$ rpki-client -vvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft File: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft (raw, json) Hash identifier: xikY+fQ4wvBW7k58FmZ/bctLaAMHm2s+tNYBJ9U9Xnc= Subject key identifier: 40:B7:B3:90:EB:10:13:F2:7C:4E:3D:E5:4A:C1:1B:AC:A3:68:47:64 Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF Certificate issuer: /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Certificate serial: 3977D489A3C919580492F789F875BFEF553D08CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:32:37 +0000 Manifest this update: Thu 23 Jul 2026 18:27:37 +0000 Manifest next update: Fri 24 Jul 2026 22:24:37 +0000 Files and hashes: 1: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl (hash: aZJSurNDdVyxAbVXlveZFo86IWJ1sR5K7WRFIToFtzM=) 2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:77:d4:89:a3:c9:19:58:04:92:f7:89:f8:75:bf:ef:55:3d:08:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Validity Not Before: Jul 23 18:27:37 2026 GMT Not After : Jul 24 22:24:37 2026 GMT Subject: CN=40B7B390EB1013F27C4E3DE54AC11BACA3684764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:d8:f9:39:3b:60:f5:d5:d3:53:03:d7:01: 24:05:ae:4f:95:24:55:f6:50:b2:11:88:63:3c:14: 4f:2f:2b:a8:26:b3:a4:54:1c:6e:6d:8a:c5:22:a6: 97:08:7c:6a:68:8a:f9:05:97:5d:3a:e4:08:34:f3: 78:2d:70:8c:f5:36:f8:99:9b:c1:61:98:12:4e:95: 67:20:f9:20:c7:2a:61:1f:c0:84:45:1f:4b:80:8e: 10:f5:1a:4e:b3:54:ea:c9:e0:41:74:18:cf:39:ee: fc:21:78:dc:a9:aa:b9:45:ce:e1:b9:87:94:f5:6e: 76:47:33:2b:85:b9:e6:46:82:cc:97:a2:f2:c8:c4: 90:f1:1f:31:cf:01:00:89:5e:4b:96:73:f8:4e:68: 62:04:69:f8:93:08:ac:ec:5c:2b:0c:38:95:13:dc: 8a:a5:b0:8d:b4:ba:69:db:06:c0:08:f8:02:9e:7e: 37:b0:7f:a1:95:cb:29:82:67:9e:b3:10:56:83:72: 2f:2f:60:73:78:ef:f6:fa:2d:4c:7f:8f:07:94:44: cb:e8:17:e4:22:ca:94:3b:a2:aa:f4:15:19:17:82: be:4f:c3:49:64:17:51:d0:72:f4:59:4d:33:ff:ba: d2:da:ad:61:2c:d2:17:5b:44:6b:ea:41:94:c4:4f: 49:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:B3:90:EB:10:13:F2:7C:4E:3D:E5:4A:C1:1B:AC:A3:68:47:64 X509v3 Authority Key Identifier: keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0e:ad:7f:df:a1:08:c7:1d:3e:09:24:66:f7:2b:58:51:70: b2:df:d7:d4:74:08:e7:20:4a:ba:40:33:f1:c3:22:4f:12:59: 0c:bc:aa:25:ee:88:04:d8:84:78:98:c4:b7:bd:8d:ab:04:d2: a7:8f:d6:16:78:3a:ef:fc:08:79:1d:49:a1:19:fc:c3:b3:c7: e6:62:a7:27:cc:a6:fd:ae:b2:ad:e8:ed:94:93:4f:d0:41:98: 17:3e:dc:4e:0e:6e:b4:25:bf:80:9c:44:0b:cd:89:d9:76:78: cc:47:ac:72:98:73:9e:91:77:3a:3f:24:c2:a9:8a:17:88:86: e4:c6:b2:8c:ce:8b:c5:36:24:94:3a:3b:b7:b8:1e:bf:75:e5: 1d:f8:01:03:1e:95:e0:83:dc:1f:8d:aa:46:69:16:84:76:5b: 83:cf:eb:a0:ce:a0:34:fb:43:a5:33:d6:96:b6:7b:b8:72:a1: e0:d4:bb:26:38:be:d8:a3:1f:5f:4a:39:68:89:70:62:2d:66: 57:d5:8b:61:ba:91:04:90:6b:a0:89:f2:a3:61:40:03:68:63: 8b:16:d7:27:1f:91:81:cd:95:ef:b0:32:aa:0d:4d:a3:22:a2: 57:5b:fd:50:d3:e7:0c:87:f7:06:5f:06:c4:89:8c:02:2f:b3: 7d:8b:33:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXfUiaPJGVgEkveJ+HW/71U9CM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAy REM4OTJERjAeFw0yNjA3MjMxODI3MzdaFw0yNjA3MjQyMjI0MzdaMDMxMTAvBgNV BAMTKDQwQjdCMzkwRUIxMDEzRjI3QzRFM0RFNTRBQzExQkFDQTM2ODQ3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHtj5OTtg9dXTUwPXASQFrk+V JFX2ULIRiGM8FE8vK6gms6RUHG5tisUippcIfGpoivkFl1065Ag083gtcIz1NviZ m8FhmBJOlWcg+SDHKmEfwIRFH0uAjhD1Gk6zVOrJ4EF0GM857vwheNypqrlFzuG5 h5T1bnZHMyuFueZGgsyXovLIxJDxHzHPAQCJXkuWc/hOaGIEafiTCKzsXCsMOJUT 3IqlsI20umnbBsAI+AKefjewf6GVyymCZ56zEFaDci8vYHN47/b6LUx/jweURMvo F+QiypQ7oqr0FRkXgr5Pw0lkF1HQcvRZTTP/utLarWEs0hdbRGvqQZTET0mnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLezkOsQE/J8Tj3lSsEbrKNoR2QwHwYDVR0j BBgwFoAUEo8Hk4/eb1gUJ8LQqpq5UC3Ikt8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIxNmYxYmQtOTU4ZS00N2Y1LTk0OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4 RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAyREM4OTJERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjhGMDc5MzhGREU2RjU4MTQyN0MyRDBBQTlBQjk1MDJEQzg5 MkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5 NTAyREM4OTJERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0OrX/foQjHHT4JJGb3K1hRcLLf19R0COcg SrpAM/HDIk8SWQy8qiXuiATYhHiYxLe9jasE0qeP1hZ4Ou/8CHkdSaEZ/MOzx+Zi pyfMpv2usq3o7ZSTT9BBmBc+3E4ObrQlv4CcRAvNidl2eMxHrHKYc56Rdzo/JMKp iheIhuTGsozOi8U2JJQ6O7e4Hr915R34AQMeleCD3B+NqkZpFoR2W4PP66DOoDT7 Q6Uz1pa2e7hyoeDUuyY4vtijH19KOWiJcGItZlfVi2G6kQSQa6CJ8qNhQANoY4sW 1ycfkYHNle+wMqoNTaMioldb/VDT5wyH9wZfBsSJjAIvs32LM50= -----END CERTIFICATE-----Generated at Fri Jul 24 02:36:42 2026 by rpki-client