$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft File: 80810D47BA27B751C4A9441187D412B7B4FA5089.mft (raw, json) Hash identifier: l81M4oo4YSi0StzDZ14dyroYE2CIefiTaLFuYg5j55Y= Subject key identifier: DD:A2:F5:0A:D5:FF:C7:F7:EB:23:12:A9:AF:12:E1:40:CF:75:59:04 Authority key identifier: 80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89 Certificate issuer: /CN=80810D47BA27B751C4A9441187D412B7B4FA5089 Certificate serial: 284EC40F4D76CD686B33FBF958E95483453BE1E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 11:53:26 +0000 Manifest this update: Thu 17 Sep 2026 11:48:26 +0000 Manifest next update: Fri 18 Sep 2026 12:32:26 +0000 Files and hashes: 1: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: UeJxolbXL3BMQ04oIpha9WXgWRITl1oJXfXm7RSMha8=) 2: 80810D47BA27B751C4A9441187D412B7B4FA5089.crl (hash: MzkyZCcjIP8KVn1VpnO+hlUypogKlU+iYospw1UeRfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4e:c4:0f:4d:76:cd:68:6b:33:fb:f9:58:e9:54:83:45:3b:e1:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80810D47BA27B751C4A9441187D412B7B4FA5089 Validity Not Before: Sep 17 11:48:26 2026 GMT Not After : Sep 18 12:32:26 2026 GMT Subject: CN=DDA2F50AD5FFC7F7EB2312A9AF12E140CF755904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:fd:12:c1:8d:7c:38:2d:d2:33:2e:a7:8e: 42:d0:f5:9e:01:eb:15:ba:3e:ee:7c:61:c7:66:36: 27:0e:01:3d:e6:26:f2:34:af:52:ad:8e:a4:d1:c7: e6:35:fd:10:41:ad:20:c4:a2:05:bb:5c:b2:09:1b: 39:41:ed:0e:7b:29:17:91:6e:8d:39:29:b0:a3:a3: 61:f4:c3:17:bf:17:5e:f1:8b:f7:54:12:77:8b:bc: df:07:fe:66:fa:92:66:2b:f2:0e:dc:24:db:4b:7e: 67:3c:b0:51:aa:eb:12:47:7d:62:a4:62:a6:89:b0: 40:cc:4d:d8:99:f0:63:48:d3:30:64:fc:29:9f:b7: 71:10:3b:17:22:f8:0b:05:5c:0a:36:92:3d:51:b4: eb:86:35:24:5f:d1:af:a6:63:85:8b:95:4f:65:9a: 13:ad:2b:5b:04:0a:19:6f:03:5b:db:4c:e6:64:61: 50:15:e0:4b:4c:f1:35:bb:ac:84:cf:1e:69:9a:6b: 6b:ef:01:64:a2:e9:08:6f:3b:f4:73:dc:db:f8:da: 3e:c0:c0:7e:15:24:9a:ad:02:46:91:af:d2:d3:1a: 72:40:85:07:74:37:3f:c1:27:89:ef:52:5c:5a:ad: 1b:6b:42:3e:aa:17:01:86:a1:f2:20:4f:a1:ed:65: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A2:F5:0A:D5:FF:C7:F7:EB:23:12:A9:AF:12:E1:40:CF:75:59:04 X509v3 Authority Key Identifier: keyid:80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3d:98:cc:5f:e1:4b:e5:67:89:ff:df:ff:b3:d8:7b:13:45: 67:fe:58:bc:84:f4:5d:30:ae:6b:f7:60:1b:69:74:cc:0d:3a: 1d:9b:a6:80:07:f8:d8:cf:59:db:41:61:a7:01:6d:29:02:de: 98:ad:bc:31:5f:02:10:31:9c:61:f5:44:07:65:e3:77:16:2e: 2b:9c:c3:c2:e1:18:b3:25:20:6c:66:f6:70:ab:b8:e0:9c:7c: db:12:b9:a9:22:07:d6:aa:ed:cd:17:c2:cd:89:75:52:69:44: de:32:8d:83:26:11:00:bd:11:93:83:bd:f6:ce:19:7c:4e:53: ff:9b:d2:1f:91:e1:c9:71:79:86:48:e8:b0:13:c9:3c:2e:32: d5:5d:8b:31:ef:cd:4a:6c:61:35:03:3b:22:f8:0d:cb:f8:51: 28:d0:56:3b:37:99:5c:64:2e:d8:ab:c8:67:95:42:b9:f4:16: e3:7f:ee:7a:a9:84:c8:b4:42:c4:a0:62:f0:05:51:84:1d:fa: c5:a5:76:ae:90:21:fa:3d:b3:9c:90:23:b8:71:38:95:8b:f7: 58:7f:75:86:09:3d:c2:00:59:a4:1c:d5:6f:9f:6a:37:bf:40: f1:99:ad:76:be:8a:66:f1:26:6a:bb:91:c8:98:e4:99:95:c6: ca:47:ad:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKE7ED012zWhrM/v5WOlUg0U74eYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4MTBENDdCQTI3Qjc1MUM0QTk0NDExODdENDEyQjdC NEZBNTA4OTAeFw0yNjA5MTcxMTQ4MjZaFw0yNjA5MTgxMjMyMjZaMDMxMTAvBgNV BAMTKEREQTJGNTBBRDVGRkM3RjdFQjIzMTJBOUFGMTJFMTQwQ0Y3NTU5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Qf0SwY18OC3SMy6njkLQ9Z4B 6xW6Pu58YcdmNicOAT3mJvI0r1KtjqTRx+Y1/RBBrSDEogW7XLIJGzlB7Q57KReR bo05KbCjo2H0wxe/F17xi/dUEneLvN8H/mb6kmYr8g7cJNtLfmc8sFGq6xJHfWKk YqaJsEDMTdiZ8GNI0zBk/Cmft3EQOxci+AsFXAo2kj1RtOuGNSRf0a+mY4WLlU9l mhOtK1sEChlvA1vbTOZkYVAV4EtM8TW7rITPHmmaa2vvAWSi6QhvO/Rz3Nv42j7A wH4VJJqtAkaRr9LTGnJAhQd0Nz/BJ4nvUlxarRtrQj6qFwGGofIgT6HtZeqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3aL1CtX/x/frIxKprxLhQM91WQQwHwYDVR0j BBgwFoAUgIENR7ont1HEqUQRh9QSt7T6UIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNiMWYxMDktYjlmZS00MzIzLTg0ZTMtYjYwYmI0ZGMxZWNjLzAvODA4MTBENDdC QTI3Qjc1MUM0QTk0NDExODdENDEyQjdCNEZBNTA4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDgxMEQ0N0JBMjdCNzUxQzRBOTQ0MTE4N0Q0MTJCN0I0RkE1 MDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0 ZTMtYjYwYmI0ZGMxZWNjLzAvODA4MTBENDdCQTI3Qjc1MUM0QTk0NDExODdENDEy QjdCNEZBNTA4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk9mMxf4UvlZ4n/3/+z2HsTRWf+WLyE9F0w rmv3YBtpdMwNOh2bpoAH+NjPWdtBYacBbSkC3pitvDFfAhAxnGH1RAdl43cWLiuc w8LhGLMlIGxm9nCruOCcfNsSuakiB9aq7c0Xws2JdVJpRN4yjYMmEQC9EZODvfbO GXxOU/+b0h+R4clxeYZI6LATyTwuMtVdizHvzUpsYTUDOyL4Dcv4USjQVjs3mVxk LtiryGeVQrn0FuN/7nqphMi0QsSgYvAFUYQd+sWldq6QIfo9s5yQI7hxOJWL91h/ dYYJPcIAWaQc1W+faje/QPGZrXa+imbxJmq7kciY5JmVxspHrYk= -----END CERTIFICATE-----Generated at Thu Sep 17 15:49:25 2026 by rpki-client