$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft File: 80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft (raw, json) Hash identifier: bm6ebvrv2fBvfqzCX0Px9Ibj/QXG7IPAiCsmTriHv/0= Subject key identifier: 0E:22:D0:6A:23:8E:43:39:5C:45:28:5B:7C:34:26:FD:51:11:93:9A Authority key identifier: 80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6 Certificate issuer: /CN=80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6 Certificate serial: 1AEC091B4EC86E76ACA3A9284FD7219776D3DA70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 20:26:17 +0000 Manifest this update: Wed 23 Sep 2026 20:21:17 +0000 Manifest next update: Thu 24 Sep 2026 21:02:17 +0000 Files and hashes: 1: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: lwbYJ1/QnNwpl26OG3bOMb5FHA287rIfMJk91ei3piw=) 2: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: EcmhUiw7Snwp5Kn69lml8JUMOFi76KPsbkN9tGNhEFs=) 3: 80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl (hash: oLD8MhsDWqQpIfuytC2teEmChHX3FlBwrTzDsOYUxj0=) 4: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: KLr/aXY9Ze4XqEbalmF1qPRh4IjkQ9N5X6xc0a/32TA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ec:09:1b:4e:c8:6e:76:ac:a3:a9:28:4f:d7:21:97:76:d3:da:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6 Validity Not Before: Sep 23 20:21:17 2026 GMT Not After : Sep 24 21:02:17 2026 GMT Subject: CN=0E22D06A238E43395C45285B7C3426FD5111939A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:6f:80:96:cd:8e:e7:77:6a:38:10:66:80: 44:83:f3:20:5c:53:ae:2c:86:27:64:ea:98:2e:64: ad:35:39:ff:a1:6c:77:cb:f7:0f:4c:90:86:48:08: ef:07:32:3c:e4:2a:a6:d3:be:05:17:7b:2e:42:b8: 59:51:1c:86:30:0f:d1:c1:5c:fa:72:6e:8a:9f:05: ac:bb:6b:22:97:27:f3:62:84:c1:f9:4c:e6:30:0b: 3d:17:ca:ff:8d:77:1e:0c:db:b9:d5:0b:97:fd:6f: f0:16:2c:85:22:2b:ab:aa:44:2d:36:21:da:86:0c: 09:ca:a3:98:81:fc:7a:d1:ad:3d:06:a4:75:08:3c: 36:de:6c:9d:3a:c2:c9:5f:47:4d:c9:ca:d3:87:27: c6:8e:fc:93:fc:61:c7:2d:43:6d:79:5f:b3:d4:ea: ad:9c:3a:e2:2f:5f:e6:74:2a:24:64:95:5d:bf:6f: 69:9d:bd:34:bc:67:72:c9:29:eb:6d:92:aa:fe:fc: 35:8d:ed:45:e8:73:10:28:2a:a1:f5:fe:50:dc:f0: 2e:ec:aa:02:a4:6d:d8:61:f8:1e:b2:a4:0d:d4:29: 6c:5c:d5:34:20:9a:9a:df:cf:e9:03:70:59:73:f3: 28:d3:2e:fa:fa:9f:bc:85:7b:54:4b:ed:0e:86:f4: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:22:D0:6A:23:8E:43:39:5C:45:28:5B:7C:34:26:FD:51:11:93:9A X509v3 Authority Key Identifier: keyid:80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:97:7c:01:61:40:41:7b:0f:bb:28:5e:6a:26:19:34:77:38: 3d:f1:16:d7:a8:2b:01:d8:06:97:83:f5:ff:80:53:0a:be:f0: e9:43:08:f6:56:8d:66:e1:4f:3d:ab:ff:d0:0d:e4:ea:8a:a8: 6c:8f:7b:70:0e:4b:c6:0b:66:11:ef:ab:40:bb:6f:c4:d7:d1: 54:22:26:15:7d:12:c8:32:33:ef:58:fe:cf:e6:15:3c:70:f6: 49:d2:4d:bb:7a:cb:c8:ad:af:1a:ed:89:ff:6c:80:4a:06:d6: 76:67:61:39:17:1f:15:e1:32:60:08:f8:34:55:76:0c:58:2a: a5:db:6d:7f:14:34:32:d9:41:25:2b:18:cc:55:63:ef:8a:0c: ee:93:b9:e4:4f:cb:28:c3:ce:f3:91:7e:e9:62:7c:a9:7f:e8: a3:4e:93:b1:44:d1:eb:3d:9f:e0:08:40:b0:c0:57:be:05:58: 99:d6:c9:17:45:69:95:03:bc:92:82:e1:af:f8:4d:41:15:fc: c0:6a:c4:49:c0:52:d1:d3:49:bf:91:5c:df:98:3b:23:e9:64: 48:3c:c4:bf:6c:55:c8:9b:04:f9:12:52:1b:c3:0c:9a:d2:f2: 1f:94:12:87:3e:30:d4:68:66:47:39:29:e9:0e:a6:7f:4c:2d: 69:43:73:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuwJG07Ibnaso6koT9chl3bT2nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMDE4MDFFNTlENkI1NUJERDRERDBDM0NCRDhFRjlB Q0Y1QjZBNjAeFw0yNjA5MjMyMDIxMTdaFw0yNjA5MjQyMTAyMTdaMDMxMTAvBgNV BAMTKDBFMjJEMDZBMjM4RTQzMzk1QzQ1Mjg1QjdDMzQyNkZENTExMTkzOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbG+Als2O53dqOBBmgESD8yBc U64shidk6pguZK01Of+hbHfL9w9MkIZICO8HMjzkKqbTvgUXey5CuFlRHIYwD9HB XPpyboqfBay7ayKXJ/NihMH5TOYwCz0Xyv+Ndx4M27nVC5f9b/AWLIUiK6uqRC02 IdqGDAnKo5iB/HrRrT0GpHUIPDbebJ06wslfR03JytOHJ8aO/JP8YcctQ215X7PU 6q2cOuIvX+Z0KiRklV2/b2mdvTS8Z3LJKettkqr+/DWN7UXocxAoKqH1/lDc8C7s qgKkbdhh+B6ypA3UKWxc1TQgmprfz+kDcFlz8yjTLvr6n7yFe1RL7Q6G9HZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDiLQaiOOQzlcRShbfDQm/VERk5owHwYDVR0j BBgwFoAUgDAYAeWda1W91N0MPL2O+az1tqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU5Y2ZkMDQtNjlkMC00ZDRjLThkMDktMmQyMjEzODQyYzJjLzAvODAzMDE4MDFF NTlENkI1NUJERDRERDBDM0NCRDhFRjlBQ0Y1QjZBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDMwMTgwMUU1OUQ2QjU1QkRENEREMEMzQ0JEOEVGOUFDRjVC NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvODAzMDE4MDFFNTlENkI1NUJERDRERDBDM0NCRDhF RjlBQ0Y1QjZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWXfAFhQEF7D7soXmomGTR3OD3xFteoKwHY BpeD9f+AUwq+8OlDCPZWjWbhTz2r/9AN5OqKqGyPe3AOS8YLZhHvq0C7b8TX0VQi JhV9EsgyM+9Y/s/mFTxw9knSTbt6y8itrxrtif9sgEoG1nZnYTkXHxXhMmAI+DRV dgxYKqXbbX8UNDLZQSUrGMxVY++KDO6TueRPyyjDzvORfulifKl/6KNOk7FE0es9 n+AIQLDAV74FWJnWyRdFaZUDvJKC4a/4TUEV/MBqxEnAUtHTSb+RXN+YOyPpZEg8 xL9sVcibBPkSUhvDDJrS8h+UEoc+MNRoZkc5KekOpn9MLWlDczc= -----END CERTIFICATE-----Generated at Thu Sep 24 03:56:58 2026 by rpki-client