$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft File: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft (raw, json) Hash identifier: ah8Uwj7+JDki8QfF9GpPFJ7Ct88PkHDEh+I207F7o5E= Subject key identifier: 88:B8:F5:E5:FF:EF:5C:82:4D:59:51:90:47:F6:18:FC:96:76:5C:3F Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF Certificate issuer: /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Certificate serial: 256551EC0D2ED217C7B0D35E1CD6A7DEA0A6CFB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft Manifest number: E7 Signing time: Wed 21 Oct 2026 21:25:55 +0000 Manifest this update: Wed 21 Oct 2026 21:20:55 +0000 Manifest next update: Fri 23 Oct 2026 01:01:55 +0000 Files and hashes: 1: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl (hash: zqAxUKsW+SsMtmgCjPND8m2TFNbJcbVRrCjXTK8QW+k=) 2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:65:51:ec:0d:2e:d2:17:c7:b0:d3:5e:1c:d6:a7:de:a0:a6:cf:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF Validity Not Before: Oct 21 21:20:55 2026 GMT Not After : Oct 23 01:01:55 2026 GMT Subject: CN=88B8F5E5FFEF5C824D59519047F618FC96765C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:eb:20:64:b1:75:3e:dd:fa:be:e7:c0:e1: d8:93:0a:5b:cd:79:e1:49:85:22:8a:0d:7c:18:93: 88:44:22:cc:70:23:10:0d:2e:40:b5:3d:76:cb:06: 97:5a:cb:30:68:32:67:54:7d:3e:8d:81:0a:36:5b: 57:f1:7a:82:ae:0d:95:4d:e4:c9:8c:16:eb:c7:14: e3:f2:cf:55:62:68:94:d2:da:06:6a:dc:9f:f9:40: 0b:f8:86:8e:a9:5f:de:d2:ac:57:c4:09:e6:a9:bc: 72:29:d4:a2:38:dd:c7:21:14:f0:d4:44:75:5c:d0: 97:9c:f2:e4:44:55:6b:d4:12:1a:2e:84:1f:d2:4a: be:f1:7f:26:f8:4f:d0:06:ba:71:84:a7:0a:c0:97: 09:ee:71:2d:d5:64:9d:48:34:47:e4:10:23:9c:03: b5:bd:8b:42:1e:9e:8f:03:28:1f:21:26:99:46:66: 56:dd:17:e9:25:b2:da:61:d5:38:28:92:9f:17:9d: 2c:4c:1d:36:05:e9:6c:bf:d5:c0:a7:14:c7:07:a7: 9e:4d:08:2c:a0:cb:c2:0e:fe:9a:9f:c8:44:17:ab: 88:58:2c:cf:5d:ae:2b:9d:15:6f:d6:21:c9:87:96: cd:0e:8c:a0:b4:cf:26:69:8b:86:ae:57:c0:5b:e7: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B8:F5:E5:FF:EF:5C:82:4D:59:51:90:47:F6:18:FC:96:76:5C:3F X509v3 Authority Key Identifier: keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:38:c8:4b:5a:57:bc:ac:80:bd:50:b1:89:a0:fe:b8:40:9b: 70:f4:0c:27:ea:ec:d7:8d:fc:2e:95:82:ab:b9:64:8a:9e:a1: 64:95:e6:9b:67:92:6f:7c:a3:d3:54:3b:ea:78:42:80:a2:92: 25:f7:ce:b5:03:56:04:9e:0c:52:34:62:d2:61:cd:20:db:e1: c4:f8:ef:f6:ec:fc:97:05:3d:7c:ac:31:76:29:72:fe:df:8e: 3c:87:4f:7b:5d:cb:e2:c0:33:3a:38:56:02:0a:86:5d:bb:18: 9c:b8:b9:bb:af:40:1b:f3:d9:09:f5:e6:96:53:69:12:5a:d1: e7:db:80:12:a6:67:cc:8e:cc:73:72:f3:94:f4:a3:c2:d5:c7: 5f:ca:ba:db:71:78:b3:07:14:c1:44:13:65:c1:a3:05:28:97: f7:a5:16:44:84:3a:62:51:ca:fa:80:35:f8:18:34:33:f6:a6: 50:91:17:6d:52:fa:d9:7f:94:13:eb:d2:ac:20:9b:c1:a4:e5: 56:e5:99:97:3b:dd:ff:07:7c:4f:b2:41:8e:89:1a:fb:3f:34: e6:ba:87:f2:20:e1:ee:8d:2c:ca:62:02:dc:96:42:74:81:36: c1:82:5b:46:97:bd:0d:1f:28:b2:ee:fd:01:e5:b2:2a:be:c3: 16:38:d7:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWVR7A0u0hfHsNNeHNan3qCmz7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAy REM4OTJERjAeFw0yNjEwMjEyMTIwNTVaFw0yNjEwMjMwMTAxNTVaMDMxMTAvBgNV BAMTKDg4QjhGNUU1RkZFRjVDODI0RDU5NTE5MDQ3RjYxOEZDOTY3NjVDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsj+sgZLF1Pt36vufA4diTClvN eeFJhSKKDXwYk4hEIsxwIxANLkC1PXbLBpdayzBoMmdUfT6NgQo2W1fxeoKuDZVN 5MmMFuvHFOPyz1ViaJTS2gZq3J/5QAv4ho6pX97SrFfECeapvHIp1KI43cchFPDU RHVc0Jec8uREVWvUEhouhB/SSr7xfyb4T9AGunGEpwrAlwnucS3VZJ1INEfkECOc A7W9i0Ieno8DKB8hJplGZlbdF+klstph1Tgokp8XnSxMHTYF6Wy/1cCnFMcHp55N CCygy8IO/pqfyEQXq4hYLM9driudFW/WIcmHls0OjKC0zyZpi4auV8Bb53IzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiLj15f/vXIJNWVGQR/YY/JZ2XD8wHwYDVR0j BBgwFoAUEo8Hk4/eb1gUJ8LQqpq5UC3Ikt8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIxNmYxYmQtOTU4ZS00N2Y1LTk0OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4 RkRFNkY1ODE0MjdDMkQwQUE5QUI5NTAyREM4OTJERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjhGMDc5MzhGREU2RjU4MTQyN0MyRDBBQTlBQjk1MDJEQzg5 MkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvMTI4RjA3OTM4RkRFNkY1ODE0MjdDMkQwQUE5QUI5 NTAyREM4OTJERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIs4yEtaV7ysgL1QsYmg/rhAm3D0DCfq7NeN /C6Vgqu5ZIqeoWSV5ptnkm98o9NUO+p4QoCikiX3zrUDVgSeDFI0YtJhzSDb4cT4 7/bs/JcFPXysMXYpcv7fjjyHT3tdy+LAMzo4VgIKhl27GJy4ubuvQBvz2Qn15pZT aRJa0efbgBKmZ8yOzHNy85T0o8LVx1/KuttxeLMHFMFEE2XBowUol/elFkSEOmJR yvqANfgYNDP2plCRF21S+tl/lBPr0qwgm8Gk5VblmZc73f8HfE+yQY6JGvs/NOa6 h/Ig4e6NLMpiAtyWQnSBNsGCW0aXvQ0fKLLu/QHlsiq+wxY416Y= -----END CERTIFICATE-----Generated at Thu Oct 22 11:52:18 2026 by rpki-client