$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: GTup9Z2/ZSQ7vb7HSJUpUotHGezfPUEFTe3d6YWSrFw= Subject key identifier: 22:3E:DD:1D:57:F7:46:CF:00:E8:06:E6:CA:FB:80:A1:3D:38:14:69 Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 5A331C0D929B72A942F7736BA8E8FF7D7EC2DA11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 04:48:13 +0000 Manifest this update: Sun 02 Aug 2026 04:43:13 +0000 Manifest next update: Mon 03 Aug 2026 07:36:13 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: haht9UtxYp3JgzuIcXyt3R4SIwBEd98mFkEAoVZMTBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:33:1c:0d:92:9b:72:a9:42:f7:73:6b:a8:e8:ff:7d:7e:c2:da:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: Aug 2 04:43:13 2026 GMT Not After : Aug 3 07:36:13 2026 GMT Subject: CN=223EDD1D57F746CF00E806E6CAFB80A13D381469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:7f:d5:4c:d6:4d:e6:79:e6:d0:0e:b6:b0: 53:e1:87:91:e4:2c:cb:a0:bd:8a:ff:e6:63:d3:6b: ce:c9:0c:a8:56:65:d6:45:b5:69:09:d1:99:56:35: 82:80:a8:c4:40:7a:7e:ca:ba:52:68:49:36:2d:84: 18:4d:bf:09:90:50:82:9e:27:79:09:8f:2d:3f:9f: 56:03:28:45:bd:31:26:a1:a8:94:d8:a0:cb:9b:13: 21:b7:11:f8:b9:ca:6e:79:b8:7a:b6:2a:4b:d8:1a: 3a:de:3b:69:41:2c:4f:06:04:7e:32:ce:8d:8f:8c: 81:67:f6:e9:f4:ec:39:c9:af:aa:84:a4:ec:7d:d2: 6d:f4:b6:7e:f7:b3:cd:da:68:2a:2b:f9:e7:8f:5c: 5d:0f:1a:3d:8f:4f:a8:ef:04:fc:4f:78:02:7e:f0: 39:e2:ae:75:13:b3:b3:2d:ee:d2:9d:df:2f:a2:50: 4b:d8:05:9a:74:9f:34:81:77:70:02:cd:c9:74:2b: d8:47:66:d1:43:26:19:ca:2a:1c:2e:ed:7d:af:fe: a1:da:eb:b0:31:49:5d:82:84:e1:6d:47:6a:0e:5c: cc:98:22:b6:c0:59:07:c6:e7:47:7a:1a:6f:a8:ac: 4e:55:7e:d3:92:18:63:5b:04:7b:16:e3:8f:36:1b: f0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3E:DD:1D:57:F7:46:CF:00:E8:06:E6:CA:FB:80:A1:3D:38:14:69 X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:63:6f:10:32:f0:63:3b:79:2d:27:ea:a4:40:d5:e8:5e:a9: ab:59:31:f4:4e:5b:f8:80:c4:79:b5:b9:33:a8:e4:7b:7a:80: 53:52:ee:00:aa:5b:58:5c:6c:be:d9:2e:67:e7:b0:4f:da:0d: 64:16:f6:00:f7:a3:fd:8f:e3:c2:d2:36:13:62:e9:97:2a:e7: da:94:48:46:89:9d:b7:5b:cb:13:99:e3:56:cb:df:6b:24:b6: 95:ae:ea:e0:d6:ea:7b:8a:56:3b:0d:c4:b7:60:a1:72:ef:76: da:3d:d9:3c:d0:68:df:64:1c:40:dc:bc:a4:ca:14:10:c0:9a: 45:5f:5a:b1:9a:47:ca:00:48:1d:a1:99:b1:75:ea:0a:12:2e: c6:48:9c:19:4d:17:bc:2f:4c:19:78:37:3a:15:05:da:99:fb: 03:b5:b0:08:11:98:0f:f9:47:27:d6:88:10:40:a1:30:0d:ec: 01:53:c2:e5:64:e2:2f:fd:f6:ad:05:e9:3a:a1:6a:d5:de:ad: 4c:b3:4d:88:ab:23:8f:91:e7:ce:03:e0:4a:b5:84:af:77:bb: 22:96:bc:54:64:07:4c:9f:85:c4:00:91:85:1f:da:d5:45:95: dc:00:e3:91:ce:b8:51:b5:b2:0b:3d:39:dc:0f:be:64:d6:0b: 30:7d:cc:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjMcDZKbcqlC93NrqOj/fX7C2hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjA4MDIwNDQzMTNaFw0yNjA4MDMwNzM2MTNaMDMxMTAvBgNV BAMTKDIyM0VERDFENTdGNzQ2Q0YwMEU4MDZFNkNBRkI4MEExM0QzODE0NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoX/VTNZN5nnm0A62sFPhh5Hk LMugvYr/5mPTa87JDKhWZdZFtWkJ0ZlWNYKAqMRAen7KulJoSTYthBhNvwmQUIKe J3kJjy0/n1YDKEW9MSahqJTYoMubEyG3Efi5ym55uHq2KkvYGjreO2lBLE8GBH4y zo2PjIFn9un07DnJr6qEpOx90m30tn73s83aaCor+eePXF0PGj2PT6jvBPxPeAJ+ 8DnirnUTs7Mt7tKd3y+iUEvYBZp0nzSBd3ACzcl0K9hHZtFDJhnKKhwu7X2v/qHa 67AxSV2ChOFtR2oOXMyYIrbAWQfG50d6Gm+orE5VftOSGGNbBHsW4482G/BTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIj7dHVf3Rs8A6AbmyvuAoT04FGkwHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtjbxAy8GM7eS0n6qRA1eheqatZMfROW/iA xHm1uTOo5Ht6gFNS7gCqW1hcbL7ZLmfnsE/aDWQW9gD3o/2P48LSNhNi6Zcq59qU SEaJnbdbyxOZ41bL32sktpWu6uDW6nuKVjsNxLdgoXLvdto92TzQaN9kHEDcvKTK FBDAmkVfWrGaR8oASB2hmbF16goSLsZInBlNF7wvTBl4NzoVBdqZ+wO1sAgRmA/5 RyfWiBBAoTAN7AFTwuVk4i/99q0F6TqhatXerUyzTYirI4+R584D4Eq1hK93uyKW vFRkB0yfhcQAkYUf2tVFldwA45HOuFG1sgs9OdwPvmTWCzB9zLs= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:59 2026 by rpki-client