$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft File: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft (raw, json) Hash identifier: BwxJJtDVfPaphveiXb3D4a4WqenFcVYYF7Di7VPOzPE= Subject key identifier: E5:DC:D0:66:13:75:41:3A:01:20:EE:60:08:E6:06:BF:7A:5B:9D:81 Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 519EB65C91D8F839B3F684E4E715D61A807E25E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft Manifest number: 0530 Signing time: Wed 25 Mar 2026 21:40:07 +0000 Manifest this update: Wed 25 Mar 2026 21:35:07 +0000 Manifest next update: Sun 29 Mar 2026 01:59:07 +0000 Files and hashes: 1: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: zWk8nBtzJ5kCwr+alrHNTeusIWxyDqjAXquSFLRhyts=) 2: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: jr0zhMaOjFRbvUw0rAJarRm1el624E3tGIRY/QTijIk=) 3: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: YsPCY6UCv05oHfHFXQer5wdXjWe1w4PGTDeh2YhnWn4=) 4: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: 6qWlUeCLsff2Ezhc+I97fHgwx8eIfQT4fRqy3JTRAWk=) 5: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl (hash: rt9HrLYn4/UybEwf1btE0LLTdk4ouJ/2BUYNrFKLrkw=) 6: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: MnxsLBxnCm6F40OhhKQb/lu+z75TMPF3C+fnrBq75B0=) 7: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: oe71RDdtF+9+hBS9awBl7/UQgojTF+hgJs1azOC1AoI=) 8: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: WH82srfa1fHbTvQkryRY+/IYgX3wHeBdFBK97LFsmt8=) 9: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: D+6vTrccYMAaEtpPFmF4eGIXkEsVbJklCAIq8OIMyf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9e:b6:5c:91:d8:f8:39:b3:f6:84:e4:e7:15:d6:1a:80:7e:25:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Mar 25 21:35:07 2026 GMT Not After : Mar 29 01:59:07 2026 GMT Subject: CN=E5DCD0661375413A0120EE6008E606BF7A5B9D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:b3:b8:b5:fe:b9:ad:8d:33:77:9a:74:3c: 48:9c:45:52:de:4a:20:23:ab:76:66:c3:8e:14:24: 54:8d:e3:73:f9:ae:c8:ab:b4:50:e1:ac:80:71:c5: 5f:f4:1a:0c:02:1b:99:7f:5e:6d:b8:4d:ce:50:69: ac:6a:2b:8a:b6:49:8b:53:38:8e:56:1e:0c:7e:2c: cb:18:0c:42:5d:5a:1c:fc:67:84:72:fa:ba:5b:c5: f1:2e:c5:a4:d1:05:96:c6:e2:c3:79:28:f5:c1:10: 47:90:99:68:27:9f:f8:1b:ed:d3:2f:a7:2b:6b:d5: 5e:50:24:2a:3a:24:24:ef:4a:57:2a:b8:fd:61:14: a6:c6:6b:44:22:dc:e6:00:30:57:84:73:e7:25:26: c3:a9:63:60:bb:b7:6f:36:8d:d2:7b:b9:7b:92:9f: 1f:80:f3:08:a0:09:31:56:38:f0:19:1a:d3:53:12: 40:01:be:c4:e0:7e:a7:6b:cc:30:88:81:fb:f8:3d: 60:94:b4:ef:19:0b:90:7b:8d:a6:b9:c3:2a:25:fb: 82:5e:30:8d:94:57:3c:82:ae:0a:a3:b2:18:69:25: bb:1b:67:81:0b:21:7a:50:84:6b:c5:21:cd:df:3a: 62:7c:c4:e2:06:26:e7:6a:2d:f3:9b:1d:c3:54:78: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DC:D0:66:13:75:41:3A:01:20:EE:60:08:E6:06:BF:7A:5B:9D:81 X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4c:a1:c7:b6:9c:f6:ae:4d:8e:8a:9c:ca:8b:74:05:e8:d2: 89:44:1e:fa:20:d0:a9:59:59:b6:71:75:3c:96:2f:65:92:8c: a3:09:dc:7b:82:72:2b:81:75:8a:e1:d6:b2:5e:df:09:a7:3f: e4:9d:d5:3a:7c:df:3e:78:79:10:90:4b:d4:23:45:ca:d8:65: 20:a1:1d:79:34:61:aa:e3:fc:e4:82:16:ea:81:33:98:10:ed: c9:1a:c8:f2:c2:e1:ea:e2:ce:e0:13:27:1e:e4:64:eb:4b:c2: cd:5b:12:24:c6:89:a8:e1:5b:34:2b:f7:96:e8:9d:d1:55:1b: eb:e3:fc:65:f0:11:8d:c1:09:08:7b:20:73:a0:35:1e:75:6b: d5:49:48:14:11:f3:da:47:53:f7:0f:22:5a:0d:c8:7d:ad:f1: 83:28:d4:5a:5e:1b:c3:12:a6:58:c5:d7:69:cb:f1:f0:a0:80: 08:0f:ae:3d:6e:9e:1f:2a:e6:42:77:03:0e:4f:bc:c6:67:9b: 3e:96:d7:58:9b:70:7f:97:95:a0:5e:79:f3:16:04:a4:08:d0: ce:65:a2:b5:ec:10:75:79:97:ee:87:60:a2:84:b6:84:26:cc: e2:24:d0:68:a2:d7:aa:e9:c1:fc:ff:44:96:36:ae:3c:3e:cf: 91:bd:57:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZ62XJHY+Dmz9oTk5xXWGoB+JeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNjAzMjUyMTM1MDdaFw0yNjAzMjkwMTU5MDdaMDMxMTAvBgNV BAMTKEU1RENEMDY2MTM3NTQxM0EwMTIwRUU2MDA4RTYwNkJGN0E1QjlEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4D7O4tf65rY0zd5p0PEicRVLe SiAjq3Zmw44UJFSN43P5rsirtFDhrIBxxV/0GgwCG5l/Xm24Tc5QaaxqK4q2SYtT OI5WHgx+LMsYDEJdWhz8Z4Ry+rpbxfEuxaTRBZbG4sN5KPXBEEeQmWgnn/gb7dMv pytr1V5QJCo6JCTvSlcquP1hFKbGa0Qi3OYAMFeEc+clJsOpY2C7t282jdJ7uXuS nx+A8wigCTFWOPAZGtNTEkABvsTgfqdrzDCIgfv4PWCUtO8ZC5B7jaa5wyol+4Je MI2UVzyCrgqjshhpJbsbZ4ELIXpQhGvFIc3fOmJ8xOIGJudqLfObHcNUeKxdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5dzQZhN1QToBIO5gCOYGv3pbnYEwHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFE ODI5Qjk0MTBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxMoce2nPauTY6KnMqLdAXo0olEHvog0KlZ WbZxdTyWL2WSjKMJ3HuCciuBdYrh1rJe3wmnP+Sd1Tp83z54eRCQS9QjRcrYZSCh HXk0Yarj/OSCFuqBM5gQ7ckayPLC4erizuATJx7kZOtLws1bEiTGiajhWzQr95bo ndFVG+vj/GXwEY3BCQh7IHOgNR51a9VJSBQR89pHU/cPIloNyH2t8YMo1FpeG8MS pljF12nL8fCggAgPrj1unh8q5kJ3Aw5PvMZnmz6W11ibcH+XlaBeefMWBKQI0M5l orXsEHV5l+6HYKKEtoQmzOIk0Gii16rpwfz/RJY2rjw+z5G9V/g= -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:55 2026 by rpki-client