$ rpki-client -vvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft File: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft (raw, json) Hash identifier: WX4Q6Fs/fUckHwtEj1sHeRBGHsX5TqjmAJ1OKVPwj+o= Subject key identifier: E1:31:4E:DD:4B:F7:F6:23:C0:F0:8E:21:E6:1C:3D:06:E6:56:82:8C Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF Certificate issuer: /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Certificate serial: 4378D69CA3762574CC814BD698C7823B7C42EB1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:14:50 +0000 Manifest this update: Tue 12 May 2026 15:09:50 +0000 Manifest next update: Wed 13 May 2026 18:29:50 +0000 Files and hashes: 1: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl (hash: UTlNsA6hP0htRKptauR71XJn6NrIf01o5GEcsOLHrpc=) 2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:78:d6:9c:a3:76:25:74:cc:81:4b:d6:98:c7:82:3b:7c:42:eb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Validity Not Before: May 12 15:09:50 2026 GMT Not After : May 13 18:29:50 2026 GMT Subject: CN=E1314EDD4BF7F623C0F08E21E61C3D06E656828C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:36:3c:94:07:d1:8e:b5:24:cc:da:23:4a: 41:0a:4c:c3:10:e6:5a:b7:a6:81:60:57:30:54:af: 21:ff:38:03:a6:2b:77:dd:fc:03:e8:62:4c:62:10: f0:0f:ad:2d:9d:21:38:00:21:ee:f9:5c:66:bb:41: 2a:0c:b0:3b:45:c9:c5:f3:f9:f6:36:e6:07:98:d8: fa:7e:4e:ad:98:52:50:6f:15:1f:90:58:ac:91:88: ae:36:07:fb:68:38:7d:6e:3f:cc:e4:0f:84:cd:b7: 25:27:ca:76:b8:17:92:c7:15:2c:66:b8:90:c4:6f: 97:b0:97:83:3e:52:5d:28:06:aa:63:23:dd:37:92: d0:a7:16:f6:2a:49:7a:d3:ad:37:73:85:b5:28:d9: 27:39:cd:8f:d4:fd:e8:67:97:dc:cf:2a:8b:48:39: 46:f7:c5:f9:04:32:e4:ef:ca:a3:6f:e0:f8:9f:31: 13:1b:76:05:08:98:94:f4:f7:d3:0a:6b:6c:35:92: af:d7:aa:0f:75:9c:e7:00:e6:65:ec:ba:a6:e0:24: a7:cc:ba:00:4d:a0:14:69:48:6d:38:fe:9b:74:a2: 78:a1:d7:df:d9:d6:79:16:ab:64:75:a1:2e:8e:bb: 94:80:54:83:1d:3b:a0:6b:3e:91:95:4c:dc:fe:a3: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:31:4E:DD:4B:F7:F6:23:C0:F0:8E:21:E6:1C:3D:06:E6:56:82:8C X509v3 Authority Key Identifier: keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0c:77:09:e8:99:1c:79:9a:c0:32:92:67:65:58:39:8e:2a: 0f:16:4b:e3:12:14:ae:3f:cf:2a:06:8b:9a:fa:72:e4:45:37: ee:c4:61:76:d7:a5:25:ff:8d:4f:58:37:fd:d5:5b:47:96:e4: 6e:2a:d2:61:86:8b:c9:18:79:4e:02:20:68:5f:ef:2e:8a:91: 83:2b:7b:31:8d:a1:72:da:54:d2:a6:cc:9f:80:0d:48:78:cd: fd:63:38:7b:65:9a:dd:e3:41:31:09:35:7a:01:9e:ed:43:79: 57:86:fa:ab:0b:f0:2f:09:f8:39:e1:1a:5a:ef:eb:f3:7e:7c: 45:1a:0c:b5:c3:0c:87:41:92:c4:41:f6:79:80:4e:c0:d2:af: 20:65:12:7e:95:bf:06:b7:43:a2:22:09:25:2c:b2:a5:6f:6d: 30:69:34:dc:42:81:50:ee:5a:c7:b3:45:bc:2f:06:a9:2e:59: b4:62:a3:8a:5c:4a:ec:9a:e6:29:c0:e4:a6:90:69:bd:7c:66: 65:55:7b:b1:f0:48:91:83:12:3a:49:c1:d3:7e:b6:78:de:e8: 01:80:5a:9f:7e:01:fa:60:93:ae:eb:ad:16:37:ea:29:71:93: 0c:61:df:0d:94:11:85:0e:62:3d:30:74:62:52:45:96:e7:91: 8b:eb:8d:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3jWnKN2JXTMgUvWmMeCO3xC6x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAy REM4OTJERjAeFw0yNjA1MTIxNTA5NTBaFw0yNjA1MTMxODI5NTBaMDMxMTAvBgNV BAMTKEUxMzE0RURENEJGN0Y2MjNDMEYwOEUyMUU2MUMzRDA2RTY1NjgyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZTY8lAfRjrUkzNojSkEKTMMQ 5lq3poFgVzBUryH/OAOmK3fd/APoYkxiEPAPrS2dITgAIe75XGa7QSoMsDtFycXz +fY25geY2Pp+Tq2YUlBvFR+QWKyRiK42B/toOH1uP8zkD4TNtyUnyna4F5LHFSxm uJDEb5ewl4M+Ul0oBqpjI903ktCnFvYqSXrTrTdzhbUo2Sc5zY/U/ehnl9zPKotI OUb3xfkEMuTvyqNv4PifMRMbdgUImJT099MKa2w1kq/Xqg91nOcA5mXsuqbgJKfM ugBNoBRpSG04/pt0onih19/Z1nkWq2R1oS6Ou5SAVIMdO6BrPpGVTNz+o+5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4TFO3Uv39iPA8I4h5hw9BuZWgowwHwYDVR0j BBgwFoAUEo8Hk4/eb1gUJ8LQqpq5UC3Ikt8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIxNmYxYmQtOTU4ZS00N2Y1LTk0OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4 RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAyREM4OTJERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjhGMDc5MzhGREU2RjU4MTQyN0MyRDBBQTlBQjk1MDJEQzg5 MkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5 NTAyREM4OTJERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4MdwnomRx5msAykmdlWDmOKg8WS+MSFK4/ zyoGi5r6cuRFN+7EYXbXpSX/jU9YN/3VW0eW5G4q0mGGi8kYeU4CIGhf7y6KkYMr ezGNoXLaVNKmzJ+ADUh4zf1jOHtlmt3jQTEJNXoBnu1DeVeG+qsL8C8J+DnhGlrv 6/N+fEUaDLXDDIdBksRB9nmATsDSryBlEn6Vvwa3Q6IiCSUssqVvbTBpNNxCgVDu WsezRbwvBqkuWbRio4pcSuya5inA5KaQab18ZmVVe7HwSJGDEjpJwdN+tnje6AGA Wp9+Afpgk67rrRY36ilxkwxh3w2UEYUOYj0wdGJSRZbnkYvrja0= -----END CERTIFICATE-----Generated at Tue May 12 22:46:50 2026 by rpki-client