$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: hpAb44OVlLsItZAbULvTxnj0KqVBvTb00oYX+NJrBls= Subject key identifier: 0C:67:66:1E:6C:75:4C:F1:FE:68:D3:B5:24:69:3C:BD:3E:07:E2:53 Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 65EA49FB550578270DED1460104A4559C5CECFB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:31:38 +0000 Manifest this update: Thu 23 Jul 2026 13:26:38 +0000 Manifest next update: Fri 24 Jul 2026 15:05:38 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: 7+In0qKIn5iSKkrSXl+XDGlErNNpQiBwmSy1uT+q/2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ea:49:fb:55:05:78:27:0d:ed:14:60:10:4a:45:59:c5:ce:cf:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: Jul 23 13:26:38 2026 GMT Not After : Jul 24 15:05:38 2026 GMT Subject: CN=0C67661E6C754CF1FE68D3B524693CBD3E07E253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d7:28:6e:ed:ae:7b:7e:d5:23:6a:76:e3:08: 73:42:b2:3d:53:94:7f:a7:5c:52:f8:f2:7f:8c:16: 29:0c:68:44:8d:47:72:59:56:4c:fd:7a:31:36:48: 97:96:59:41:44:92:2b:8d:4f:15:40:1a:b6:40:eb: f9:8d:8f:42:a7:f7:31:04:f8:59:18:47:00:4b:bd: ea:44:a0:c1:ae:bb:2e:4e:2e:4b:a8:31:28:40:0a: 43:56:48:be:a0:df:0d:7f:1b:19:49:7f:0c:cd:e2: 8a:96:80:c2:bb:d8:85:f4:1a:7e:25:d6:8f:95:4c: ea:88:74:ce:a0:86:d0:6d:f1:a0:ae:dc:52:41:d6: 41:b1:b8:78:48:43:28:d8:1d:81:98:e7:29:62:3e: 46:85:56:21:e3:ab:44:d7:1e:63:f3:e2:7b:ae:d6: 34:ec:2a:b6:85:5d:e8:e9:78:0c:3d:5c:84:ab:93: 8f:ff:b4:3f:2e:c5:6d:3b:80:6c:90:66:e8:a0:36: 32:02:11:12:a9:5c:9d:f0:02:6c:35:3a:38:94:56: b2:d7:47:bd:50:b5:9c:0a:2d:11:84:44:10:94:8c: 67:76:cc:63:97:f4:16:38:1a:ed:0f:4a:ef:aa:df: fe:12:dc:80:0a:0b:b9:cb:f1:36:47:d4:09:8f:f1: b5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:67:66:1E:6C:75:4C:F1:FE:68:D3:B5:24:69:3C:BD:3E:07:E2:53 X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c0:8a:26:20:e2:0b:5e:61:cb:8d:17:29:df:54:e2:b0:3c: 7d:06:51:bf:7f:c5:01:e1:5f:bf:ea:f1:a9:86:9e:ab:dd:0a: d2:6d:aa:a3:5f:d2:71:5b:58:51:c1:a0:a8:c1:b3:6e:9f:3b: b5:25:73:14:17:f7:50:af:0f:29:a8:45:5d:4e:5c:da:19:84: 8f:b7:f7:70:73:16:e1:d4:14:21:fe:5c:f7:49:23:70:91:88: 7f:bd:d6:5a:8c:51:57:70:80:f0:13:5c:92:93:22:a6:de:e3: 80:cd:30:37:c9:63:e7:78:6f:7f:96:3d:06:71:31:bd:9e:0d: 28:0d:00:37:f1:27:c2:72:5f:03:b2:f5:9d:af:03:2f:17:24: 9a:89:a4:69:90:ad:ff:51:66:e2:39:c2:a8:a6:33:84:06:5d: 25:e7:82:cb:fb:fb:22:60:88:f7:5c:3c:00:23:e0:34:ef:ac: bd:de:62:6d:f1:11:d7:0e:03:b1:82:5a:8e:be:28:1e:00:67: e7:37:16:45:97:32:73:2f:31:47:fd:5e:fa:e8:06:ec:99:23: c2:54:d0:33:d9:11:54:ef:54:d5:bc:1a:4e:04:8f:6f:ac:97: 6f:eb:db:7e:fd:91:eb:bb:57:d6:6a:73:c2:05:1b:22:78:bc: c4:c3:2f:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZepJ+1UFeCcN7RRgEEpFWcXOz7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjA3MjMxMzI2MzhaFw0yNjA3MjQxNTA1MzhaMDMxMTAvBgNV BAMTKDBDNjc2NjFFNkM3NTRDRjFGRTY4RDNCNTI0NjkzQ0JEM0UwN0UyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO1yhu7a57ftUjanbjCHNCsj1T lH+nXFL48n+MFikMaESNR3JZVkz9ejE2SJeWWUFEkiuNTxVAGrZA6/mNj0Kn9zEE +FkYRwBLvepEoMGuuy5OLkuoMShACkNWSL6g3w1/GxlJfwzN4oqWgMK72IX0Gn4l 1o+VTOqIdM6ghtBt8aCu3FJB1kGxuHhIQyjYHYGY5yliPkaFViHjq0TXHmPz4nuu 1jTsKraFXejpeAw9XISrk4//tD8uxW07gGyQZuigNjICERKpXJ3wAmw1OjiUVrLX R71QtZwKLRGERBCUjGd2zGOX9BY4Gu0PSu+q3/4S3IAKC7nL8TZH1AmP8bUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDGdmHmx1TPH+aNO1JGk8vT4H4lMwHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjAiiYg4gteYcuNFynfVOKwPH0GUb9/xQHh X7/q8amGnqvdCtJtqqNf0nFbWFHBoKjBs26fO7UlcxQX91CvDymoRV1OXNoZhI+3 93BzFuHUFCH+XPdJI3CRiH+91lqMUVdwgPATXJKTIqbe44DNMDfJY+d4b3+WPQZx Mb2eDSgNADfxJ8JyXwOy9Z2vAy8XJJqJpGmQrf9RZuI5wqimM4QGXSXngsv7+yJg iPdcPAAj4DTvrL3eYm3xEdcOA7GCWo6+KB4AZ+c3FkWXMnMvMUf9XvroBuyZI8JU 0DPZEVTvVNW8Gk4Ej2+sl2/r2379keu7V9Zqc8IFGyJ4vMTDLzE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:26:06 2026 by rpki-client