$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: RRUJA5PtWi3P8gTKAQnCZ2AiX/EgH2c636U4GColRQY= Subject key identifier: 22:51:03:38:6E:29:8D:3E:13:DF:8D:B5:38:D6:D7:9A:5E:38:96:9A Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 4068F13D3D3EEB4446A5B085B1D1D0FBC918561C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 14:22:24 +0000 Manifest this update: Sat 14 Nov 2026 14:17:24 +0000 Manifest next update: Sun 15 Nov 2026 18:07:24 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: WeQf0Pfs3DOOfpV0SmVE+f88YiI3KZSHp9iNkUpQMWA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:68:f1:3d:3d:3e:eb:44:46:a5:b0:85:b1:d1:d0:fb:c9:18:56:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: Nov 14 14:17:24 2026 GMT Not After : Nov 15 18:07:24 2026 GMT Subject: CN=225103386E298D3E13DF8DB538D6D79A5E38969A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:d2:09:6f:2b:4f:05:8f:69:22:ff:4c:17: bc:94:b2:75:a1:e8:09:3a:86:2b:7c:70:c6:6b:68: f8:16:08:37:f7:6a:ca:de:00:40:11:b8:c3:9f:dd: 98:07:70:91:75:a5:70:d2:0f:b1:18:6c:93:cf:00: 85:2b:eb:5f:ea:cc:fd:47:ca:49:5a:63:93:54:a2: c8:ba:ea:60:5f:47:ea:dd:67:15:93:fd:ae:35:c9: 9d:20:28:5b:0b:00:f9:79:25:28:f9:3d:58:f6:c7: e7:e2:f9:7a:04:5b:6e:16:43:7d:23:34:82:ab:97: 5a:ce:04:31:25:f6:db:0c:ff:4a:72:b7:35:ec:4a: 16:ac:c4:9d:fa:81:ff:3c:f5:3d:68:0d:54:13:75: 97:9b:7f:30:f0:c1:ff:3f:0c:47:f3:2f:8b:3b:a9: c0:75:a2:00:dd:05:d8:0c:fa:42:8f:0e:c5:92:e0: 34:a1:d1:0a:76:b9:fe:4f:ea:d9:6f:e7:7f:c4:50: f6:be:d5:7d:9d:4b:51:da:a2:46:0c:f2:88:40:2f: d3:96:30:92:21:d7:bb:f1:ff:10:14:4f:0d:2a:34: 74:d7:4a:15:66:04:94:e9:a0:d5:0d:7e:13:4c:2d: c5:dd:ab:c7:96:53:1c:19:1d:04:84:b8:75:14:85: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:51:03:38:6E:29:8D:3E:13:DF:8D:B5:38:D6:D7:9A:5E:38:96:9A X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b3:6d:fd:41:1c:e6:41:3e:ac:0a:55:18:41:13:26:61:9a: 99:d1:5c:4a:87:42:2c:44:c6:1f:81:e8:9e:95:b1:a5:e2:60: 61:71:81:a8:99:89:09:0b:4b:ed:e6:cd:ca:c7:5e:6f:c0:a9: 57:3a:33:b1:ab:0d:12:2f:36:0f:b4:7d:5c:3f:27:a3:68:99: 96:19:99:c8:c4:a8:e4:f4:25:e8:eb:7b:6b:d8:15:40:05:f0: 53:4c:b6:ab:55:0d:a7:1a:f3:bb:db:2d:66:c8:17:54:f4:55: f7:83:fa:df:93:57:41:20:c7:94:61:5f:38:f4:1f:d7:e5:14: 4a:83:96:88:21:ad:01:94:da:9d:cf:cd:31:19:24:75:ad:d8: e7:b1:40:50:1c:fe:cc:7e:9e:67:df:69:01:fb:62:bb:8d:19: 5c:ae:dc:9e:46:04:de:3e:4a:bd:71:5c:02:1c:3b:6e:89:d1: cc:6e:b5:e3:94:f0:a2:6b:04:3f:8b:ca:8d:ec:9e:6e:61:bb: 89:4f:b3:72:73:b1:4f:fb:45:a6:dd:05:63:bd:42:5f:77:f8: 5e:88:86:9a:b7:d0:90:75:d2:c6:fd:c8:f5:77:3f:b3:d7:a1: b9:07:ad:38:22:e0:84:f4:9d:64:f5:bd:43:8b:34:d5:72:98: d0:e8:f0:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGjxPT0+60RGpbCFsdHQ+8kYVhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjExMTQxNDE3MjRaFw0yNjExMTUxODA3MjRaMDMxMTAvBgNV BAMTKDIyNTEwMzM4NkUyOThEM0UxM0RGOERCNTM4RDZENzlBNUUzODk2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVdIJbytPBY9pIv9MF7yUsnWh 6Ak6hit8cMZraPgWCDf3asreAEARuMOf3ZgHcJF1pXDSD7EYbJPPAIUr61/qzP1H yklaY5NUosi66mBfR+rdZxWT/a41yZ0gKFsLAPl5JSj5PVj2x+fi+XoEW24WQ30j NIKrl1rOBDEl9tsM/0pytzXsShasxJ36gf889T1oDVQTdZebfzDwwf8/DEfzL4s7 qcB1ogDdBdgM+kKPDsWS4DSh0Qp2uf5P6tlv53/EUPa+1X2dS1HaokYM8ohAL9OW MJIh17vx/xAUTw0qNHTXShVmBJTpoNUNfhNMLcXdq8eWUxwZHQSEuHUUhYchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlEDOG4pjT4T3421ONbXml44lpowHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGzbf1BHOZBPqwKVRhBEyZhmpnRXEqHQixE xh+B6J6VsaXiYGFxgaiZiQkLS+3mzcrHXm/AqVc6M7GrDRIvNg+0fVw/J6NomZYZ mcjEqOT0Jejre2vYFUAF8FNMtqtVDaca87vbLWbIF1T0VfeD+t+TV0Egx5RhXzj0 H9flFEqDloghrQGU2p3PzTEZJHWt2OexQFAc/sx+nmffaQH7YruNGVyu3J5GBN4+ Sr1xXAIcO26J0cxuteOU8KJrBD+Lyo3snm5hu4lPs3JzsU/7RabdBWO9Ql93+F6I hpq30JB10sb9yPV3P7PXobkHrTgi4IT0nWT1vUOLNNVymNDo8P8= -----END CERTIFICATE-----Generated at Sun Nov 15 06:38:38 2026 by rpki-client