$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: w5f4+puhfTKSqu/1x+yOt6vJS4ZDTig6oUPq9pzX2f8= Subject key identifier: 40:AF:EC:A1:0D:56:7F:2E:58:71:7C:72:C8:89:C5:CC:0D:C2:86:C7 Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 1303AED0A5F8F87E3F945C7A53BD3B7BCC6A6AD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: BE Signing time: Mon 21 Sep 2026 02:55:10 +0000 Manifest this update: Mon 21 Sep 2026 02:50:10 +0000 Manifest next update: Tue 22 Sep 2026 02:55:10 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: rRrJgEwLH4J8c/ICbBVosgNhekELJX5qG3o/Jpsljqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:03:ae:d0:a5:f8:f8:7e:3f:94:5c:7a:53:bd:3b:7b:cc:6a:6a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: Sep 21 02:50:10 2026 GMT Not After : Sep 22 02:55:10 2026 GMT Subject: CN=40AFECA10D567F2E58717C72C889C5CC0DC286C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:1e:68:a2:88:61:62:e6:d4:e4:88:0a:af: 84:8e:1f:b2:d7:0f:f5:18:85:70:f7:4d:33:83:9e: fd:2e:4e:ed:ce:bb:a3:17:65:06:bd:6b:c0:b7:22: 9b:41:2d:66:b8:af:60:2d:29:75:14:b4:65:68:59: e7:30:92:27:ee:2a:f0:1e:b4:ba:cf:35:e3:5e:f0: 00:65:8d:80:7d:50:05:2b:da:66:6d:ed:4c:fb:34: 2b:31:40:6a:71:46:bd:23:ab:80:62:bd:c5:79:1a: 47:54:79:fa:3c:ea:96:e8:c9:31:e9:0e:5e:d6:ea: 0a:67:a6:fd:44:39:8d:43:51:27:42:e6:c2:0c:f4: 94:ce:db:17:30:9e:73:97:f1:4f:76:73:e6:a8:53: c1:86:b9:0e:9a:cd:4d:e3:54:0c:1b:30:2a:c3:56: b7:3e:bb:69:fc:7a:36:68:32:76:d7:da:40:05:d4: b2:f6:46:c1:3f:38:ec:a0:93:65:28:eb:c7:d4:2a: 04:3d:34:3e:b9:80:13:af:79:63:9b:51:f9:28:9f: 21:b5:84:4b:9d:fa:70:aa:ac:33:42:b1:42:df:45: 12:b3:b3:e6:0f:2e:3e:b0:02:ca:23:f3:e9:7a:8b: 25:8a:6f:bc:cd:87:e0:62:55:f3:2f:7b:79:0b:fb: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AF:EC:A1:0D:56:7F:2E:58:71:7C:72:C8:89:C5:CC:0D:C2:86:C7 X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:07:dc:c8:ec:28:47:45:81:25:0a:d4:9f:25:84:ba:ff:cd: 45:7c:d1:fa:fc:31:b0:e9:6f:2f:59:aa:b4:64:ad:98:81:df: 74:a9:68:eb:ea:9d:bd:c4:f7:7d:fa:3b:b3:fe:b9:9d:a2:49: c8:5b:b1:77:ac:c7:db:cb:a0:9f:82:06:2b:55:7f:34:cc:fc: 71:55:f3:c9:41:de:24:65:b3:93:e1:65:63:f7:5a:c0:09:e0: 8b:57:6e:03:e5:00:34:af:0c:cc:4a:fd:ba:58:70:42:c5:13: 29:55:82:b9:1b:ec:8a:07:e5:3f:0c:16:52:f7:b3:cf:0e:6d: 0a:cd:9c:3f:d8:56:73:2d:52:1f:11:6b:c8:5d:bf:ca:be:96: 85:3a:3e:33:fd:64:49:8b:59:48:81:3d:23:95:4a:f8:6d:95: 4f:d0:06:69:2b:d7:56:dd:5e:1e:20:b9:fc:94:f0:d9:5b:b1: de:e9:db:af:a2:62:bb:30:2d:72:66:16:d4:ee:14:b1:25:cf: 39:f3:ee:05:ed:ce:98:74:4d:f5:67:c8:21:a7:7e:99:ff:af: a6:38:37:60:a9:2f:fd:62:b2:86:36:32:a8:5c:fa:e8:a0:9f: 0c:c5:68:46:64:92:e5:cd:43:ea:e5:c1:53:45:46:e1:10:97: e6:8a:e4:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwOu0KX4+H4/lFx6U707e8xqatIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjA5MjEwMjUwMTBaFw0yNjA5MjIwMjU1MTBaMDMxMTAvBgNV BAMTKDQwQUZFQ0ExMEQ1NjdGMkU1ODcxN0M3MkM4ODlDNUNDMERDMjg2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fR5ooohhYubU5IgKr4SOH7LX D/UYhXD3TTODnv0uTu3Ou6MXZQa9a8C3IptBLWa4r2AtKXUUtGVoWecwkifuKvAe tLrPNeNe8ABljYB9UAUr2mZt7Uz7NCsxQGpxRr0jq4BivcV5GkdUefo86pboyTHp Dl7W6gpnpv1EOY1DUSdC5sIM9JTO2xcwnnOX8U92c+aoU8GGuQ6azU3jVAwbMCrD Vrc+u2n8ejZoMnbX2kAF1LL2RsE/OOygk2Uo68fUKgQ9ND65gBOveWObUfkonyG1 hEud+nCqrDNCsULfRRKzs+YPLj6wAsoj8+l6iyWKb7zNh+BiVfMve3kL+zovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQK/soQ1Wfy5YcXxyyInFzA3ChscwHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkH3MjsKEdFgSUK1J8lhLr/zUV80fr8MbDp by9ZqrRkrZiB33SpaOvqnb3E9336O7P+uZ2iSchbsXesx9vLoJ+CBitVfzTM/HFV 88lB3iRls5PhZWP3WsAJ4ItXbgPlADSvDMxK/bpYcELFEylVgrkb7IoH5T8MFlL3 s88ObQrNnD/YVnMtUh8Ra8hdv8q+loU6PjP9ZEmLWUiBPSOVSvhtlU/QBmkr11bd Xh4gufyU8Nlbsd7p26+iYrswLXJmFtTuFLElzznz7gXtzph0TfVnyCGnfpn/r6Y4 N2CpL/1isoY2Mqhc+uignwzFaEZkkuXNQ+rlwVNFRuEQl+aK5GY= -----END CERTIFICATE-----Generated at Mon Sep 21 17:44:34 2026 by rpki-client