$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft File: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft (raw, json) Hash identifier: eRsTHkDYRZz+5Ftbz1bQrR7DNtbscTSp76PS2vQnp80= Subject key identifier: 93:1F:72:39:F5:C8:FE:80:DD:B3:78:1D:D4:50:08:EB:F4:F9:5D:31 Authority key identifier: 98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA Certificate issuer: /CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Certificate serial: 61B007989B6861A35145A253663621862DDA9337 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:40:33 +0000 Manifest this update: Thu 23 Jul 2026 12:35:33 +0000 Manifest next update: Fri 24 Jul 2026 14:16:33 +0000 Files and hashes: 1: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl (hash: /1vFzDsHbotpHmWoykvdSTnCyqxlAhNaMbkSP157W6w=) 2: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: 9KwLkzzIMxFqs5It8qnMSZQlmMHzgn1zpWhuB6jKAEk=) 3: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: Afb6wq/4AMY8buYuveFg/qZwFE734ewlL99hfzyDLD8=) 4: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: w7m0P2uotwUdeBK8OhSkycahjMGtA6/23NDdSEsWGzc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b0:07:98:9b:68:61:a3:51:45:a2:53:66:36:21:86:2d:da:93:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Validity Not Before: Jul 23 12:35:33 2026 GMT Not After : Jul 24 14:16:33 2026 GMT Subject: CN=931F7239F5C8FE80DDB3781DD45008EBF4F95D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:18:c7:7a:68:dd:8f:8f:3b:56:1c:6c:87: 62:49:5c:19:d4:5f:10:39:ca:a2:f7:16:b6:c7:51: d0:fb:13:4f:e5:6c:72:79:26:18:86:59:82:7e:6c: ed:e1:77:e2:f6:67:11:8f:bd:22:b9:e7:24:71:18: 9f:b8:ba:f5:57:0d:d5:36:31:19:23:2c:f9:06:88: 8c:04:0f:41:91:ea:3e:d1:ba:82:db:41:dc:60:fe: 32:57:fa:38:09:f2:d1:c0:95:0e:8f:a9:c4:58:df: fc:fe:ce:4c:d9:85:e6:f9:19:8e:88:e1:75:5f:b8: 79:7a:3f:6c:16:48:d5:ab:f4:01:f5:a7:54:42:ba: f8:b3:1e:9a:2e:56:e9:91:08:14:5e:85:39:db:42: 9a:8b:52:e5:40:90:bf:b6:8b:14:3d:04:6a:61:fa: 43:88:6f:af:8b:21:76:c7:dc:ec:97:51:7d:96:09: 60:6a:e0:6b:52:32:6a:98:cd:76:62:a4:f1:a3:2b: 01:bf:17:64:29:bb:51:3c:0a:34:b8:1c:d6:d7:ed: ad:ab:d7:67:cb:66:48:f0:a3:bc:8b:44:7b:eb:01: 15:65:40:f4:9c:fc:d8:81:1f:63:75:5f:5d:87:60: 8d:72:21:4f:73:13:6c:e2:e2:8a:03:87:09:3f:7f: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1F:72:39:F5:C8:FE:80:DD:B3:78:1D:D4:50:08:EB:F4:F9:5D:31 X509v3 Authority Key Identifier: keyid:98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ed:b5:19:b0:bd:d5:f7:1b:08:39:e6:87:34:46:1b:01:32: 61:c8:4c:f0:94:3a:96:ed:c4:47:ef:ac:2f:06:48:7d:f5:b6: 99:a8:40:50:4d:97:6f:08:c9:be:e8:06:83:f5:80:14:98:e7: c3:02:36:dd:10:f2:36:0e:22:ee:f9:7b:84:f1:f2:01:3b:a4: 20:7c:14:04:c4:4e:1d:e6:38:d2:bc:d0:23:d5:68:a7:1a:00: 59:03:1e:ac:b8:09:04:98:b6:55:de:28:fa:9d:6d:34:b8:64: d6:a3:df:8f:c2:e1:b2:9c:77:33:fa:7e:1d:03:95:76:91:84: d5:aa:41:3a:91:ed:47:c1:08:30:b4:22:e6:0f:59:db:7a:9b: 1d:9e:ee:ed:a4:57:2c:45:dc:a4:d5:43:49:5a:5e:6e:16:3e: 1a:7f:12:b6:6f:a7:b7:e8:d7:34:08:8a:9d:a2:c4:bc:c3:ea: ec:26:b3:cb:f9:39:03:43:27:b4:fb:0c:2d:9d:74:76:10:29: 40:40:76:39:7b:15:a0:17:7b:b4:d5:c2:8b:67:77:35:53:59: 79:01:07:c2:a4:02:f4:98:0c:3a:d5:07:c5:08:d4:ec:41:fa: 6e:57:1a:9e:52:0a:39:0d:7f:65:0a:6f:2a:ae:1b:84:98:7c: 48:75:cc:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYbAHmJtoYaNRRaJTZjYhhi3akzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2 QjU1QTRFQTAeFw0yNjA3MjMxMjM1MzNaFw0yNjA3MjQxNDE2MzNaMDMxMTAvBgNV BAMTKDkzMUY3MjM5RjVDOEZFODBEREIzNzgxREQ0NTAwOEVCRjRGOTVEMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDhjHemjdj487Vhxsh2JJXBnU XxA5yqL3FrbHUdD7E0/lbHJ5JhiGWYJ+bO3hd+L2ZxGPvSK55yRxGJ+4uvVXDdU2 MRkjLPkGiIwED0GR6j7RuoLbQdxg/jJX+jgJ8tHAlQ6PqcRY3/z+zkzZheb5GY6I 4XVfuHl6P2wWSNWr9AH1p1RCuvizHpouVumRCBRehTnbQpqLUuVAkL+2ixQ9BGph +kOIb6+LIXbH3OyXUX2WCWBq4GtSMmqYzXZipPGjKwG/F2Qpu1E8CjS4HNbX7a2r 12fLZkjwo7yLRHvrARVlQPSc/NiBH2N1X12HYI1yIU9zE2zi4ooDhwk/f9RNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkx9yOfXI/oDds3gd1FAI6/T5XTEwHwYDVR0j BBgwFoAUmA39rViPI8BIX9ix/mr502tVpOowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1YTVlNmQtOTFlZS00NDk3LWI0MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1 ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2QjU1QTRFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODBERkRBRDU4OEYyM0MwNDg1RkQ4QjFGRTZBRjlEMzZCNTVB NEVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5 RDM2QjU1QTRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbttRmwvdX3Gwg55oc0RhsBMmHITPCUOpbt xEfvrC8GSH31tpmoQFBNl28Iyb7oBoP1gBSY58MCNt0Q8jYOIu75e4Tx8gE7pCB8 FATETh3mONK80CPVaKcaAFkDHqy4CQSYtlXeKPqdbTS4ZNaj34/C4bKcdzP6fh0D lXaRhNWqQTqR7UfBCDC0IuYPWdt6mx2e7u2kVyxF3KTVQ0laXm4WPhp/ErZvp7fo 1zQIip2ixLzD6uwms8v5OQNDJ7T7DC2ddHYQKUBAdjl7FaAXe7TVwotndzVTWXkB B8KkAvSYDDrVB8UI1OxB+m5XGp5SCjkNf2UKbyquG4SYfEh1zOA= -----END CERTIFICATE-----Generated at Fri Jul 24 07:37:38 2026 by rpki-client