$ rpki-client -vvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft File: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft (raw, json) Hash identifier: 9vMHP4FeQKK2ox4hqLRuvro6Zhhb93mJrenlWjiCscU= Subject key identifier: 8D:02:F8:88:84:E0:4B:78:BE:64:4D:E6:64:12:84:70:0C:E0:81:20 Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF Certificate issuer: /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Certificate serial: 3470E427F7F1B547814930E96A3FEA26155125C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:18:19 +0000 Manifest this update: Tue 02 Jun 2026 19:13:19 +0000 Manifest next update: Wed 03 Jun 2026 19:21:19 +0000 Files and hashes: 1: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl (hash: pYbBPcurUHTbhpeAsbPrl63cshjH7qE8Eq4ccB/pFvU=) 2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:70:e4:27:f7:f1:b5:47:81:49:30:e9:6a:3f:ea:26:15:51:25:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Validity Not Before: Jun 2 19:13:19 2026 GMT Not After : Jun 3 19:21:19 2026 GMT Subject: CN=8D02F88884E04B78BE644DE6641284700CE08120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:e0:29:26:09:e4:74:12:05:8f:8d:a0:2b: 8c:01:a5:ca:c7:22:00:c0:0f:9b:2e:a9:b0:23:df: e6:15:a5:d5:45:3f:17:13:4e:ac:ad:f6:8c:3a:c2: c5:20:ec:0a:45:88:1a:77:96:0f:b6:85:2b:8d:d8: 46:67:98:67:cd:39:52:57:d9:38:9c:ec:5b:9c:29: 31:cd:60:3a:65:08:29:c1:60:82:39:fa:7c:f3:a7: 11:5b:21:a4:8f:96:12:52:ea:60:74:22:0d:5e:c8: ee:fd:db:91:71:27:82:79:3a:57:06:92:ff:70:6c: a2:76:1a:60:1f:be:b3:2c:77:89:7d:96:56:96:26: 4a:34:0a:6c:65:d5:1a:f4:32:86:92:8b:bc:c2:e6: b5:ac:87:eb:28:1b:b3:c4:92:8f:01:ef:22:f3:e1: b8:00:d7:26:3d:f0:f1:48:20:74:24:70:f5:5c:93: d8:9d:00:af:e8:34:e3:44:46:68:64:e8:03:f0:c0: a8:88:7d:c5:f0:f1:9a:e9:c6:d1:82:a1:58:51:ad: 6a:5d:01:d2:e3:9d:a2:c5:be:cb:e5:25:5d:f1:9c: db:20:51:1c:18:d0:f7:f7:6b:71:14:0e:6f:b3:b0: 76:50:a5:57:99:b7:c2:4d:32:80:e7:9a:40:10:d4: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:02:F8:88:84:E0:4B:78:BE:64:4D:E6:64:12:84:70:0C:E0:81:20 X509v3 Authority Key Identifier: keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ba:36:aa:9e:55:82:e1:d9:48:84:ba:ed:19:c5:d2:58:5a: 7d:cd:47:83:12:f6:98:2c:0e:07:af:d9:1b:fa:ef:96:aa:5e: cb:10:a2:cf:bc:ae:fc:a0:0a:1e:b5:ea:47:10:5b:f0:cb:ec: 73:b4:a9:ae:a8:8f:28:ce:f5:22:2e:3d:04:3a:43:8f:46:03: 05:75:a0:81:82:06:75:29:bf:ff:c9:36:76:7d:d8:70:b9:e3: 3c:48:ec:4c:48:47:a5:7b:5a:90:76:43:0a:05:ab:12:78:9a: a4:8e:c6:b4:7e:e6:17:97:eb:4b:c3:49:e3:5c:df:69:a2:ae: a8:25:ef:fc:55:14:75:19:ce:c8:de:35:b3:b9:3b:fd:7d:f6: 45:9b:28:13:ea:7e:88:ab:58:69:6d:6f:df:41:b1:9e:25:2a: 2b:1d:41:b7:fe:4f:96:ad:49:bd:6c:c9:f5:25:e9:f1:1d:67: f8:9a:71:4d:61:90:83:52:70:5c:d9:f9:4d:8f:56:ad:a8:d4: 09:5a:45:16:9b:bc:3a:00:dc:22:0c:55:c5:72:bc:10:fe:1d: 5e:49:90:b8:d4:11:35:1b:b2:cd:0b:01:40:36:a6:a3:bb:50: 5a:23:e5:11:21:f7:8a:6e:af:da:fd:2f:c5:47:b3:ae:f7:81: 07:35:86:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHDkJ/fxtUeBSTDpaj/qJhVRJccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAy REM4OTJERjAeFw0yNjA2MDIxOTEzMTlaFw0yNjA2MDMxOTIxMTlaMDMxMTAvBgNV BAMTKDhEMDJGODg4ODRFMDRCNzhCRTY0NERFNjY0MTI4NDcwMENFMDgxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2muApJgnkdBIFj42gK4wBpcrH IgDAD5suqbAj3+YVpdVFPxcTTqyt9ow6wsUg7ApFiBp3lg+2hSuN2EZnmGfNOVJX 2Tic7FucKTHNYDplCCnBYII5+nzzpxFbIaSPlhJS6mB0Ig1eyO7925FxJ4J5OlcG kv9wbKJ2GmAfvrMsd4l9llaWJko0Cmxl1Rr0MoaSi7zC5rWsh+soG7PEko8B7yLz 4bgA1yY98PFIIHQkcPVck9idAK/oNONERmhk6APwwKiIfcXw8ZrpxtGCoVhRrWpd AdLjnaLFvsvlJV3xnNsgURwY0Pf3a3EUDm+zsHZQpVeZt8JNMoDnmkAQ1KDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjQL4iITgS3i+ZE3mZBKEcAzggSAwHwYDVR0j BBgwFoAUEo8Hk4/eb1gUJ8LQqpq5UC3Ikt8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIxNmYxYmQtOTU4ZS00N2Y1LTk0OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4 RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAyREM4OTJERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjhGMDc5MzhGREU2RjU4MTQyN0MyRDBBQTlBQjk1MDJEQzg5 MkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5 NTAyREM4OTJERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy6NqqeVYLh2UiEuu0ZxdJYWn3NR4MS9pgs Dgev2Rv675aqXssQos+8rvygCh616kcQW/DL7HO0qa6ojyjO9SIuPQQ6Q49GAwV1 oIGCBnUpv//JNnZ92HC54zxI7ExIR6V7WpB2QwoFqxJ4mqSOxrR+5heX60vDSeNc 32mirqgl7/xVFHUZzsjeNbO5O/199kWbKBPqfoirWGltb99BsZ4lKisdQbf+T5at Sb1syfUl6fEdZ/iacU1hkINScFzZ+U2PVq2o1AlaRRabvDoA3CIMVcVyvBD+HV5J kLjUETUbss0LAUA2pqO7UFoj5REh94pur9r9L8VHs673gQc1hqE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:34 2026 by rpki-client