$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft File: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft (raw, json) Hash identifier: akJnbLBPEELiZlKn1fEUSe4OPLB96Drqu0NGGmgQ6qQ= Subject key identifier: D7:21:0B:FA:F5:03:80:C5:40:1D:CC:7A:73:A3:C2:F8:B9:A3:CC:5E Authority key identifier: 72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D Certificate issuer: /CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Certificate serial: 59CD142698A6159512C097AFCFAF99BDE4BFF2AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft Manifest number: FF Signing time: Mon 09 Nov 2026 13:02:08 +0000 Manifest this update: Mon 09 Nov 2026 12:57:08 +0000 Manifest next update: Tue 10 Nov 2026 16:12:08 +0000 Files and hashes: 1: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl (hash: +ENu42EW3vG6UjCXhnE8LmvkZsZ3itti3vh9eUzE+H8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cd:14:26:98:a6:15:95:12:c0:97:af:cf:af:99:bd:e4:bf:f2:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D Validity Not Before: Nov 9 12:57:08 2026 GMT Not After : Nov 10 16:12:08 2026 GMT Subject: CN=D7210BFAF50380C5401DCC7A73A3C2F8B9A3CC5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:c4:4f:e5:75:d6:8d:9a:73:e9:59:cd:fe: cd:a3:80:ea:ce:54:a8:d7:a0:5f:53:35:a0:e9:ff: ae:94:21:b7:20:1a:e5:ee:4f:08:40:bd:d2:69:a5: fb:6c:51:a5:19:aa:22:0f:d2:41:b1:28:9e:5b:19: 2a:80:50:88:18:ad:d1:d7:3f:7c:f6:80:77:86:79: a6:f2:35:4a:58:c4:b1:72:4a:6f:85:77:0c:14:a5: 2b:db:ce:4b:0a:75:6b:a4:ed:d0:e2:c7:6f:ea:f4: a0:96:3e:8a:5c:ce:a6:06:03:96:63:77:23:f1:3c: a5:d7:1a:95:3c:27:41:a8:95:77:13:8a:e7:d3:18: 76:13:d7:fc:cc:39:a1:8a:05:67:17:67:ab:b0:30: 76:b5:f4:e0:e9:5a:bb:4b:79:93:9b:16:01:f3:ee: 67:83:3d:f7:be:22:55:de:8d:3c:7a:74:03:eb:73: fb:fa:f2:9c:de:19:31:22:48:d8:f5:7f:2f:31:51: f0:21:35:d1:d1:de:da:03:cf:24:3a:ae:f1:f2:0f: 7e:ca:8b:4f:97:78:f3:bc:e4:12:8d:b4:d0:96:78: 9d:24:4b:41:e0:be:63:ed:c0:4b:ba:a9:52:16:f8: 16:2a:21:c4:dc:8c:14:6f:2a:36:db:21:d3:6c:ee: a0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:0B:FA:F5:03:80:C5:40:1D:CC:7A:73:A3:C2:F8:B9:A3:CC:5E X509v3 Authority Key Identifier: keyid:72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:2a:48:ad:cb:9c:ce:1a:f4:ad:8f:05:96:3e:2a:60:40:2a: b8:bf:2d:9e:a4:fd:1a:5a:ef:60:92:c2:19:a0:39:54:81:bd: c6:23:21:ca:d0:bd:0f:f0:61:e1:38:be:58:ca:99:5d:b3:a3: ee:e8:52:d4:50:0c:d1:e9:d0:7d:3b:62:f4:4e:d5:c2:9f:67: 68:ce:61:7d:eb:65:58:17:69:3b:1f:45:02:d9:6a:78:0d:7d: 84:f8:a2:92:30:1a:95:2c:b1:04:c8:71:bc:8d:68:83:c6:51: ed:78:a9:8d:3b:11:67:75:8f:31:80:9e:f4:9a:08:2a:a3:f2: 6c:08:fe:90:0d:d7:52:88:bd:1a:1d:39:06:d6:39:f6:f5:7f: f2:d1:2e:be:6b:cc:c8:85:15:9f:5b:a8:98:88:00:35:f2:38: a2:4e:9e:79:d7:86:31:d7:71:7d:f1:8a:5a:8d:ba:58:0b:17: 91:61:d8:8d:b4:dc:b6:5d:bc:fd:ad:eb:7b:51:cb:3c:cc:05: 11:08:04:ea:18:87:60:46:90:1e:56:0a:57:87:12:5e:51:12: 1e:cf:1f:fa:fc:6e:ce:82:6b:40:be:02:7d:aa:bc:49:46:d7: de:2e:83:9b:57:57:29:9a:06:72:8b:87:d9:04:f1:5a:e5:08: 2b:f4:b6:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWc0UJpimFZUSwJevz6+ZveS/8q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQx QjU4NkM5RDAeFw0yNjExMDkxMjU3MDhaFw0yNjExMTAxNjEyMDhaMDMxMTAvBgNV BAMTKEQ3MjEwQkZBRjUwMzgwQzU0MDFEQ0M3QTczQTNDMkY4QjlBM0NDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQcRP5XXWjZpz6VnN/s2jgOrO VKjXoF9TNaDp/66UIbcgGuXuTwhAvdJppftsUaUZqiIP0kGxKJ5bGSqAUIgYrdHX P3z2gHeGeabyNUpYxLFySm+FdwwUpSvbzksKdWuk7dDix2/q9KCWPopczqYGA5Zj dyPxPKXXGpU8J0GolXcTiufTGHYT1/zMOaGKBWcXZ6uwMHa19ODpWrtLeZObFgHz 7meDPfe+IlXejTx6dAPrc/v68pzeGTEiSNj1fy8xUfAhNdHR3toDzyQ6rvHyD37K i0+XePO85BKNtNCWeJ0kS0HgvmPtwEu6qVIW+BYqIcTcjBRvKjbbIdNs7qDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1yEL+vUDgMVAHcx6c6PC+LmjzF4wHwYDVR0j BBgwFoAUcorRcdPDHrIFIj/8PiwIHRtYbJ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM4MWU2ZWMtYzg3Yi00ZmRiLWEyZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFE M0MzMUVCMjA1MjIzRkZDM0UyQzA4MUQxQjU4NkM5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjhBRDE3MUQzQzMxRUIyMDUyMjNGRkMzRTJDMDgxRDFCNTg2 QzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvNzI4QUQxNzFEM0MzMUVCMjA1MjIzRkZDM0UyQzA4 MUQxQjU4NkM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMqSK3LnM4a9K2PBZY+KmBAKri/LZ6k/Rpa 72CSwhmgOVSBvcYjIcrQvQ/wYeE4vljKmV2zo+7oUtRQDNHp0H07YvRO1cKfZ2jO YX3rZVgXaTsfRQLZangNfYT4opIwGpUssQTIcbyNaIPGUe14qY07EWd1jzGAnvSa CCqj8mwI/pAN11KIvRodOQbWOfb1f/LRLr5rzMiFFZ9bqJiIADXyOKJOnnnXhjHX cX3xilqNulgLF5Fh2I203LZdvP2t63tRyzzMBREIBOoYh2BGkB5WCleHEl5REh7P H/r8bs6Ca0C+An2qvElG194ug5tXVymaBnKLh9kE8VrlCCv0toU= -----END CERTIFICATE-----Generated at Tue Nov 10 01:45:54 2026 by rpki-client