$ rpki-client -vvf rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft File: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft (raw, json) Hash identifier: vLtvpKkeaFW/EFM7EjSe+AGUY2WYi0+RQBmnRwXwUlg= Subject key identifier: 32:61:38:A7:BC:04:98:26:53:EF:A1:BF:07:70:3B:4E:AF:2F:70:33 Authority key identifier: 80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 Certificate issuer: /CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Certificate serial: 5FD54978DF9F651CBC350D4EBF85F2C471CFBBE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft Manifest number: 05 Signing time: Tue 05 May 2026 10:09:41 +0000 Manifest this update: Tue 05 May 2026 10:04:41 +0000 Manifest next update: Wed 06 May 2026 11:01:41 +0000 Files and hashes: 1: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl (hash: sLWyMrqUbJcDvsu5c33DUiRYk6/M7MZFJAdQ0Y4MfK0=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: KSC50JIeH8ScOew84zEAbd5sRPIPNqne4mtxlU+Kjl4=) 3: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: ju41spnPdcHn0VAkhkr7SjNUGWOqHvM+2TsOOFmj39s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d5:49:78:df:9f:65:1c:bc:35:0d:4e:bf:85:f2:c4:71:cf:bb:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Validity Not Before: May 5 10:04:41 2026 GMT Not After : May 6 11:01:41 2026 GMT Subject: CN=326138A7BC04982653EFA1BF07703B4EAF2F7033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:69:9f:f7:4e:80:fa:91:92:2e:e7:b4:c3: dd:20:63:df:63:0e:81:b7:2c:a2:1f:3d:d0:94:ef: 8c:4f:4c:5b:63:9a:40:8c:97:b1:60:7a:71:4b:e2: d3:39:53:59:cf:ca:cc:fa:ad:91:6f:23:51:3e:f2: b7:83:83:99:9c:02:16:2f:33:45:f4:f1:40:2b:fe: 63:a4:70:fc:54:b9:5b:7c:2c:60:f0:6d:55:a6:df: 49:66:e1:9d:ed:87:71:2e:df:33:db:bc:51:76:05: 57:02:f8:2b:05:55:99:98:48:b6:78:0b:34:3e:4e: 80:53:61:c6:f4:56:71:d2:78:d9:70:e4:be:91:13: 3d:d6:e3:4f:54:d3:ca:e3:06:e3:bb:cd:0c:2c:81: 76:7e:26:34:b9:9d:43:02:7e:88:bb:5d:31:c5:3b: db:a4:a8:37:a4:94:fc:d9:ad:9d:e2:58:fd:62:43: be:94:90:02:af:53:d9:48:92:25:4b:9d:9a:e9:86: 71:04:ee:93:3a:c3:ac:8e:45:52:5a:d3:29:2b:be: 35:cd:eb:96:70:89:b8:46:f7:41:8a:6e:d5:f4:1f: d1:82:63:c6:77:b5:a3:2a:1a:33:cb:f2:1a:31:eb: 56:7d:b0:ac:dc:9c:2d:90:71:1c:3f:96:c1:62:d7: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:61:38:A7:BC:04:98:26:53:EF:A1:BF:07:70:3B:4E:AF:2F:70:33 X509v3 Authority Key Identifier: keyid:80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1f:ad:54:92:39:29:4d:87:91:fc:16:03:0d:7f:c5:9f:15: 7e:c7:6e:a4:84:fe:f4:ba:c9:63:0f:0b:ee:d9:38:e1:bf:76: b6:2e:11:7b:ae:66:1c:f5:fc:ae:bd:d5:bf:0e:e9:f8:6c:40: 6d:95:60:f5:ed:0e:c6:a7:23:f9:d0:a1:99:15:92:08:47:c7: 03:83:63:8b:06:1d:1c:21:46:7b:1a:73:0f:90:72:4b:1d:cc: f1:6f:f0:5b:4b:83:62:c9:2c:c9:c0:a4:b2:4c:f5:f8:fd:ab: a0:0a:f8:68:5d:63:bc:44:5d:89:99:c6:5c:15:d7:2f:c3:6a: 61:d9:f9:3c:10:c0:78:b5:2e:90:79:3e:e7:50:b1:91:99:34: eb:2b:15:49:0b:99:ad:dc:8e:eb:b5:b9:9e:9b:ac:ed:95:94: 1e:15:b5:3a:a9:88:7e:10:db:2d:a1:56:4a:1b:0f:e7:e6:95: 30:dc:89:28:5e:62:a4:68:db:25:26:bb:c8:13:e2:4a:b2:ff: d9:1b:ff:28:c0:a4:a3:8e:58:f3:e7:d4:b7:52:4c:1e:4b:d1: a5:ad:fd:a6:eb:88:a6:6b:23:98:80:63:80:6a:f0:ee:4b:71: ce:43:2f:a0:81:df:df:fa:db:c9:7e:a7:7f:27:89:5b:3e:44: 4e:f1:c5:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9VJeN+fZRy8NQ1Ov4XyxHHPu+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNC MURFMDIwOTAeFw0yNjA1MDUxMDA0NDFaFw0yNjA1MDYxMTAxNDFaMDMxMTAvBgNV BAMTKDMyNjEzOEE3QkMwNDk4MjY1M0VGQTFCRjA3NzAzQjRFQUYyRjcwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCf2mf906A+pGSLue0w90gY99j DoG3LKIfPdCU74xPTFtjmkCMl7FgenFL4tM5U1nPysz6rZFvI1E+8reDg5mcAhYv M0X08UAr/mOkcPxUuVt8LGDwbVWm30lm4Z3th3Eu3zPbvFF2BVcC+CsFVZmYSLZ4 CzQ+ToBTYcb0VnHSeNlw5L6REz3W409U08rjBuO7zQwsgXZ+JjS5nUMCfoi7XTHF O9ukqDeklPzZrZ3iWP1iQ76UkAKvU9lIkiVLnZrphnEE7pM6w6yORVJa0ykrvjXN 65ZwibhG90GKbtX0H9GCY8Z3taMqGjPL8hox61Z9sKzcnC2QcRw/lsFi1wwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMmE4p7wEmCZT76G/B3A7Tq8vcDMwHwYDVR0j BBgwFoAUgO4+dxIPZcGIbAnxN7MNLLHeAgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzOGY2YWEtZjI3ZC00OTA2LTk1MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcx MjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNCMURFMDIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MEVFM0U3NzEyMEY2NUMxODg2QzA5RjEzN0IzMEQyQ0IxREUw MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBE MkNCMURFMDIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4frVSSOSlNh5H8FgMNf8WfFX7HbqSE/vS6 yWMPC+7ZOOG/drYuEXuuZhz1/K691b8O6fhsQG2VYPXtDsanI/nQoZkVkghHxwOD Y4sGHRwhRnsacw+QcksdzPFv8FtLg2LJLMnApLJM9fj9q6AK+GhdY7xEXYmZxlwV 1y/DamHZ+TwQwHi1LpB5PudQsZGZNOsrFUkLma3cjuu1uZ6brO2VlB4VtTqpiH4Q 2y2hVkobD+fmlTDciSheYqRo2yUmu8gT4kqy/9kb/yjApKOOWPPn1LdSTB5L0aWt /abriKZrI5iAY4Bq8O5Lcc5DL6CB39/628l+p38niVs+RE7xxVs= -----END CERTIFICATE-----Generated at Tue May 5 14:22:55 2026 by rpki-client