
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
File: 80DF8BB38CBC3C159969522F39C2926484A3509E.mft (raw, json)
Hash identifier: cuhFRBWE/syEkkZskt7jahITNVcrdCJDfWmrXC9G9p8=
Subject key identifier: 87:54:6A:7C:12:27:B7:A4:17:BE:B2:DD:7D:1A:D2:A7:D8:4A:1A:21
Authority key identifier: 80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E
Certificate issuer: /CN=80DF8BB38CBC3C159969522F39C2926484A3509E
Certificate serial: 34A8493840E42A1C1FB73B54CAAEF776CF488D22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 06:14:47 +0000
Manifest this update: Thu 18 Jun 2026 06:09:47 +0000
Manifest next update: Fri 19 Jun 2026 09:15:47 +0000
Files and hashes: 1: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: Fkc3ZEGjxhAmx9yiD5p0cw71FlkcW6QQyX3i9KwIKmI=)
2: 80DF8BB38CBC3C159969522F39C2926484A3509E.crl (hash: glfXuXuqylbokhIFaE0bl9Q5xW9EntV3K11xvjUPwn0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl
rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a8:49:38:40:e4:2a:1c:1f:b7:3b:54:ca:ae:f7:76:cf:48:8d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80DF8BB38CBC3C159969522F39C2926484A3509E
Validity
Not Before: Jun 18 06:09:47 2026 GMT
Not After : Jun 19 09:15:47 2026 GMT
Subject: CN=87546A7C1227B7A417BEB2DD7D1AD2A7D84A1A21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:0b:bc:ac:a2:3c:7a:09:02:12:77:03:fe:
42:cb:8e:41:b6:9a:d6:4f:45:ef:aa:f6:08:74:ea:
22:6c:35:1a:e9:49:e3:0b:80:05:2c:29:6a:a8:cd:
29:d0:19:3c:43:c2:f1:60:a0:0f:35:27:b8:cf:ca:
0c:fe:16:5b:7d:3c:f5:21:fb:fd:fb:fe:df:ce:61:
1f:d1:e9:b5:b7:20:4f:a6:1d:99:7d:50:a8:85:17:
23:dd:93:71:6f:c5:a8:22:b9:af:85:60:74:46:2f:
13:f0:8e:f0:95:ff:ef:78:d7:85:0d:9a:40:13:4f:
19:2b:5b:ec:eb:00:2b:c8:69:73:b6:20:5a:2e:ea:
c5:1d:10:0e:e8:39:50:aa:63:3a:30:bd:eb:8d:83:
46:2d:c4:b3:29:c6:26:d2:f5:ef:4d:90:c5:b0:58:
34:ef:a3:04:07:10:97:3d:51:34:af:b0:f2:79:d4:
9b:de:5b:b7:71:c3:96:ec:53:7b:e6:20:2f:71:87:
7a:1b:44:02:d6:17:4e:5a:c3:83:37:15:c4:fc:cd:
ea:30:ce:d1:a7:95:1c:0d:97:32:1c:05:ed:51:a2:
91:c2:98:86:ed:7f:e8:26:10:e5:ba:a7:92:61:05:
37:10:3d:49:3e:df:af:8a:d7:92:93:c1:f3:ac:4e:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:6A:7C:12:27:B7:A4:17:BE:B2:DD:7D:1A:D2:A7:D8:4A:1A:21
X509v3 Authority Key Identifier:
keyid:80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c0:88:78:69:47:06:e4:2c:48:9c:dd:8a:6b:50:67:40:8e:
0d:f4:44:6d:4f:14:ff:6b:2e:53:cf:0c:8f:f1:78:ba:8c:ff:
cb:b9:cc:64:05:35:a4:fb:99:49:c4:5f:6b:31:43:4d:11:90:
42:c8:d2:e8:91:63:3a:c4:c8:f9:9a:70:7e:15:c9:26:e1:05:
4d:91:21:54:74:b4:4b:2f:a7:1c:0c:3b:c1:36:ea:3d:b8:20:
b1:e0:28:dc:fd:0f:03:00:56:db:81:cf:d5:a8:c9:43:56:40:
d4:f9:81:f7:10:56:99:bb:ef:87:59:18:57:80:81:7d:80:91:
36:15:7e:48:d1:7b:14:3c:8a:29:03:15:c3:b1:d9:21:55:cb:
42:ad:3d:d2:68:0a:9e:a8:b2:42:5f:e4:7e:cf:60:74:8c:06:
4a:95:ab:ff:58:65:99:20:f0:3a:0e:d8:0b:8e:4e:88:aa:10:
1e:d4:e6:14:ea:6e:d4:85:4b:02:04:ac:e6:12:e2:06:b5:cb:
c0:7d:8d:41:16:1d:ac:38:6c:bd:f3:bb:ad:1c:2f:e0:29:11:
10:67:91:6a:53:61:15:72:88:9b:4f:18:aa:cf:60:d9:a7:0f:
f7:cd:c5:f7:b9:89:97:5f:12:36:ac:30:eb:f7:28:fc:0e:ca:
b1:39:ca:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:52 2026 by rpki-client