$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft File: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft (raw, json) Hash identifier: EefmC1bNyGprFJnUF+m76BClnDHTkJtcpngv0Bdgi/s= Subject key identifier: 0F:DB:D9:D6:85:FB:6D:11:E5:63:1B:DC:01:BE:6F:E3:61:51:7B:A3 Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF Certificate issuer: /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Certificate serial: 09DADAA55E64BBA84F37DF7802F5728487EFD3C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 20:05:17 +0000 Manifest this update: Thu 24 Sep 2026 20:00:17 +0000 Manifest next update: Fri 25 Sep 2026 23:38:17 +0000 Files and hashes: 1: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl (hash: x5rH3Z3yfrp8ffE4r5pwji8/rYO3ystlXn0fz+Km28k=) 2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:da:da:a5:5e:64:bb:a8:4f:37:df:78:02:f5:72:84:87:ef:d3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Validity Not Before: Sep 24 20:00:17 2026 GMT Not After : Sep 25 23:38:17 2026 GMT Subject: CN=0FDBD9D685FB6D11E5631BDC01BE6FE361517BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ed:6e:e0:b0:37:07:ba:a6:64:bc:49:e4:70: 16:14:44:b2:72:62:df:61:f8:ad:84:05:f2:bc:92: 9b:6c:a5:69:b3:ad:27:be:f7:88:4c:02:50:40:68: 1e:29:4f:ee:d3:59:3f:04:8e:de:77:6e:b7:5b:d3: 35:60:bc:04:fc:bc:b0:81:8b:29:40:e4:71:c6:45: 84:9f:f2:37:74:af:c2:1d:8f:04:dc:be:0e:4f:ce: ba:13:c8:1d:96:61:a7:b5:dd:3d:d1:91:50:c9:c5: 67:0e:a6:1c:26:cb:ea:09:55:56:3a:01:06:3a:e0: 3b:44:0f:c6:39:1f:de:90:1a:62:cc:fe:1e:b4:51: 03:4b:1f:b3:11:17:aa:78:f4:29:89:0f:4c:ce:97: 91:db:5f:bd:1f:4b:d7:82:ab:dc:a2:21:0e:6e:7e: a8:87:cb:2e:ae:8e:fc:b3:92:65:9f:19:e3:1c:13: fd:be:b6:c2:2c:1c:80:bb:3c:cf:48:21:f1:6b:9a: 68:f3:84:39:9d:73:47:96:f4:51:7f:7d:b4:17:cd: 83:26:c1:21:ef:48:03:06:dd:61:4e:e4:54:f1:e8: b0:c1:68:31:2d:26:be:6e:5e:02:c7:14:a4:66:26: 7b:79:ce:e7:e1:bd:14:43:9d:25:e1:5b:40:2a:30: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DB:D9:D6:85:FB:6D:11:E5:63:1B:DC:01:BE:6F:E3:61:51:7B:A3 X509v3 Authority Key Identifier: keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:83:23:79:a7:1c:cb:10:77:5a:32:f5:ac:c9:4e:cd:bc:01: a0:59:1b:c0:31:01:bb:61:87:e1:ab:de:ad:11:37:dc:d4:10: 17:fa:2b:4d:d3:19:7d:00:9e:4f:6c:1b:cd:48:ff:b2:a1:f8: 0b:40:fa:c9:b5:15:38:cc:99:0f:59:8c:c3:14:69:08:2a:55: 5c:bc:bd:b2:50:34:c2:d6:15:f5:3a:8e:88:49:54:dc:8d:91: e3:02:5f:e2:54:e7:4e:46:3d:32:eb:b3:ab:3f:b4:d9:72:d5: 32:97:ac:c8:a2:2c:a6:86:ca:14:53:4b:9e:8c:59:2d:21:f6: 54:e6:ac:d2:25:f1:68:12:41:e0:60:d5:3b:2f:7d:42:26:7b: ea:58:fb:0f:09:df:21:1a:43:e8:23:d9:84:29:f7:cb:90:40: 50:40:f7:b5:4a:ff:1b:33:1a:ee:fd:a9:23:b6:ce:e7:ba:a8: 3f:c8:90:83:a7:03:b3:a7:6d:03:3b:d4:28:95:ca:d4:17:4e: 2a:42:43:64:ec:15:7b:23:23:91:fa:eb:1c:30:bf:fd:7c:76: 5f:90:a4:2c:e5:7a:1f:94:0b:2f:4b:dc:f3:6c:d8:0c:41:0d: 5e:0f:e5:1b:cc:74:6b:8a:8e:8e:e5:1f:47:bd:6e:27:2d:70: ad:57:20:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdrapV5ku6hPN994AvVyhIfv08EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAy REM4OTJERjAeFw0yNjA5MjQyMDAwMTdaFw0yNjA5MjUyMzM4MTdaMDMxMTAvBgNV BAMTKDBGREJEOUQ2ODVGQjZEMTFFNTYzMUJEQzAxQkU2RkUzNjE1MTdCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg7W7gsDcHuqZkvEnkcBYURLJy Yt9h+K2EBfK8kptspWmzrSe+94hMAlBAaB4pT+7TWT8Ejt53brdb0zVgvAT8vLCB iylA5HHGRYSf8jd0r8IdjwTcvg5PzroTyB2WYae13T3RkVDJxWcOphwmy+oJVVY6 AQY64DtED8Y5H96QGmLM/h60UQNLH7MRF6p49CmJD0zOl5HbX70fS9eCq9yiIQ5u fqiHyy6ujvyzkmWfGeMcE/2+tsIsHIC7PM9IIfFrmmjzhDmdc0eW9FF/fbQXzYMm wSHvSAMG3WFO5FTx6LDBaDEtJr5uXgLHFKRmJnt5zufhvRRDnSXhW0AqMN3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD9vZ1oX7bRHlYxvcAb5v42FRe6MwHwYDVR0j BBgwFoAUEo8Hk4/eb1gUJ8LQqpq5UC3Ikt8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIxNmYxYmQtOTU4ZS00N2Y1LTk0OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4 RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAyREM4OTJERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjhGMDc5MzhGREU2RjU4MTQyN0MyRDBBQTlBQjk1MDJEQzg5 MkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5 NTAyREM4OTJERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSDI3mnHMsQd1oy9azJTs28AaBZG8AxAbth h+Gr3q0RN9zUEBf6K03TGX0Ank9sG81I/7Kh+AtA+sm1FTjMmQ9ZjMMUaQgqVVy8 vbJQNMLWFfU6johJVNyNkeMCX+JU505GPTLrs6s/tNly1TKXrMiiLKaGyhRTS56M WS0h9lTmrNIl8WgSQeBg1TsvfUIme+pY+w8J3yEaQ+gj2YQp98uQQFBA97VK/xsz Gu79qSO2zue6qD/IkIOnA7OnbQM71CiVytQXTipCQ2TsFXsjI5H66xwwv/18dl+Q pCzleh+UCy9L3PNs2AxBDV4P5RvMdGuKjo7lH0e9bictcK1XIPc= -----END CERTIFICATE-----Generated at Fri Sep 25 09:21:18 2026 by rpki-client