$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft File: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft (raw, json) Hash identifier: y2zole6R/gBX3Ky1LoTn+bob3w5CkQtOTpeiApz7oNY= Subject key identifier: 67:7D:03:E3:A0:8B:81:0B:50:13:F3:38:A1:98:30:8D:BE:8E:0F:49 Authority key identifier: 98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA Certificate issuer: /CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Certificate serial: 1A14848BF94158AD1A3CD4DE55DE99C39A622682 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 08:58:22 +0000 Manifest this update: Thu 03 Sep 2026 08:53:22 +0000 Manifest next update: Fri 04 Sep 2026 09:29:22 +0000 Files and hashes: 1: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl (hash: ONt9ObDREKwEj+iaJ6ZK5cCCBuKQ9TRiLLAZ+r/5/Gg=) 2: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: 9KwLkzzIMxFqs5It8qnMSZQlmMHzgn1zpWhuB6jKAEk=) 3: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: w7m0P2uotwUdeBK8OhSkycahjMGtA6/23NDdSEsWGzc=) 4: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: Afb6wq/4AMY8buYuveFg/qZwFE734ewlL99hfzyDLD8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:14:84:8b:f9:41:58:ad:1a:3c:d4:de:55:de:99:c3:9a:62:26:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Validity Not Before: Sep 3 08:53:22 2026 GMT Not After : Sep 4 09:29:22 2026 GMT Subject: CN=677D03E3A08B810B5013F338A198308DBE8E0F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:d4:a3:c6:d6:20:43:41:74:82:48:4a:10: 2c:f2:bf:ac:d1:a3:3c:ee:92:73:00:4c:fe:0f:fa: 33:da:e6:f1:99:a9:d5:86:f2:f3:a9:a0:c1:9d:bb: b3:14:dc:97:28:0c:7d:9f:82:9a:15:c2:88:57:87: 97:72:13:ec:b6:7d:27:f6:72:9f:66:94:89:da:f4: d7:04:b5:f4:c7:08:ba:ff:7b:7c:63:11:54:e3:8f: c2:90:55:c3:e1:3d:84:33:4d:95:ba:b6:b4:79:fb: a4:9d:4e:16:ec:ab:86:35:79:48:c7:85:7d:a5:85: 02:00:e2:a4:ea:e5:7f:69:8d:f2:6c:41:8a:25:c3: dc:73:99:d4:fa:5b:64:16:f6:d4:1c:ba:05:10:fd: b1:91:3d:4d:25:73:2a:dc:08:d4:f7:52:0b:41:ee: 74:cc:d7:a2:c1:63:8a:27:3c:0e:09:f8:1d:08:47: 34:2a:6f:dc:8e:37:e1:7e:6d:cf:c5:67:f7:5e:82: d8:8b:08:03:31:2f:c6:a6:ff:43:65:0e:03:be:59: e8:8d:d6:be:4c:79:ad:66:5e:d1:7b:91:29:7f:54: 72:d9:ca:1e:f6:cb:05:22:6b:07:ab:79:dd:12:b7: b4:9d:f2:59:36:a0:db:52:96:05:2e:44:dc:d9:16: 2f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7D:03:E3:A0:8B:81:0B:50:13:F3:38:A1:98:30:8D:BE:8E:0F:49 X509v3 Authority Key Identifier: keyid:98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2e:e4:dc:84:22:88:6e:14:5d:1c:c1:83:32:49:17:07:5b: d5:21:45:7e:4d:2c:c8:e0:45:3b:4d:1d:e9:e1:d1:0c:1b:3c: 4f:08:95:28:26:10:53:63:68:45:b5:8e:7c:b3:ce:67:aa:8c: 11:3a:ba:cb:76:7b:30:e3:4a:1a:04:eb:79:fc:bd:0d:6e:b7: dd:b1:42:ed:67:94:62:bc:57:78:f5:7f:fe:77:24:d3:15:fc: bf:69:38:81:56:9d:c0:a1:20:d9:60:9d:c4:10:d6:09:48:76: ec:93:60:4a:24:b5:17:f8:35:77:65:58:8d:3d:3b:da:80:02: 16:9a:d2:56:32:67:ad:9f:93:b6:d9:8d:4e:76:ee:18:26:46: 48:23:45:ea:14:a2:6a:fb:1c:31:3b:b1:23:fa:6a:91:e9:4a: 6d:c2:1f:8f:78:11:e6:af:b6:18:f8:99:70:03:84:5f:5e:b1: 0e:ec:31:ae:cc:cb:61:4d:46:3e:85:09:3f:28:fe:53:b0:8d: fd:66:48:eb:9d:5a:79:30:f9:81:d3:a3:41:97:9e:ca:20:a1: 11:76:39:8d:b6:7d:bc:11:dc:85:59:70:6d:a2:62:a9:35:38: aa:f8:b0:f4:f9:e8:ab:a6:65:19:4f:44:ab:6e:92:5c:b4:00: e2:6a:26:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhSEi/lBWK0aPNTeVd6Zw5piJoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2 QjU1QTRFQTAeFw0yNjA5MDMwODUzMjJaFw0yNjA5MDQwOTI5MjJaMDMxMTAvBgNV BAMTKDY3N0QwM0UzQTA4QjgxMEI1MDEzRjMzOEExOTgzMDhEQkU4RTBGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkNSjxtYgQ0F0gkhKECzyv6zR ozzuknMATP4P+jPa5vGZqdWG8vOpoMGdu7MU3JcoDH2fgpoVwohXh5dyE+y2fSf2 cp9mlIna9NcEtfTHCLr/e3xjEVTjj8KQVcPhPYQzTZW6trR5+6SdThbsq4Y1eUjH hX2lhQIA4qTq5X9pjfJsQYolw9xzmdT6W2QW9tQcugUQ/bGRPU0lcyrcCNT3UgtB 7nTM16LBY4onPA4J+B0IRzQqb9yON+F+bc/FZ/degtiLCAMxL8am/0NlDgO+WeiN 1r5Mea1mXtF7kSl/VHLZyh72ywUiawered0St7Sd8lk2oNtSlgUuRNzZFi+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ30D46CLgQtQE/M4oZgwjb6OD0kwHwYDVR0j BBgwFoAUmA39rViPI8BIX9ix/mr502tVpOowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1YTVlNmQtOTFlZS00NDk3LWI0MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1 ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2QjU1QTRFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODBERkRBRDU4OEYyM0MwNDg1RkQ4QjFGRTZBRjlEMzZCNTVB NEVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5 RDM2QjU1QTRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgu5NyEIohuFF0cwYMySRcHW9UhRX5NLMjg RTtNHenh0QwbPE8IlSgmEFNjaEW1jnyzzmeqjBE6ust2ezDjShoE63n8vQ1ut92x Qu1nlGK8V3j1f/53JNMV/L9pOIFWncChINlgncQQ1glIduyTYEoktRf4NXdlWI09 O9qAAhaa0lYyZ62fk7bZjU527hgmRkgjReoUomr7HDE7sSP6apHpSm3CH494Eeav thj4mXADhF9esQ7sMa7My2FNRj6FCT8o/lOwjf1mSOudWnkw+YHTo0GXnsogoRF2 OY22fbwR3IVZcG2iYqk1OKr4sPT56KumZRlPRKtukly0AOJqJgE= -----END CERTIFICATE-----Generated at Thu Sep 3 12:35:50 2026 by rpki-client