$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft File: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft (raw, json) Hash identifier: dN4PB7JJcTO4LqcSk9QB3d6T/nmkV8IYD1bBgOCOFx4= Subject key identifier: F7:CF:E4:8C:89:7F:C8:D6:37:6A:AC:B9:4C:1C:60:D6:69:4D:33:08 Authority key identifier: 80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 Certificate issuer: /CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Certificate serial: 7FC61FA0BE73855FB422F7858FE3E572C3DE3D0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft Manifest number: DB Signing time: Mon 12 Oct 2026 13:17:38 +0000 Manifest this update: Mon 12 Oct 2026 13:12:38 +0000 Manifest next update: Tue 13 Oct 2026 17:05:38 +0000 Files and hashes: 1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: ju41spnPdcHn0VAkhkr7SjNUGWOqHvM+2TsOOFmj39s=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: KSC50JIeH8ScOew84zEAbd5sRPIPNqne4mtxlU+Kjl4=) 3: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl (hash: XwqN9LM47e9zBqPwEoLempQ0MHAka5rdHS34vlx42Cs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c6:1f:a0:be:73:85:5f:b4:22:f7:85:8f:e3:e5:72:c3:de:3d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Validity Not Before: Oct 12 13:12:38 2026 GMT Not After : Oct 13 17:05:38 2026 GMT Subject: CN=F7CFE48C897FC8D6376AACB94C1C60D6694D3308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:c9:f0:33:e4:dc:de:30:53:0d:98:f1:f1: 30:26:27:dd:bb:ff:e5:c1:59:81:18:6e:09:9f:f1: fb:64:7c:f1:96:91:70:f4:e4:d4:63:c5:96:b8:84: b5:94:a5:5b:be:81:ad:fd:10:ba:24:86:cb:24:95: ab:64:2f:f4:91:4e:4f:b7:d3:72:eb:d5:b1:05:a4: 46:d8:ee:93:fc:8c:3a:d8:c8:7e:1d:3d:79:da:29: d0:8d:89:3a:27:e7:14:70:e4:8b:2f:30:fc:61:2f: dd:21:f9:cd:c0:8c:38:05:ca:15:99:d2:70:f5:0c: 3f:0b:75:a7:dc:ea:92:59:70:dd:5a:6b:f7:8b:9a: 2c:e2:ed:df:e2:93:da:59:34:84:d1:08:b4:f9:d4: a4:fd:52:72:12:63:4f:16:ab:f2:aa:0f:0e:81:89: 19:26:88:fa:86:87:24:ad:c3:3b:ec:b5:a6:34:4d: 3c:98:f8:08:f9:1f:d7:a1:4e:d0:c7:c4:e4:27:1c: af:c7:85:17:fa:9d:ff:f6:b9:55:79:32:75:19:ce: 5f:02:df:94:20:2a:5a:47:28:32:4b:ad:12:59:3d: fa:94:d8:bc:63:cd:48:9a:90:bf:4e:a2:a8:87:cc: 4a:ed:d7:46:80:50:10:4b:22:83:e4:cc:9d:86:1c: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CF:E4:8C:89:7F:C8:D6:37:6A:AC:B9:4C:1C:60:D6:69:4D:33:08 X509v3 Authority Key Identifier: keyid:80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e4:ea:0d:eb:8c:a7:2a:1c:f7:56:1c:2d:70:fd:9f:1c:a9: 0b:f0:8f:4e:ac:34:f5:7a:e6:76:b2:7f:5a:f6:e9:ae:43:5a: 30:62:c9:a7:01:8b:54:42:26:a9:5b:5a:ea:91:af:0e:52:ff: 17:1b:65:85:cc:e5:fd:94:57:22:53:51:48:65:95:f8:ec:7d: 07:2c:d6:2b:72:e1:f6:90:82:73:c2:3b:c9:0c:71:6f:df:9e: bc:b4:b1:d2:84:92:b6:35:a6:d1:0a:50:33:0b:72:88:f4:8d: f2:ed:cf:49:38:0a:9e:db:c7:6b:ad:fe:e7:86:f5:66:41:0e: 61:7c:0d:d7:88:cf:d4:78:c8:d6:c2:3c:2c:42:0e:e0:32:ce: 8c:5b:b7:99:ba:88:40:c6:13:e5:2e:88:d5:46:72:c9:ed:b0: a3:9e:3b:64:5a:3a:c2:fc:38:60:ff:11:3c:b4:46:3f:7e:95: 60:c2:6a:0b:50:0e:e1:f2:34:d5:53:c9:85:7d:82:9a:71:25: d1:60:61:7c:b1:bb:7f:bd:d7:cb:0b:7c:04:80:3a:d4:b8:48: 3b:48:5b:1d:3e:6d:53:5b:f0:e2:9e:19:7e:f1:fc:cd:b9:2a: 36:a7:38:57:13:50:97:b0:7a:48:2c:2d:5f:5c:db:78:a6:a6: 1b:5c:a2:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8YfoL5zhV+0IveFj+PlcsPePQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNC MURFMDIwOTAeFw0yNjEwMTIxMzEyMzhaFw0yNjEwMTMxNzA1MzhaMDMxMTAvBgNV BAMTKEY3Q0ZFNDhDODk3RkM4RDYzNzZBQUNCOTRDMUM2MEQ2Njk0RDMzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DMnwM+Tc3jBTDZjx8TAmJ927 /+XBWYEYbgmf8ftkfPGWkXD05NRjxZa4hLWUpVu+ga39ELokhssklatkL/SRTk+3 03Lr1bEFpEbY7pP8jDrYyH4dPXnaKdCNiTon5xRw5IsvMPxhL90h+c3AjDgFyhWZ 0nD1DD8Ldafc6pJZcN1aa/eLmizi7d/ik9pZNITRCLT51KT9UnISY08Wq/KqDw6B iRkmiPqGhyStwzvstaY0TTyY+Aj5H9ehTtDHxOQnHK/HhRf6nf/2uVV5MnUZzl8C 35QgKlpHKDJLrRJZPfqU2LxjzUiakL9OoqiHzErt10aAUBBLIoPkzJ2GHKZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU98/kjIl/yNY3aqy5TBxg1mlNMwgwHwYDVR0j BBgwFoAUgO4+dxIPZcGIbAnxN7MNLLHeAgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzOGY2YWEtZjI3ZC00OTA2LTk1MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcx MjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNCMURFMDIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MEVFM0U3NzEyMEY2NUMxODg2QzA5RjEzN0IzMEQyQ0IxREUw MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBE MkNCMURFMDIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnk6g3rjKcqHPdWHC1w/Z8cqQvwj06sNPV6 5nayf1r26a5DWjBiyacBi1RCJqlbWuqRrw5S/xcbZYXM5f2UVyJTUUhllfjsfQcs 1ity4faQgnPCO8kMcW/fnry0sdKEkrY1ptEKUDMLcoj0jfLtz0k4Cp7bx2ut/ueG 9WZBDmF8DdeIz9R4yNbCPCxCDuAyzoxbt5m6iEDGE+UuiNVGcsntsKOeO2RaOsL8 OGD/ETy0Rj9+lWDCagtQDuHyNNVTyYV9gppxJdFgYXyxu3+918sLfASAOtS4SDtI Wx0+bVNb8OKeGX7x/M25KjanOFcTUJewekgsLV9c23imphtcorg= -----END CERTIFICATE-----Generated at Mon Oct 12 18:36:26 2026 by rpki-client