$ rpki-client -vvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft File: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft (raw, json) Hash identifier: Tyq6lSPTD8R+njmB8ztRfEnMbmHuAjJpYaeIQgB/4BI= Subject key identifier: C3:91:EB:E9:4D:22:42:AC:ED:26:76:45:D9:EE:37:96:02:BA:A0:AC Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF Certificate issuer: /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Certificate serial: 6E9102D9365EE4BDC57A3A68016BC9E5E797CA0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 01:27:51 +0000 Manifest this update: Wed 29 Jul 2026 01:22:51 +0000 Manifest next update: Thu 30 Jul 2026 04:56:51 +0000 Files and hashes: 1: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl (hash: YD4CKzfO68QdT+ya+rGZIKidsKmfkb2DC8HQ0vK+2mE=) 2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:91:02:d9:36:5e:e4:bd:c5:7a:3a:68:01:6b:c9:e5:e7:97:ca:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Validity Not Before: Jul 29 01:22:51 2026 GMT Not After : Jul 30 04:56:51 2026 GMT Subject: CN=C391EBE94D2242ACED267645D9EE379602BAA0AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:82:3f:26:f2:74:c6:03:6d:76:74:c3:7c: 9c:5a:fd:fc:e7:69:6c:e5:80:87:5d:29:ec:7f:d1: 6d:1b:fe:f2:8b:37:66:8a:f0:66:a1:4c:ce:1a:01: cf:73:91:ed:43:83:ed:1f:4a:ab:e8:a3:3d:2e:cf: 18:b0:08:2c:08:b4:c6:b1:2a:51:11:34:d3:16:12: 12:72:79:d0:98:0a:ae:11:15:04:68:30:8e:a0:b0: 06:8b:2e:b6:e1:26:24:c2:d4:6f:fc:24:bf:3d:74: e2:bb:e5:8a:18:46:d9:7b:9c:ef:86:70:5f:55:ee: dc:55:57:d3:48:af:b1:14:d4:ab:84:ec:28:5f:84: de:16:53:3d:ad:74:cd:56:ca:4a:87:d9:cd:9e:86: f4:f1:de:62:c1:c2:2b:ca:da:b5:9f:89:36:16:32: a4:4b:a2:4d:e4:9f:40:35:a0:b1:11:14:43:26:b3: 72:76:50:09:40:32:4f:e3:32:cc:84:2c:ac:15:2e: f2:40:1e:66:31:db:ee:23:23:9e:4c:fd:d4:ee:44: 52:45:aa:cf:db:65:b7:3b:dc:92:46:a1:51:5c:ba: 15:5f:5d:91:dc:7a:4b:ab:f2:a8:96:e9:9b:b9:1a: de:9c:b6:b4:41:e4:5e:f3:e5:c4:a4:2a:62:5f:98: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:91:EB:E9:4D:22:42:AC:ED:26:76:45:D9:EE:37:96:02:BA:A0:AC X509v3 Authority Key Identifier: keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:75:c4:26:bb:f8:1d:bc:53:c4:f9:4b:2f:f8:3e:f2:b6:e1: 1d:5a:d9:12:ca:2f:6b:87:b8:88:c4:82:c0:2d:52:0f:ac:d6: 5a:c7:51:2e:65:3e:89:4c:89:a0:87:29:3d:c7:91:b3:ca:d5: 39:a4:64:64:e9:44:e3:69:76:1c:79:57:af:aa:aa:54:8c:75: 39:2a:07:56:ec:c8:01:80:74:00:97:52:de:f0:8c:a7:d3:74: ae:57:28:80:7e:ac:d9:80:08:fc:87:6d:a3:39:d4:7c:97:2d: 0d:0d:57:de:a0:0c:e5:66:71:68:3f:77:a3:f5:cc:22:07:f7: 31:21:f9:77:c4:38:ce:fb:be:c1:3f:36:91:a4:bf:7b:76:43: f8:d9:d1:ca:b9:b9:e1:24:39:ae:ba:e8:22:01:5e:7c:cc:78: 69:ce:9e:54:6d:5c:b2:ed:1c:cb:b1:25:55:70:d4:9c:19:1a: 30:36:61:8d:e0:81:f1:bb:de:b9:ef:cf:66:24:bb:44:d4:47: c2:f6:76:ba:e9:08:f3:44:26:88:20:7e:0b:1f:1c:3e:b0:01: f1:db:e9:86:86:06:65:93:66:b6:ec:01:44:6c:12:3e:48:19: 58:89:88:b4:e1:44:cf:01:56:a2:9a:6a:d7:d7:c6:64:61:a3: 23:24:b2:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpEC2TZe5L3FejpoAWvJ5eeXyg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAy REM4OTJERjAeFw0yNjA3MjkwMTIyNTFaFw0yNjA3MzAwNDU2NTFaMDMxMTAvBgNV BAMTKEMzOTFFQkU5NEQyMjQyQUNFRDI2NzY0NUQ5RUUzNzk2MDJCQUEwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YYI/JvJ0xgNtdnTDfJxa/fzn aWzlgIddKex/0W0b/vKLN2aK8GahTM4aAc9zke1Dg+0fSqvooz0uzxiwCCwItMax KlERNNMWEhJyedCYCq4RFQRoMI6gsAaLLrbhJiTC1G/8JL89dOK75YoYRtl7nO+G cF9V7txVV9NIr7EU1KuE7ChfhN4WUz2tdM1WykqH2c2ehvTx3mLBwivK2rWfiTYW MqRLok3kn0A1oLERFEMms3J2UAlAMk/jMsyELKwVLvJAHmYx2+4jI55M/dTuRFJF qs/bZbc73JJGoVFcuhVfXZHcekur8qiW6Zu5Gt6ctrRB5F7z5cSkKmJfmCm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw5Hr6U0iQqztJnZF2e43lgK6oKwwHwYDVR0j BBgwFoAUEo8Hk4/eb1gUJ8LQqpq5UC3Ikt8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIxNmYxYmQtOTU4ZS00N2Y1LTk0OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4 RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAyREM4OTJERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjhGMDc5MzhGREU2RjU4MTQyN0MyRDBBQTlBQjk1MDJEQzg5 MkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5 NTAyREM4OTJERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJh1xCa7+B28U8T5Sy/4PvK24R1a2RLKL2uH uIjEgsAtUg+s1lrHUS5lPolMiaCHKT3HkbPK1TmkZGTpRONpdhx5V6+qqlSMdTkq B1bsyAGAdACXUt7wjKfTdK5XKIB+rNmACPyHbaM51HyXLQ0NV96gDOVmcWg/d6P1 zCIH9zEh+XfEOM77vsE/NpGkv3t2Q/jZ0cq5ueEkOa666CIBXnzMeGnOnlRtXLLt HMuxJVVw1JwZGjA2YY3ggfG73rnvz2Yku0TUR8L2drrpCPNEJoggfgsfHD6wAfHb 6YaGBmWTZrbsAURsEj5IGViJiLThRM8BVqKaatfXxmRhoyMksr8= -----END CERTIFICATE-----Generated at Wed Jul 29 04:24:42 2026 by rpki-client