$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft File: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft (raw, json) Hash identifier: VXRryPUi+y4bpNZ6acQ1miaobPHibvN0K0jbP9YfAWE= Subject key identifier: A4:8C:94:77:E1:A4:C8:20:BD:70:B4:EE:44:B1:AE:0E:99:7B:20:92 Authority key identifier: 72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D Certificate issuer: /CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Certificate serial: 648ACE08B88EA6D6B022DD33BB5181DD33869C9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 12:10:37 +0000 Manifest this update: Fri 19 Jun 2026 12:05:37 +0000 Manifest next update: Sat 20 Jun 2026 14:30:37 +0000 Files and hashes: 1: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl (hash: O2rNzK/sgBm7MZWuAthw3I8UZt/gnJpvqBLrCkA6Joo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 14:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8a:ce:08:b8:8e:a6:d6:b0:22:dd:33:bb:51:81:dd:33:86:9c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Validity Not Before: Jun 19 12:05:37 2026 GMT Not After : Jun 20 14:30:37 2026 GMT Subject: CN=A48C9477E1A4C820BD70B4EE44B1AE0E997B2092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:08:eb:20:b6:ca:10:fa:b6:4e:60:c3:48: 96:8f:86:91:f0:b5:c3:24:a9:ec:c4:fc:2d:33:73: 8a:d5:8e:42:3e:12:15:85:6c:18:24:50:8a:a2:1e: 11:c3:c1:83:71:e1:ed:95:2b:c5:9b:3e:f8:55:89: e5:b9:53:4e:4d:47:a2:4f:7f:38:24:57:72:66:89: 5c:2e:36:6c:64:c7:24:29:d4:85:f7:27:56:49:69: b4:e8:ea:56:84:ec:c7:7b:ec:fc:b3:fd:a7:68:72: 13:ad:69:9c:52:01:b0:3d:a8:a0:03:3f:30:7b:ea: cd:e8:9f:34:f4:9e:56:aa:95:5c:2e:2c:d5:cd:5a: b5:c2:5b:f8:47:5f:24:1f:95:ff:0f:bb:52:b6:cf: 7e:44:38:18:3e:08:25:a6:1e:51:8f:7b:2b:4d:42: 08:87:e4:9a:4c:a7:39:98:20:00:ad:b1:24:f3:5e: 2f:02:0f:41:41:61:29:3e:df:ae:95:fc:0a:76:fd: 14:a6:6a:2b:b0:9b:61:77:25:82:ce:77:d6:2a:12: 54:e7:08:79:cc:1d:b1:db:17:ee:1e:cd:cb:ae:41: 4f:2e:99:6b:00:6a:0f:f7:45:bf:4e:c7:f5:31:b4: 4c:47:fa:7d:87:52:47:87:c4:d8:d2:cf:a7:20:72: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8C:94:77:E1:A4:C8:20:BD:70:B4:EE:44:B1:AE:0E:99:7B:20:92 X509v3 Authority Key Identifier: keyid:72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2e:8f:db:f1:d9:bb:5c:1d:99:80:de:a2:dc:71:39:72:82: c1:6e:54:60:ea:f4:5a:26:8d:af:67:5d:16:e9:a2:46:d0:a0: ee:ba:7a:14:12:7c:b3:bb:12:09:03:71:09:b0:c5:39:26:7f: 65:2a:ac:2c:bc:81:8f:61:31:a5:78:a2:fa:85:2a:e8:9a:3a: 7e:96:14:2a:39:26:e9:62:73:a6:6d:21:57:85:35:df:32:79: ef:f9:02:08:87:b0:28:ea:6b:8a:39:ae:a1:2b:98:00:da:d6: fb:3e:b5:01:6a:c9:4f:79:1a:77:5f:a0:fd:6a:e4:9b:f5:81: 99:87:70:df:d4:c2:26:d1:ba:42:37:33:b2:b8:e9:70:2c:02: 14:1a:6e:ea:e8:90:fd:51:ad:a9:39:61:6f:2a:2c:15:15:99: 7f:e7:6c:ef:40:1f:20:df:5c:81:d1:c4:b4:eb:3e:20:56:59: b9:f7:c4:00:b8:30:2e:50:3b:8b:d2:80:e5:88:2d:18:fa:ec: 70:58:2c:18:12:ab:17:c6:e6:9c:b8:37:fe:fb:c9:3f:94:e6: b1:f4:69:ef:b1:6f:e6:0d:de:44:25:35:7b:df:80:0f:4d:30: b5:a7:f9:9e:f9:69:ca:78:c4:99:fc:2e:7c:be:63:cf:9f:4d: 51:4c:c2:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIrOCLiOptawIt0zu1GB3TOGnJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQx QjU4NkM5RDAeFw0yNjA2MTkxMjA1MzdaFw0yNjA2MjAxNDMwMzdaMDMxMTAvBgNV BAMTKEE0OEM5NDc3RTFBNEM4MjBCRDcwQjRFRTQ0QjFBRTBFOTk3QjIwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdggjrILbKEPq2TmDDSJaPhpHw tcMkqezE/C0zc4rVjkI+EhWFbBgkUIqiHhHDwYNx4e2VK8WbPvhVieW5U05NR6JP fzgkV3JmiVwuNmxkxyQp1IX3J1ZJabTo6laE7Md77Pyz/adochOtaZxSAbA9qKAD PzB76s3onzT0nlaqlVwuLNXNWrXCW/hHXyQflf8Pu1K2z35EOBg+CCWmHlGPeytN QgiH5JpMpzmYIACtsSTzXi8CD0FBYSk+366V/Ap2/RSmaiuwm2F3JYLOd9YqElTn CHnMHbHbF+4ezcuuQU8umWsAag/3Rb9Ox/UxtExH+n2HUkeHxNjSz6cgcudTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpIyUd+GkyCC9cLTuRLGuDpl7IJIwHwYDVR0j BBgwFoAUcorRcdPDHrIFIj/8PiwIHRtYbJ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM4MWU2ZWMtYzg3Yi00ZmRiLWEyZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFE M0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQxQjU4NkM5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjhBRDE3MUQzQzMxRUIyMDUyMjNGRkMzRTJDMDgxRDFCNTg2 QzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4 MUQxQjU4NkM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAuj9vx2btcHZmA3qLccTlygsFuVGDq9Fom ja9nXRbpokbQoO66ehQSfLO7EgkDcQmwxTkmf2UqrCy8gY9hMaV4ovqFKuiaOn6W FCo5Julic6ZtIVeFNd8yee/5AgiHsCjqa4o5rqErmADa1vs+tQFqyU95GndfoP1q 5Jv1gZmHcN/UwibRukI3M7K46XAsAhQaburokP1Rrak5YW8qLBUVmX/nbO9AHyDf XIHRxLTrPiBWWbn3xAC4MC5QO4vSgOWILRj67HBYLBgSqxfG5py4N/77yT+U5rH0 ae+xb+YN3kQlNXvfgA9NMLWn+Z75acp4xJn8Lny+Y8+fTVFMwlY= -----END CERTIFICATE-----Generated at Sat Jun 20 08:35:37 2026 by rpki-client