$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft File: 80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft (raw, json) Hash identifier: l2hauJKJheHRUyes/l5ELk8S33FhFeD+mIcBGm6Rj7g= Subject key identifier: 7B:A7:4F:B8:0F:50:E7:5E:71:9D:89:5A:33:13:C6:09:54:9C:4F:17 Authority key identifier: 80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6 Certificate issuer: /CN=80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6 Certificate serial: 125A83241C61C95647B02BBB333459EB4151CB56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 03:42:13 +0000 Manifest this update: Mon 02 Nov 2026 03:37:13 +0000 Manifest next update: Tue 03 Nov 2026 06:03:13 +0000 Files and hashes: 1: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: EcmhUiw7Snwp5Kn69lml8JUMOFi76KPsbkN9tGNhEFs=) 2: 80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl (hash: 6MuNeYf/DvkgWWyTtLVhCq5KVxFAlSBQmf/1+HaCqcI=) 3: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: KLr/aXY9Ze4XqEbalmF1qPRh4IjkQ9N5X6xc0a/32TA=) 4: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: lwbYJ1/QnNwpl26OG3bOMb5FHA287rIfMJk91ei3piw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5a:83:24:1c:61:c9:56:47:b0:2b:bb:33:34:59:eb:41:51:cb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6 Validity Not Before: Nov 2 03:37:13 2026 GMT Not After : Nov 3 06:03:13 2026 GMT Subject: CN=7BA74FB80F50E75E719D895A3313C609549C4F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:11:72:a9:1b:7f:a5:29:58:18:80:1d:57: 46:b6:b0:d3:5a:b9:cf:60:50:82:67:d4:76:b3:0c: 16:5d:f4:bb:08:6d:5a:61:88:f6:4d:c3:f3:f5:09: 93:c0:68:10:df:e0:63:c9:da:19:ae:7d:04:f5:67: 85:a9:7d:c2:b3:cb:e9:0b:9d:cf:84:95:69:37:cb: 76:5f:b1:3a:6a:ca:d6:46:68:81:27:07:f2:83:2e: 80:a4:df:da:56:26:f5:93:0c:17:c4:2f:e2:23:c8: c4:c4:a9:80:76:b7:f8:ce:d9:ff:d9:a3:11:0b:6b: 88:7b:69:23:d7:fe:04:d7:53:b2:06:b6:38:24:c2: ef:11:83:ca:0d:a4:40:9e:a0:cb:d1:b0:5e:16:09: fa:7a:4b:f5:da:bd:d3:ac:16:1b:51:30:ae:9a:d7: b1:72:ad:e6:32:64:1e:92:6f:c5:54:63:fd:46:fc: dd:c3:9f:82:07:12:83:20:97:54:a8:56:4c:41:39: 7b:2c:bf:4c:1c:6e:4d:d6:d8:71:d0:19:4e:81:f4: ce:0b:59:0c:b9:62:3d:6e:45:03:cb:93:9f:c1:31: a1:0a:e7:16:de:dd:b9:fb:ac:5e:25:49:bc:22:f6: 64:71:35:60:e5:1a:ff:9f:3e:4c:a3:d7:82:62:46: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A7:4F:B8:0F:50:E7:5E:71:9D:89:5A:33:13:C6:09:54:9C:4F:17 X509v3 Authority Key Identifier: keyid:80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a7:61:e2:87:0b:82:0f:15:d9:24:6d:6a:7c:bb:fa:f4:7b: 83:3b:88:f4:33:31:d0:03:c6:78:bf:85:4e:1d:ab:83:85:74: 59:80:10:50:d9:0b:e9:96:58:cb:e9:22:13:88:43:34:47:33: 7e:b3:12:5a:74:80:44:3e:9e:28:3a:0c:d6:21:b2:8f:2b:67: 3a:dc:23:f1:5a:f6:27:09:d9:af:02:36:4e:94:a9:bb:1c:9b: 43:c2:92:fd:d9:70:3b:54:30:ab:e0:5c:74:c8:6b:bb:5b:06: 41:42:aa:22:24:39:bc:27:dd:c7:14:7f:8b:57:21:a2:39:df: 7b:c7:48:ef:c8:d5:59:4c:e1:bf:16:64:07:8a:d5:83:29:1c: 7f:3e:c4:d3:70:1d:72:8f:c5:d8:db:98:ae:84:d0:79:8f:8b: d3:fe:2a:23:c3:0e:f8:ee:ae:b6:5e:49:0a:3b:5d:83:4c:6b: 1a:00:4e:40:73:8d:30:54:47:5a:bd:15:c9:f6:aa:0d:17:80: e0:a3:76:e6:4a:6d:1e:05:2f:13:2a:82:03:9b:d5:f2:70:32: b7:9c:4b:1e:e9:24:cb:21:f0:d4:b2:e2:8b:c6:fc:35:f7:2b: 85:ba:18:52:d1:1c:39:ea:f0:a9:31:c9:22:4e:24:a4:34:5e: 45:ee:66:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElqDJBxhyVZHsCu7MzRZ60FRy1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMDE4MDFFNTlENkI1NUJERDRERDBDM0NCRDhFRjlB Q0Y1QjZBNjAeFw0yNjExMDIwMzM3MTNaFw0yNjExMDMwNjAzMTNaMDMxMTAvBgNV BAMTKDdCQTc0RkI4MEY1MEU3NUU3MTlEODk1QTMzMTNDNjA5NTQ5QzRGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2BFyqRt/pSlYGIAdV0a2sNNa uc9gUIJn1HazDBZd9LsIbVphiPZNw/P1CZPAaBDf4GPJ2hmufQT1Z4WpfcKzy+kL nc+ElWk3y3ZfsTpqytZGaIEnB/KDLoCk39pWJvWTDBfEL+IjyMTEqYB2t/jO2f/Z oxELa4h7aSPX/gTXU7IGtjgkwu8Rg8oNpECeoMvRsF4WCfp6S/XavdOsFhtRMK6a 17FyreYyZB6Sb8VUY/1G/N3Dn4IHEoMgl1SoVkxBOXssv0wcbk3W2HHQGU6B9M4L WQy5Yj1uRQPLk5/BMaEK5xbe3bn7rF4lSbwi9mRxNWDlGv+fPkyj14JiRhWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe6dPuA9Q515xnYlaMxPGCVScTxcwHwYDVR0j BBgwFoAUgDAYAeWda1W91N0MPL2O+az1tqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU5Y2ZkMDQtNjlkMC00ZDRjLThkMDktMmQyMjEzODQyYzJjLzAvODAzMDE4MDFF NTlENkI1NUJERDRERDBDM0NCRDhFRjlBQ0Y1QjZBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDMwMTgwMUU1OUQ2QjU1QkRENEREMEMzQ0JEOEVGOUFDRjVC NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvODAzMDE4MDFFNTlENkI1NUJERDRERDBDM0NCRDhF RjlBQ0Y1QjZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSnYeKHC4IPFdkkbWp8u/r0e4M7iPQzMdAD xni/hU4dq4OFdFmAEFDZC+mWWMvpIhOIQzRHM36zElp0gEQ+nig6DNYhso8rZzrc I/Fa9icJ2a8CNk6Uqbscm0PCkv3ZcDtUMKvgXHTIa7tbBkFCqiIkObwn3ccUf4tX IaI533vHSO/I1VlM4b8WZAeK1YMpHH8+xNNwHXKPxdjbmK6E0HmPi9P+KiPDDvju rrZeSQo7XYNMaxoATkBzjTBUR1q9Fcn2qg0XgOCjduZKbR4FLxMqggOb1fJwMrec Sx7pJMsh8NSy4ovG/DX3K4W6GFLRHDnq8KkxySJOJKQ0XkXuZsQ= -----END CERTIFICATE-----Generated at Mon Nov 2 16:28:12 2026 by rpki-client