$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: 3D8vdNdkCXQzFcEQsSy10ybBPtTzqjhlxm2VkbsQJwM= Subject key identifier: B6:6B:4F:1D:FB:DB:14:A1:05:3E:E0:AE:FC:62:54:73:67:3F:53:0E Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 5A361FABE2EC1ABCA376D5AACED4A45B54C079BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 10:11:49 +0000 Manifest this update: Sun 15 Nov 2026 10:06:49 +0000 Manifest next update: Mon 16 Nov 2026 10:26:49 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: B9/Qdmov81z4C14PBZbfBoTYXV3XBY5IQ4XcFCzMZj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:36:1f:ab:e2:ec:1a:bc:a3:76:d5:aa:ce:d4:a4:5b:54:c0:79:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: Nov 15 10:06:49 2026 GMT Not After : Nov 16 10:26:49 2026 GMT Subject: CN=B66B4F1DFBDB14A1053EE0AEFC625473673F530E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a6:af:2b:b0:c8:86:b1:af:d5:ed:59:26:50: cd:09:a5:cb:25:a2:ec:77:8d:84:ff:6b:a9:e7:4c: 45:6f:03:69:7e:44:b2:37:25:96:b1:c8:1e:03:57: 96:46:48:2b:21:22:3d:28:1f:23:65:bc:14:9e:81: 1e:e5:db:52:98:4c:75:cc:08:41:0a:a9:96:62:66: 67:78:c2:86:22:7c:ea:70:e9:f5:16:7e:a8:5b:8f: 0f:8f:78:b2:aa:a1:86:84:fe:84:d0:6a:49:1e:4d: 45:6c:96:df:de:af:a0:41:f9:7a:cc:71:02:15:47: 31:70:98:4f:66:e6:36:f3:ed:f6:af:df:8f:1a:b9: b7:82:9c:75:c2:49:52:e9:32:38:dd:b8:c4:bf:b7: 8c:44:5b:58:6d:e7:24:9b:07:f2:ba:fc:e5:4c:af: e7:80:13:b2:46:cc:50:17:d1:74:bd:87:a8:b0:ae: 35:59:b7:e3:81:cf:d6:ca:e9:0e:cc:75:b0:c4:26: 50:51:dd:9a:b7:36:18:66:3a:8b:5f:73:2e:fe:c1: cc:78:4a:ae:a2:06:d6:57:19:18:59:77:f2:97:81: f8:c6:c9:fe:d2:d4:28:1e:02:9a:18:f3:00:65:be: 95:73:f6:20:c6:57:60:67:31:c7:65:91:ed:71:c8: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6B:4F:1D:FB:DB:14:A1:05:3E:E0:AE:FC:62:54:73:67:3F:53:0E X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6d:c9:b0:8a:14:a1:8f:8a:39:d2:4f:21:9a:04:76:5c:bc: ec:fe:44:c0:d7:04:6a:94:67:ee:10:03:dd:39:4a:12:fb:7c: 7a:11:52:72:8d:27:43:84:42:77:82:7c:f8:bd:d3:9a:cc:45: 03:f2:25:ab:3c:58:d2:75:7c:89:e1:6d:68:cf:70:a9:9e:78: cb:ea:be:25:87:04:62:0d:be:c4:d9:e2:5b:81:c8:64:dd:aa: c0:b0:53:b1:f6:19:28:93:02:12:a5:9a:d7:9a:76:84:f1:d3: 83:14:d7:ff:af:83:bc:96:82:f4:53:b3:96:ca:f5:39:a3:2b: fa:5e:e5:09:5f:9d:ab:ec:8a:c1:e5:8b:96:46:96:33:61:17: c9:09:a7:ac:41:aa:04:34:0d:39:7a:be:89:0a:2b:60:b5:c5: 8d:49:1d:e9:72:84:67:b1:81:da:93:cc:cb:6c:90:4a:a3:66: fc:1d:71:e9:cb:2d:c1:21:65:c4:fd:7a:31:f6:f9:68:36:48: cd:f5:0e:cb:5d:25:5e:05:85:6a:df:e4:6a:ec:34:c3:e2:73: 79:de:f5:9d:2f:90:7d:c0:c4:86:b6:8d:01:3e:a4:72:40:64: 48:cd:ff:f9:ea:32:10:c0:8e:2d:82:e8:29:46:b6:39:60:44: e4:17:81:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjYfq+LsGryjdtWqztSkW1TAeb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjExMTUxMDA2NDlaFw0yNjExMTYxMDI2NDlaMDMxMTAvBgNV BAMTKEI2NkI0RjFERkJEQjE0QTEwNTNFRTBBRUZDNjI1NDczNjczRjUzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmpq8rsMiGsa/V7VkmUM0Jpcsl oux3jYT/a6nnTEVvA2l+RLI3JZaxyB4DV5ZGSCshIj0oHyNlvBSegR7l21KYTHXM CEEKqZZiZmd4woYifOpw6fUWfqhbjw+PeLKqoYaE/oTQakkeTUVslt/er6BB+XrM cQIVRzFwmE9m5jbz7fav348aubeCnHXCSVLpMjjduMS/t4xEW1ht5ySbB/K6/OVM r+eAE7JGzFAX0XS9h6iwrjVZt+OBz9bK6Q7MdbDEJlBR3Zq3NhhmOotfcy7+wcx4 Sq6iBtZXGRhZd/KXgfjGyf7S1CgeApoY8wBlvpVz9iDGV2BnMcdlke1xyOf1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtmtPHfvbFKEFPuCu/GJUc2c/Uw4wHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZtybCKFKGPijnSTyGaBHZcvOz+RMDXBGqU Z+4QA905ShL7fHoRUnKNJ0OEQneCfPi905rMRQPyJas8WNJ1fInhbWjPcKmeeMvq viWHBGINvsTZ4luByGTdqsCwU7H2GSiTAhKlmteadoTx04MU1/+vg7yWgvRTs5bK 9TmjK/pe5QlfnavsisHli5ZGljNhF8kJp6xBqgQ0DTl6vokKK2C1xY1JHelyhGex gdqTzMtskEqjZvwdcenLLcEhZcT9ejH2+Wg2SM31DstdJV4FhWrf5GrsNMPic3ne 9Z0vkH3AxIa2jQE+pHJAZEjN//nqMhDAji2C6ClGtjlgROQXgfc= -----END CERTIFICATE-----Generated at Sun Nov 15 16:59:59 2026 by rpki-client