$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft File: 80DF8BB38CBC3C159969522F39C2926484A3509E.mft (raw, json) Hash identifier: BPdpMpOSFmuyxHyQK/BW0Qi7s81VuVxu7JygEbiFWOs= Subject key identifier: 2D:08:9B:06:96:CD:38:EB:15:4C:8D:34:65:7D:81:E5:E0:4A:44:A1 Authority key identifier: 80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E Certificate issuer: /CN=80DF8BB38CBC3C159969522F39C2926484A3509E Certificate serial: 27C6A05E68C31C2F4939C1198EE094A2EF825ED3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:39:22 +0000 Manifest this update: Thu 17 Sep 2026 00:34:22 +0000 Manifest next update: Fri 18 Sep 2026 00:53:22 +0000 Files and hashes: 1: 80DF8BB38CBC3C159969522F39C2926484A3509E.crl (hash: NMs48ou+t50/cFnPk4Hy0zd2ktM7afg0LRUN4H8Z9c4=) 2: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: Fkc3ZEGjxhAmx9yiD5p0cw71FlkcW6QQyX3i9KwIKmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c6:a0:5e:68:c3:1c:2f:49:39:c1:19:8e:e0:94:a2:ef:82:5e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80DF8BB38CBC3C159969522F39C2926484A3509E Validity Not Before: Sep 17 00:34:22 2026 GMT Not After : Sep 18 00:53:22 2026 GMT Subject: CN=2D089B0696CD38EB154C8D34657D81E5E04A44A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fa:b8:30:95:e7:22:d3:20:df:7e:cc:55:e8: 49:da:43:fd:db:86:e2:3f:13:32:63:d5:a2:1a:e5: 5a:4a:99:ed:3b:dc:96:6e:16:70:4a:7d:e5:7c:6c: e1:fd:1d:3a:73:f6:17:45:0f:e7:a2:17:d4:58:84: 4a:b1:f8:0d:b9:c5:84:09:f7:09:18:a6:9b:0c:c2: 75:12:51:3e:11:49:3d:ae:c9:1f:45:0f:a8:e1:db: 7e:b6:33:a7:69:f0:22:f1:ac:45:d3:8f:72:b4:45: dd:92:c7:f4:42:b0:60:c6:c7:6b:51:ee:4c:24:e7: 2a:fd:c4:a1:05:57:75:93:7e:ca:6a:37:50:78:79: 04:6f:46:29:19:5d:dc:4c:0c:c7:ee:c5:3d:ca:ba: e9:eb:78:76:4e:69:80:77:82:34:df:b5:75:f1:68: bd:9f:08:ff:dd:8a:f4:95:33:d6:98:9a:c3:2b:65: d3:80:06:80:1e:62:08:49:7f:ed:8f:b9:47:0a:45: a4:1a:01:5f:70:40:d9:48:fd:1f:1d:10:53:bb:5b: 58:f3:8c:10:0d:85:e7:77:18:67:2d:ff:bc:b5:0e: 68:d6:cf:cc:64:ff:04:09:27:60:cf:3a:b0:b4:06: 17:32:d3:24:63:4a:da:bf:9c:af:cc:b1:fe:38:ed: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:08:9B:06:96:CD:38:EB:15:4C:8D:34:65:7D:81:E5:E0:4A:44:A1 X509v3 Authority Key Identifier: keyid:80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:af:a6:a0:8f:62:bc:27:ac:3b:62:d6:c1:3c:a1:81:5d:e8: 55:47:ea:6c:fe:c2:ed:ab:7d:4a:ec:93:e8:d7:85:88:62:fd: 3e:13:b8:9c:46:8d:d7:33:30:b9:a7:18:4c:a7:35:6e:de:06: 2a:10:f7:88:8d:be:e7:82:dd:a5:f3:40:50:b6:54:83:7a:88: 79:6d:cf:34:8b:9c:12:d9:4f:e7:8d:c9:55:c7:b3:b4:f6:bf: 11:83:a0:4c:d0:ce:a6:68:95:41:ba:a0:ed:56:3b:f5:5e:20: b4:54:62:ec:33:ad:ea:22:e6:28:7f:3f:3a:f6:49:40:06:99: 3e:4d:dc:2f:74:3d:b2:48:46:cb:fd:4a:9f:f6:d8:65:22:bf: 2f:4e:80:ec:da:03:65:97:36:50:ea:07:ae:04:7d:19:16:34: c3:7e:f8:aa:9d:58:31:cc:1a:b9:6d:2b:66:99:35:0a:71:9e: 5e:0f:70:1a:f2:09:13:7b:bb:77:75:4a:39:07:46:d1:97:77: 96:a0:b0:7d:01:cb:93:6b:80:e0:03:a8:9e:ed:01:d6:e5:0c: 29:ff:a0:d1:5c:8c:8b:79:32:41:c4:be:d3:d8:5d:f0:36:0c: 7d:94:54:8f:17:8d:6e:55:32:3d:de:a8:ad:88:f3:ae:c4:15: 30:08:99:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8agXmjDHC9JOcEZjuCUou+CXtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBERjhCQjM4Q0JDM0MxNTk5Njk1MjJGMzlDMjkyNjQ4 NEEzNTA5RTAeFw0yNjA5MTcwMDM0MjJaFw0yNjA5MTgwMDUzMjJaMDMxMTAvBgNV BAMTKDJEMDg5QjA2OTZDRDM4RUIxNTRDOEQzNDY1N0Q4MUU1RTA0QTQ0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj+rgwleci0yDffsxV6EnaQ/3b huI/EzJj1aIa5VpKme073JZuFnBKfeV8bOH9HTpz9hdFD+eiF9RYhEqx+A25xYQJ 9wkYppsMwnUSUT4RST2uyR9FD6jh2362M6dp8CLxrEXTj3K0Rd2Sx/RCsGDGx2tR 7kwk5yr9xKEFV3WTfspqN1B4eQRvRikZXdxMDMfuxT3KuunreHZOaYB3gjTftXXx aL2fCP/divSVM9aYmsMrZdOABoAeYghJf+2PuUcKRaQaAV9wQNlI/R8dEFO7W1jz jBANhed3GGct/7y1DmjWz8xk/wQJJ2DPOrC0Bhcy0yRjStq/nK/Msf447fS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULQibBpbNOOsVTI00ZX2B5eBKRKEwHwYDVR0j BBgwFoAUgN+Ls4y8PBWZaVIvOcKSZISjUJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5MmJmMjYtYzhlNi00YTg2LTliMzMtZWEzYTJhZjU1N2YwLzAvODBERjhCQjM4 Q0JDM0MxNTk5Njk1MjJGMzlDMjkyNjQ4NEEzNTA5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MERGOEJCMzhDQkMzQzE1OTk2OTUyMkYzOUMyOTI2NDg0QTM1 MDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5MmJmMjYtYzhlNi00YTg2LTli MzMtZWEzYTJhZjU1N2YwLzAvODBERjhCQjM4Q0JDM0MxNTk5Njk1MjJGMzlDMjky NjQ4NEEzNTA5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHavpqCPYrwnrDti1sE8oYFd6FVH6mz+wu2r fUrsk+jXhYhi/T4TuJxGjdczMLmnGEynNW7eBioQ94iNvueC3aXzQFC2VIN6iHlt zzSLnBLZT+eNyVXHs7T2vxGDoEzQzqZolUG6oO1WO/VeILRUYuwzreoi5ih/Pzr2 SUAGmT5N3C90PbJIRsv9Sp/22GUivy9OgOzaA2WXNlDqB64EfRkWNMN++KqdWDHM GrltK2aZNQpxnl4PcBryCRN7u3d1SjkHRtGXd5agsH0By5NrgOADqJ7tAdblDCn/ oNFcjIt5MkHEvtPYXfA2DH2UVI8XjW5VMj3eqK2I867EFTAImQc= -----END CERTIFICATE-----Generated at Thu Sep 17 13:09:26 2026 by rpki-client