$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft File: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft (raw, json) Hash identifier: WevEWQiLmkaiR1DAds7WUPHZAp7yaS0Rb0yvHE4YHqA= Subject key identifier: CC:DA:10:3D:89:5F:89:69:03:AC:14:70:60:B0:6F:AC:92:BA:AA:7E Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 Certificate issuer: /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Certificate serial: 40427107A17BFE9E07FB9A3BE1953F1CBD83249B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 04:33:17 +0000 Manifest this update: Wed 17 Jun 2026 04:28:17 +0000 Manifest next update: Thu 18 Jun 2026 05:02:17 +0000 Files and hashes: 1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: xliXiEUEZwSaL+L9KbxePpEFEAbRpcaYYQQzzGHYr2w=) 2: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=) 3: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl (hash: bToveDonW6OjLi72jeY2SRR2MVkGYD0l9zPSV1Y3/h0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:42:71:07:a1:7b:fe:9e:07:fb:9a:3b:e1:95:3f:1c:bd:83:24:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Validity Not Before: Jun 17 04:28:17 2026 GMT Not After : Jun 18 05:02:17 2026 GMT Subject: CN=CCDA103D895F896903AC147060B06FAC92BAAA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:e3:fe:a8:9a:f1:2e:ac:8c:b6:c1:3f:3a: 1e:96:12:c8:64:70:2e:be:d9:2c:3c:68:bf:cf:cf: ac:8a:0a:cf:c5:26:35:b1:11:ab:80:60:11:dc:37: 58:df:98:8a:51:9f:c4:7e:57:96:a3:a1:6a:29:f0: 6c:26:3f:18:e5:49:49:dc:e5:fa:92:39:52:0d:0d: 7c:9b:d4:03:44:2d:b7:dd:b0:8a:40:d2:d9:ec:9c: f3:28:16:96:de:d6:61:5e:67:12:07:3d:df:a9:7d: 03:eb:a7:d9:88:04:88:1b:e2:f0:24:09:4c:81:af: 37:68:73:cc:cf:ef:11:c4:00:13:fd:92:69:56:1c: f6:91:91:cc:f2:71:f2:21:06:07:f4:c5:fe:53:03: a2:28:de:1f:aa:88:5f:8d:6f:3d:ba:1a:a2:2a:3c: 84:61:8e:90:34:28:39:f3:c6:e7:b9:18:38:74:82: 67:bd:f4:26:70:ff:ce:4e:2f:d3:e4:81:26:dc:fe: d7:a4:b9:8b:1d:89:cd:73:a6:c1:be:a2:91:f8:04: ed:67:f1:48:8b:46:94:70:a9:06:9a:ec:2c:af:ff: eb:6d:7c:c3:b8:bb:d4:58:0a:97:e6:84:15:5a:98: 4b:49:c9:ec:58:75:cb:61:fb:d8:ae:b5:ed:b9:22: 35:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DA:10:3D:89:5F:89:69:03:AC:14:70:60:B0:6F:AC:92:BA:AA:7E X509v3 Authority Key Identifier: keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ae:2c:59:44:ed:0d:10:da:0e:90:17:0c:c9:59:c5:61:8b: 30:fd:3c:5a:ed:f8:8f:a8:47:52:82:46:0c:82:47:c0:63:b2: 1f:70:1a:93:71:c6:e7:91:46:55:01:4e:b6:43:da:b0:6a:b6: fa:3e:e7:a0:3c:07:fe:73:f6:e6:2a:48:57:80:b2:19:a2:68: 1b:b5:c0:03:fb:37:45:0c:a9:85:26:4e:97:77:36:bd:46:7d: ca:e1:27:a4:d7:4d:b5:6e:73:6c:6f:ea:92:bf:e0:bc:dc:ed: 1d:a9:6b:28:28:ef:2d:2d:be:e2:14:51:9d:b8:32:4e:a0:63: 96:fe:81:cc:99:f6:a6:14:53:c7:dc:c2:af:cf:50:c8:e4:2e: 76:7f:ef:de:8e:10:54:29:d6:8e:49:99:db:5c:91:11:20:b8: d5:01:de:52:05:8d:4c:8e:78:ef:e7:93:13:41:a6:b0:db:25: 80:77:36:d9:c2:75:47:cd:07:a0:ba:f7:8c:c0:e2:5d:de:d4: bb:70:cc:6a:93:f4:a9:bf:c5:12:ec:f0:c7:9d:e2:a1:6f:5b: 00:95:f6:64:5b:84:13:fd:33:29:66:f3:50:5d:94:07:16:34: 7c:85:59:94:4f:6f:6d:f3:bc:40:f7:14:41:ab:4e:84:43:4a: 85:0e:fd:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEJxB6F7/p4H+5o74ZU/HL2DJJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAx QUM4ODkxNDAeFw0yNjA2MTcwNDI4MTdaFw0yNjA2MTgwNTAyMTdaMDMxMTAvBgNV BAMTKENDREExMDNEODk1Rjg5NjkwM0FDMTQ3MDYwQjA2RkFDOTJCQUFBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+uP+qJrxLqyMtsE/Oh6WEshk cC6+2Sw8aL/Pz6yKCs/FJjWxEauAYBHcN1jfmIpRn8R+V5ajoWop8GwmPxjlSUnc 5fqSOVINDXyb1ANELbfdsIpA0tnsnPMoFpbe1mFeZxIHPd+pfQPrp9mIBIgb4vAk CUyBrzdoc8zP7xHEABP9kmlWHPaRkczycfIhBgf0xf5TA6Io3h+qiF+Nbz26GqIq PIRhjpA0KDnzxue5GDh0gme99CZw/85OL9PkgSbc/tekuYsdic1zpsG+opH4BO1n 8UiLRpRwqQaa7Cyv/+ttfMO4u9RYCpfmhBVamEtJyexYdcth+9iute25IjXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzNoQPYlfiWkDrBRwYLBvrJK6qn4wHwYDVR0j BBgwFoAUdyjrB/nn9hyMBPjuT7ZS0BrIiRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E2MzFkNzctZjgwNS00MzljLTk4ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdG OUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAxQUM4ODkxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzI4RUIwN0Y5RTdGNjFDOEMwNEY4RUU0RkI2NTJEMDFBQzg4 OTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUy RDAxQUM4ODkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCuLFlE7Q0Q2g6QFwzJWcVhizD9PFrt+I+o R1KCRgyCR8Bjsh9wGpNxxueRRlUBTrZD2rBqtvo+56A8B/5z9uYqSFeAshmiaBu1 wAP7N0UMqYUmTpd3Nr1GfcrhJ6TXTbVuc2xv6pK/4Lzc7R2paygo7y0tvuIUUZ24 Mk6gY5b+gcyZ9qYUU8fcwq/PUMjkLnZ/796OEFQp1o5JmdtckREguNUB3lIFjUyO eO/nkxNBprDbJYB3NtnCdUfNB6C694zA4l3e1LtwzGqT9Km/xRLs8Med4qFvWwCV 9mRbhBP9Mylm81BdlAcWNHyFWZRPb23zvED3FEGrToRDSoUO/Zw= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:36 2026 by rpki-client