
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
File: 80810D47BA27B751C4A9441187D412B7B4FA5089.mft (raw, json)
Hash identifier: 2OSt+sRewvmeRcpQh4zXsfXo9hfj46Q/P3lqrXFRpfM=
Subject key identifier: 78:87:3C:02:F3:1E:49:B0:FE:4A:A3:7C:40:44:56:D5:32:7C:90:95
Authority key identifier: 80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89
Certificate issuer: /CN=80810D47BA27B751C4A9441187D412B7B4FA5089
Certificate serial: 7EAB023DD6542A3F27C1E3A78C211E5A6DE8412E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
Manifest number: 13
Signing time: Fri 15 May 2026 20:36:18 +0000
Manifest this update: Fri 15 May 2026 20:31:18 +0000
Manifest next update: Sat 16 May 2026 23:42:18 +0000
Files and hashes: 1: 80810D47BA27B751C4A9441187D412B7B4FA5089.crl (hash: VSl2/yfBXWUdrZullYj3ZW8VmshKt1/g5iiAs7DbCRk=)
2: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: UeJxolbXL3BMQ04oIpha9WXgWRITl1oJXfXm7RSMha8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl
rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 23:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ab:02:3d:d6:54:2a:3f:27:c1:e3:a7:8c:21:1e:5a:6d:e8:41:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80810D47BA27B751C4A9441187D412B7B4FA5089
Validity
Not Before: May 15 20:31:18 2026 GMT
Not After : May 16 23:42:18 2026 GMT
Subject: CN=78873C02F31E49B0FE4AA37C404456D5327C9095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:90:4b:b2:11:64:1d:c9:38:b7:0f:b1:f1:
ed:c5:94:80:78:3d:f8:e6:6e:76:1b:3e:a3:16:f6:
68:4c:14:f0:8b:28:6d:54:ba:c0:47:2c:ac:8b:1d:
42:71:77:f0:fc:de:d7:a4:53:d7:fc:41:ca:24:5b:
4a:f7:fe:d4:92:c8:fe:47:8e:85:7a:fd:e2:53:99:
b5:a4:e0:09:cc:db:64:de:b0:c4:14:d5:55:80:c2:
9b:fb:de:70:c4:37:18:4e:db:52:ab:3a:0f:01:61:
9c:79:be:ec:e8:63:b6:4e:7b:bb:8a:0c:36:13:41:
7b:03:59:92:90:d5:de:2f:30:91:f3:61:6d:78:ce:
c3:7d:4f:d9:32:ae:87:8c:ff:4c:df:fc:55:04:8b:
d0:09:96:6a:c2:e7:78:a6:29:45:d0:5a:39:1d:4c:
d1:39:30:13:cd:71:c1:7f:6e:bb:91:7b:67:98:f3:
a0:b0:6e:d1:dc:15:74:ec:4e:c4:ab:c0:1b:1d:fa:
24:4c:3a:6c:de:0d:1e:fa:87:60:1a:1f:ec:24:d7:
b9:c7:e3:19:d6:a9:3f:61:66:87:01:c2:e3:4c:da:
97:37:9e:c9:42:36:92:ba:47:a7:0a:2b:87:83:5b:
f5:f2:9e:24:5f:30:fa:05:f6:2b:f8:42:65:10:f6:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:3C:02:F3:1E:49:B0:FE:4A:A3:7C:40:44:56:D5:32:7C:90:95
X509v3 Authority Key Identifier:
keyid:80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f0:00:d8:2e:c2:82:3f:1c:53:f2:12:eb:fe:86:9d:b1:2b:
12:bc:b0:c1:c4:1e:08:f3:c6:b0:ee:ea:c6:8e:d3:75:ba:f3:
c6:bf:55:00:8d:4b:10:e3:b9:ab:84:e1:1a:43:79:8c:1c:28:
58:94:96:4b:5e:bf:ad:bd:8a:ed:00:90:cf:05:ec:0a:1f:89:
01:22:07:d4:7a:f9:2d:3e:e6:6d:18:bc:26:27:e5:b7:77:30:
9b:b6:ea:79:84:fc:56:b9:1c:1b:80:a8:06:70:46:9d:14:a8:
51:0e:51:8a:74:91:e9:47:ad:ea:51:dc:9e:13:09:93:10:e6:
72:64:8a:55:3f:53:08:e0:55:95:bf:70:8b:b7:f8:6a:55:ed:
25:e7:88:f9:8d:ba:87:4b:88:76:7b:25:24:53:36:8b:45:9b:
bb:21:b5:26:3d:58:b4:e0:27:90:c6:df:21:68:24:eb:0f:9c:
be:f8:da:5c:50:37:30:ef:1a:49:68:de:b4:ea:cb:48:2e:2e:
2c:26:82:ee:35:71:ab:f2:04:0a:dc:7f:08:18:c9:7f:62:02:
17:f5:38:af:3a:89:15:a8:d5:0f:1e:58:28:c0:d3:55:50:e3:
ac:e3:05:3d:48:7e:f2:5b:ae:7c:53:29:87:69:bf:25:2e:2a:
15:d0:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 14:28:48 2026 by rpki-client