$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft File: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft (raw, json) Hash identifier: Am/PtkYVwi7/WZf8d7IYQMjxY+uGktoVSt8tXhoXJIg= Subject key identifier: F0:34:E9:4D:1C:73:D7:26:91:DE:E5:45:66:9E:93:9B:7C:AD:F9:8E Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF Certificate issuer: /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Certificate serial: 390F5C3B29D342AB0D12D93224D0F132D18BAE6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 16:41:59 +0000 Manifest this update: Tue 22 Sep 2026 16:36:59 +0000 Manifest next update: Wed 23 Sep 2026 17:23:59 +0000 Files and hashes: 1: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl (hash: p9fRARyawCPlZOCDPyOYl/El84LPRD8uOFWVMPPQLSA=) 2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0f:5c:3b:29:d3:42:ab:0d:12:d9:32:24:d0:f1:32:d1:8b:ae:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Validity Not Before: Sep 22 16:36:59 2026 GMT Not After : Sep 23 17:23:59 2026 GMT Subject: CN=F034E94D1C73D72691DEE545669E939B7CADF98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:62:a1:ee:02:25:d3:3a:ee:b0:2f:37:51:e3: c4:1b:8e:85:c2:16:e6:47:58:91:89:a5:e7:27:0c: 05:cd:bc:15:a4:26:d6:05:ec:65:55:e5:38:4d:11: 26:09:9e:9c:b6:ee:5d:ec:ef:20:6c:c0:c2:60:b3: e2:71:24:45:c4:8d:cc:94:b0:1a:fe:e7:c3:79:e3: 44:02:08:37:b6:30:0c:40:5c:81:6c:f4:cf:c8:a4: a1:b1:4f:7b:f1:fd:77:41:a0:88:ca:55:89:94:57: 57:61:d7:25:fd:e9:65:e9:65:bb:c9:26:10:91:45: 72:6e:d8:9f:2f:ae:1c:1c:40:de:fd:49:a4:c5:be: 1f:59:e7:1b:4c:c9:d4:49:fa:d1:a5:e1:53:1b:6c: fb:98:f8:84:ae:c9:0e:4a:7b:b7:42:79:29:80:ff: 9c:81:fc:1f:c4:c6:e9:bf:14:f7:31:dc:98:8b:7b: 16:0c:f6:ab:31:2e:af:24:f4:dc:da:28:8e:4e:5d: 54:17:9e:53:2b:16:bf:63:b6:8e:78:f9:55:a4:66: 23:4e:cc:32:c4:fe:64:fb:99:a5:bd:f8:e2:2e:c0: de:3b:3b:87:47:89:6b:77:2b:45:b6:2e:4b:91:21: 1a:75:da:3f:2d:53:43:54:e1:b9:ec:bb:c0:1b:51: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:E9:4D:1C:73:D7:26:91:DE:E5:45:66:9E:93:9B:7C:AD:F9:8E X509v3 Authority Key Identifier: keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:24:5b:be:38:ef:09:3b:b8:aa:cd:24:b2:a0:0f:37:8e:4b: 46:57:af:31:28:3f:bc:9e:fe:32:7d:92:87:17:0e:f8:34:ec: 36:1a:a3:ed:0a:9f:98:52:1d:13:d5:be:d0:5a:7c:10:81:ea: de:63:1e:4f:37:b1:c0:b2:dc:ba:95:f3:73:a2:ac:e3:cd:73: 0b:55:b3:03:c5:72:62:77:ad:a5:02:99:0d:31:80:0a:38:66: 82:0e:63:a2:92:d4:d7:f8:f1:ff:66:b4:85:7b:ee:7e:36:00: ca:18:17:4b:b9:89:20:01:4f:58:af:b8:d3:31:c3:1a:d9:9c: 24:85:18:15:77:6d:7a:e6:a9:cf:9b:3b:72:9a:16:7a:81:ac: a5:d0:94:88:e8:bb:e7:23:d9:74:3a:62:27:d4:be:81:03:26: 7f:3e:1c:f8:bb:ef:48:6e:d2:7e:2f:33:f0:20:3d:f2:7b:3c: 69:64:b3:1e:06:aa:c7:a5:d9:fc:dc:2f:d6:4f:19:8d:b6:03: 17:80:b3:67:4b:b6:3e:d5:60:af:20:ee:db:a7:fe:27:93:05: 73:a3:db:ac:bb:74:5a:7a:7e:e4:72:f5:67:e0:0b:f5:f0:75: f1:4c:04:e3:aa:bb:07:0d:1b:34:eb:e1:d5:56:46:3b:2c:da: cf:0a:cf:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQ9cOynTQqsNEtkyJNDxMtGLrm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAy REM4OTJERjAeFw0yNjA5MjIxNjM2NTlaFw0yNjA5MjMxNzIzNTlaMDMxMTAvBgNV BAMTKEYwMzRFOTREMUM3M0Q3MjY5MURFRTU0NTY2OUU5MzlCN0NBREY5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKYqHuAiXTOu6wLzdR48QbjoXC FuZHWJGJpecnDAXNvBWkJtYF7GVV5ThNESYJnpy27l3s7yBswMJgs+JxJEXEjcyU sBr+58N540QCCDe2MAxAXIFs9M/IpKGxT3vx/XdBoIjKVYmUV1dh1yX96WXpZbvJ JhCRRXJu2J8vrhwcQN79SaTFvh9Z5xtMydRJ+tGl4VMbbPuY+ISuyQ5Ke7dCeSmA /5yB/B/Exum/FPcx3JiLexYM9qsxLq8k9NzaKI5OXVQXnlMrFr9jto54+VWkZiNO zDLE/mT7maW9+OIuwN47O4dHiWt3K0W2LkuRIRp12j8tU0NU4bnsu8AbUZV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DTpTRxz1yaR3uVFZp6Tm3yt+Y4wHwYDVR0j BBgwFoAUEo8Hk4/eb1gUJ8LQqpq5UC3Ikt8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIxNmYxYmQtOTU4ZS00N2Y1LTk0OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4 RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAyREM4OTJERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjhGMDc5MzhGREU2RjU4MTQyN0MyRDBBQTlBQjk1MDJEQzg5 MkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5 NTAyREM4OTJERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQkW7447wk7uKrNJLKgDzeOS0ZXrzEoP7ye /jJ9kocXDvg07DYao+0Kn5hSHRPVvtBafBCB6t5jHk83scCy3LqV83OirOPNcwtV swPFcmJ3raUCmQ0xgAo4ZoIOY6KS1Nf48f9mtIV77n42AMoYF0u5iSABT1ivuNMx wxrZnCSFGBV3bXrmqc+bO3KaFnqBrKXQlIjou+cj2XQ6YifUvoEDJn8+HPi770hu 0n4vM/AgPfJ7PGlksx4Gqsel2fzcL9ZPGY22AxeAs2dLtj7VYK8g7tun/ieTBXOj 26y7dFp6fuRy9WfgC/XwdfFMBOOquwcNGzTr4dVWRjss2s8Kz+I= -----END CERTIFICATE-----Generated at Wed Sep 23 01:16:22 2026 by rpki-client