$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft File: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft (raw, json) Hash identifier: EIWFlTDC/mAFHvApNpk9o1oZWQhFHPWFmawjSVVdoAk= Subject key identifier: B2:4F:1F:76:1A:A6:45:2C:68:7B:5A:22:F8:AF:CD:BE:DD:71:EF:BE Authority key identifier: 98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA Certificate issuer: /CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Certificate serial: 487E9455AB0DFE9FF2AC54F15CE699BBB7B98E50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:42:37 +0000 Manifest this update: Tue 12 May 2026 17:37:37 +0000 Manifest next update: Wed 13 May 2026 17:43:37 +0000 Files and hashes: 1: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: w7m0P2uotwUdeBK8OhSkycahjMGtA6/23NDdSEsWGzc=) 2: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl (hash: XLw/Gjh8n3ZMyDshx5ompXdwxVpIoOCAgXV3IC5WsyU=) 3: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: 9KwLkzzIMxFqs5It8qnMSZQlmMHzgn1zpWhuB6jKAEk=) 4: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: Afb6wq/4AMY8buYuveFg/qZwFE734ewlL99hfzyDLD8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7e:94:55:ab:0d:fe:9f:f2:ac:54:f1:5c:e6:99:bb:b7:b9:8e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Validity Not Before: May 12 17:37:37 2026 GMT Not After : May 13 17:43:37 2026 GMT Subject: CN=B24F1F761AA6452C687B5A22F8AFCDBEDD71EFBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:a2:93:a2:1b:b6:f4:b0:7a:d7:6f:9c:01: 84:6b:3e:c2:82:54:ac:f3:d9:22:3b:ee:8a:06:a0: 62:5f:8b:61:26:bd:b6:d5:c6:1e:d5:ee:39:38:4e: fc:76:19:9a:ef:29:d8:e0:7a:40:61:39:91:73:fa: 4b:17:a1:46:84:be:c8:1d:33:af:4e:27:38:a1:38: 1c:23:11:ab:cd:82:1b:00:45:c5:51:c4:c2:06:9f: 45:71:5f:89:ce:29:bb:a3:8c:d4:dc:31:2b:4b:8d: 46:38:92:a3:8c:b0:f7:84:81:a1:32:4f:c0:e2:6d: 32:f3:92:cd:03:5c:f4:d4:26:c9:16:b4:2a:e3:ab: 94:b2:a0:0d:1c:68:24:10:fb:81:90:dd:0d:6c:07: 80:30:24:02:d6:40:d9:40:e7:0f:7d:60:81:d2:e8: 42:46:75:f2:7a:2a:47:70:4b:68:ad:45:c9:a1:0f: 9f:4f:ab:34:26:53:c6:5d:2d:b0:29:b6:e4:cc:4a: 24:ca:0d:e5:41:8a:5f:e5:99:a0:97:28:59:ba:24: 56:59:5b:0b:99:3b:0c:23:05:e6:e9:34:b6:23:2f: 56:fc:b5:4d:84:b2:5c:96:91:dc:9b:1e:51:fb:3d: f3:65:ce:18:c1:f7:f9:3b:78:1b:b3:4f:94:bb:55: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:1F:76:1A:A6:45:2C:68:7B:5A:22:F8:AF:CD:BE:DD:71:EF:BE X509v3 Authority Key Identifier: keyid:98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:71:a5:08:6d:b0:ee:04:ca:86:22:eb:03:3f:b1:97:6b:d4: 43:fc:1d:86:93:7f:8f:97:29:31:3d:22:4f:d6:fd:5f:37:a4: f3:92:a9:c9:ce:d6:0a:f9:df:36:e7:66:e0:c6:c0:fd:93:4e: 57:68:83:4b:71:73:80:1e:8d:ab:ab:6b:7a:58:26:c3:21:d3: 8d:a0:16:f2:ae:38:44:fd:c2:04:c0:8d:18:ce:f3:91:5d:e0: 26:db:10:f0:1a:9b:ad:b0:14:68:36:fd:24:61:5d:9c:75:87: f2:10:ad:89:fd:80:7a:7d:4a:90:33:a0:1d:d1:3a:18:4c:27: ed:46:32:03:41:9b:c4:40:77:8a:49:2a:fb:a0:62:f6:35:32: 2a:f5:30:c1:fd:75:16:65:ac:e3:15:e6:ee:07:4a:dd:9e:00: fe:18:a2:98:cd:77:54:1c:17:3b:d1:ad:09:77:fb:98:c6:95: 0a:9c:ad:6f:27:e9:eb:28:b6:f2:8d:51:b6:0a:cf:ce:c8:3f: ae:02:ea:0b:8f:72:61:d0:38:ef:9f:7a:64:38:a3:76:e8:ab: 7b:ae:db:1c:fe:c9:5f:9f:7e:a9:54:f4:b9:9c:6d:53:ca:57: 00:ba:18:61:41:e6:97:27:35:bc:fd:c4:4d:b0:4f:62:88:0f: 80:4d:d6:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSH6UVasN/p/yrFTxXOaZu7e5jlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2 QjU1QTRFQTAeFw0yNjA1MTIxNzM3MzdaFw0yNjA1MTMxNzQzMzdaMDMxMTAvBgNV BAMTKEIyNEYxRjc2MUFBNjQ1MkM2ODdCNUEyMkY4QUZDREJFREQ3MUVGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6waKTohu29LB612+cAYRrPsKC VKzz2SI77ooGoGJfi2EmvbbVxh7V7jk4Tvx2GZrvKdjgekBhOZFz+ksXoUaEvsgd M69OJzihOBwjEavNghsARcVRxMIGn0VxX4nOKbujjNTcMStLjUY4kqOMsPeEgaEy T8DibTLzks0DXPTUJskWtCrjq5SyoA0caCQQ+4GQ3Q1sB4AwJALWQNlA5w99YIHS 6EJGdfJ6KkdwS2itRcmhD59PqzQmU8ZdLbAptuTMSiTKDeVBil/lmaCXKFm6JFZZ WwuZOwwjBebpNLYjL1b8tU2EslyWkdybHlH7PfNlzhjB9/k7eBuzT5S7VTFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsk8fdhqmRSxoe1oi+K/Nvt1x774wHwYDVR0j BBgwFoAUmA39rViPI8BIX9ix/mr502tVpOowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1YTVlNmQtOTFlZS00NDk3LWI0MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1 ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2QjU1QTRFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODBERkRBRDU4OEYyM0MwNDg1RkQ4QjFGRTZBRjlEMzZCNTVB NEVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5 RDM2QjU1QTRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElxpQhtsO4EyoYi6wM/sZdr1EP8HYaTf4+X KTE9Ik/W/V83pPOSqcnO1gr53zbnZuDGwP2TTldog0txc4Aejaura3pYJsMh042g FvKuOET9wgTAjRjO85Fd4CbbEPAam62wFGg2/SRhXZx1h/IQrYn9gHp9SpAzoB3R OhhMJ+1GMgNBm8RAd4pJKvugYvY1Mir1MMH9dRZlrOMV5u4HSt2eAP4YopjNd1Qc FzvRrQl3+5jGlQqcrW8n6esotvKNUbYKz87IP64C6guPcmHQOO+femQ4o3boq3uu 2xz+yV+ffqlU9LmcbVPKVwC6GGFB5pcnNbz9xE2wT2KID4BN1jw= -----END CERTIFICATE-----Generated at Tue May 12 22:47:46 2026 by rpki-client