
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
File: 80810D47BA27B751C4A9441187D412B7B4FA5089.mft (raw, json)
Hash identifier: Y0xpom3d3qUppmTp+A2mypMhrVUkLfH8Q5hnw7DOxXM=
Subject key identifier: 9C:1D:59:2F:00:D9:F9:69:B4:27:69:5F:D0:6F:9E:80:7C:17:45:3F
Authority key identifier: 80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89
Certificate issuer: /CN=80810D47BA27B751C4A9441187D412B7B4FA5089
Certificate serial: 725F36907D45B74C0BCDFA4873CE9C2CAB9DCCDA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 04:36:22 +0000
Manifest this update: Thu 24 Sep 2026 04:31:22 +0000
Manifest next update: Fri 25 Sep 2026 07:49:22 +0000
Files and hashes: 1: 80810D47BA27B751C4A9441187D412B7B4FA5089.crl (hash: xyJgITN7bJD7iFYaXyA5OsnpayO2aqnbTJIuN0A8zTc=)
2: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: UeJxolbXL3BMQ04oIpha9WXgWRITl1oJXfXm7RSMha8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl
rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 07:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5f:36:90:7d:45:b7:4c:0b:cd:fa:48:73:ce:9c:2c:ab:9d:cc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80810D47BA27B751C4A9441187D412B7B4FA5089
Validity
Not Before: Sep 24 04:31:22 2026 GMT
Not After : Sep 25 07:49:22 2026 GMT
Subject: CN=9C1D592F00D9F969B427695FD06F9E807C17453F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:12:79:a4:39:8c:67:1c:df:27:a5:b0:8b:
7d:16:c7:77:3e:ce:07:02:d0:e3:ed:ba:f0:2f:a8:
90:6c:63:62:91:41:f7:44:81:42:0c:11:e5:fe:ca:
dd:3b:68:83:6c:5a:77:4f:41:54:68:dc:99:78:20:
2a:f6:ee:ec:42:95:58:e7:91:11:08:b8:d1:fa:b0:
9e:b2:3f:18:86:81:f4:a1:56:6e:71:6b:81:00:ca:
b5:b1:73:4c:d3:87:82:b7:64:64:0d:f3:62:78:cf:
d7:71:a9:28:8d:7d:7b:65:20:7b:83:6a:a3:26:3b:
d0:f3:f1:5f:51:78:5c:b2:f9:e7:e9:d1:58:47:91:
0a:88:4e:19:30:89:c6:a9:60:9c:b7:30:8c:22:14:
ff:c2:34:d0:94:b1:9f:ae:8f:93:ed:62:1b:05:8f:
de:8c:22:5b:39:25:bb:dd:c4:62:19:43:bf:cb:98:
bf:5d:8d:17:80:4b:f1:e1:13:07:dc:db:0f:03:88:
cc:ca:34:3c:6d:2a:25:a9:4f:e7:93:68:86:3f:20:
c1:96:5b:1d:cf:70:4f:03:ef:82:f8:3e:a1:d1:b9:
2c:a6:76:25:78:2b:5a:64:bc:53:dd:2f:5b:5b:02:
78:4e:71:38:8a:93:01:bf:7d:0d:f2:eb:dc:7b:56:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1D:59:2F:00:D9:F9:69:B4:27:69:5F:D0:6F:9E:80:7C:17:45:3F
X509v3 Authority Key Identifier:
keyid:80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7f:ff:12:17:31:3b:f1:37:65:0f:05:19:31:33:57:4f:09:
a3:72:77:49:2e:5f:b1:3e:44:56:41:06:64:b2:9f:52:f3:b0:
c9:b1:56:43:ad:f7:3c:cd:62:71:24:ed:d5:44:ef:5b:09:a0:
cf:01:6f:f6:96:3f:a2:bd:a0:92:32:c1:1a:87:b9:be:38:96:
27:b3:11:c8:31:b9:a0:bd:5e:ee:0b:93:89:10:42:2c:7c:b1:
b5:be:f1:f4:ab:4a:33:fc:35:dd:10:5a:c2:00:ac:46:52:cf:
a7:54:da:40:d3:5c:f6:3b:84:0f:38:df:fd:69:8e:ca:7f:39:
22:a0:fe:1d:98:23:bd:20:bf:b0:c8:17:03:69:ac:25:6d:f2:
2f:4c:19:33:84:07:e0:19:99:ab:e5:54:cd:5e:99:c8:8d:05:
4a:54:dd:23:72:d9:48:2c:5a:84:da:02:0a:6c:66:20:66:6b:
6a:31:e6:27:cf:85:ff:2c:0b:45:9e:82:37:cd:10:4f:29:d7:
57:38:21:c4:f1:36:49:15:4b:16:b0:7e:9b:00:8d:76:3c:84:
65:66:27:fa:81:9f:d3:e3:06:bb:04:48:69:df:b1:e0:48:da:
bd:64:3b:54:cd:51:e8:13:23:93:5c:0b:4c:8b:c2:1d:ba:ff:
60:b3:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:59:57 2026 by rpki-client