$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.mft (raw, json) Hash identifier: P3mBpw/LFaGhf0pQ/mKgqKfja//HOA44Ilpey7UZnnE= Subject key identifier: 65:D3:F1:A9:D9:0B:A7:57:46:56:CB:9C:9C:C9:79:06:5D:19:E1:09 Authority key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Certificate issuer: /CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Certificate serial: 78D6636CB9993B1206DDCD2FA855C426053315A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:40:39 +0000 Manifest this update: Thu 17 Sep 2026 09:35:39 +0000 Manifest next update: Fri 18 Sep 2026 11:58:39 +0000 Files and hashes: 1: 8B41D7B9301EF96118A556755116D8E36ADA3D71.crl (hash: 7wWtpEyK0RNTKWaJwxWXxcSN+sFS2KQTZZb1I9p1Bls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d6:63:6c:b9:99:3b:12:06:dd:cd:2f:a8:55:c4:26:05:33:15:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Validity Not Before: Sep 17 09:35:39 2026 GMT Not After : Sep 18 11:58:39 2026 GMT Subject: CN=65D3F1A9D90BA7574656CB9C9CC979065D19E109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:a7:2e:80:51:4d:21:63:19:1c:b5:90:70: fe:ec:43:d1:45:12:9b:1a:b4:e5:4c:8e:aa:24:57: 75:e2:a1:f2:a5:7c:1e:b3:c9:33:9d:40:b8:4a:e5: f6:42:f5:f0:48:32:5a:d5:38:3a:01:2a:ee:6c:6d: 93:09:7e:2f:bf:17:a9:b8:7e:1a:4b:75:1f:c5:2b: 68:99:1e:04:ad:1e:bf:5f:f1:55:58:7b:16:6e:c0: 57:dc:fb:db:f6:8d:65:a2:3f:eb:59:b3:34:e4:97: 4c:0f:60:23:e7:ee:db:7e:06:b8:47:ae:7e:e7:9f: 7a:06:55:d9:e4:9e:a7:2e:cf:b5:9a:52:c1:2b:ef: 6d:68:74:3e:79:aa:02:31:e9:29:4a:a8:78:10:38: 06:fa:e7:78:f8:5f:c0:7d:6b:cf:62:5f:24:0a:b3: e7:da:0a:37:4e:cc:aa:2e:b8:94:24:30:56:1a:a6: 42:e7:45:98:ec:09:2e:0f:7b:5f:90:ac:dc:e5:99: 60:f9:12:a0:8a:c7:2d:e4:ff:4f:78:de:42:70:c6: a5:1e:d3:e4:f7:22:89:0d:81:4d:0f:c2:26:91:bc: 67:77:11:7b:73:11:ea:75:13:d6:d2:d0:d1:ed:70: b5:b0:c3:57:4e:4b:df:ba:b3:aa:9b:3f:c5:43:f8: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D3:F1:A9:D9:0B:A7:57:46:56:CB:9C:9C:C9:79:06:5D:19:E1:09 X509v3 Authority Key Identifier: keyid:8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7a:e0:bd:9a:d5:63:33:45:fa:62:c0:7b:21:93:2e:3c:34: 6b:52:5b:3f:12:15:65:2b:d6:46:99:83:26:6d:e4:df:6a:46: 87:b7:10:e1:fc:0d:48:fd:6a:1e:a6:f1:47:78:3f:50:bd:37: 36:5a:9a:ec:21:d2:eb:ad:74:b6:2e:46:73:d4:9f:8d:98:35: be:08:35:2a:2e:0c:f5:4f:66:11:ae:f0:71:e6:24:da:a0:da: 51:07:ed:af:0e:01:f0:c3:0d:f2:56:f2:63:bd:df:14:5a:76: 00:7b:f3:0f:aa:0c:ab:35:95:d6:51:1a:87:dd:4a:6a:29:da: 40:c3:3c:74:f3:6d:f0:59:60:ab:ec:65:39:dc:36:de:40:da: d2:8a:dc:41:dc:33:13:f3:0d:bf:03:6e:3d:b6:a4:bd:00:19: cc:15:66:7e:98:f7:d8:6c:ae:38:1d:a5:56:45:8e:12:0b:d9: c6:09:7d:e3:1f:5a:e5:20:08:42:c0:75:e6:a7:98:ba:17:f1: df:61:65:3b:42:95:83:e7:22:15:53:e0:74:2e:26:ae:ab:1a: f7:6b:ae:19:44:f3:c8:69:4d:8e:2e:e3:17:ed:3e:b7:e2:91: 92:b0:5c:13:90:11:e4:f0:f0:16:cf:e6:82:46:fd:d9:f9:98: 32:c6:e8:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNZjbLmZOxIG3c0vqFXEJgUzFacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2 QURBM0Q3MTAeFw0yNjA5MTcwOTM1MzlaFw0yNjA5MTgxMTU4MzlaMDMxMTAvBgNV BAMTKDY1RDNGMUE5RDkwQkE3NTc0NjU2Q0I5QzlDQzk3OTA2NUQxOUUxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3R6cugFFNIWMZHLWQcP7sQ9FF EpsatOVMjqokV3XiofKlfB6zyTOdQLhK5fZC9fBIMlrVODoBKu5sbZMJfi+/F6m4 fhpLdR/FK2iZHgStHr9f8VVYexZuwFfc+9v2jWWiP+tZszTkl0wPYCPn7tt+BrhH rn7nn3oGVdnknqcuz7WaUsEr721odD55qgIx6SlKqHgQOAb653j4X8B9a89iXyQK s+faCjdOzKouuJQkMFYapkLnRZjsCS4Pe1+QrNzlmWD5EqCKxy3k/0943kJwxqUe 0+T3IokNgU0PwiaRvGd3EXtzEep1E9bS0NHtcLWww1dOS9+6s6qbP8VD+B/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZdPxqdkLp1dGVsucnMl5Bl0Z4QkwHwYDVR0j BBgwFoAUi0HXuTAe+WEYpVZ1URbY42raPXEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2M2E2ZTYtY2FiMy00ZjBjLTg1YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3Qjkz MDFFRjk2MTE4QTU1Njc1NTExNkQ4RTM2QURBM0Q3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQxRDdCOTMwMUVGOTYxMThBNTU2NzU1MTE2RDhFMzZBREEz RDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvOEI0MUQ3QjkzMDFFRjk2MTE4QTU1Njc1NTExNkQ4 RTM2QURBM0Q3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx64L2a1WMzRfpiwHshky48NGtSWz8SFWUr 1kaZgyZt5N9qRoe3EOH8DUj9ah6m8Ud4P1C9NzZamuwh0uutdLYuRnPUn42YNb4I NSouDPVPZhGu8HHmJNqg2lEH7a8OAfDDDfJW8mO93xRadgB78w+qDKs1ldZRGofd Smop2kDDPHTzbfBZYKvsZTncNt5A2tKK3EHcMxPzDb8Dbj22pL0AGcwVZn6Y99hs rjgdpVZFjhIL2cYJfeMfWuUgCELAdeanmLoX8d9hZTtClYPnIhVT4HQuJq6rGvdr rhlE88hpTY4u4xftPrfikZKwXBOQEeTw8BbP5oJG/dn5mDLG6Oo= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:10 2026 by rpki-client