$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft (raw, json) Hash identifier: fw3W7O16sbzvQGe9ZMvBUM6MNqHV73RVcp16lHh9vi8= Subject key identifier: FA:5D:03:49:6E:F0:F2:F2:2D:D7:A0:A9:41:6C:1D:02:05:C3:10:37 Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Certificate serial: 5CF4A4683C960D38E363BA173EE0EBE0EE3482E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 10:00:57 +0000 Manifest this update: Thu 17 Sep 2026 09:55:57 +0000 Manifest next update: Fri 18 Sep 2026 13:14:57 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=) 2: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl (hash: iACtaBx4yAIvmySmEYqEaAtMF6wfVxNtdDDB/pLzn0Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f4:a4:68:3c:96:0d:38:e3:63:ba:17:3e:e0:eb:e0:ee:34:82:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Validity Not Before: Sep 17 09:55:57 2026 GMT Not After : Sep 18 13:14:57 2026 GMT Subject: CN=FA5D03496EF0F2F22DD7A0A9416C1D0205C31037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:ca:38:89:04:9c:00:39:9d:d3:25:db:c1: eb:3a:5e:6d:78:0b:c3:7d:7f:ab:41:33:11:40:71: e2:5d:cc:c1:47:79:c3:ee:c1:82:4c:02:cd:73:7b: fa:c9:4e:7a:78:79:1b:c7:1b:c4:59:11:cf:f2:ed: 1b:9f:90:01:1a:22:aa:9c:c4:fe:25:ff:9c:d4:b5: 02:06:ad:66:54:57:90:0e:3e:7f:9f:50:c6:a1:46: f2:e2:c1:20:c5:7c:2a:e9:5d:a0:87:f9:d8:8c:d6: 64:50:1c:b4:4c:c2:78:98:a4:04:ea:18:fa:9f:23: d9:cf:82:d7:1c:5a:19:03:3e:67:9c:51:35:df:ce: 93:c5:86:6b:10:3e:0e:73:87:e2:3a:6b:78:0a:30: 77:08:b3:47:a5:06:04:91:aa:dd:81:aa:21:2b:46: 56:d4:34:3a:00:ac:f7:d4:d8:eb:35:06:9c:95:04: 49:ce:81:48:01:eb:3c:fe:34:68:a3:7e:72:f2:c4: 4a:62:4f:e0:1a:80:0c:ba:3a:bf:bf:ca:28:ee:0d: ff:59:84:d9:67:94:86:22:76:75:64:3e:8d:91:9a: 14:d7:e1:50:65:51:cb:06:02:a4:e1:7e:3e:ee:e0: 47:69:a9:e4:f7:09:6c:26:da:a0:c8:50:95:e8:7e: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5D:03:49:6E:F0:F2:F2:2D:D7:A0:A9:41:6C:1D:02:05:C3:10:37 X509v3 Authority Key Identifier: keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:16:6e:40:fe:cc:c5:35:37:8a:3a:bb:cb:97:17:8c:bd:03: fd:58:92:69:70:85:92:5b:da:29:df:48:6c:27:5b:1f:41:a4: 70:42:51:6f:fd:e2:70:1d:f1:8f:05:c5:4c:ed:40:d8:90:7f: 39:ee:fb:05:37:da:17:31:1e:94:a8:38:71:50:c6:af:bc:f9: 9c:68:a4:15:c6:de:59:42:69:3e:f8:1c:e3:53:30:9c:88:2a: 76:93:24:6c:ef:48:92:38:69:0e:f3:b3:9f:10:ad:ee:76:a1: d8:98:ae:c0:5f:62:1b:59:6d:85:ac:ae:1a:94:01:b8:36:37: 0c:6e:ee:3e:c4:a5:89:fe:8c:08:20:4c:2e:89:45:0f:d4:66: 64:38:4a:2e:d0:9a:06:db:e9:a1:ea:da:9a:0e:ee:54:0c:d5: e2:d0:8e:09:d6:4e:ed:5f:26:24:74:60:b0:dd:49:06:84:c0: 2d:2b:82:09:12:61:0f:49:8a:bc:be:dc:29:01:2a:bc:57:e3: 9f:c5:7c:9f:ab:0d:a6:2d:bc:63:3f:80:cf:f8:3a:2f:2e:51: bb:45:a7:00:64:4d:93:51:48:5c:99:d1:ab:b0:fc:6e:5a:98: 72:9b:d0:4a:bc:43:f6:44:cc:dc:5f:22:f1:e8:65:0a:eb:70: 6f:c0:f0:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPSkaDyWDTjjY7oXPuDr4O40guAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVB RTQ5QUFCMDAeFw0yNjA5MTcwOTU1NTdaFw0yNjA5MTgxMzE0NTdaMDMxMTAvBgNV BAMTKEZBNUQwMzQ5NkVGMEYyRjIyREQ3QTBBOTQxNkMxRDAyMDVDMzEwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Oco4iQScADmd0yXbwes6Xm14 C8N9f6tBMxFAceJdzMFHecPuwYJMAs1ze/rJTnp4eRvHG8RZEc/y7RufkAEaIqqc xP4l/5zUtQIGrWZUV5AOPn+fUMahRvLiwSDFfCrpXaCH+diM1mRQHLRMwniYpATq GPqfI9nPgtccWhkDPmecUTXfzpPFhmsQPg5zh+I6a3gKMHcIs0elBgSRqt2BqiEr RlbUNDoArPfU2Os1BpyVBEnOgUgB6zz+NGijfnLyxEpiT+AagAy6Or+/yijuDf9Z hNlnlIYidnVkPo2RmhTX4VBlUcsGAqThfj7u4EdpqeT3CWwm2qDIUJXoflwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+l0DSW7w8vIt16CpQWwdAgXDEDcwHwYDVR0j BBgwFoAUnXKMozMHNpDyp/a3fSzz/q5JqrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1ZTkxMzEtM2FiYy00YWJkLWJkOTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMz MzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVBRTQ5QUFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDcyOENBMzMzMDczNjkwRjJBN0Y2Qjc3RDJDRjNGRUFFNDlB QUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0Yz RkVBRTQ5QUFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgWbkD+zMU1N4o6u8uXF4y9A/1YkmlwhZJb 2infSGwnWx9BpHBCUW/94nAd8Y8FxUztQNiQfznu+wU32hcxHpSoOHFQxq+8+Zxo pBXG3llCaT74HONTMJyIKnaTJGzvSJI4aQ7zs58Qre52odiYrsBfYhtZbYWsrhqU Abg2Nwxu7j7EpYn+jAggTC6JRQ/UZmQ4Si7Qmgbb6aHq2poO7lQM1eLQjgnWTu1f JiR0YLDdSQaEwC0rggkSYQ9Jiry+3CkBKrxX45/FfJ+rDaYtvGM/gM/4Oi8uUbtF pwBkTZNRSFyZ0auw/G5amHKb0Eq8Q/ZEzNxfIvHoZQrrcG/A8B0= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:57 2026 by rpki-client