$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft (raw, json) Hash identifier: 8Bfq/EXlK/0Lxs6Rx9A3O/uQS3EEvmLCIHYCJX62vOY= Subject key identifier: 9A:93:2B:91:B6:9C:39:68:76:44:9A:13:F5:02:EA:32:6D:D0:24:31 Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Certificate serial: 7CDC86EEAAAC74F33A8D4FE76BB2AAE1832829DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:22:29 +0000 Manifest this update: Tue 16 Jun 2026 19:17:29 +0000 Manifest next update: Wed 17 Jun 2026 20:02:29 +0000 Files and hashes: 1: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl (hash: ScB4DPHAgo+0U6JRlv0ag3fL7a6alWte4OUGcmmHsWw=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:dc:86:ee:aa:ac:74:f3:3a:8d:4f:e7:6b:b2:aa:e1:83:28:29:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Validity Not Before: Jun 16 19:17:29 2026 GMT Not After : Jun 17 20:02:29 2026 GMT Subject: CN=9A932B91B69C396876449A13F502EA326DD02431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:ff:00:5e:9d:eb:4e:28:9e:15:7a:11:b5: dd:80:fc:d7:49:39:22:2c:24:c6:56:13:4d:71:c7: 28:b0:e9:3e:9f:54:09:62:69:78:1f:c5:19:54:63: 8a:e9:d4:62:50:9e:38:38:72:9d:5d:c5:6f:f7:38: 13:be:61:6d:f6:b1:96:7b:36:1e:dd:28:32:6d:c2: 53:d1:08:2f:62:9b:17:c2:cd:cc:dc:19:e0:81:c3: c5:d2:06:16:da:04:40:67:d3:62:8f:0e:fb:cd:fe: 81:8a:ed:0d:ed:ca:fd:c9:b9:d5:02:e0:da:92:9e: a6:c3:56:26:d2:80:07:84:8b:48:3e:74:2c:9e:e1: b0:b5:74:0b:f7:fb:e7:ba:a9:3d:c7:6c:f9:70:f6: 82:ed:d3:87:a2:dd:46:a2:41:25:26:53:c5:ae:bd: c6:2a:0c:4d:b0:3d:ee:92:8d:c2:ba:0e:0e:8b:ae: 07:de:d7:b9:27:f5:11:ea:4c:44:be:4b:7e:f8:26: 22:f8:5c:08:57:29:89:5e:a3:21:b7:c7:25:05:dc: 13:97:1e:5f:a9:62:fb:8d:2d:a0:f0:10:81:55:50: c9:b5:46:b5:51:62:cf:d2:6c:26:56:7c:a1:1f:15: af:b3:79:2d:87:44:4a:2b:2c:b8:08:ac:44:6f:34: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:93:2B:91:B6:9C:39:68:76:44:9A:13:F5:02:EA:32:6D:D0:24:31 X509v3 Authority Key Identifier: keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8f:c3:e6:4f:a7:1a:c8:74:77:a6:f5:11:90:ed:45:05:d1: 5d:52:b3:3b:1f:0b:e8:71:aa:bd:6f:0c:60:ab:f7:b6:ef:50: 7d:29:2c:d4:76:00:f0:ee:e5:c5:33:98:0e:10:64:f6:44:a4: 4d:9f:4b:e3:83:66:73:c0:2c:48:56:c6:84:a9:d4:75:8a:53: c4:15:74:3d:93:ec:e3:f5:5e:3a:8d:bb:c5:72:4a:08:42:4e: c1:cc:69:4a:f4:bf:1f:82:0e:8a:33:43:ed:80:85:a7:18:24: e9:b5:b1:58:55:93:ea:80:b4:de:aa:0d:10:62:f0:34:1f:5d: 48:3e:b4:f2:78:eb:5f:bb:8c:73:c4:e3:54:4a:4c:02:66:30: c1:70:4a:35:1c:91:f9:af:d4:0b:48:4b:ac:a0:cf:c9:46:7c: 94:d2:02:82:20:b3:2a:7e:84:b6:05:09:97:b3:fc:b6:71:1a: c0:94:ce:ea:87:5a:6d:bf:70:8e:7b:38:1a:ee:a3:39:9f:9b: f0:e5:7d:ae:25:f0:9c:29:5f:04:db:d5:c1:f4:61:9d:a2:00: a8:07:2d:ae:02:df:d9:81:e3:09:97:ba:c8:8b:f2:48:c5:f7: ca:ac:b7:e2:1e:6a:7a:cf:0e:50:b5:23:ca:21:59:0a:88:e5: 30:ee:23:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNyG7qqsdPM6jU/na7Kq4YMoKd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVB RTQ5QUFCMDAeFw0yNjA2MTYxOTE3MjlaFw0yNjA2MTcyMDAyMjlaMDMxMTAvBgNV BAMTKDlBOTMyQjkxQjY5QzM5Njg3NjQ0OUExM0Y1MDJFQTMyNkREMDI0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BP8AXp3rTiieFXoRtd2A/NdJ OSIsJMZWE01xxyiw6T6fVAliaXgfxRlUY4rp1GJQnjg4cp1dxW/3OBO+YW32sZZ7 Nh7dKDJtwlPRCC9imxfCzczcGeCBw8XSBhbaBEBn02KPDvvN/oGK7Q3tyv3JudUC 4NqSnqbDVibSgAeEi0g+dCye4bC1dAv3++e6qT3HbPlw9oLt04ei3UaiQSUmU8Wu vcYqDE2wPe6SjcK6Dg6Lrgfe17kn9RHqTES+S374JiL4XAhXKYleoyG3xyUF3BOX Hl+pYvuNLaDwEIFVUMm1RrVRYs/SbCZWfKEfFa+zeS2HREorLLgIrERvNL2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmpMrkbacOWh2RJoT9QLqMm3QJDEwHwYDVR0j BBgwFoAUnXKMozMHNpDyp/a3fSzz/q5JqrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1ZTkxMzEtM2FiYy00YWJkLWJkOTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMz MzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVBRTQ5QUFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDcyOENBMzMzMDczNjkwRjJBN0Y2Qjc3RDJDRjNGRUFFNDlB QUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0Yz RkVBRTQ5QUFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCPw+ZPpxrIdHem9RGQ7UUF0V1SszsfC+hx qr1vDGCr97bvUH0pLNR2APDu5cUzmA4QZPZEpE2fS+ODZnPALEhWxoSp1HWKU8QV dD2T7OP1XjqNu8VySghCTsHMaUr0vx+CDoozQ+2AhacYJOm1sVhVk+qAtN6qDRBi 8DQfXUg+tPJ461+7jHPE41RKTAJmMMFwSjUckfmv1AtIS6ygz8lGfJTSAoIgsyp+ hLYFCZez/LZxGsCUzuqHWm2/cI57OBruozmfm/Dlfa4l8JwpXwTb1cH0YZ2iAKgH La4C39mB4wmXusiL8kjF98qst+IeanrPDlC1I8ohWQqI5TDuI/I= -----END CERTIFICATE-----Generated at Wed Jun 17 10:42:01 2026 by rpki-client