$ rpki-client -vvf rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft File: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft (raw, json) Hash identifier: 4kWbcIJQ5xyZN2ueZmmNB5cyjnjX16ghDdSTFyajcS0= Subject key identifier: B4:74:AC:A1:3D:57:FD:FF:52:2F:C5:44:76:AC:83:D0:4F:5F:0D:87 Authority key identifier: 80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 Certificate issuer: /CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Certificate serial: 5C84BCA70229E07BD22E9ED00F0C4445A812DAF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 10:27:12 +0000 Manifest this update: Fri 24 Jul 2026 10:22:12 +0000 Manifest next update: Sat 25 Jul 2026 13:09:12 +0000 Files and hashes: 1: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl (hash: vtovv32IlokX8MaxXBFp+I4P63v4fzg5KpKfvVUDPsc=) 2: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: ju41spnPdcHn0VAkhkr7SjNUGWOqHvM+2TsOOFmj39s=) 3: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: KSC50JIeH8ScOew84zEAbd5sRPIPNqne4mtxlU+Kjl4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:84:bc:a7:02:29:e0:7b:d2:2e:9e:d0:0f:0c:44:45:a8:12:da:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Validity Not Before: Jul 24 10:22:12 2026 GMT Not After : Jul 25 13:09:12 2026 GMT Subject: CN=B474ACA13D57FDFF522FC54476AC83D04F5F0D87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:d2:8b:82:53:f0:d8:a0:e5:e2:51:15:df: 1e:2d:da:f5:3e:de:b4:f0:a9:42:b5:d5:d7:3d:0e: 46:80:31:3f:69:dd:b4:e8:a4:01:1c:a9:8b:19:94: 6e:99:e3:04:33:0c:5a:f1:a9:3b:f0:02:b5:4a:0c: 79:07:bf:a2:df:30:21:74:96:a4:77:aa:33:b4:0f: b6:dd:76:51:ce:22:2b:b1:41:f1:88:3b:93:88:28: f4:73:27:90:74:8e:a3:20:f1:6a:54:cb:23:22:5f: 43:a4:24:a6:75:64:f2:d1:43:e7:7c:ea:2c:9f:5c: aa:99:dc:70:71:24:c0:7b:11:fa:c5:54:6f:a8:cf: aa:72:32:d9:0d:27:b1:31:c1:9d:7a:1b:64:5f:a4: 4e:ed:88:6a:8f:f6:5b:94:26:a3:9e:36:67:27:b0: 19:8b:ae:a2:0f:87:df:24:0f:e7:9d:2f:98:9c:32: fe:f9:63:59:99:ed:95:20:a3:c5:75:09:55:49:09: ed:b2:cc:09:fc:4e:4f:cc:b7:12:43:b4:05:34:e6: b0:f2:61:2f:aa:2e:f2:48:95:d8:28:0e:63:e8:72: c5:6d:92:ee:20:ea:d8:2c:bc:d8:4a:69:86:ec:9d: ec:70:79:01:00:85:e6:ca:54:3f:c2:02:60:83:30: 9f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:74:AC:A1:3D:57:FD:FF:52:2F:C5:44:76:AC:83:D0:4F:5F:0D:87 X509v3 Authority Key Identifier: keyid:80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2c:5c:cb:b0:cb:cc:f6:44:40:ef:5f:29:65:6b:f0:d5:0a: 89:de:98:b6:88:af:de:1f:96:4f:f8:1e:07:91:4b:07:ba:6a: 8b:49:c0:f6:85:c0:ee:63:72:9f:33:88:c3:92:d4:64:37:4f: c3:84:96:1f:36:bd:c5:34:7c:f6:1b:ce:75:23:2a:5e:07:61: 2a:04:77:41:c7:83:19:d7:ce:9a:63:91:f6:4f:62:68:ab:1b: ea:95:f5:a4:5b:c9:ad:54:99:32:76:ce:7d:1c:ab:a9:6c:73: c8:a1:73:e3:2e:dc:d3:17:b8:25:fa:b5:e7:c8:82:f3:0d:08: 2e:39:14:da:7c:4e:40:b6:fe:39:30:ff:c2:95:97:c3:f9:66: ca:60:de:d9:c4:7c:3b:42:92:b5:11:c2:45:f1:ea:96:f8:db: c1:37:0f:3a:e9:18:b0:e0:58:09:26:0d:5b:39:ee:9c:2b:b4: ec:f9:c5:2e:76:02:df:95:dd:89:f8:ec:c5:51:4c:23:d3:77: f4:c3:df:b9:03:24:e3:c2:48:72:c9:15:6d:35:bc:3d:55:ea: 9d:6e:37:d0:9b:64:fb:73:98:a5:a1:9b:89:d8:ff:e0:a5:fb: e6:23:30:12:12:5e:cb:55:fa:ea:6b:9e:73:86:92:95:dc:f1: 8c:16:70:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIS8pwIp4HvSLp7QDwxERagS2vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNC MURFMDIwOTAeFw0yNjA3MjQxMDIyMTJaFw0yNjA3MjUxMzA5MTJaMDMxMTAvBgNV BAMTKEI0NzRBQ0ExM0Q1N0ZERkY1MjJGQzU0NDc2QUM4M0QwNEY1RjBEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePNKLglPw2KDl4lEV3x4t2vU+ 3rTwqUK11dc9DkaAMT9p3bTopAEcqYsZlG6Z4wQzDFrxqTvwArVKDHkHv6LfMCF0 lqR3qjO0D7bddlHOIiuxQfGIO5OIKPRzJ5B0jqMg8WpUyyMiX0OkJKZ1ZPLRQ+d8 6iyfXKqZ3HBxJMB7EfrFVG+oz6pyMtkNJ7ExwZ16G2RfpE7tiGqP9luUJqOeNmcn sBmLrqIPh98kD+edL5icMv75Y1mZ7ZUgo8V1CVVJCe2yzAn8Tk/MtxJDtAU05rDy YS+qLvJIldgoDmPocsVtku4g6tgsvNhKaYbsnexweQEAhebKVD/CAmCDMJ8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtHSsoT1X/f9SL8VEdqyD0E9fDYcwHwYDVR0j BBgwFoAUgO4+dxIPZcGIbAnxN7MNLLHeAgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzOGY2YWEtZjI3ZC00OTA2LTk1MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcx MjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNCMURFMDIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MEVFM0U3NzEyMEY2NUMxODg2QzA5RjEzN0IzMEQyQ0IxREUw MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBE MkNCMURFMDIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0sXMuwy8z2REDvXylla/DVConemLaIr94f lk/4HgeRSwe6aotJwPaFwO5jcp8ziMOS1GQ3T8OElh82vcU0fPYbznUjKl4HYSoE d0HHgxnXzppjkfZPYmirG+qV9aRbya1UmTJ2zn0cq6lsc8ihc+Mu3NMXuCX6tefI gvMNCC45FNp8TkC2/jkw/8KVl8P5Zspg3tnEfDtCkrURwkXx6pb428E3DzrpGLDg WAkmDVs57pwrtOz5xS52At+V3Yn47MVRTCPTd/TD37kDJOPCSHLJFW01vD1V6p1u N9CbZPtzmKWhm4nY/+Cl++YjMBISXstV+uprnnOGkpXc8YwWcPQ= -----END CERTIFICATE-----Generated at Fri Jul 24 15:59:14 2026 by rpki-client