
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/80B10E21014D47A4D22BC222FD6BA1022167E1E8.mft
File: 80B10E21014D47A4D22BC222FD6BA1022167E1E8.mft (raw, json)
Hash identifier: QuNaOQt/RFvBxX5EsSmpupnkJ9VkodqFqV/C7w9w+n8=
Subject key identifier: 9D:DD:9B:B1:24:57:BE:67:FC:A0:5F:99:CD:76:E5:CB:F8:C3:F0:57
Authority key identifier: 80:B1:0E:21:01:4D:47:A4:D2:2B:C2:22:FD:6B:A1:02:21:67:E1:E8
Certificate issuer: /CN=80B10E21014D47A4D22BC222FD6BA1022167E1E8
Certificate serial: 49BDCC07A67F0B353D4AFEBFD32F83E288E9AA4A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80B10E21014D47A4D22BC222FD6BA1022167E1E8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/80B10E21014D47A4D22BC222FD6BA1022167E1E8.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 06:52:01 +0000
Manifest this update: Thu 17 Sep 2026 06:47:01 +0000
Manifest next update: Fri 18 Sep 2026 08:52:01 +0000
Files and hashes: 1: 80B10E21014D47A4D22BC222FD6BA1022167E1E8.crl (hash: glehlL25JewrK6JYa+8GeV15N+jNNVt/SRnkG/ACbMk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/80B10E21014D47A4D22BC222FD6BA1022167E1E8.crl
rsync://rpki-rsync.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/80B10E21014D47A4D22BC222FD6BA1022167E1E8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80B10E21014D47A4D22BC222FD6BA1022167E1E8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:bd:cc:07:a6:7f:0b:35:3d:4a:fe:bf:d3:2f:83:e2:88:e9:aa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80B10E21014D47A4D22BC222FD6BA1022167E1E8
Validity
Not Before: Sep 17 06:47:01 2026 GMT
Not After : Sep 18 08:52:01 2026 GMT
Subject: CN=9DDD9BB12457BE67FCA05F99CD76E5CBF8C3F057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:a9:ff:7d:83:28:39:d2:f9:ca:e7:84:ef:
f4:86:47:15:81:fb:96:4c:9e:bf:00:06:8f:3c:f1:
de:65:c5:83:40:a3:24:94:ab:49:d7:ab:32:c1:07:
62:d2:45:9a:3c:45:f3:a1:98:d8:02:36:f7:d7:9d:
71:4b:80:57:db:86:48:ca:d2:7a:f7:7c:d5:0b:99:
8e:a3:ff:ed:08:66:7e:34:61:1a:d0:10:9b:01:25:
42:2e:97:20:1b:7d:f5:0f:ee:1b:f2:e4:77:e6:55:
72:23:ea:aa:71:44:52:94:0c:fe:62:af:c2:30:a6:
65:cc:e3:38:5d:df:33:e8:5c:9b:f2:95:1f:17:08:
20:c5:c0:d0:93:25:63:27:5d:4b:1b:08:fa:ba:ef:
e0:98:17:5a:63:51:0a:f1:78:6d:d6:b3:b6:62:d2:
e5:6d:ba:65:aa:09:9a:2d:78:31:15:a1:7e:1d:db:
59:ec:86:05:f3:ed:ef:23:4a:77:1f:cc:0a:db:92:
29:5e:6c:12:9e:8d:b5:cf:e3:dc:c9:ed:5e:e5:4c:
e3:df:c2:41:78:93:3f:22:3c:82:34:6b:e1:82:0a:
07:0b:7a:c2:f5:b3:6a:24:ab:0a:f4:2a:f3:b5:25:
0d:95:93:cb:32:46:8b:c6:9c:6a:19:03:b1:73:ff:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:9B:B1:24:57:BE:67:FC:A0:5F:99:CD:76:E5:CB:F8:C3:F0:57
X509v3 Authority Key Identifier:
keyid:80:B1:0E:21:01:4D:47:A4:D2:2B:C2:22:FD:6B:A1:02:21:67:E1:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/80B10E21014D47A4D22BC222FD6BA1022167E1E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80B10E21014D47A4D22BC222FD6BA1022167E1E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/80B10E21014D47A4D22BC222FD6BA1022167E1E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7c:ba:d4:68:a5:72:0d:11:78:f5:b0:ca:8b:54:a5:93:3f:
f6:27:1e:d0:9e:0b:15:60:0d:43:62:6b:de:fe:c8:cb:66:3e:
fc:35:6f:e0:a5:06:29:18:69:63:80:ca:92:6c:ae:bf:50:0a:
23:4b:66:26:e9:8d:93:b8:77:47:06:e4:03:9a:43:0a:16:23:
d5:00:ff:e6:b9:ee:d8:de:42:21:85:29:1e:cf:d3:d1:79:43:
02:d2:4d:c7:68:37:42:99:a4:b5:0d:bf:66:91:5f:b5:da:f6:
c5:f5:7d:b3:4f:1c:bd:fa:b7:1f:15:be:59:13:3d:08:e3:c3:
a2:e8:03:11:f7:9a:8b:76:b4:d9:20:d6:76:eb:b7:02:2c:bb:
5c:40:c4:24:8a:51:69:40:5b:ed:9f:74:36:05:61:d2:28:a2:
30:62:e3:ec:a4:ef:19:b9:49:1c:d5:03:5c:e4:57:b7:be:29:
59:66:37:84:88:d0:50:d3:08:0f:15:f2:f5:ef:92:a2:9a:ef:
9b:e1:8b:53:5d:b7:56:3b:11:ad:85:d0:de:25:49:2e:79:e9:
e4:a7:28:95:55:fa:09:bb:28:4d:5d:1c:c7:3d:e1:a2:f0:9c:
13:e0:a8:fe:3e:c1:2f:08:a6:e0:04:7e:e0:ca:31:ce:76:db:
1c:35:14:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:12:40 2026 by rpki-client