$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: 1AhfYn8XnRt+lfrlGNCi6n6NgB4qSwEMvwX+fpoCrdM= Subject key identifier: 59:C9:A4:4A:0C:4D:07:39:59:2B:7C:16:35:38:52:C4:C5:BA:B2:C8 Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 09D76A16078B4778CD7DE9A01E805803D216EDCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 14:49:47 +0000 Manifest this update: Thu 18 Jun 2026 14:44:47 +0000 Manifest next update: Fri 19 Jun 2026 16:54:47 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: qJCAT8X/naeD61LgLAa0gsfm2h0QkvGR8634wFkL/9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d7:6a:16:07:8b:47:78:cd:7d:e9:a0:1e:80:58:03:d2:16:ed:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: Jun 18 14:44:47 2026 GMT Not After : Jun 19 16:54:47 2026 GMT Subject: CN=59C9A44A0C4D0739592B7C16353852C4C5BAB2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:32:94:bc:6e:c9:8f:7b:40:80:7b:ff:38: 9a:84:87:7a:90:5c:b3:09:17:04:76:73:44:0b:2f: 94:87:43:45:8b:25:81:14:73:58:2c:f0:4b:d2:3f: 8a:27:02:6b:c5:49:9f:aa:92:2c:b3:b2:60:39:0b: 8a:56:ed:4f:10:ba:a3:28:34:b7:be:91:e3:33:f7: 4e:b9:d3:f7:79:24:2f:ea:86:1e:3a:86:55:45:7a: db:14:ee:f9:30:71:14:bd:03:ff:b6:65:ff:b3:de: d4:b1:94:a0:d7:e3:9d:ec:51:ce:4e:70:6f:79:25: 4f:86:57:8c:c0:0c:5f:88:11:42:20:3d:64:a9:3c: 9f:fe:27:b3:38:bd:58:e7:a4:ab:4e:6a:d6:34:08: a9:d8:8c:5f:08:d2:25:47:e4:4e:a2:af:a5:72:e2: 04:96:40:ee:e2:b5:48:3a:75:e7:d3:d4:f0:64:8f: 95:2f:76:a1:e0:c5:9a:36:5b:31:4b:5e:f7:82:ba: 34:f6:25:b5:5b:30:f8:f9:3e:2e:77:72:0a:38:64: 56:d9:35:ab:68:1f:70:be:8f:c5:31:fc:71:f1:e2: 7e:ad:d8:f0:cc:f2:2e:f6:aa:b5:c6:87:71:84:d3: 0d:40:e7:ff:a0:2a:15:a9:5e:41:5b:6f:12:66:87: 73:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C9:A4:4A:0C:4D:07:39:59:2B:7C:16:35:38:52:C4:C5:BA:B2:C8 X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f8:34:88:8f:6c:f7:ce:23:e8:8a:2c:b4:ce:71:ac:3c:b6: 7f:09:3f:a5:6f:58:b4:c7:09:5c:27:f1:42:e6:9b:7d:c7:97: fb:be:2a:bc:6c:fe:a3:78:0e:e2:57:5f:8b:d5:1f:4b:31:b3: b4:0d:20:37:5d:30:f6:f9:70:e3:37:6e:66:bc:ac:7a:8b:77: 54:a3:8b:d3:ae:6c:f9:d9:21:4a:4e:a7:f7:2a:3c:8d:32:13: 44:dd:84:50:4d:96:8f:5f:e0:5e:4d:75:3a:f0:31:f9:5d:a1: f8:e7:e9:81:f0:35:bb:61:d2:9d:8b:6d:a6:6d:6f:46:61:dc: 97:ee:49:f1:08:24:7c:30:24:c2:9b:b7:97:44:b2:90:9c:92: 4d:33:cc:bc:5d:60:b7:d2:76:ac:1b:b7:90:c9:27:0b:5c:77: 5d:b3:c4:64:76:05:79:63:2e:86:0e:41:45:3a:e1:c1:8a:06: d6:f5:c4:00:e3:02:9f:d0:b4:c9:94:1a:25:c0:7c:cb:ce:b0: 6c:76:d9:05:41:f6:c4:5f:08:f2:e8:12:2a:36:12:b0:24:c5: 17:07:6b:3a:4c:03:74:0e:f6:9e:04:e0:38:81:ff:f2:0b:fe: 5f:13:b0:c4:33:2d:f7:83:2b:2f:9a:b4:37:7f:13:45:e1:79: ba:a3:dc:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCddqFgeLR3jNfemgHoBYA9IW7c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjA2MTgxNDQ0NDdaFw0yNjA2MTkxNjU0NDdaMDMxMTAvBgNV BAMTKDU5QzlBNDRBMEM0RDA3Mzk1OTJCN0MxNjM1Mzg1MkM0QzVCQUIyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdTKUvG7Jj3tAgHv/OJqEh3qQ XLMJFwR2c0QLL5SHQ0WLJYEUc1gs8EvSP4onAmvFSZ+qkiyzsmA5C4pW7U8QuqMo NLe+keMz90650/d5JC/qhh46hlVFetsU7vkwcRS9A/+2Zf+z3tSxlKDX453sUc5O cG95JU+GV4zADF+IEUIgPWSpPJ/+J7M4vVjnpKtOatY0CKnYjF8I0iVH5E6ir6Vy 4gSWQO7itUg6defT1PBkj5UvdqHgxZo2WzFLXveCujT2JbVbMPj5Pi53cgo4ZFbZ NatoH3C+j8Ux/HHx4n6t2PDM8i72qrXGh3GE0w1A5/+gKhWpXkFbbxJmh3PHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWcmkSgxNBzlZK3wWNThSxMW6ssgwHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABX4NIiPbPfOI+iKLLTOcaw8tn8JP6VvWLTH CVwn8ULmm33Hl/u+Krxs/qN4DuJXX4vVH0sxs7QNIDddMPb5cOM3bma8rHqLd1Sj i9OubPnZIUpOp/cqPI0yE0TdhFBNlo9f4F5NdTrwMfldofjn6YHwNbth0p2LbaZt b0Zh3JfuSfEIJHwwJMKbt5dEspCckk0zzLxdYLfSdqwbt5DJJwtcd12zxGR2BXlj LoYOQUU64cGKBtb1xADjAp/QtMmUGiXAfMvOsGx22QVB9sRfCPLoEio2ErAkxRcH azpMA3QO9p4E4DiB//IL/l8TsMQzLfeDKy+atDd/E0Xhebqj3DA= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:45 2026 by rpki-client