$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: nZr8IB4JuDHSUxujye1faGH9/fAv/kDxtt2I1clR1Vs= Subject key identifier: 74:27:7A:4B:52:DA:C9:02:3A:E3:57:7B:6A:36:FA:BA:13:71:4E:CF Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 6FD55B075BF08136BA65AAB9373F1F881326F655 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 0387 Signing time: Wed 25 Mar 2026 02:31:13 +0000 Manifest this update: Wed 25 Mar 2026 02:26:13 +0000 Manifest next update: Sat 28 Mar 2026 10:49:13 +0000 Files and hashes: 1: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: LsSX7EPU7LoZb0tQ8M2B7z4yZa4TRDb9ftfRlPqssXo=) 2: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: H9wL101+fO+XAXjmdLy2BsE4Gk5B/qm3589qLKncPgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d5:5b:07:5b:f0:81:36:ba:65:aa:b9:37:3f:1f:88:13:26:f6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: Mar 25 02:26:13 2026 GMT Not After : Mar 28 10:49:13 2026 GMT Subject: CN=74277A4B52DAC9023AE3577B6A36FABA13714ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:a0:5a:ef:13:fc:99:2c:0b:56:75:82:2d: a3:80:f6:c3:f8:47:57:c8:d3:20:37:d5:55:61:54: 7b:72:03:af:5c:e1:21:c4:5a:c2:c7:f8:ea:f6:41: b5:fc:f8:f2:9e:92:bd:95:d3:04:87:ad:cf:f4:e0: 79:5a:8d:cb:06:61:50:88:de:4f:79:db:5f:39:a9: 61:8b:f4:84:b6:ef:9d:2d:86:96:5a:91:6b:23:6d: 8e:41:fd:f7:12:3e:e5:e4:97:ba:50:21:6f:d5:1a: 15:1c:45:32:4c:9c:b2:78:32:0c:9a:50:42:be:43: 6e:49:c1:4c:0e:7e:0d:e7:ed:0c:86:fe:16:ce:3b: 28:8f:c6:8e:31:0a:ad:c3:fe:e7:66:e4:e5:4e:38: e6:60:93:0d:f6:ab:e0:46:a2:24:64:90:aa:4f:39: 42:70:33:38:b8:be:43:1c:3b:50:7a:b3:f4:f3:ee: cd:0e:ff:f9:a8:41:c9:8b:68:13:30:48:c6:69:b8: a6:d0:20:dc:a3:5d:d5:b6:a6:92:c8:a7:ef:da:6e: 68:39:26:9e:46:b8:c2:26:7a:eb:55:c3:5e:f6:14: be:29:99:69:73:da:28:58:99:4f:7b:e6:1f:b6:cf: 21:c3:d3:d6:7e:d8:1c:c1:6f:b1:6b:7b:b9:d4:ca: 2a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:27:7A:4B:52:DA:C9:02:3A:E3:57:7B:6A:36:FA:BA:13:71:4E:CF X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:91:15:cb:24:56:59:47:a6:c7:cb:81:25:31:96:b3:81:c9: f5:c6:64:15:e9:cd:04:91:cb:08:a7:82:f4:9b:01:c0:af:33: 96:95:ab:b8:b4:32:5e:99:d3:fc:27:0c:17:45:82:93:01:08: 75:3b:06:a0:58:94:a2:fb:ed:10:c5:77:f2:db:74:f7:5d:9d: 51:c2:bb:b8:01:e5:ca:a9:24:a8:f8:01:20:7d:7d:a7:66:87: 8c:25:8d:b6:d5:86:e0:cf:47:63:18:e1:39:c7:46:9c:14:d8: d5:60:ae:2f:cf:eb:b3:cc:05:b1:27:39:9b:ea:7c:51:63:77: c9:cc:fa:b3:2b:51:ab:3c:67:ac:be:9d:63:b2:60:d1:ae:f5: 73:c7:27:4b:2d:b4:32:2a:93:90:60:0c:a9:ed:7b:fa:ae:d1: a5:c8:26:be:e0:7b:a4:33:5d:db:86:3f:55:a4:88:b0:09:08: 99:88:69:0f:6b:77:15:b5:9f:4c:9a:13:f2:b1:fa:8d:36:b9: 15:34:2d:b5:c6:d4:99:f2:81:1c:5c:29:f9:21:86:25:a3:64: 92:b1:59:77:06:3d:f9:b5:a7:f4:14:b5:ec:de:a7:37:b7:a2: 99:5b:6b:26:7a:be:a2:6c:a9:9c:ef:8b:3b:2d:3a:ce:ad:40: 0c:f7:54:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb9VbB1vwgTa6Zaq5Nz8fiBMm9lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNjAzMjUwMjI2MTNaFw0yNjAzMjgxMDQ5MTNaMDMxMTAvBgNV BAMTKDc0Mjc3QTRCNTJEQUM5MDIzQUUzNTc3QjZBMzZGQUJBMTM3MTRFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxh6Ba7xP8mSwLVnWCLaOA9sP4 R1fI0yA31VVhVHtyA69c4SHEWsLH+Or2QbX8+PKekr2V0wSHrc/04HlajcsGYVCI 3k952185qWGL9IS2750thpZakWsjbY5B/fcSPuXkl7pQIW/VGhUcRTJMnLJ4Mgya UEK+Q25JwUwOfg3n7QyG/hbOOyiPxo4xCq3D/udm5OVOOOZgkw32q+BGoiRkkKpP OUJwMzi4vkMcO1B6s/Tz7s0O//moQcmLaBMwSMZpuKbQINyjXdW2ppLIp+/abmg5 Jp5GuMImeutVw172FL4pmWlz2ihYmU975h+2zyHD09Z+2BzBb7Fre7nUyip5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdCd6S1LayQI641d7ajb6uhNxTs8wHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeRFcskVllHpsfLgSUxlrOByfXGZBXpzQSR ywingvSbAcCvM5aVq7i0Ml6Z0/wnDBdFgpMBCHU7BqBYlKL77RDFd/LbdPddnVHC u7gB5cqpJKj4ASB9fadmh4wljbbVhuDPR2MY4TnHRpwU2NVgri/P67PMBbEnOZvq fFFjd8nM+rMrUas8Z6y+nWOyYNGu9XPHJ0sttDIqk5BgDKnte/qu0aXIJr7ge6Qz XduGP1WkiLAJCJmIaQ9rdxW1n0yaE/Kx+o02uRU0LbXG1JnygRxcKfkhhiWjZJKx WXcGPfm1p/QUtezepze3oplbayZ6vqJsqZzvizstOs6tQAz3VFA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:23:10 2026 by rpki-client