$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.mft (raw, json) Hash identifier: rUE1Oqk2WXAWb8dA2H+wYkxkrUWbg2fR1QIZzbiTOd8= Subject key identifier: 4B:80:72:9C:E7:F8:4F:A8:06:0A:24:B1:A3:C7:5A:3F:EC:D1:24:12 Authority key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Certificate issuer: /CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Certificate serial: 36C78B75A92BDF2197F5906533FE1B660649C71C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft Manifest number: 0103 Signing time: Sat 14 Nov 2026 06:47:38 +0000 Manifest this update: Sat 14 Nov 2026 06:42:38 +0000 Manifest next update: Sun 15 Nov 2026 09:05:38 +0000 Files and hashes: 1: 817CF087D3254B3FE406AD59EF90AE84006DC70B.crl (hash: aqMcb7S1HrABuwmFL3dwdbHLPGNjvi+aOFMvBqWneqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 09:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c7:8b:75:a9:2b:df:21:97:f5:90:65:33:fe:1b:66:06:49:c7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Validity Not Before: Nov 14 06:42:38 2026 GMT Not After : Nov 15 09:05:38 2026 GMT Subject: CN=4B80729CE7F84FA8060A24B1A3C75A3FECD12412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:28:13:8e:ff:20:71:0e:38:ad:39:5d:89: ba:bc:37:01:23:b5:16:fd:6c:9b:2c:13:a1:8e:b6: 42:02:05:44:fc:27:3f:fc:e8:db:9e:70:54:b4:c0: 21:05:7c:ea:73:93:77:e0:db:2a:8d:56:3d:94:75: e4:c0:89:ff:1f:bb:ea:6f:fa:fb:01:77:f6:49:28: bf:c5:80:bd:c6:10:1f:21:1a:20:53:1a:0e:cb:1e: 91:4f:30:a7:2e:dd:ee:da:c1:f1:0b:0b:d2:cd:6c: 6e:cb:55:4c:e3:27:3e:0a:1a:c5:b6:30:ee:70:06: a7:74:cb:b4:84:a5:53:67:f2:4b:9b:ab:a9:4f:f6: e6:86:83:a9:ad:06:13:74:82:21:83:d1:d0:64:12: 67:91:22:ce:0c:d7:16:47:83:4c:4c:54:3f:09:84: 54:06:da:f0:85:04:c9:e0:1f:8a:32:70:3d:58:23: c5:ff:fe:af:e6:a8:a7:62:29:11:1a:cc:70:5c:77: fd:be:13:39:f7:32:98:58:49:bd:0e:f6:f8:89:98: 94:a7:61:b2:2d:99:d1:67:26:e8:d3:dc:63:7d:57: 84:8f:ad:e7:20:09:5b:96:c1:04:e7:47:c8:2f:92: 59:f7:83:46:08:24:cb:6e:02:51:5b:df:2d:b8:85: f6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:80:72:9C:E7:F8:4F:A8:06:0A:24:B1:A3:C7:5A:3F:EC:D1:24:12 X509v3 Authority Key Identifier: keyid:81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:09:8d:72:f4:24:cf:99:8f:5b:11:61:e3:6d:d3:f9:79:3d: d9:46:b7:8f:8e:e6:19:1e:50:4f:bf:9e:15:56:18:ba:8f:af: 8b:4b:46:1e:97:c7:b4:92:05:63:25:21:6e:b1:ec:7e:35:75: 6f:da:ea:51:ff:c6:2f:8b:2f:82:3e:7c:ce:63:06:96:f3:64: f4:59:bb:42:7b:5f:67:12:39:90:4e:3f:49:16:72:0e:37:1e: 6b:96:04:c9:01:e2:63:da:72:b8:27:e5:fa:6b:a3:f3:84:45: 70:85:be:41:da:a8:c0:b5:de:90:02:13:08:e9:cd:36:92:96: dc:9d:9b:d6:1d:0d:9b:88:74:f0:61:5f:8c:91:ab:7c:06:c3: 89:2a:84:9c:0c:e9:95:08:82:8d:68:0f:2c:61:4c:4a:f2:07: dd:3e:ed:14:e3:d8:c8:37:f5:48:e9:3e:3c:d1:8f:a0:ae:83: 79:93:db:98:42:9b:18:06:f5:a8:a9:9e:5d:66:65:1e:b2:aa: f3:f5:7f:16:84:e3:26:5a:ad:43:58:5a:24:ff:1c:95:15:f9: b5:8c:e8:d5:57:66:fd:e2:f3:ad:65:48:8e:45:3e:41:b2:f6: d1:6a:d7:95:ef:aa:f6:2a:04:4b:12:88:15:22:9a:a1:57:98: c6:04:d5:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNseLdakr3yGX9ZBlM/4bZgZJxxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFFODQw MDZEQzcwQjAeFw0yNjExMTQwNjQyMzhaFw0yNjExMTUwOTA1MzhaMDMxMTAvBgNV BAMTKDRCODA3MjlDRTdGODRGQTgwNjBBMjRCMUEzQzc1QTNGRUNEMTI0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpSgTjv8gcQ44rTldibq8NwEj tRb9bJssE6GOtkICBUT8Jz/86NuecFS0wCEFfOpzk3fg2yqNVj2UdeTAif8fu+pv +vsBd/ZJKL/FgL3GEB8hGiBTGg7LHpFPMKcu3e7awfELC9LNbG7LVUzjJz4KGsW2 MO5wBqd0y7SEpVNn8kubq6lP9uaGg6mtBhN0giGD0dBkEmeRIs4M1xZHg0xMVD8J hFQG2vCFBMngH4oycD1YI8X//q/mqKdiKREazHBcd/2+Ezn3MphYSb0O9viJmJSn YbItmdFnJujT3GN9V4SPrecgCVuWwQTnR8gvkln3g0YIJMtuAlFb3y24hfZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS4BynOf4T6gGCiSxo8daP+zRJBIwHwYDVR0j BBgwFoAUgXzwh9MlSz/kBq1Z75CuhABtxwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdE MzI1NEIzRkU0MDZBRDU5RUY5MEFFODQwMDZEQzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTdDRjA4N0QzMjU0QjNGRTQwNkFENTlFRjkwQUU4NDAwNkRD NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFF ODQwMDZEQzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4JjXL0JM+Zj1sRYeNt0/l5PdlGt4+O5hke UE+/nhVWGLqPr4tLRh6Xx7SSBWMlIW6x7H41dW/a6lH/xi+LL4I+fM5jBpbzZPRZ u0J7X2cSOZBOP0kWcg43HmuWBMkB4mPacrgn5fpro/OERXCFvkHaqMC13pACEwjp zTaSltydm9YdDZuIdPBhX4yRq3wGw4kqhJwM6ZUIgo1oDyxhTEryB90+7RTj2Mg3 9UjpPjzRj6Cug3mT25hCmxgG9aipnl1mZR6yqvP1fxaE4yZarUNYWiT/HJUV+bWM 6NVXZv3i861lSI5FPkGy9tFq15XvqvYqBEsSiBUimqFXmMYE1SM= -----END CERTIFICATE-----Generated at Sat Nov 14 22:32:56 2026 by rpki-client