
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
File: 80810D47BA27B751C4A9441187D412B7B4FA5089.mft (raw, json)
Hash identifier: xw9fwuIFiVRWSEFwOKD031QxJ+gCf4Mdw2JpDcXghY8=
Subject key identifier: E1:70:A5:33:3C:D5:5D:05:C0:02:CD:24:61:E6:5B:D7:E7:BB:13:BC
Authority key identifier: 80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89
Certificate issuer: /CN=80810D47BA27B751C4A9441187D412B7B4FA5089
Certificate serial: 6BDE53305E458BE97F31DE88968382587AF06CBD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:41:20 +0000
Manifest this update: Fri 24 Jul 2026 01:36:20 +0000
Manifest next update: Sat 25 Jul 2026 01:54:20 +0000
Files and hashes: 1: 80810D47BA27B751C4A9441187D412B7B4FA5089.crl (hash: AtNCAEPzSeBZ4q9vKuCQI3SsEoWdQAnKYrwclsCZ3Gg=)
2: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: UeJxolbXL3BMQ04oIpha9WXgWRITl1oJXfXm7RSMha8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl
rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:de:53:30:5e:45:8b:e9:7f:31:de:88:96:83:82:58:7a:f0:6c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80810D47BA27B751C4A9441187D412B7B4FA5089
Validity
Not Before: Jul 24 01:36:20 2026 GMT
Not After : Jul 25 01:54:20 2026 GMT
Subject: CN=E170A5333CD55D05C002CD2461E65BD7E7BB13BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:2f:68:48:43:46:0c:a1:58:d5:4c:a5:d1:
36:9c:4b:4a:03:be:68:d6:3b:88:d6:ac:35:5e:c8:
c9:74:20:0a:2e:ee:70:22:34:1a:2d:9b:6e:26:18:
45:c3:65:5e:20:fa:ef:da:4c:f3:9f:d6:ef:ef:61:
64:cd:9c:4e:2a:65:94:e4:cf:d9:e4:9f:13:b6:29:
50:7b:64:85:6f:bf:72:94:a1:69:80:9d:41:59:f8:
67:fe:46:3e:d9:0d:9d:f2:a7:3e:02:0d:d7:0e:4e:
3c:e1:19:51:e4:39:f6:3b:18:63:0b:5e:79:99:d8:
f7:3a:17:de:05:89:0b:33:0b:d0:38:b0:02:1c:02:
e2:26:45:db:54:5b:a8:88:ac:0d:f1:90:f6:7f:26:
5c:1c:79:c5:57:80:19:e7:50:35:4f:16:f4:ed:59:
08:eb:9e:c1:34:49:ea:ac:f6:26:f5:cc:43:94:8d:
8d:6a:3e:de:c0:b1:8b:b6:f7:82:56:2f:dc:b3:42:
b6:08:a8:8d:ae:62:a1:65:ef:93:cf:4b:2d:5c:c6:
b4:58:7b:c4:db:c7:e4:31:cb:22:60:19:b4:24:f2:
2f:ca:3c:5e:54:02:63:c2:ee:43:5b:e9:05:39:c1:
22:6c:0c:d1:3a:f8:88:96:16:18:bb:f6:fb:ce:dc:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:70:A5:33:3C:D5:5D:05:C0:02:CD:24:61:E6:5B:D7:E7:BB:13:BC
X509v3 Authority Key Identifier:
keyid:80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a2:94:0e:87:79:65:76:c2:d9:67:a1:6c:6f:f4:60:86:13:
2f:dd:5f:fb:a9:8e:9b:8a:29:da:88:61:6f:02:6e:cc:03:86:
d3:6a:9c:7f:c5:36:10:82:01:bc:eb:49:a4:3f:e4:a8:cc:4d:
d1:8b:88:f7:df:7e:98:74:87:4c:18:3f:b5:58:ca:71:19:11:
ec:c6:20:fe:bc:ad:15:3a:35:90:f7:7d:ba:67:20:6f:d8:32:
aa:ae:bb:9e:4d:5f:c2:d5:8a:73:87:14:2d:7c:ba:84:1c:1a:
f9:b0:94:ca:c1:de:ea:b3:d0:96:e6:3c:79:48:6b:76:b6:0c:
f7:0c:c4:70:66:a6:a0:75:84:5e:bb:f7:32:aa:d2:40:9f:d5:
ec:60:19:f1:f7:c8:5b:41:66:ce:00:22:fd:2f:4d:c3:0f:3b:
d0:0d:a8:62:1a:a8:db:f2:62:1d:be:65:2b:cc:f7:e3:81:90:
41:af:bb:28:00:7b:53:a9:d2:00:59:1d:ba:90:05:75:23:bd:
0d:03:88:2e:2e:e6:01:e4:05:c9:18:14:d9:08:46:e1:d8:b8:
4a:2e:e5:73:a3:9b:ba:05:b8:f6:90:01:d1:d5:b3:94:a1:32:
82:61:4a:f1:3d:ae:f2:68:5f:1d:45:1b:db:a5:67:4d:ba:16:
a8:90:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:46 2026 by rpki-client