$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: svE4ywog9J+/HCNeav0n794RpjnXSyrwtzc4bEzSG7Y= Subject key identifier: 0E:CC:E8:57:43:5B:04:DE:18:1D:F4:E8:53:CF:6B:82:71:30:6D:AE Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 57937859E51B728D97E8541CF10B82D39FC37B83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 07:25:23 +0000 Manifest this update: Wed 23 Sep 2026 07:20:23 +0000 Manifest next update: Thu 24 Sep 2026 10:34:23 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: LQhlv6GgyVao0qP1K74kIH4AZIIlPNcDiAyuzEodxjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:93:78:59:e5:1b:72:8d:97:e8:54:1c:f1:0b:82:d3:9f:c3:7b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: Sep 23 07:20:23 2026 GMT Not After : Sep 24 10:34:23 2026 GMT Subject: CN=0ECCE857435B04DE181DF4E853CF6B8271306DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:55:7a:4a:7f:da:74:81:97:cd:0f:d7:89: 33:22:8f:0d:3c:46:9e:06:65:a3:90:ac:6e:8e:0b: d6:54:a3:80:01:03:d6:ca:42:08:4a:1d:88:74:bd: 9f:37:cd:91:dd:40:5f:e2:d3:6e:2a:a7:60:0f:b0: dd:ed:27:8d:44:b8:a4:6d:22:a4:2b:e8:1b:9d:ef: b4:a9:bc:38:88:7c:e2:93:bf:fb:91:54:1c:5b:2a: 1e:e7:e5:dd:8e:c0:97:63:c1:cd:e7:0a:43:5d:fe: 98:7e:c7:3f:44:7a:dd:71:17:0a:e5:6e:99:aa:d4: 26:94:58:43:60:30:d1:ec:9d:a7:2b:4f:09:7f:c4: 84:5e:ac:29:ee:11:18:f8:d9:06:6e:3c:a0:b0:29: b8:9a:79:97:3a:63:39:33:d7:2e:d7:63:3a:1a:8f: 88:cf:53:5b:18:25:e6:44:38:3e:86:7d:d8:0a:70: c5:23:b5:6c:ef:90:28:2f:aa:06:2d:3f:95:5d:f0: 5b:07:b3:75:df:1d:8a:cb:56:d2:38:05:20:2c:6d: 68:f1:f6:63:dd:91:66:27:98:9a:a2:5f:5f:1f:d6: 6c:d0:d6:6a:bd:de:95:2d:2b:89:62:58:8d:21:0c: d4:06:3a:b5:05:fc:2e:87:db:c4:b2:d3:41:cc:27: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CC:E8:57:43:5B:04:DE:18:1D:F4:E8:53:CF:6B:82:71:30:6D:AE X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:53:8f:00:51:a7:81:d0:13:d0:d2:34:e2:85:48:7c:f6:ff: a9:9f:f8:30:3c:85:dd:5b:64:34:32:df:90:64:61:c5:99:c8: b5:a0:6a:a1:df:5f:72:30:0d:bb:a8:67:41:63:33:25:ab:32: 5f:15:5e:2b:44:21:f8:1c:be:ec:9c:89:35:2e:72:fe:07:ff: 21:7c:e9:95:8c:0a:f2:7a:09:6d:3d:d9:b3:69:ac:32:7e:68: b7:f7:96:e3:1d:85:28:f0:b1:23:b2:90:b8:62:4b:dd:c7:c5: af:8b:bb:91:08:91:69:6c:2a:0e:3c:5b:b9:56:ef:d0:30:73: 33:eb:75:27:19:ce:82:cd:04:93:93:fb:f5:83:46:0b:ee:62: e4:f1:54:70:3d:30:53:67:80:cc:0c:10:58:0a:1d:76:4f:48: f0:c0:50:f9:8c:c7:88:00:99:cd:5d:e2:c3:45:a2:24:71:64: 63:5f:3e:4b:db:8d:4f:35:68:1a:ea:41:5e:39:86:4a:ec:31: 22:16:02:bd:85:5a:d4:f3:d8:0d:69:c1:98:3a:fc:8b:dc:84: 83:62:5c:10:12:23:e4:90:64:7b:f7:3e:57:96:94:36:5f:35: a4:73:5d:e5:4b:3b:39:99:5f:d7:36:97:b7:eb:dd:8c:a8:4a: 6c:bf:e2:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5N4WeUbco2X6FQc8QuC05/De4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjA5MjMwNzIwMjNaFw0yNjA5MjQxMDM0MjNaMDMxMTAvBgNV BAMTKDBFQ0NFODU3NDM1QjA0REUxODFERjRFODUzQ0Y2QjgyNzEzMDZEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu51V6Sn/adIGXzQ/XiTMijw08 Rp4GZaOQrG6OC9ZUo4ABA9bKQghKHYh0vZ83zZHdQF/i024qp2APsN3tJ41EuKRt IqQr6Bud77SpvDiIfOKTv/uRVBxbKh7n5d2OwJdjwc3nCkNd/ph+xz9Eet1xFwrl bpmq1CaUWENgMNHsnacrTwl/xIRerCnuERj42QZuPKCwKbiaeZc6Yzkz1y7XYzoa j4jPU1sYJeZEOD6GfdgKcMUjtWzvkCgvqgYtP5Vd8FsHs3XfHYrLVtI4BSAsbWjx 9mPdkWYnmJqiX18f1mzQ1mq93pUtK4liWI0hDNQGOrUF/C6H28Sy00HMJ1hTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDszoV0NbBN4YHfToU89rgnEwba4wHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9TjwBRp4HQE9DSNOKFSHz2/6mf+DA8hd1b ZDQy35BkYcWZyLWgaqHfX3IwDbuoZ0FjMyWrMl8VXitEIfgcvuyciTUucv4H/yF8 6ZWMCvJ6CW092bNprDJ+aLf3luMdhSjwsSOykLhiS93Hxa+Lu5EIkWlsKg48W7lW 79AwczPrdScZzoLNBJOT+/WDRgvuYuTxVHA9MFNngMwMEFgKHXZPSPDAUPmMx4gA mc1d4sNFoiRxZGNfPkvbjU81aBrqQV45hkrsMSIWAr2FWtTz2A1pwZg6/IvchINi XBASI+SQZHv3PleWlDZfNaRzXeVLOzmZX9c2l7fr3YyoSmy/4oY= -----END CERTIFICATE-----Generated at Thu Sep 24 04:28:22 2026 by rpki-client