$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft File: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft (raw, json) Hash identifier: +0ODIDjkLTO1L2iPO3iVw1r/WdvzFzgy+EdOJbTtlGU= Subject key identifier: 05:A8:07:2B:1C:76:BC:D4:84:72:31:F1:A3:49:50:C4:E7:8D:B7:77 Authority key identifier: 72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D Certificate issuer: /CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Certificate serial: 0990C43854487537936196864B3127CE8E540223 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:15:27 +0000 Manifest this update: Wed 17 Jun 2026 06:10:27 +0000 Manifest next update: Thu 18 Jun 2026 07:51:27 +0000 Files and hashes: 1: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl (hash: x9ToULql+E5d5TsDYH3J01nP4Cam2vDUNl/oPlQJ3AQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:90:c4:38:54:48:75:37:93:61:96:86:4b:31:27:ce:8e:54:02:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Validity Not Before: Jun 17 06:10:27 2026 GMT Not After : Jun 18 07:51:27 2026 GMT Subject: CN=05A8072B1C76BCD4847231F1A34950C4E78DB777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:83:33:7c:b3:76:24:de:bf:e8:b6:40:9d: c9:2e:68:14:65:2e:0d:a8:92:cb:b5:fd:08:51:ac: cc:92:b5:bf:19:98:e4:aa:36:9c:20:31:98:c3:1b: 1c:47:f3:06:9a:c3:2c:8a:98:e8:61:30:a7:48:f5: 49:f3:42:c3:44:0c:a7:18:2b:b5:f0:2a:5f:36:67: 94:b5:14:71:06:ea:f4:3e:4a:9a:2a:49:74:3d:70: 5e:dc:8b:93:4c:b5:6f:64:42:54:a6:b7:e8:40:71: c9:84:c6:b3:a8:23:36:81:c2:b8:3e:d5:72:78:4e: 58:bc:12:b9:0f:4e:05:ab:26:a2:89:12:ec:2d:23: 8a:d8:4c:c7:f6:77:02:f8:06:1a:88:e4:58:de:12: 9d:eb:af:91:1b:00:d2:8e:7e:f1:00:41:b9:f1:c3: 98:45:6f:0a:2d:6b:b8:11:92:e7:84:12:32:16:7a: 15:e5:25:fe:fb:ef:01:1e:08:8d:4c:ba:7b:04:29: 03:d6:cb:68:19:79:c7:e1:88:88:83:7e:d5:1d:f4: ec:f6:9a:cf:be:67:67:61:15:14:8f:6c:71:51:76: 31:b5:98:cf:9b:ac:97:1b:7b:a5:15:45:0e:4e:37: ad:2c:92:92:83:25:94:48:69:89:64:59:e3:f1:7b: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A8:07:2B:1C:76:BC:D4:84:72:31:F1:A3:49:50:C4:E7:8D:B7:77 X509v3 Authority Key Identifier: keyid:72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f5:f4:04:90:78:df:e4:2c:b7:7e:6f:a3:fd:32:f9:85:60: 90:99:f6:96:11:6b:07:14:28:33:4d:42:f7:28:60:5c:60:cf: c4:01:2f:9f:d4:bd:ba:79:4a:48:18:aa:63:d5:73:cc:3b:e1: 13:fa:14:14:4b:e1:ea:8f:b6:8c:bf:68:ec:7b:27:2e:6f:2f: 90:8c:40:77:80:78:27:40:7b:74:84:dc:1b:ba:76:3a:bf:6e: 5d:db:07:bd:f9:dc:b9:9c:46:08:b3:44:c3:12:36:42:7f:3d: 46:d2:c0:e4:c2:35:8c:8e:a8:67:bb:f7:d9:91:95:96:b0:0e: 14:06:fc:72:60:9f:2d:42:f8:7b:82:48:c1:8b:25:a0:a3:70: 4d:01:3d:b5:3c:36:b4:32:cb:ec:83:a0:56:46:1a:ea:9c:35: 9d:28:21:9a:7a:ac:b0:03:dc:26:a6:26:66:c1:7b:8e:5a:92: bf:30:1d:32:1f:a8:69:1e:50:88:c8:5e:f1:79:ec:23:46:f9: 3c:a1:4a:f2:07:12:ee:6f:b6:64:e2:1b:76:55:0d:04:3a:04: 46:a1:e9:b6:3e:ad:ae:b9:03:95:3c:1b:a6:2b:46:22:f6:22: a3:48:0e:5e:ec:58:6d:6b:76:71:69:4d:4d:ec:c4:ee:fa:6c: 91:e9:01:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCZDEOFRIdTeTYZaGSzEnzo5UAiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQx QjU4NkM5RDAeFw0yNjA2MTcwNjEwMjdaFw0yNjA2MTgwNzUxMjdaMDMxMTAvBgNV BAMTKDA1QTgwNzJCMUM3NkJDRDQ4NDcyMzFGMUEzNDk1MEM0RTc4REI3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJYMzfLN2JN6/6LZAnckuaBRl Lg2oksu1/QhRrMyStb8ZmOSqNpwgMZjDGxxH8waawyyKmOhhMKdI9UnzQsNEDKcY K7XwKl82Z5S1FHEG6vQ+SpoqSXQ9cF7ci5NMtW9kQlSmt+hAccmExrOoIzaBwrg+ 1XJ4Tli8ErkPTgWrJqKJEuwtI4rYTMf2dwL4BhqI5FjeEp3rr5EbANKOfvEAQbnx w5hFbwota7gRkueEEjIWehXlJf777wEeCI1MunsEKQPWy2gZecfhiIiDftUd9Oz2 ms++Z2dhFRSPbHFRdjG1mM+brJcbe6UVRQ5ON60skpKDJZRIaYlkWePxeyYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBagHKxx2vNSEcjHxo0lQxOeNt3cwHwYDVR0j BBgwFoAUcorRcdPDHrIFIj/8PiwIHRtYbJ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM4MWU2ZWMtYzg3Yi00ZmRiLWEyZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFE M0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQxQjU4NkM5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjhBRDE3MUQzQzMxRUIyMDUyMjNGRkMzRTJDMDgxRDFCNTg2 QzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4 MUQxQjU4NkM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ319ASQeN/kLLd+b6P9MvmFYJCZ9pYRawcU KDNNQvcoYFxgz8QBL5/Uvbp5SkgYqmPVc8w74RP6FBRL4eqPtoy/aOx7Jy5vL5CM QHeAeCdAe3SE3Bu6djq/bl3bB7353LmcRgizRMMSNkJ/PUbSwOTCNYyOqGe799mR lZawDhQG/HJgny1C+HuCSMGLJaCjcE0BPbU8NrQyy+yDoFZGGuqcNZ0oIZp6rLAD 3CamJmbBe45akr8wHTIfqGkeUIjIXvF57CNG+TyhSvIHEu5vtmTiG3ZVDQQ6BEah 6bY+ra65A5U8G6YrRiL2IqNIDl7sWG1rdnFpTU3sxO76bJHpAaQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:19 2026 by rpki-client