$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft File: 80810D47BA27B751C4A9441187D412B7B4FA5089.mft (raw, json) Hash identifier: hE483qfYheJEC+UOWRvdSoqxISopjnKu0dRk6sTcJDw= Subject key identifier: CA:B3:CA:92:F0:ED:6B:24:C5:5A:3A:CF:9D:92:B0:C6:5D:45:57:21 Authority key identifier: 80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89 Certificate issuer: /CN=80810D47BA27B751C4A9441187D412B7B4FA5089 Certificate serial: 1CDDCC7CF058BE28FB3517CD65D5D5BAF803EC49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:30:35 +0000 Manifest this update: Tue 12 May 2026 19:25:35 +0000 Manifest next update: Wed 13 May 2026 20:43:35 +0000 Files and hashes: 1: 80810D47BA27B751C4A9441187D412B7B4FA5089.crl (hash: MejEozPAFEJ2s1F8Ml0TVF9f1mvwxc3cpjD+Ix78qZ4=) 2: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: UeJxolbXL3BMQ04oIpha9WXgWRITl1oJXfXm7RSMha8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dd:cc:7c:f0:58:be:28:fb:35:17:cd:65:d5:d5:ba:f8:03:ec:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80810D47BA27B751C4A9441187D412B7B4FA5089 Validity Not Before: May 12 19:25:35 2026 GMT Not After : May 13 20:43:35 2026 GMT Subject: CN=CAB3CA92F0ED6B24C55A3ACF9D92B0C65D455721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:0e:a1:e8:9b:1a:cb:56:bf:e4:54:95:5a: 2f:48:0e:3b:21:26:79:8b:78:c3:13:93:59:05:de: 93:ec:4c:4c:52:7c:55:5c:a2:f5:de:1d:d3:32:29: ca:d1:cc:a6:de:ce:17:52:cc:05:1b:f7:9a:f1:fa: 3d:46:61:c7:e3:70:b1:28:82:26:ae:8d:c0:63:34: 7d:97:63:96:26:72:6d:c5:16:5e:b0:59:3d:96:96: 99:24:8e:06:7c:85:35:0a:8a:25:b4:c0:85:b8:27: 3b:e6:77:e2:07:89:fd:91:7b:45:ae:c1:29:ff:00: 68:c0:4a:a5:2c:92:bb:84:6b:bb:d4:60:1e:49:13: 09:cb:fd:88:e3:75:40:8b:10:bb:c4:e1:2c:08:2c: cf:b9:74:44:f2:aa:37:1f:9d:85:cb:12:c3:00:70: 2c:52:35:04:d1:90:0c:03:e0:68:2f:ea:d2:ad:54: ab:88:7d:81:08:b1:ac:ee:bd:46:33:65:f6:65:e7: 25:80:b7:61:19:11:dc:67:06:27:e9:ca:9d:29:9d: 33:5f:16:34:03:39:26:d9:2a:3d:a0:db:8f:1a:35: 6e:02:e4:59:d4:be:f9:e3:7c:39:72:fa:75:76:f8: dd:09:3d:52:30:4f:1a:db:ae:72:e6:52:2b:e7:0d: 3f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B3:CA:92:F0:ED:6B:24:C5:5A:3A:CF:9D:92:B0:C6:5D:45:57:21 X509v3 Authority Key Identifier: keyid:80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c3:cd:dc:0c:51:64:73:a4:41:ee:1e:0b:78:0d:97:1b:18: 56:ec:6d:77:84:c6:88:70:ca:51:a2:f5:2b:93:d7:63:58:a7: bd:8a:d3:d1:67:1c:e1:f8:aa:15:48:2c:bd:72:c5:df:3d:a8: e7:dc:19:1a:1c:ff:05:19:58:8a:48:3e:fe:1d:12:23:99:78: 11:c0:2b:a9:93:8a:18:cc:ac:b9:c4:f2:a7:e1:58:7e:22:bb: 7d:65:39:46:b7:11:3e:f7:c2:4b:fb:c4:58:ca:30:9d:1f:62: 6e:14:ee:00:5e:68:2a:1b:fe:da:19:4a:42:1d:32:74:6b:a5: 11:4e:2c:c1:90:49:a0:60:ed:5a:bb:da:86:45:2f:83:37:10: 53:37:15:46:3e:9b:7c:73:3e:4b:d2:3e:c6:5d:6b:10:52:9d: 07:a7:fe:e2:53:ee:73:a5:9a:4d:d1:01:51:fe:2c:f6:e7:de: 94:f5:c3:0e:9e:1b:33:d0:ba:fb:97:d4:4e:e4:79:3b:8a:59: 95:2a:3a:2b:f6:93:c3:7d:02:03:36:ed:22:4d:fc:6e:ac:26: c5:e3:4c:08:97:03:bc:d9:0f:a7:35:10:01:9b:9c:37:b3:d5: 14:81:00:a9:0b:9f:ce:a6:f2:9b:3b:84:d7:c5:d3:12:d7:99: 23:0d:b0:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHN3MfPBYvij7NRfNZdXVuvgD7EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4MTBENDdCQTI3Qjc1MUM0QTk0NDExODdENDEyQjdC NEZBNTA4OTAeFw0yNjA1MTIxOTI1MzVaFw0yNjA1MTMyMDQzMzVaMDMxMTAvBgNV BAMTKENBQjNDQTkyRjBFRDZCMjRDNTVBM0FDRjlEOTJCMEM2NUQ0NTU3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW1A6h6Jsay1a/5FSVWi9IDjsh JnmLeMMTk1kF3pPsTExSfFVcovXeHdMyKcrRzKbezhdSzAUb95rx+j1GYcfjcLEo giaujcBjNH2XY5Ymcm3FFl6wWT2WlpkkjgZ8hTUKiiW0wIW4Jzvmd+IHif2Re0Wu wSn/AGjASqUskruEa7vUYB5JEwnL/YjjdUCLELvE4SwILM+5dETyqjcfnYXLEsMA cCxSNQTRkAwD4Ggv6tKtVKuIfYEIsazuvUYzZfZl5yWAt2EZEdxnBifpyp0pnTNf FjQDOSbZKj2g248aNW4C5FnUvvnjfDly+nV2+N0JPVIwTxrbrnLmUivnDT+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyrPKkvDtayTFWjrPnZKwxl1FVyEwHwYDVR0j BBgwFoAUgIENR7ont1HEqUQRh9QSt7T6UIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNiMWYxMDktYjlmZS00MzIzLTg0ZTMtYjYwYmI0ZGMxZWNjLzAvODA4MTBENDdC QTI3Qjc1MUM0QTk0NDExODdENDEyQjdCNEZBNTA4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDgxMEQ0N0JBMjdCNzUxQzRBOTQ0MTE4N0Q0MTJCN0I0RkE1 MDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0 ZTMtYjYwYmI0ZGMxZWNjLzAvODA4MTBENDdCQTI3Qjc1MUM0QTk0NDExODdENDEy QjdCNEZBNTA4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXDzdwMUWRzpEHuHgt4DZcbGFbsbXeExohw ylGi9SuT12NYp72K09FnHOH4qhVILL1yxd89qOfcGRoc/wUZWIpIPv4dEiOZeBHA K6mTihjMrLnE8qfhWH4iu31lOUa3ET73wkv7xFjKMJ0fYm4U7gBeaCob/toZSkId MnRrpRFOLMGQSaBg7Vq72oZFL4M3EFM3FUY+m3xzPkvSPsZdaxBSnQen/uJT7nOl mk3RAVH+LPbn3pT1ww6eGzPQuvuX1E7keTuKWZUqOiv2k8N9AgM27SJN/G6sJsXj TAiXA7zZD6c1EAGbnDez1RSBAKkLn86m8ps7hNfF0xLXmSMNsNA= -----END CERTIFICATE-----Generated at Tue May 12 22:32:43 2026 by rpki-client