$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft File: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft (raw, json) Hash identifier: S8z+PA0Lhwh/VMOi4FNYkSHmUwgS7dAMemijJLbRvDs= Subject key identifier: B7:5A:69:C7:E0:92:04:3B:31:8A:B3:01:E6:5C:44:F9:F1:8F:4C:0E Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 Certificate issuer: /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Certificate serial: 70E31D56D1D54D45982D4F888CF6ACEB13E46C41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 01:27:31 +0000 Manifest this update: Tue 21 Jul 2026 01:22:31 +0000 Manifest next update: Wed 22 Jul 2026 03:13:31 +0000 Files and hashes: 1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: xliXiEUEZwSaL+L9KbxePpEFEAbRpcaYYQQzzGHYr2w=) 2: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl (hash: Rd/AfvDYoCo/6t6aTldMuw2naQ/c/MnbjQjNDcFlsEM=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e3:1d:56:d1:d5:4d:45:98:2d:4f:88:8c:f6:ac:eb:13:e4:6c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Validity Not Before: Jul 21 01:22:31 2026 GMT Not After : Jul 22 03:13:31 2026 GMT Subject: CN=B75A69C7E092043B318AB301E65C44F9F18F4C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:ec:4f:60:b3:cd:d7:e8:c1:d3:ae:64:a3: 37:8e:d9:68:89:0b:a5:ee:76:8c:97:e2:9c:b2:1c: ee:d5:0a:0b:21:54:7f:eb:0f:bd:1e:af:22:2b:aa: 05:6b:9d:7e:3a:d8:f4:c5:e7:c0:99:ca:39:6e:c2: 99:ad:55:af:ce:bf:93:e2:30:20:1f:dd:59:05:39: 65:c4:e3:ed:1b:23:54:e2:15:b3:30:ce:df:f3:eb: a8:c4:75:6a:60:b8:a7:b6:d1:28:b1:06:82:25:7b: 57:f4:01:96:ac:5f:2f:ac:5a:d5:00:b5:e7:b6:fb: 6d:61:91:6c:c7:13:f3:42:5b:ac:fe:e7:fb:7b:2f: a7:25:5e:18:1f:53:de:4b:87:2f:19:7e:49:f3:4d: 5a:d3:11:7f:95:26:0e:ea:ee:e2:86:6c:fd:34:0c: ab:7f:d0:3b:c7:25:27:a0:7f:58:1d:ad:23:23:7b: 1e:b3:d5:49:c8:30:d6:fe:24:07:91:8b:25:9c:59: ff:ff:e5:48:32:1f:01:db:49:b8:05:8f:0b:de:c7: fc:4a:1c:49:fb:fe:47:27:f6:c1:1f:3e:cd:dc:c5: c5:fe:88:40:2d:7b:9a:29:0d:26:12:02:a4:33:99: bd:79:53:ef:19:d4:fb:ec:ff:1f:bb:1c:40:95:7c: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5A:69:C7:E0:92:04:3B:31:8A:B3:01:E6:5C:44:F9:F1:8F:4C:0E X509v3 Authority Key Identifier: keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7c:29:78:20:10:27:32:39:e9:f1:87:6d:b6:51:d2:d1:f1: 63:52:fe:20:8f:85:62:ee:d7:fa:e1:24:88:e2:81:05:2c:d6: 25:ac:1a:f9:75:0e:19:d0:5f:80:f4:b8:2d:f6:4a:25:dc:18: 33:c8:28:3b:c6:c0:fd:df:a3:fd:11:72:ad:e9:67:03:ad:40: f2:b4:49:54:c1:c1:82:ce:7d:bf:09:90:97:e7:f2:f7:50:8d: 72:4b:30:c9:cd:ac:ce:b6:99:db:b0:db:64:aa:83:22:61:42: b0:2e:9e:58:be:ab:db:a4:04:30:90:b2:78:b5:56:5d:2a:d5: 74:a8:22:40:72:7f:b2:4c:ea:d8:ad:98:49:ca:e4:ea:19:65: 10:00:b4:ec:2e:9d:ba:75:9c:13:47:12:98:00:da:87:c2:82: e7:38:ee:f1:32:e0:1a:5e:8c:a1:8a:65:f7:ba:bd:04:b4:ce: b8:a0:91:88:00:9d:cf:7f:33:0b:1a:d1:dd:86:15:42:d5:67: 0d:52:d0:d1:ba:49:16:49:3d:f8:c3:92:8c:8e:35:e0:38:82: ac:a7:66:fd:b2:d6:7b:a3:26:b0:8c:00:bf:9b:c6:d9:05:4f: 98:88:2c:a3:8e:bd:3a:bb:fa:47:89:b6:11:95:b4:96:f6:d2: ca:94:48:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOMdVtHVTUWYLU+IjPas6xPkbEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAx QUM4ODkxNDAeFw0yNjA3MjEwMTIyMzFaFw0yNjA3MjIwMzEzMzFaMDMxMTAvBgNV BAMTKEI3NUE2OUM3RTA5MjA0M0IzMThBQjMwMUU2NUM0NEY5RjE4RjRDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/+xPYLPN1+jB065kozeO2WiJ C6XudoyX4pyyHO7VCgshVH/rD70eryIrqgVrnX462PTF58CZyjluwpmtVa/Ov5Pi MCAf3VkFOWXE4+0bI1TiFbMwzt/z66jEdWpguKe20SixBoIle1f0AZasXy+sWtUA tee2+21hkWzHE/NCW6z+5/t7L6clXhgfU95Lhy8ZfknzTVrTEX+VJg7q7uKGbP00 DKt/0DvHJSegf1gdrSMjex6z1UnIMNb+JAeRiyWcWf//5UgyHwHbSbgFjwvex/xK HEn7/kcn9sEfPs3cxcX+iEAte5opDSYSAqQzmb15U+8Z1Pvs/x+7HECVfD57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt1ppx+CSBDsxirMB5lxE+fGPTA4wHwYDVR0j BBgwFoAUdyjrB/nn9hyMBPjuT7ZS0BrIiRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E2MzFkNzctZjgwNS00MzljLTk4ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdG OUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAxQUM4ODkxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzI4RUIwN0Y5RTdGNjFDOEMwNEY4RUU0RkI2NTJEMDFBQzg4 OTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUy RDAxQUM4ODkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJ8KXggECcyOenxh222UdLR8WNS/iCPhWLu 1/rhJIjigQUs1iWsGvl1DhnQX4D0uC32SiXcGDPIKDvGwP3fo/0Rcq3pZwOtQPK0 SVTBwYLOfb8JkJfn8vdQjXJLMMnNrM62mduw22SqgyJhQrAunli+q9ukBDCQsni1 Vl0q1XSoIkByf7JM6titmEnK5OoZZRAAtOwunbp1nBNHEpgA2ofCguc47vEy4Bpe jKGKZfe6vQS0zrigkYgAnc9/Mwsa0d2GFULVZw1S0NG6SRZJPfjDkoyONeA4gqyn Zv2y1nujJrCMAL+bxtkFT5iILKOOvTq7+keJthGVtJb20sqUSGU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:32:21 2026 by rpki-client