$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: HsXhYYapna3scegMT7+ewbkK5/YGg6Zt6JQDKZIkU6g= Subject key identifier: 73:24:37:55:FD:05:AA:2E:5F:99:30:9F:65:38:48:1D:1A:81:6E:2B Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 4F864D7992385827C8756CC28117B1D98EAF14F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 11:57:53 +0000 Manifest this update: Mon 02 Nov 2026 11:52:53 +0000 Manifest next update: Tue 03 Nov 2026 14:53:53 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: zcdqbzdOhtGx+sduEG3Aui4d49L2zMlX34OYn1bAUqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:86:4d:79:92:38:58:27:c8:75:6c:c2:81:17:b1:d9:8e:af:14:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: Nov 2 11:52:53 2026 GMT Not After : Nov 3 14:53:53 2026 GMT Subject: CN=73243755FD05AA2E5F99309F6538481D1A816E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:67:38:d0:89:ec:ba:5a:84:6b:4f:d8:66: 16:42:75:13:05:d0:b2:c6:3e:73:b5:f1:58:68:ac: c4:a4:78:4d:f5:66:c3:2d:35:a3:d6:53:ad:ce:db: bd:9b:ba:a6:10:d4:7d:4d:e8:97:31:03:6b:b1:b4: e2:53:24:44:52:e6:dd:43:29:5f:46:f9:70:c7:d5: f8:ea:40:8f:8e:db:25:11:e7:ff:f1:15:59:ff:c6: 49:2b:5d:7d:c3:e6:69:d4:d3:01:31:b6:19:92:97: 32:bf:30:f4:d8:a5:b7:4d:0a:f0:b6:90:98:7e:21: 5d:77:d9:4a:c4:3c:b9:af:bd:cf:c4:9c:ba:06:23: 31:b0:e2:a3:19:42:f1:e8:5f:77:40:3c:f7:a1:5f: f5:58:fa:38:a2:df:75:f3:59:67:56:28:ea:d1:22: 3d:42:3d:96:c3:b1:9d:2c:a8:cc:4d:2f:c4:a4:c1: fa:dc:3e:84:b4:96:da:7d:60:3e:a5:58:cd:89:cb: d2:dc:a9:17:1a:af:47:ff:61:c4:02:2e:24:8c:c2: 7a:9e:73:ad:ab:6c:7d:90:c4:06:0a:f5:a2:e7:ac: c3:15:11:50:d0:76:1c:7d:39:b1:9b:1a:62:98:8c: 6a:ec:3a:7d:54:be:97:df:68:8a:65:73:4b:d2:47: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:37:55:FD:05:AA:2E:5F:99:30:9F:65:38:48:1D:1A:81:6E:2B X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d1:ba:1c:31:c9:6a:6c:3e:b9:a9:d9:aa:33:76:8f:47:98: a3:47:ee:f6:17:0f:d7:19:2d:e6:dd:1b:e7:de:9d:c5:8c:1b: 67:57:ef:52:4e:d6:58:ee:a6:1e:95:9e:02:c4:b4:a0:75:bb: a1:20:8d:a3:b8:46:6f:e7:2e:d2:19:ec:25:87:5d:fa:f8:e5: 1b:4d:27:4a:d9:9d:68:29:b0:15:c1:00:d3:d6:a5:e7:ac:b6: 44:b4:41:19:c5:b6:8c:24:1d:d8:14:d1:60:2d:a2:a2:ee:56: 22:75:41:28:79:4d:43:40:c8:4c:26:28:2f:a3:67:04:6c:3f: f2:4c:32:9c:33:55:65:a9:6e:73:e0:73:38:65:e0:a2:c7:2d: 0b:5e:2d:e1:d2:f0:52:f7:5a:40:a1:7a:46:84:c9:45:04:84: 90:87:f5:14:b8:39:f1:b7:98:85:b2:50:d5:80:c5:c3:1f:0b: 05:e8:56:1e:72:c4:9e:45:13:16:1d:1c:fd:52:d8:59:2d:c1: 0c:59:90:d3:ca:d4:05:1b:b0:97:64:47:83:88:d0:71:c6:1f: 1d:9f:01:09:1b:f5:ad:74:eb:0a:8e:87:e3:1b:0f:66:dd:ad: 0d:93:4d:bc:f0:a3:62:19:a8:d5:fd:7a:bc:e0:98:c4:81:76: 7e:b5:42:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4ZNeZI4WCfIdWzCgRex2Y6vFPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjExMDIxMTUyNTNaFw0yNjExMDMxNDUzNTNaMDMxMTAvBgNV BAMTKDczMjQzNzU1RkQwNUFBMkU1Rjk5MzA5RjY1Mzg0ODFEMUE4MTZFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRXWc40InsulqEa0/YZhZCdRMF 0LLGPnO18VhorMSkeE31ZsMtNaPWU63O272buqYQ1H1N6JcxA2uxtOJTJERS5t1D KV9G+XDH1fjqQI+O2yUR5//xFVn/xkkrXX3D5mnU0wExthmSlzK/MPTYpbdNCvC2 kJh+IV132UrEPLmvvc/EnLoGIzGw4qMZQvHoX3dAPPehX/VY+jii33XzWWdWKOrR Ij1CPZbDsZ0sqMxNL8SkwfrcPoS0ltp9YD6lWM2Jy9LcqRcar0f/YcQCLiSMwnqe c62rbH2QxAYK9aLnrMMVEVDQdhx9ObGbGmKYjGrsOn1UvpffaIplc0vSRxRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcyQ3Vf0Fqi5fmTCfZThIHRqBbiswHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTRuhwxyWpsPrmp2aozdo9HmKNH7vYXD9cZ LebdG+fencWMG2dX71JO1ljuph6VngLEtKB1u6EgjaO4Rm/nLtIZ7CWHXfr45RtN J0rZnWgpsBXBANPWpeestkS0QRnFtowkHdgU0WAtoqLuViJ1QSh5TUNAyEwmKC+j ZwRsP/JMMpwzVWWpbnPgczhl4KLHLQteLeHS8FL3WkChekaEyUUEhJCH9RS4OfG3 mIWyUNWAxcMfCwXoVh5yxJ5FExYdHP1S2FktwQxZkNPK1AUbsJdkR4OI0HHGHx2f AQkb9a106wqOh+MbD2bdrQ2TTbzwo2IZqNX9erzgmMSBdn61QjY= -----END CERTIFICATE-----Generated at Mon Nov 2 22:31:45 2026 by rpki-client