
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
File: C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft (raw, json)
Hash identifier: MOs6OCyG/0bnx6L0JXlywFx/ZRyo9/On8yOAKZ1/3l4=
Subject key identifier: 3B:CC:F5:FE:22:9B:8E:84:E3:A5:2D:E1:67:9B:E7:8D:DD:2C:EE:E1
Authority key identifier: C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6
Certificate issuer: /CN=C80F1ABFA2D82FD943F357E54256F9D077A237B6
Certificate serial: 1BFCC8BF75341B73B06F393CEEF9A55100FBC839
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
Manifest number: F7
Signing time: Wed 04 Nov 2026 04:59:25 +0000
Manifest this update: Wed 04 Nov 2026 04:54:25 +0000
Manifest next update: Thu 05 Nov 2026 06:12:25 +0000
Files and hashes: 1: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: rMAHdbBBSMXyMeu+J4rW3kenWJVXrRe0ci8BKSszWqY=)
2: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 2H/9mK1Gr4QoMeN1/HJRUNydjiXw6MJ0Sj7Eb1HaNh8=)
3: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: eTUbqesIcChEYqu+yl9YWDoBDuBVF3h4letj7vLE80U=)
4: C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl (hash: WGSDS6dDNfvq8yXskFB1F6f/yUvugDJDawd/+LkAgSc=)
5: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: q2Hz8tu9y2XkTT2jTbl1zYWtnXBiBpCT7h34gizseqk=)
6: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: CWrmFGiKwBYgiggQgjB1LyJpABcJ6sa0nfq8I7iWRCk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl
rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 05:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fc:c8:bf:75:34:1b:73:b0:6f:39:3c:ee:f9:a5:51:00:fb:c8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C80F1ABFA2D82FD943F357E54256F9D077A237B6
Validity
Not Before: Nov 4 04:54:25 2026 GMT
Not After : Nov 5 06:12:25 2026 GMT
Subject: CN=3BCCF5FE229B8E84E3A52DE1679BE78DDD2CEEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:ff:1f:28:cf:48:15:b2:43:19:ec:94:92:
7e:0a:49:54:87:36:f8:43:87:0b:b2:e5:87:e4:31:
b3:d2:ba:63:9e:c1:d7:1f:3a:63:46:b3:41:ce:99:
98:80:3f:b4:ce:17:65:13:09:1e:24:59:e9:17:ed:
4d:8f:14:bd:06:f1:d7:75:16:4e:fb:1a:1b:94:e0:
66:1a:c3:2e:ab:28:41:d0:a0:c2:df:46:6e:56:85:
cf:97:7f:be:e6:b7:9f:69:3f:41:81:f5:9d:52:ee:
d4:19:48:86:27:d2:ea:c7:20:19:d9:1e:8e:84:34:
ad:4a:b1:3e:76:08:2f:00:8e:16:28:8f:2c:5b:65:
e8:c2:4c:90:56:10:4b:51:6d:02:9e:5e:ea:6e:30:
ab:1f:93:d3:c9:6b:57:69:e6:29:54:5a:da:29:91:
f8:2a:91:48:3f:29:0d:33:d8:65:f2:67:10:c8:ee:
b5:d4:dc:98:a9:1c:45:22:f0:73:75:f6:df:9b:4c:
30:d4:3e:39:89:93:e6:40:4a:66:35:12:32:6d:8c:
cd:5e:a3:aa:b1:7d:42:08:2c:1a:52:42:6a:93:8f:
3a:60:e4:61:9e:21:3d:27:79:80:4c:ed:da:d8:39:
53:47:e2:b5:ce:f0:25:2d:42:07:53:a4:3e:65:dc:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CC:F5:FE:22:9B:8E:84:E3:A5:2D:E1:67:9B:E7:8D:DD:2C:EE:E1
X509v3 Authority Key Identifier:
keyid:C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e9:9d:05:0f:da:a8:d5:02:a8:b2:56:5b:6f:1c:53:14:46:
e4:b8:3a:fc:03:5e:12:10:b9:bf:be:0c:f4:c3:8e:05:ec:6d:
32:e9:1f:9a:ed:58:7b:16:da:d5:e5:f8:f2:ee:0b:4f:66:57:
57:a7:2d:e1:b0:14:a8:c6:50:83:33:cc:83:38:92:e4:be:13:
83:64:45:5c:41:17:da:64:92:5c:e6:e0:95:1b:d7:96:7f:d3:
df:09:47:4c:91:db:22:52:c7:83:dc:38:35:24:5a:cb:05:cc:
a8:74:3b:0d:8c:44:9a:9c:43:eb:95:ba:33:d4:30:bb:b9:d3:
c4:16:d4:6e:89:ae:6b:e2:6f:26:9c:17:60:a8:58:1b:6a:21:
e8:0d:7a:26:83:e9:85:55:57:4f:31:1f:27:66:ad:89:69:62:
d8:94:8e:2d:cb:6f:83:7e:ff:bb:bd:e4:ae:de:17:f0:9b:7a:
94:5f:eb:75:eb:76:e9:71:52:9f:18:a6:b7:58:64:48:b7:76:
48:b4:4b:27:7a:b0:dc:3e:8b:37:72:96:7c:25:1d:8b:12:22:
04:80:48:1a:62:9c:b4:e9:68:08:e5:3d:7e:07:ba:f3:e6:d2:
03:c6:e6:fa:93:83:a7:27:da:34:83:eb:73:51:e9:b7:4a:9a:
f5:6d:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 09:31:51 2026 by rpki-client