$ rpki-client -vvf rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft File: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft (raw, json) Hash identifier: 4ji1TY22GcdG2CHNVn1w8VgINlKSSZsBLB6tC8Xf1Ao= Subject key identifier: 22:ED:7B:9A:12:E8:4A:3F:49:97:C2:7E:86:63:2D:0E:51:B9:AA:F2 Authority key identifier: 80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 Certificate issuer: /CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Certificate serial: 3613715435C078AD61F7011B2B9091C9A0CA686E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 08:29:56 +0000 Manifest this update: Sat 20 Jun 2026 08:24:56 +0000 Manifest next update: Sun 21 Jun 2026 12:07:56 +0000 Files and hashes: 1: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: KSC50JIeH8ScOew84zEAbd5sRPIPNqne4mtxlU+Kjl4=) 2: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: ju41spnPdcHn0VAkhkr7SjNUGWOqHvM+2TsOOFmj39s=) 3: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl (hash: 4frp4F5/ThCmcyL6Li7fcqN8aPXm0UU1Ge8KUXBYQ54=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 10:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:13:71:54:35:c0:78:ad:61:f7:01:1b:2b:90:91:c9:a0:ca:68:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Validity Not Before: Jun 20 08:24:56 2026 GMT Not After : Jun 21 12:07:56 2026 GMT Subject: CN=22ED7B9A12E84A3F4997C27E86632D0E51B9AAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:c4:f7:d7:a6:ed:fa:1c:49:1e:41:f1:eb: d2:e9:1d:c3:b5:68:dd:00:24:4e:85:3f:06:f0:c8: 28:e1:56:89:e4:15:56:b7:a2:81:b6:71:b5:39:f3: 85:c7:79:5d:be:18:36:ac:80:48:26:f4:0e:fc:68: 72:e2:e5:5c:90:36:93:54:ef:d5:bd:40:16:c2:1b: 99:8c:dd:2e:03:70:47:26:68:d8:f7:1b:d0:a5:36: 59:84:a4:8b:03:39:2a:4a:6a:15:74:4c:fc:4a:22: 47:d4:be:4f:3a:59:d1:4a:36:15:c9:ed:35:95:8a: f7:b7:b1:77:4b:ba:29:2b:e4:d8:9f:74:5a:c2:1e: 66:fa:db:5b:45:64:ab:d7:f3:34:7e:2d:9a:bf:39: a3:4a:2c:22:14:14:f5:97:c0:db:7e:13:6f:54:05: 6a:ef:2a:58:5e:79:de:ab:09:b0:1c:23:5d:d5:85: b9:b8:6a:3e:2a:8d:96:8e:39:d2:b3:fc:26:20:ec: 7d:db:db:f2:81:00:6e:53:32:8a:1e:75:54:94:e4: 23:b1:22:25:e6:bc:7c:fd:3a:2a:8a:90:13:fb:81: ef:4f:5a:f5:3c:80:cc:15:1d:24:c8:f5:db:20:9c: 7e:92:12:09:4c:fa:98:e4:ef:98:ad:24:48:fc:66: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:ED:7B:9A:12:E8:4A:3F:49:97:C2:7E:86:63:2D:0E:51:B9:AA:F2 X509v3 Authority Key Identifier: keyid:80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:34:ec:77:e5:d9:29:78:12:5f:8d:0a:fd:32:b1:7e:29:b1: de:78:64:a2:b2:8f:e4:cd:fa:57:d2:e4:9e:54:1a:a3:59:11: fa:35:9c:dc:67:c2:b0:17:02:29:b0:c8:08:c6:4b:37:1d:f1: 5a:48:7a:16:27:34:a9:fd:04:49:6c:5e:dc:ab:57:ad:24:d1: 24:66:f9:18:05:d1:32:2b:8c:25:99:d5:d9:a9:98:94:be:aa: 5f:6b:8f:0f:22:23:d1:94:1c:65:29:8f:30:c3:da:ba:33:5e: 89:e5:76:12:cd:6b:6c:86:e6:b5:9c:a4:2c:0b:16:c2:fc:b1: cb:ec:ea:06:60:a0:e4:f9:32:cb:46:85:de:b0:61:d1:21:c8: 06:8a:57:e9:8f:07:06:8c:c9:d1:e9:07:46:ee:48:0a:5f:99: a0:21:e5:ac:78:f4:03:b7:8e:d0:07:fc:cf:1c:c1:b3:dc:d7: 25:47:ae:58:8e:17:1f:ba:32:36:7d:c4:fb:e6:f8:f7:a4:ca: c9:0b:78:b2:36:1a:45:02:8c:89:a8:41:d2:fa:60:85:67:e9: e4:d9:2a:db:cc:d8:51:b7:5e:6c:30:18:0e:6b:ac:59:d8:da: 82:25:c7:b4:f9:af:6a:6c:95:ee:3b:83:26:49:93:b5:00:b8: 16:4f:c0:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhNxVDXAeK1h9wEbK5CRyaDKaG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNC MURFMDIwOTAeFw0yNjA2MjAwODI0NTZaFw0yNjA2MjExMjA3NTZaMDMxMTAvBgNV BAMTKDIyRUQ3QjlBMTJFODRBM0Y0OTk3QzI3RTg2NjMyRDBFNTFCOUFBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+MT316bt+hxJHkHx69LpHcO1 aN0AJE6FPwbwyCjhVonkFVa3ooG2cbU584XHeV2+GDasgEgm9A78aHLi5VyQNpNU 79W9QBbCG5mM3S4DcEcmaNj3G9ClNlmEpIsDOSpKahV0TPxKIkfUvk86WdFKNhXJ 7TWVive3sXdLuikr5NifdFrCHmb621tFZKvX8zR+LZq/OaNKLCIUFPWXwNt+E29U BWrvKlheed6rCbAcI13Vhbm4aj4qjZaOOdKz/CYg7H3b2/KBAG5TMooedVSU5COx IiXmvHz9OiqKkBP7ge9PWvU8gMwVHSTI9dsgnH6SEglM+pjk75itJEj8Zis3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIu17mhLoSj9Jl8J+hmMtDlG5qvIwHwYDVR0j BBgwFoAUgO4+dxIPZcGIbAnxN7MNLLHeAgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzOGY2YWEtZjI3ZC00OTA2LTk1MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcx MjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNCMURFMDIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MEVFM0U3NzEyMEY2NUMxODg2QzA5RjEzN0IzMEQyQ0IxREUw MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBE MkNCMURFMDIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQ07Hfl2Sl4El+NCv0ysX4psd54ZKKyj+TN +lfS5J5UGqNZEfo1nNxnwrAXAimwyAjGSzcd8VpIehYnNKn9BElsXtyrV60k0SRm +RgF0TIrjCWZ1dmpmJS+ql9rjw8iI9GUHGUpjzDD2rozXonldhLNa2yG5rWcpCwL FsL8scvs6gZgoOT5MstGhd6wYdEhyAaKV+mPBwaMydHpB0buSApfmaAh5ax49AO3 jtAH/M8cwbPc1yVHrliOFx+6MjZ9xPvm+PekyskLeLI2GkUCjImoQdL6YIVn6eTZ KtvM2FG3XmwwGA5rrFnY2oIlx7T5r2psle47gyZJk7UAuBZPwA8= -----END CERTIFICATE-----Generated at Sat Jun 20 11:43:01 2026 by rpki-client