$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft File: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft (raw, json) Hash identifier: E9PIHnmlVkgXHYFtXM+0r1fqRWS6/ZF5ZDn5C1/nWiU= Subject key identifier: 75:B3:6C:FD:A6:B8:88:47:E3:47:45:EB:39:67:02:8B:BA:BD:E1:82 Authority key identifier: 72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D Certificate issuer: /CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Certificate serial: 167C3A4FA5373C379B148BAD474A5DF734EC74A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 12:14:13 +0000 Manifest this update: Wed 16 Sep 2026 12:09:13 +0000 Manifest next update: Thu 17 Sep 2026 15:57:13 +0000 Files and hashes: 1: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl (hash: W8k/Y+bvSxtcy7OS+NTS1Bo9U8COn7JMsZVD8cRDMLY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7c:3a:4f:a5:37:3c:37:9b:14:8b:ad:47:4a:5d:f7:34:ec:74:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Validity Not Before: Sep 16 12:09:13 2026 GMT Not After : Sep 17 15:57:13 2026 GMT Subject: CN=75B36CFDA6B88847E34745EB3967028BBABDE182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:16:94:33:fa:b7:b8:0a:2e:af:81:b4:c7: bf:83:0a:9a:98:ad:96:9e:5e:05:1d:54:98:59:5e: 28:9e:fc:1c:c6:33:60:b5:7a:a7:3b:31:2e:aa:96: a8:44:90:40:31:d2:2a:0c:a8:1d:8d:55:f4:cd:1d: eb:83:11:19:dd:a4:0b:61:62:37:45:b8:5a:ee:3b: 0b:14:0e:e4:a2:bb:a1:21:d3:1c:49:96:44:c9:ab: cb:66:d1:00:8a:6e:d4:13:60:c0:2a:90:20:27:6a: c9:7b:d2:55:7a:44:d0:bd:fa:05:d9:9f:42:79:28: d6:08:b9:7c:d0:af:0d:48:03:a0:4a:a4:e4:37:9e: 44:94:e8:39:a1:f6:c0:55:f9:d1:aa:9a:a4:24:7c: b7:82:7c:3c:c5:d0:93:a2:39:bd:ca:9a:94:2f:01: 44:ed:05:93:40:5a:7b:d5:71:2b:35:04:01:6f:2b: d3:ae:52:74:59:aa:64:06:bd:ed:3e:b0:04:f5:f2: af:65:13:9a:8b:9b:56:f8:3d:08:15:3f:30:a6:16: b2:c5:1c:4c:69:34:84:8a:02:18:f5:48:4a:0a:82: 8e:45:9c:eb:9e:3a:12:4c:30:2a:2c:5b:78:09:16: d9:77:17:b1:58:9d:79:7c:9c:61:aa:e6:b8:f9:fb: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B3:6C:FD:A6:B8:88:47:E3:47:45:EB:39:67:02:8B:BA:BD:E1:82 X509v3 Authority Key Identifier: keyid:72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bb:b0:b8:c3:0e:61:e7:02:80:bc:11:69:57:0b:91:6a:49: 4c:9d:5e:29:77:8a:ff:5e:72:fd:06:ab:b6:71:a3:43:6a:07: c1:b5:23:91:9c:8b:9d:0c:7d:10:bb:f6:fe:90:c2:00:a0:ef: 0d:ae:d1:1d:41:4b:ca:48:7d:3e:84:e8:26:20:da:f0:ef:1d: e5:39:7d:e5:a5:84:f2:d4:6c:58:a8:04:ce:3c:eb:4b:a0:82: c8:28:75:f6:1e:96:3c:17:60:9e:eb:1e:3a:b1:29:53:6d:31: 7a:f3:89:70:8d:4f:e6:ce:5b:07:db:aa:02:a1:1d:b6:79:85: 27:6e:5e:12:e7:cc:62:3e:67:c4:4e:a8:c9:80:df:d5:f5:2a: 65:c0:15:c6:87:4b:cb:27:f3:cd:0a:2c:03:2a:c9:45:c0:29: ec:47:da:ab:ea:23:4f:84:a2:64:55:f6:ab:c7:05:4e:98:fd: c8:53:3a:b4:e7:78:01:7b:a5:87:8e:0c:33:47:88:c2:df:d8: e2:6a:6f:d9:6c:6e:66:4e:f6:71:6a:e7:d7:b9:2b:6c:f3:e2: ff:47:eb:2c:f4:e7:c4:d2:53:90:c1:a9:32:fd:8e:cc:6b:b8: 89:d0:c7:df:65:31:a7:d2:be:b6:b4:19:7c:e7:69:88:50:75: b9:0e:02:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnw6T6U3PDebFIutR0pd9zTsdKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQx QjU4NkM5RDAeFw0yNjA5MTYxMjA5MTNaFw0yNjA5MTcxNTU3MTNaMDMxMTAvBgNV BAMTKDc1QjM2Q0ZEQTZCODg4NDdFMzQ3NDVFQjM5NjcwMjhCQkFCREUxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgmxaUM/q3uAour4G0x7+DCpqY rZaeXgUdVJhZXiie/BzGM2C1eqc7MS6qlqhEkEAx0ioMqB2NVfTNHeuDERndpAth YjdFuFruOwsUDuSiu6Eh0xxJlkTJq8tm0QCKbtQTYMAqkCAnasl70lV6RNC9+gXZ n0J5KNYIuXzQrw1IA6BKpOQ3nkSU6Dmh9sBV+dGqmqQkfLeCfDzF0JOiOb3KmpQv AUTtBZNAWnvVcSs1BAFvK9OuUnRZqmQGve0+sAT18q9lE5qLm1b4PQgVPzCmFrLF HExpNISKAhj1SEoKgo5FnOueOhJMMCosW3gJFtl3F7FYnXl8nGGq5rj5+31BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdbNs/aa4iEfjR0XrOWcCi7q94YIwHwYDVR0j BBgwFoAUcorRcdPDHrIFIj/8PiwIHRtYbJ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM4MWU2ZWMtYzg3Yi00ZmRiLWEyZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFE M0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQxQjU4NkM5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjhBRDE3MUQzQzMxRUIyMDUyMjNGRkMzRTJDMDgxRDFCNTg2 QzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4 MUQxQjU4NkM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAC7sLjDDmHnAoC8EWlXC5FqSUydXil3iv9e cv0Gq7Zxo0NqB8G1I5Gci50MfRC79v6QwgCg7w2u0R1BS8pIfT6E6CYg2vDvHeU5 feWlhPLUbFioBM4860uggsgodfYeljwXYJ7rHjqxKVNtMXrziXCNT+bOWwfbqgKh HbZ5hSduXhLnzGI+Z8ROqMmA39X1KmXAFcaHS8sn880KLAMqyUXAKexH2qvqI0+E omRV9qvHBU6Y/chTOrTneAF7pYeODDNHiMLf2OJqb9lsbmZO9nFq59e5K2zz4v9H 6yz058TSU5DBqTL9jsxruInQx99lMafSvra0GXznaYhQdbkOAjw= -----END CERTIFICATE-----Generated at Thu Sep 17 09:14:13 2026 by rpki-client