$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft File: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft (raw, json) Hash identifier: eJaVXS3ojSYU3uRkTOPiNhwW6f+sK81i4kz4HHL6g6Y= Subject key identifier: E2:32:AB:3F:98:6E:4F:D6:E3:A5:EF:6F:AF:A9:76:FF:CA:18:10:89 Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 Certificate issuer: /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Certificate serial: 64B5A982043462743326029A2EE57F0ADE334F59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:51:17 +0000 Manifest this update: Sun 20 Sep 2026 23:46:17 +0000 Manifest next update: Tue 22 Sep 2026 00:12:17 +0000 Files and hashes: 1: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl (hash: 3CZwJyX8Ny9xzB6tAXDlAGmjeeUEkzmqieas+bVuY3g=) 2: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=) 3: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: xliXiEUEZwSaL+L9KbxePpEFEAbRpcaYYQQzzGHYr2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b5:a9:82:04:34:62:74:33:26:02:9a:2e:e5:7f:0a:de:33:4f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914 Validity Not Before: Sep 20 23:46:17 2026 GMT Not After : Sep 22 00:12:17 2026 GMT Subject: CN=E232AB3F986E4FD6E3A5EF6FAFA976FFCA181089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:24:f9:48:1f:5d:29:14:11:14:b2:d1:bf: 2b:8d:28:ab:11:5b:42:01:a4:a2:90:5b:3c:20:ee: 71:da:c9:61:7e:3e:e5:f0:cf:e9:00:9d:ed:b2:7b: e8:b3:47:a2:dd:84:d8:64:6b:8b:02:e7:5b:79:f1: 2a:3c:75:45:68:85:93:17:a6:6b:4f:f7:b6:f9:03: 43:fc:bd:89:61:fc:6c:a8:c7:77:8b:eb:59:fd:61: 17:72:fd:04:17:5d:15:1b:20:08:1d:50:f3:bf:e8: 44:02:88:6e:1c:56:45:c2:e5:d7:99:55:7b:6b:b8: d7:a8:0c:82:a8:a6:3c:2c:f0:d7:97:51:f5:e8:40: 9a:81:3e:09:da:ca:ff:29:a8:72:a5:18:67:df:b9: d9:b8:a7:ba:60:d3:e5:d9:36:b0:c8:6c:a6:99:0a: 0e:d5:71:be:05:47:a9:31:f3:02:3d:ef:8b:5c:34: fe:b7:1f:0d:71:be:45:aa:93:c8:fc:8d:8b:fd:df: 68:73:29:a9:9b:f8:f1:22:bd:07:98:c0:4e:c6:77: 62:43:99:0d:26:4d:a8:b4:d4:dc:76:8e:88:97:d0: 0f:80:fb:14:0a:eb:98:de:0b:b5:bf:2e:14:b9:55: 3f:48:0f:ce:3a:cf:48:de:17:f4:c0:14:9e:f0:02: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:32:AB:3F:98:6E:4F:D6:E3:A5:EF:6F:AF:A9:76:FF:CA:18:10:89 X509v3 Authority Key Identifier: keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8d:ab:f3:aa:26:85:f0:22:8e:c9:5c:4d:a9:f8:c2:02:22: ef:e6:58:6a:97:8f:a3:19:f9:a7:d5:98:b7:c5:3d:18:98:7c: 32:27:13:b8:b2:80:a5:ad:b2:f7:a6:1d:84:f3:fa:87:bf:8e: 0c:68:f6:13:da:d8:a0:3d:0c:fc:e5:21:96:38:a5:a0:36:4a: f5:3d:89:24:81:f1:2a:8a:a2:11:96:1e:18:f6:fe:65:03:8f: af:95:a7:3b:b1:92:e3:91:cb:1b:62:9d:18:2a:30:0e:af:d5: 0c:dd:36:2e:53:bd:9a:b3:d1:66:1f:0b:2d:70:b4:65:50:e2: cb:e1:a8:50:46:71:eb:03:c8:08:4b:9f:89:2e:73:b4:93:80: f2:ad:cc:c9:df:bf:d1:4e:25:7b:a0:59:7f:e5:a5:00:da:3b: 38:d1:f3:bc:8a:59:aa:2b:bd:5b:75:bf:2a:95:be:0b:d9:8a: 11:a7:5b:4a:e1:8c:ee:5e:ac:0d:61:6c:fb:a3:ca:15:52:cb: 73:24:a4:99:da:78:36:84:aa:be:f0:95:a7:e7:39:bb:0e:d1: 8a:fc:75:50:65:0a:e7:7f:b1:08:34:3f:94:17:f0:e2:01:74: 1a:4a:fb:e5:b3:40:c0:cc:aa:a3:c5:18:9b:ad:51:5b:fc:a1: db:b3:d3:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLWpggQ0YnQzJgKaLuV/Ct4zT1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAx QUM4ODkxNDAeFw0yNjA5MjAyMzQ2MTdaFw0yNjA5MjIwMDEyMTdaMDMxMTAvBgNV BAMTKEUyMzJBQjNGOTg2RTRGRDZFM0E1RUY2RkFGQTk3NkZGQ0ExODEwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/CT5SB9dKRQRFLLRvyuNKKsR W0IBpKKQWzwg7nHayWF+PuXwz+kAne2ye+izR6LdhNhka4sC51t58So8dUVohZMX pmtP97b5A0P8vYlh/Gyox3eL61n9YRdy/QQXXRUbIAgdUPO/6EQCiG4cVkXC5deZ VXtruNeoDIKopjws8NeXUfXoQJqBPgnayv8pqHKlGGffudm4p7pg0+XZNrDIbKaZ Cg7Vcb4FR6kx8wI974tcNP63Hw1xvkWqk8j8jYv932hzKamb+PEivQeYwE7Gd2JD mQ0mTai01Nx2joiX0A+A+xQK65jeC7W/LhS5VT9ID846z0jeF/TAFJ7wApFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jKrP5huT9bjpe9vr6l2/8oYEIkwHwYDVR0j BBgwFoAUdyjrB/nn9hyMBPjuT7ZS0BrIiRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E2MzFkNzctZjgwNS00MzljLTk4ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdG OUU3RjYxQzhDMDRGOEVFNEZCNjUyRDAxQUM4ODkxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzI4RUIwN0Y5RTdGNjFDOEMwNEY4RUU0RkI2NTJEMDFBQzg4 OTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvNzcyOEVCMDdGOUU3RjYxQzhDMDRGOEVFNEZCNjUy RDAxQUM4ODkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaNq/OqJoXwIo7JXE2p+MICIu/mWGqXj6MZ +afVmLfFPRiYfDInE7iygKWtsvemHYTz+oe/jgxo9hPa2KA9DPzlIZY4paA2SvU9 iSSB8SqKohGWHhj2/mUDj6+VpzuxkuORyxtinRgqMA6v1QzdNi5TvZqz0WYfCy1w tGVQ4svhqFBGcesDyAhLn4kuc7STgPKtzMnfv9FOJXugWX/lpQDaOzjR87yKWaor vVt1vyqVvgvZihGnW0rhjO5erA1hbPujyhVSy3MkpJnaeDaEqr7wlafnObsO0Yr8 dVBlCud/sQg0P5QX8OIBdBpK++WzQMDMqqPFGJutUVv8oduz03c= -----END CERTIFICATE-----Generated at Mon Sep 21 11:45:34 2026 by rpki-client