$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft File: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft (raw, json) Hash identifier: XcQDh0gznJ8JuO7i7gW4ZpfBEkfXbEcRS4lKsi1h0/c= Subject key identifier: 02:90:AC:A6:22:77:42:63:EB:40:9C:0E:FF:54:C2:11:7F:8C:D9:3B Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF Certificate issuer: /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Certificate serial: 38A5436E5BB21802ED85000353D95F8DC2E71424 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 15:26:54 +0000 Manifest this update: Wed 02 Sep 2026 15:21:54 +0000 Manifest next update: Thu 03 Sep 2026 16:41:54 +0000 Files and hashes: 1: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl (hash: kidkxy/lW8c1JgbLfleELvjt1aQZFWtMDt/aCY+S5rA=) 2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 16:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a5:43:6e:5b:b2:18:02:ed:85:00:03:53:d9:5f:8d:c2:e7:14:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Validity Not Before: Sep 2 15:21:54 2026 GMT Not After : Sep 3 16:41:54 2026 GMT Subject: CN=0290ACA622774263EB409C0EFF54C2117F8CD93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:02:a0:fa:a6:c3:68:aa:d4:74:af:ac:3b: ce:ea:74:06:5e:83:33:fb:e7:87:90:45:ae:ae:af: de:4e:59:41:9a:79:0e:78:e0:6e:5f:5e:7d:b9:76: 02:41:79:99:94:68:12:c1:a3:02:29:f7:93:e1:6f: 35:a2:23:19:95:da:9b:69:d6:f6:75:65:dd:db:ad: 66:ef:e9:fe:8e:6e:6f:ae:98:a9:6b:73:eb:e0:e3: 8e:e3:7c:f9:be:32:bc:62:cb:24:f5:d0:e3:aa:62: 68:3e:0b:39:84:be:97:9d:d8:2f:34:8b:de:54:80: bc:40:de:8f:96:38:5e:b1:14:29:bf:97:5e:f2:5d: bb:de:8b:c1:ae:0a:33:08:0d:4f:b5:44:b3:16:39: 73:e7:5f:1c:2d:96:3a:54:c2:de:98:35:90:d6:9b: bb:86:10:05:ac:aa:37:8e:b6:df:c0:90:38:22:04: 55:a6:26:26:d0:96:e9:d7:ea:0e:13:b0:5f:d5:1b: 55:ac:b6:cc:dc:07:1d:5e:96:34:f2:a5:32:85:e6: 6b:a7:7d:d0:de:d5:7d:ba:ae:49:74:d9:2b:7d:a9: 2a:96:44:a0:33:37:eb:a2:d3:98:e5:1a:b2:dc:cf: a8:3f:4d:f7:48:e3:f2:92:0a:43:35:ef:cd:6b:c6: 40:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:90:AC:A6:22:77:42:63:EB:40:9C:0E:FF:54:C2:11:7F:8C:D9:3B X509v3 Authority Key Identifier: keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5b:22:60:00:dc:ee:fc:12:b2:7a:b5:0b:6e:2f:fc:73:4c: 8e:e4:18:c0:2a:6b:88:da:18:4e:7d:d2:57:a8:74:cd:55:0c: 0f:f1:1c:63:a5:a5:5e:c3:cc:58:45:a6:4f:51:da:19:41:1e: c3:b0:9d:33:26:67:43:b1:6f:08:f7:e8:16:93:a0:6e:5d:56: 91:44:09:6e:cb:c2:a0:29:19:a3:f5:3d:b7:f8:d9:26:8d:76: 74:2d:5c:d7:32:cf:79:e0:58:df:d8:39:24:c3:c4:1c:da:f4: be:89:74:6f:6e:62:d7:ba:76:3b:c6:d2:c4:84:3c:f9:3f:43: bb:a2:e0:78:c3:cc:41:a7:f7:70:0b:55:12:65:c5:da:81:0c: bd:81:06:e6:65:9f:b6:b2:98:46:32:e8:64:d1:9a:38:ec:f7: 46:e7:18:f5:ca:26:9c:d3:87:b5:a2:91:4e:b8:bd:7f:7c:e9: 2b:cc:a7:41:3e:70:1c:49:af:e0:4e:f1:8a:de:e0:06:97:07: 0e:1d:08:09:fa:b9:f5:54:13:fa:70:9d:3e:cd:44:d2:77:0b: cf:95:f6:0b:e7:60:f7:89:d1:a9:7a:de:c1:b8:59:13:e3:60: fe:3d:4a:31:fe:37:b6:a8:f3:e5:1f:75:7a:fc:08:33:4e:fa: b3:18:22:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKVDbluyGALthQADU9lfjcLnFCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAy REM4OTJERjAeFw0yNjA5MDIxNTIxNTRaFw0yNjA5MDMxNjQxNTRaMDMxMTAvBgNV BAMTKDAyOTBBQ0E2MjI3NzQyNjNFQjQwOUMwRUZGNTRDMjExN0Y4Q0Q5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfAKg+qbDaKrUdK+sO87qdAZe gzP754eQRa6ur95OWUGaeQ544G5fXn25dgJBeZmUaBLBowIp95PhbzWiIxmV2ptp 1vZ1Zd3brWbv6f6Obm+umKlrc+vg447jfPm+MrxiyyT10OOqYmg+CzmEvped2C80 i95UgLxA3o+WOF6xFCm/l17yXbvei8GuCjMIDU+1RLMWOXPnXxwtljpUwt6YNZDW m7uGEAWsqjeOtt/AkDgiBFWmJibQlunX6g4TsF/VG1WstszcBx1eljTypTKF5mun fdDe1X26rkl02St9qSqWRKAzN+ui05jlGrLcz6g/TfdI4/KSCkM1781rxkCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUApCspiJ3QmPrQJwO/1TCEX+M2TswHwYDVR0j BBgwFoAUEo8Hk4/eb1gUJ8LQqpq5UC3Ikt8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIxNmYxYmQtOTU4ZS00N2Y1LTk0OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4 RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAyREM4OTJERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjhGMDc5MzhGREU2RjU4MTQyN0MyRDBBQTlBQjk1MDJEQzg5 MkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5 NTAyREM4OTJERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBbImAA3O78ErJ6tQtuL/xzTI7kGMAqa4ja GE590leodM1VDA/xHGOlpV7DzFhFpk9R2hlBHsOwnTMmZ0Oxbwj36BaToG5dVpFE CW7LwqApGaP1Pbf42SaNdnQtXNcyz3ngWN/YOSTDxBza9L6JdG9uYte6djvG0sSE PPk/Q7ui4HjDzEGn93ALVRJlxdqBDL2BBuZln7aymEYy6GTRmjjs90bnGPXKJpzT h7WikU64vX986SvMp0E+cBxJr+BO8Yre4AaXBw4dCAn6ufVUE/pwnT7NRNJ3C8+V 9gvnYPeJ0al63sG4WRPjYP49SjH+N7ao8+UfdXr8CDNO+rMYIm0= -----END CERTIFICATE-----Generated at Thu Sep 3 06:00:20 2026 by rpki-client