorOrReU3w= Subject key identifier: C6:5D:D8:03:8D:5E:D0:9B:3A:E2:45:7E:9C:4C:DA:A2:D6:FE:EF:C4 Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 Certificate issuer: /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Certificate serial: 28A1F1E19B60B3050F1A5A67E7221405CD709984 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 19:47:26 +0000 Manifest this update: Sun 01 Nov 2026 19:42:26 +0000 Manifest next update: Mon 02 Nov 2026 22:12:26 +0000 Files and hashes: 1: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl (hash: io5afFi6pNUR0PJff8N5ZBhDuHaJ23ndnPqPgN5ITw0=) 2: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: xliXiEUEZwSaL+L9KbxePpEFEAbRpcaYYQQzzGHYr2w=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a1:f1:e1:9b:60:b3:05:0f:1a:5a:67:e7:22:14:05:cd:70:99:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Validity Not Before: Nov 1 19:42:26 2026 GMT Not After : Nov 2 22:12:26 2026 GMT Subject: CN=C65DD8038D5ED09B3AE2457E9C4CDAA2D6FEEFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:89:ce:fb:77:1e:83:6a:ac:8b:69:c9:61: 5b:5e:aa:09:ed:62:db:a8:26:9f:2b:08:cf:6d:c9: 9e:c7:a2:43:a6:52:55:ae:27:15:16:d8:2c:72:0f: 85:ab:b3:b4:3d:0d:e8:40:df:58:53:75:05:af:a4: 4f:cf:37:83:81:65:dd:e8:a9:14:39:2a:5e:34:3e: e8:02:a8:75:ef:31:84:2d:6b:4d:50:0e:65:9a:fa: ce:b3:06:63:b7:e0:47:58:ad:0d:5c:11:42:3d:66: dc:09:b7:a2:c9:11:10:2f:dd:a0:b9:0b:d6:60:01: bf:43:8b:b5:1b:54:1e:f2:34:62:69:2c:33:e4:ea: aa:c2:33:b2:cd:47:eb:b4:4e:31:d4:6e:2a:b2:3f: 5c:2b:d7:f4:63:e8:73:75:b8:6a:7f:8c:e5:ab:3a: 28:e4:51:8d:cd:d6:de:15:b3:7c:ba:5d:04:3c:49: f7:94:1f:6e:26:97:7e:e2:84:07:ee:3e:e7:4c:d4: f0:92:7c:4e:47:fb:c4:7f:8c:0c:d5:67:c5:a9:f8: 10:6f:79:3d:9c:d2:e8:7d:94:d4:04:fd:8d:7b:8a: c1:6f:94:06:97:25:5d:d6:4e:e0:e7:c6:4a:2e:f1: 9e:d7:93:bc:e3:af:35:98:43:bf:69:23:d3:d7:78: 48:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5D:D8:03:8D:5E:D0:9B:3A:E2:45:7E:9C:4C:DA:A2:D6:FE:EF:C4 X509v3 Authority Key Identifier: keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:32:9c:cb:f6:76:d3:52:ed:0a:af:bf:6f:df:54:19:d8:e5: b6:2d:8a:1b:ca:fa:38:00:00:b8:7a:17:f3:07:c4:28:28:b6: b9:2c:62:4e:e9:78:b9:84:3b:4c:c8:22:47:95:7f:50:b3:56: cb:21:fa:a7:bd:5b:79:80:34:52:96:25:e5:05:5d:11:8a:75: a6:98:60:76:01:15:a6:74:df:ab:5f:71:34:bb:3b:95:de:6b: fa:02:d7:b4:37:55:58:52:e6:db:ed:45:55:14:cf:de:0a:24: 94:21:b4:be:eb:08:f0:22:a3:59:ed:17:07:ab:72:fe:d2:34: 66:86:11:37:68:ff:d1:0a:05:eb:ae:5d:2e:b5:d0:82:0e:1b: a2:73:fa:7e:15:16:21:64:71:06:61:07:29:a8:d6:8f:eb:74: a3:e9:33:71:99:25:1a:d6:f0:5e:54:e8:8c:ee:5e:1d:3e:61: 32:22:a8:c2:d2:0d:97:66:0c:da:f2:ca:3e:94:aa:fb:a0:8b: 3c:ab:c5:15:01:ae:ad:d3:48:59:1f:c2:4a:40:e6:24:74:41: 72:9b:02:33:a7:f6:e6:e0:6c:09:74:61:90:5d:f0:90:0f:84: be:f6:ab:b2:d9:a4:49:87:13:db:58:20:5b:bf:f4:c2:47:f8: 8f:6f:65:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKHx4ZtgswUPGlpn5yIUBc1wmYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAx QUM4ODkxNDAeFw0yNjExMDExOTQyMjZaFw0yNjExMDIyMjEyMjZaMDMxMTAvBgNV BAMTKEM2NUREODAzOEQ1RUQwOUIzQUUyNDU3RTlDNENEQUEyRDZGRUVGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2YnO+3ceg2qsi2nJYVteqgnt YtuoJp8rCM9tyZ7HokOmUlWuJxUW2CxyD4Wrs7Q9DehA31hTdQWvpE/PN4OBZd3o qRQ5Kl40PugCqHXvMYQta01QDmWa+s6zBmO34EdYrQ1cEUI9ZtwJt6LJERAv3aC5 C9ZgAb9Di7UbVB7yNGJpLDPk6qrCM7LNR+u0TjHUbiqyP1wr1/Rj6HN1uGp/jOWr OijkUY3N1t4Vs3y6XQQ8SfeUH24ml37ihAfuPudM1PCSfE5H+8R/jAzVZ8Wp+BBv eT2c0uh9lNQE/Y17isFvlAaXJV3WTuDnxkou8Z7Xk7zjrzWYQ79pI9PXeEhjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxl3YA41e0Js64kV+nEzaotb+78QwHwYDVR0j BBgwFoAUdyjrB/nn9hyMBPjuT7ZS0BrIiRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E2MzFkNzctZjgwNS00MzljLTk4ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdG OUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAxQUM4ODkxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzI4RUIwN0Y5RTdGNjFDOEMwNEY4RUU0RkI2NTJEMDFBQzg4 OTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUy RDAxQUM4ODkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcynMv2dtNS7Qqvv2/fVBnY5bYtihvK+jgA ALh6F/MHxCgotrksYk7peLmEO0zIIkeVf1CzVssh+qe9W3mANFKWJeUFXRGKdaaY YHYBFaZ036tfcTS7O5Xea/oC17Q3VVhS5tvtRVUUz94KJJQhtL7rCPAio1ntFwer cv7SNGaGETdo/9EKBeuuXS610IIOG6Jz+n4VFiFkcQZhBymo1o/rdKPpM3GZJRrW 8F5U6IzuXh0+YTIiqMLSDZdmDNryyj6UqvugizyrxRUBrq3TSFkfwkpA5iR0QXKb AjOn9ubgbAl0YZBd8JAPhL72q7LZpEmHE9tYIFu/9MJH+I9vZXU= -----END CERTIFICATE-----Generated at Sun Nov 1 22:25:47 2026 by rpki-client