$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft File: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft (raw, json) Hash identifier: pVvleFij6rJJyNTQiqadCGvZM4pGA/WGbDRAUEvpzQg= Subject key identifier: 90:E9:70:E4:79:98:77:3F:BF:C7:26:A5:F0:03:F1:4B:2F:59:CA:37 Authority key identifier: 98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA Certificate issuer: /CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Certificate serial: 34D70D2DA05ED8757BF5CF2E183AB88D2AFA13D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:59:26 +0000 Manifest this update: Wed 23 Sep 2026 18:54:26 +0000 Manifest next update: Thu 24 Sep 2026 22:36:26 +0000 Files and hashes: 1: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: Afb6wq/4AMY8buYuveFg/qZwFE734ewlL99hfzyDLD8=) 2: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl (hash: nbpyHRgdZ6xusf8FHzFm3Rrcn2A3bPxHbxx1hKIF424=) 3: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: 9KwLkzzIMxFqs5It8qnMSZQlmMHzgn1zpWhuB6jKAEk=) 4: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: w7m0P2uotwUdeBK8OhSkycahjMGtA6/23NDdSEsWGzc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d7:0d:2d:a0:5e:d8:75:7b:f5:cf:2e:18:3a:b8:8d:2a:fa:13:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Validity Not Before: Sep 23 18:54:26 2026 GMT Not After : Sep 24 22:36:26 2026 GMT Subject: CN=90E970E47998773FBFC726A5F003F14B2F59CA37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:49:6b:d0:88:fd:d7:44:02:75:9a:7a:e4: 58:f0:e2:69:44:2e:50:f5:e5:44:d9:5e:74:ec:01: 17:d9:6b:ed:4e:da:21:b2:16:a1:94:14:8f:6d:92: 1a:01:cf:76:e6:0f:7f:3e:df:45:b0:ee:b5:a3:83: e3:28:9f:ee:9c:83:f6:c0:f5:4b:99:45:15:05:57: 15:29:70:93:6f:cd:7f:d1:0e:5d:d5:c5:46:56:74: c1:52:fe:03:9e:ec:eb:2f:4d:96:8b:2b:c8:39:e8: f4:ce:9e:aa:e0:89:d9:22:c5:79:55:57:43:90:ae: 9c:b5:0e:cc:55:0a:3d:a3:62:ea:43:6c:81:c1:0e: 06:d4:a2:93:2e:c6:99:24:f0:90:43:c8:71:53:ca: 7c:47:b7:35:22:10:21:a8:28:1f:2a:a3:f1:df:2f: 7b:40:d8:e3:61:5c:da:b0:7e:c3:43:98:ed:15:e4: aa:b5:3c:e0:b4:84:b6:f9:3f:be:5b:53:23:05:94: 84:b4:56:9a:c4:61:b9:96:41:60:64:52:76:b2:bc: 5d:fb:75:ec:4b:45:f8:c6:54:06:f4:df:5f:89:9c: dd:66:e7:3b:8b:21:2a:c0:f8:3e:84:e0:a4:26:4e: 5e:46:ed:5d:40:05:b3:4a:48:a1:8f:5e:18:15:4e: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:70:E4:79:98:77:3F:BF:C7:26:A5:F0:03:F1:4B:2F:59:CA:37 X509v3 Authority Key Identifier: keyid:98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fe:f7:43:cd:31:50:a6:3b:3a:ed:54:8f:6c:48:cc:bd:39: f3:f8:33:4d:85:9f:28:ea:aa:f0:e5:f4:69:ba:ac:e9:d1:4e: 40:1c:be:45:39:4f:25:2c:02:a9:72:e8:75:f3:a7:f6:e2:e8: 8b:b9:d1:32:1c:19:a8:bb:36:28:1f:98:f0:c0:8b:35:8a:e1: fe:01:17:0b:fd:d9:88:58:de:89:8d:ce:fc:78:2d:79:f7:20: 34:e7:23:04:00:f5:ad:71:d4:b5:7c:79:b9:85:af:c0:fd:a3: af:89:46:5c:48:d9:01:86:f4:97:88:b3:37:14:6e:45:4a:5f: cd:21:1f:83:b1:b2:4e:80:33:76:f9:5a:28:dc:98:e1:fb:57: 34:45:56:c9:d6:bf:2b:42:59:41:b1:98:be:34:22:20:d4:5f: 20:18:a9:6d:0c:d4:e2:98:4f:b2:9d:b4:ba:64:6a:0b:32:a9: 55:a5:09:e2:aa:99:01:3a:7b:35:f4:b6:ff:a0:b4:d8:0e:65: 68:fd:45:f4:68:7a:56:e5:21:a6:80:06:13:7b:89:98:00:83: 35:aa:a3:b0:da:ab:da:6d:c4:6e:0a:f3:3f:96:e6:1b:ba:43: 87:77:e6:bb:a7:f5:e8:49:c4:6b:69:12:ef:19:ea:db:e0:d1: 09:f4:5d:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNcNLaBe2HV79c8uGDq4jSr6E9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2 QjU1QTRFQTAeFw0yNjA5MjMxODU0MjZaFw0yNjA5MjQyMjM2MjZaMDMxMTAvBgNV BAMTKDkwRTk3MEU0Nzk5ODc3M0ZCRkM3MjZBNUYwMDNGMTRCMkY1OUNBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GUlr0Ij910QCdZp65Fjw4mlE LlD15UTZXnTsARfZa+1O2iGyFqGUFI9tkhoBz3bmD38+30Ww7rWjg+Mon+6cg/bA 9UuZRRUFVxUpcJNvzX/RDl3VxUZWdMFS/gOe7OsvTZaLK8g56PTOnqrgidkixXlV V0OQrpy1DsxVCj2jYupDbIHBDgbUopMuxpkk8JBDyHFTynxHtzUiECGoKB8qo/Hf L3tA2ONhXNqwfsNDmO0V5Kq1POC0hLb5P75bUyMFlIS0VprEYbmWQWBkUnayvF37 dexLRfjGVAb031+JnN1m5zuLISrA+D6E4KQmTl5G7V1ABbNKSKGPXhgVToiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkOlw5HmYdz+/xyal8APxSy9ZyjcwHwYDVR0j BBgwFoAUmA39rViPI8BIX9ix/mr502tVpOowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1YTVlNmQtOTFlZS00NDk3LWI0MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1 ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2QjU1QTRFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODBERkRBRDU4OEYyM0MwNDg1RkQ4QjFGRTZBRjlEMzZCNTVB NEVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5 RDM2QjU1QTRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/+90PNMVCmOzrtVI9sSMy9OfP4M02Fnyjq qvDl9Gm6rOnRTkAcvkU5TyUsAqly6HXzp/bi6Iu50TIcGai7NigfmPDAizWK4f4B Fwv92YhY3omNzvx4LXn3IDTnIwQA9a1x1LV8ebmFr8D9o6+JRlxI2QGG9JeIszcU bkVKX80hH4Oxsk6AM3b5WijcmOH7VzRFVsnWvytCWUGxmL40IiDUXyAYqW0M1OKY T7KdtLpkagsyqVWlCeKqmQE6ezX0tv+gtNgOZWj9RfRoelblIaaABhN7iZgAgzWq o7Daq9ptxG4K8z+W5hu6Q4d35run9ehJxGtpEu8Z6tvg0Qn0XeE= -----END CERTIFICATE-----Generated at Thu Sep 24 05:50:31 2026 by rpki-client