$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft (raw, json) Hash identifier: Gw3SKmGsSnj/3kxPk4zaUGqveS47W3sfibxd4jd90uc= Subject key identifier: 92:50:65:7D:C3:62:93:EA:21:0B:A0:91:DF:99:6E:59:2E:0B:B5:E7 Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Certificate serial: 2501CA8E5140B5D951FA80B3DF695586F4F45EF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:12:12 +0000 Manifest this update: Tue 21 Jul 2026 05:07:12 +0000 Manifest next update: Wed 22 Jul 2026 07:48:12 +0000 Files and hashes: 1: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl (hash: tFVf1BRVz9qTeoyiWkCEC/g4mQEeWxdDnvxAsoKjMnk=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:01:ca:8e:51:40:b5:d9:51:fa:80:b3:df:69:55:86:f4:f4:5e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Validity Not Before: Jul 21 05:07:12 2026 GMT Not After : Jul 22 07:48:12 2026 GMT Subject: CN=9250657DC36293EA210BA091DF996E592E0BB5E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5f:17:6b:77:2f:5f:71:85:cf:8e:de:90:4c: dc:1b:c3:43:5c:00:0b:6f:6f:bf:bc:78:d1:86:6e: ef:cb:8d:05:6c:22:1d:ef:c1:86:a3:17:a1:45:61: 9c:a7:f1:38:bc:36:48:a2:f4:06:39:4c:39:a8:fc: f4:92:7f:8e:7e:60:80:c6:76:10:5c:81:d6:65:ae: 15:eb:2c:c7:d0:6e:34:ee:e6:16:3f:29:58:d7:7e: 6f:64:9d:d4:22:e4:a9:b6:ac:03:87:68:67:1c:3a: e8:08:f2:08:ee:db:06:02:43:0b:9b:96:27:41:0b: 49:71:b7:c2:21:b8:4f:b7:78:73:62:cd:d0:87:9f: 79:37:31:5d:f6:01:15:8a:10:10:bb:b9:34:0c:7e: b5:c8:d8:9a:c9:12:ae:f6:7c:2a:81:9f:c4:e9:18: e7:0c:55:92:27:e9:bb:91:92:65:4a:2b:9e:f4:cc: 38:b0:f3:34:6d:f0:c2:f8:b5:ec:f6:20:37:e1:7b: 86:b5:f2:dd:21:d7:fd:54:d9:10:a8:4a:eb:1d:c8: 15:a1:87:84:52:00:00:14:86:5a:83:77:7b:a3:f8: b7:ce:4d:07:b8:47:52:2c:5c:bc:56:88:5a:03:ee: 62:3f:1d:21:f4:a9:fe:f2:63:93:73:1a:77:c1:bd: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:50:65:7D:C3:62:93:EA:21:0B:A0:91:DF:99:6E:59:2E:0B:B5:E7 X509v3 Authority Key Identifier: keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:27:9d:89:d2:6e:f3:45:dd:22:1d:9d:1b:91:6d:44:e5:5e: 99:67:62:1c:d1:cd:5c:fc:f7:dd:94:a8:43:87:4f:e5:f7:55: 12:c8:8f:85:ab:10:33:12:db:6c:ba:82:73:73:79:ec:7d:1e: f0:b9:97:9f:54:e3:21:4b:ec:da:ab:15:cf:51:8b:0e:8d:72: de:06:5a:ad:2e:d5:b4:6d:61:d1:45:3f:f4:7b:c0:23:64:ca: a3:72:47:50:e9:d0:33:63:ca:dc:3b:9e:67:a2:2d:1c:a5:53: fd:2e:c6:50:d7:fa:40:1a:92:92:3e:3b:ce:27:a9:1c:44:a2: 0b:00:a0:e9:28:80:b0:73:b3:18:90:79:60:5d:2a:15:fc:2c: e1:4c:31:b9:30:d5:ac:88:14:a9:92:3c:ee:11:bb:96:7d:76: f0:b2:0e:bc:25:00:13:a1:a5:ff:d5:b1:11:83:44:d3:b3:73: 89:13:48:e9:d2:31:1d:21:9d:55:c7:e8:df:f6:4d:f1:41:3a: fc:74:d8:ed:08:1a:ff:9b:f5:1b:af:24:9c:f1:2e:3d:00:89: 15:7a:c9:17:b3:7e:32:1b:8d:44:d7:32:f7:c2:e1:94:0e:37: 47:ae:b4:7d:42:03:21:ce:7c:5b:08:22:d5:69:0e:93:7f:13: 09:ee:e8:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQHKjlFAtdlR+oCz32lVhvT0XvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVB RTQ5QUFCMDAeFw0yNjA3MjEwNTA3MTJaFw0yNjA3MjIwNzQ4MTJaMDMxMTAvBgNV BAMTKDkyNTA2NTdEQzM2MjkzRUEyMTBCQTA5MURGOTk2RTU5MkUwQkI1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXxdrdy9fcYXPjt6QTNwbw0Nc AAtvb7+8eNGGbu/LjQVsIh3vwYajF6FFYZyn8Ti8Nkii9AY5TDmo/PSSf45+YIDG dhBcgdZlrhXrLMfQbjTu5hY/KVjXfm9kndQi5Km2rAOHaGccOugI8gju2wYCQwub lidBC0lxt8IhuE+3eHNizdCHn3k3MV32ARWKEBC7uTQMfrXI2JrJEq72fCqBn8Tp GOcMVZIn6buRkmVKK570zDiw8zRt8ML4tez2IDfhe4a18t0h1/1U2RCoSusdyBWh h4RSAAAUhlqDd3uj+LfOTQe4R1IsXLxWiFoD7mI/HSH0qf7yY5NzGnfBvZf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUklBlfcNik+ohC6CR35luWS4LtecwHwYDVR0j BBgwFoAUnXKMozMHNpDyp/a3fSzz/q5JqrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1ZTkxMzEtM2FiYy00YWJkLWJkOTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMz MzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVBRTQ5QUFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDcyOENBMzMzMDczNjkwRjJBN0Y2Qjc3RDJDRjNGRUFFNDlB QUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0Yz RkVBRTQ5QUFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcnnYnSbvNF3SIdnRuRbUTlXplnYhzRzVz8 992UqEOHT+X3VRLIj4WrEDMS22y6gnNzeex9HvC5l59U4yFL7NqrFc9Riw6Nct4G Wq0u1bRtYdFFP/R7wCNkyqNyR1Dp0DNjytw7nmeiLRylU/0uxlDX+kAakpI+O84n qRxEogsAoOkogLBzsxiQeWBdKhX8LOFMMbkw1ayIFKmSPO4Ru5Z9dvCyDrwlABOh pf/VsRGDRNOzc4kTSOnSMR0hnVXH6N/2TfFBOvx02O0IGv+b9RuvJJzxLj0AiRV6 yRezfjIbjUTXMvfC4ZQON0eutH1CAyHOfFsIItVpDpN/Ewnu6Mw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:07 2026 by rpki-client