$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: P/jDswhtG0o9u6mpMfMt3FPe4hj/N6EOcVcF5KnQ14I= Subject key identifier: 7E:77:06:F0:CC:06:90:E8:A5:FF:73:F7:F7:9A:48:39:CF:D4:64:05 Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 18D11532DA5BEDC7409784061FC1160BB2EA6520 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:01:46 +0000 Manifest this update: Tue 12 May 2026 16:56:46 +0000 Manifest next update: Wed 13 May 2026 17:25:46 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: Zgbx9hjNq1TOdbb/5cUUdTpu01zJ3d0FY/lq8tbG/2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d1:15:32:da:5b:ed:c7:40:97:84:06:1f:c1:16:0b:b2:ea:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: May 12 16:56:46 2026 GMT Not After : May 13 17:25:46 2026 GMT Subject: CN=7E7706F0CC0690E8A5FF73F7F79A4839CFD46405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dd:89:c6:64:84:cc:c0:5c:1b:d5:22:1e:61: e3:d4:a4:73:bd:11:84:25:36:d8:49:23:02:fe:ab: 6e:8b:e4:b3:3c:6a:4a:09:30:5e:4e:ac:4b:8b:45: 91:a3:97:fd:77:23:be:65:7d:87:f7:30:94:98:24: 43:43:8b:b6:67:68:50:31:e1:bf:bc:19:57:47:cb: 70:e0:f2:6e:a1:f6:c5:98:41:1b:b4:1f:b4:8f:68: 76:03:59:95:ae:5a:bf:4b:bf:f2:55:0e:f7:9a:e5: d3:a8:ec:33:5c:36:a6:c1:cf:0b:10:d5:ea:f4:24: b7:84:32:78:ba:f9:01:4c:86:db:65:c4:28:ab:ea: dd:29:98:43:95:ac:a1:3a:c7:cd:95:a0:9d:79:f9: 5f:16:a9:3d:6f:0a:e4:9d:f7:ec:a1:b7:56:c5:18: fd:13:7e:5e:b3:83:04:d8:e5:df:9d:8d:db:fa:f2: 13:69:19:10:e4:08:c8:0a:f2:00:ac:a9:68:8a:9e: de:0c:68:50:ac:87:43:67:31:92:a4:f3:b2:c6:1c: a8:e9:4a:22:8b:0c:10:28:b4:f3:86:70:ff:d7:8b: 9e:07:3b:e9:d6:5b:4d:4f:8e:56:82:f4:63:3b:c2: e2:bd:df:41:cc:46:f2:59:69:aa:2e:fc:43:90:8d: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:77:06:F0:CC:06:90:E8:A5:FF:73:F7:F7:9A:48:39:CF:D4:64:05 X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:25:f2:24:a7:a4:5a:53:9a:3b:90:69:6b:7b:a2:2e:73:d7: 4a:bf:4d:78:98:8b:4a:48:bb:96:97:da:d2:f5:a9:06:fa:fe: 90:3a:6d:37:51:34:72:83:94:6f:51:39:c9:0b:67:51:e5:aa: d4:5a:a2:16:1f:2c:15:cf:99:22:88:a8:77:d4:6f:a4:1b:54: d7:30:d6:2b:29:13:2f:95:0c:01:98:b2:89:a7:4c:79:ab:95: 57:b4:5b:19:67:68:10:24:8e:3d:51:77:90:9f:5e:0a:3f:d3: 09:cc:70:29:6a:3e:46:13:f5:88:e1:9c:14:f8:01:00:e8:5f: 9f:e4:d1:49:84:11:17:f0:e9:7e:98:9c:af:be:39:73:50:f7: 4f:8b:b6:48:84:4f:17:4c:25:06:4a:59:28:60:23:71:15:37: 2e:8e:13:9a:9c:b8:cc:ba:4a:74:b5:a0:13:e6:19:e2:21:b6: ef:63:00:c1:c8:00:66:c7:22:c8:b6:0f:df:44:25:76:4a:f1: 11:53:98:db:d4:79:cf:5c:23:e1:31:72:7f:58:11:e4:5e:16: eb:b7:35:9b:73:6d:7f:28:3e:48:fc:62:19:ff:08:58:4e:64: 69:e3:f3:71:f2:fb:d9:2e:bd:67:b4:bc:4e:a4:b2:5c:73:cd: 6a:d4:2d:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNEVMtpb7cdAl4QGH8EWC7LqZSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjA1MTIxNjU2NDZaFw0yNjA1MTMxNzI1NDZaMDMxMTAvBgNV BAMTKDdFNzcwNkYwQ0MwNjkwRThBNUZGNzNGN0Y3OUE0ODM5Q0ZENDY0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE3YnGZITMwFwb1SIeYePUpHO9 EYQlNthJIwL+q26L5LM8akoJMF5OrEuLRZGjl/13I75lfYf3MJSYJENDi7ZnaFAx 4b+8GVdHy3Dg8m6h9sWYQRu0H7SPaHYDWZWuWr9Lv/JVDvea5dOo7DNcNqbBzwsQ 1er0JLeEMni6+QFMhttlxCir6t0pmEOVrKE6x82VoJ15+V8WqT1vCuSd9+yht1bF GP0Tfl6zgwTY5d+djdv68hNpGRDkCMgK8gCsqWiKnt4MaFCsh0NnMZKk87LGHKjp SiKLDBAotPOGcP/Xi54HO+nWW01PjlaC9GM7wuK930HMRvJZaaou/EOQjb8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfncG8MwGkOil/3P395pIOc/UZAUwHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8l8iSnpFpTmjuQaWt7oi5z10q/TXiYi0pI u5aX2tL1qQb6/pA6bTdRNHKDlG9ROckLZ1HlqtRaohYfLBXPmSKIqHfUb6QbVNcw 1ispEy+VDAGYsomnTHmrlVe0WxlnaBAkjj1Rd5CfXgo/0wnMcClqPkYT9YjhnBT4 AQDoX5/k0UmEERfw6X6YnK++OXNQ90+LtkiETxdMJQZKWShgI3EVNy6OE5qcuMy6 SnS1oBPmGeIhtu9jAMHIAGbHIsi2D99EJXZK8RFTmNvUec9cI+Excn9YEeReFuu3 NZtzbX8oPkj8Yhn/CFhOZGnj83Hy+9kuvWe0vE6kslxzzWrULY8= -----END CERTIFICATE-----Generated at Wed May 13 00:13:39 2026 by rpki-client