
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
File: C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft (raw, json)
Hash identifier: zgHvat+n81DvUKEoOl/NcKykNbaN89gG2I+rB4infZ0=
Subject key identifier: 1E:0A:F3:39:A2:DE:3C:AA:24:B5:50:74:61:72:65:E4:D1:31:81:1A
Authority key identifier: C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6
Certificate issuer: /CN=C80F1ABFA2D82FD943F357E54256F9D077A237B6
Certificate serial: 2571E3FE9FA0F591AE7934604D9618ED3FFC7F7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 13:06:09 +0000
Manifest this update: Tue 02 Jun 2026 13:01:09 +0000
Manifest next update: Wed 03 Jun 2026 15:14:09 +0000
Files and hashes: 1: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: q2Hz8tu9y2XkTT2jTbl1zYWtnXBiBpCT7h34gizseqk=)
2: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: eTUbqesIcChEYqu+yl9YWDoBDuBVF3h4letj7vLE80U=)
3: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: rMAHdbBBSMXyMeu+J4rW3kenWJVXrRe0ci8BKSszWqY=)
4: C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl (hash: SEZ5HJeUD/XTPbxOFEbk1avi4tIpVLomWp/Ctf/j/6s=)
5: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: CWrmFGiKwBYgiggQgjB1LyJpABcJ6sa0nfq8I7iWRCk=)
6: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 2H/9mK1Gr4QoMeN1/HJRUNydjiXw6MJ0Sj7Eb1HaNh8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl
rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:71:e3:fe:9f:a0:f5:91:ae:79:34:60:4d:96:18:ed:3f:fc:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C80F1ABFA2D82FD943F357E54256F9D077A237B6
Validity
Not Before: Jun 2 13:01:09 2026 GMT
Not After : Jun 3 15:14:09 2026 GMT
Subject: CN=1E0AF339A2DE3CAA24B55074617265E4D131811A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:35:1d:c8:e9:97:40:0c:bc:b2:47:04:26:
90:d2:6f:1e:ba:5f:c4:6d:24:97:32:e7:9f:c7:8c:
f7:4c:1c:1f:8c:e3:ca:ec:20:66:4f:eb:4e:33:93:
a0:d8:0c:76:36:cc:7e:a6:fc:8c:02:87:01:1a:e6:
0f:fa:c9:45:ab:a3:fb:d7:25:b8:53:2e:7b:97:29:
06:cd:bd:48:f0:ca:72:6f:d6:0b:89:08:7b:90:cc:
2a:e4:98:ea:91:3f:b3:1a:fc:e4:77:92:93:68:78:
51:ab:25:43:d8:a3:67:1a:8b:11:fd:b4:43:6e:20:
0c:ba:c3:a1:46:e1:8c:48:b7:13:e8:64:c9:6f:32:
92:88:45:18:ab:c6:3f:fa:2e:f3:17:10:90:22:6d:
cf:ce:72:af:05:f2:76:34:ad:b5:7f:1c:0b:ae:4b:
a1:b5:47:20:be:5f:3a:9d:87:c6:61:dc:88:0a:c7:
7e:0b:ea:10:6c:46:75:c1:53:61:48:1e:03:88:b7:
60:15:3f:30:bb:c1:bc:7b:40:8c:34:ec:3b:6d:66:
be:3a:e7:37:10:f7:4d:57:bf:ab:61:a2:92:c5:cf:
dd:de:4b:8a:64:c0:5f:8a:8f:dc:ea:32:f1:88:b3:
7a:d8:6f:41:4b:a6:92:ef:c4:f6:d5:71:3e:a3:ad:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0A:F3:39:A2:DE:3C:AA:24:B5:50:74:61:72:65:E4:D1:31:81:1A
X509v3 Authority Key Identifier:
keyid:C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cd:fd:78:4d:39:07:a4:43:50:0f:89:54:be:81:0d:82:f2:
7a:07:04:51:2c:73:ee:29:e7:83:8e:49:02:6d:13:08:d5:2c:
94:f5:6b:7c:17:47:47:8a:2b:f6:16:3f:e0:d6:38:2e:4d:66:
66:bd:0e:c8:2e:7f:d1:92:cd:0d:9d:51:7f:9b:59:76:38:d4:
76:bd:b4:82:26:fb:a7:63:7f:b0:38:91:72:02:ff:47:be:34:
b8:2f:a3:d7:bc:88:63:cc:07:f2:dc:b6:fc:44:a7:02:89:d5:
5a:3a:cb:1c:b6:e5:06:12:c7:37:66:41:3c:4e:bb:54:b3:b0:
91:bc:01:d4:3a:8b:6d:2b:b4:54:fa:38:76:5a:a8:c2:47:8f:
27:88:4f:2b:11:9a:2d:54:67:8e:04:37:96:5b:a4:6d:f9:92:
54:ec:15:d7:23:44:1d:fe:65:98:e0:60:67:d9:2a:2d:8b:c0:
f5:b1:06:35:cd:b6:5e:c0:68:23:ca:a8:c9:56:05:28:04:21:
ca:01:a7:a9:87:e1:a5:3e:29:5b:a6:45:47:c4:c0:a4:25:bf:
90:4f:5c:5a:4b:73:81:5f:19:2b:f2:75:5a:2c:5e:2b:37:0d:
c4:45:6a:cb:c6:de:d9:99:44:ce:87:f6:f9:f4:89:18:f9:97:
a6:30:44:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:42:44 2026 by rpki-client