
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft
File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json)
Hash identifier: 3i+E9EeUp9RTIQwHfHtAnejCijQ1QVK8K/NoXaFqbRk=
Subject key identifier: 34:AB:3A:AC:77:35:FD:2E:E6:33:D5:F1:23:EA:41:9A:A6:A9:48:24
Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71
Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71
Certificate serial: 10C00E8FA0C0C39C0D22E7199123AAFEA8607B64
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 02:15:29 +0000
Manifest this update: Wed 17 Jun 2026 02:10:29 +0000
Manifest next update: Thu 18 Jun 2026 05:05:29 +0000
Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: wb/mL1NuVagFBrnTBpsTdtGi56P9gPvmmqkuUrmCQtg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl
rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 04:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c0:0e:8f:a0:c0:c3:9c:0d:22:e7:19:91:23:aa:fe:a8:60:7b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71
Validity
Not Before: Jun 17 02:10:29 2026 GMT
Not After : Jun 18 05:05:29 2026 GMT
Subject: CN=34AB3AAC7735FD2EE633D5F123EA419AA6A94824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:00:32:5e:fd:0e:8a:c7:36:74:c3:ee:38:
b9:87:b0:5a:3f:ba:1b:90:1b:2b:8c:84:bd:aa:c5:
e1:2d:14:ed:83:50:5a:77:ff:57:73:af:40:ed:74:
8c:20:15:58:4c:cb:aa:74:4d:39:2e:ed:ca:93:3a:
ac:94:b2:26:ba:82:a2:51:60:8c:c0:d9:d8:bd:91:
21:4e:16:cd:99:7e:59:08:91:78:81:a7:84:08:9c:
f1:6f:b1:bb:e8:84:2c:88:44:90:3f:ea:9e:54:60:
87:95:7c:76:d3:c3:05:0a:da:27:e1:b2:86:70:40:
33:d6:ce:12:bb:11:61:bc:3a:c5:9e:ae:cd:38:dd:
c3:d1:40:fc:3f:c5:95:01:bc:6c:1c:1f:ec:a6:80:
00:f6:f9:5b:46:67:bc:7e:d6:15:b1:b5:12:08:99:
89:02:d9:28:0a:c8:27:e5:27:15:a4:6f:cd:dd:f3:
08:a6:a5:b3:fc:fa:2d:db:bf:4d:ff:73:b7:1f:85:
20:9f:8e:22:e7:6a:a3:8f:27:d7:c4:cf:a5:51:db:
c5:8c:ec:ce:bd:f7:e4:04:cc:7a:86:c7:64:e1:90:
a7:a9:fa:c8:30:72:8c:5e:1b:66:89:3a:5c:e8:55:
01:05:27:2c:ba:fe:65:81:cc:bf:75:34:20:1e:be:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:3A:AC:77:35:FD:2E:E6:33:D5:F1:23:EA:41:9A:A6:A9:48:24
X509v3 Authority Key Identifier:
keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fc:33:bf:d0:ff:98:fa:71:dd:11:3e:db:37:6f:ad:39:eb:
bd:d0:e8:14:79:ce:31:b3:b8:0b:fe:d9:7d:1b:d0:fb:df:41:
23:eb:b5:b9:cd:c6:c1:26:d4:4f:dd:6b:2b:af:a4:ed:cd:2b:
f0:00:65:9b:4c:07:54:72:9f:65:ed:70:18:e8:04:f0:6a:24:
6a:8f:88:c9:3d:97:36:9c:07:49:3b:16:c2:04:8a:f9:49:c9:
59:83:b4:15:89:58:2e:0e:fd:1c:c0:71:4f:c3:b1:a6:d6:52:
c9:86:be:dc:f0:be:f8:51:46:48:a3:96:8b:d5:01:c2:d9:5a:
dd:28:35:72:3e:76:c5:a9:88:72:47:fb:84:cb:76:65:2d:38:
0d:61:3a:72:06:64:6d:7a:5e:7a:a6:db:0e:36:8a:f9:e0:4a:
a3:3c:e7:9a:b9:8e:af:9b:75:13:0c:b6:24:a2:5d:55:ea:2c:
86:44:a5:78:7d:14:13:ab:ff:bc:19:e0:d3:e4:c7:35:cd:99:
2e:6a:b7:c1:72:d2:e1:06:e7:75:fa:1c:7b:c8:96:dd:e3:be:
25:af:02:7c:a9:56:ab:3e:0b:c2:30:c9:d6:99:19:89:ba:7b:
e7:64:0c:4d:6a:b9:f8:b3:ac:92:b5:55:a3:a9:52:ea:32:c2:
ed:18:f8:b6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEMAOj6DAw5wNIucZkSOq/qhge2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2
QURBM0Q3MTAeFw0yNjA2MTcwMjEwMjlaFw0yNjA2MTgwNTA1MjlaMDMxMTAvBgNV
BAMTKDM0QUIzQUFDNzczNUZEMkVFNjMzRDVGMTIzRUE0MTlBQTZBOTQ4MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQwAyXv0Oisc2dMPuOLmHsFo/
uhuQGyuMhL2qxeEtFO2DUFp3/1dzr0DtdIwgFVhMy6p0TTku7cqTOqyUsia6gqJR
YIzA2di9kSFOFs2ZflkIkXiBp4QInPFvsbvohCyIRJA/6p5UYIeVfHbTwwUK2ifh
soZwQDPWzhK7EWG8OsWers043cPRQPw/xZUBvGwcH+ymgAD2+VtGZ7x+1hWxtRII
mYkC2SgKyCflJxWkb83d8wimpbP8+i3bv03/c7cfhSCfjiLnaqOPJ9fEz6VR28WM
7M699+QEzHqGx2ThkKep+sgwcoxeG2aJOlzoVQEFJyy6/mWBzL91NCAevogPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNKs6rHc1/S7mM9XxI+pBmqapSCQwHwYDVR0j
BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz
MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz
RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1
YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4
RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAET8M7/Q/5j6cd0RPts3b605673Q6BR5zjGz
uAv+2X0b0PvfQSPrtbnNxsEm1E/dayuvpO3NK/AAZZtMB1Ryn2XtcBjoBPBqJGqP
iMk9lzacB0k7FsIEivlJyVmDtBWJWC4O/RzAcU/DsabWUsmGvtzwvvhRRkijlovV
AcLZWt0oNXI+dsWpiHJH+4TLdmUtOA1hOnIGZG16Xnqm2w42ivngSqM855q5jq+b
dRMMtiSiXVXqLIZEpXh9FBOr/7wZ4NPkxzXNmS5qt8Fy0uEG53X6HHvIlt3jviWv
AnypVqs+C8IwydaZGYm6e+dkDE1qufizrJK1VaOpUuoywu0Y+LY=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:16 2026 by rpki-client