
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
File: 80DF8BB38CBC3C159969522F39C2926484A3509E.mft (raw, json)
Hash identifier: b5Iet1qVG8wfDy7EMdHkR5N8yWy97h++vvSvlKRYQcM=
Subject key identifier: EA:89:49:4F:EB:C2:A1:97:08:49:EC:E4:76:44:7E:D5:DE:13:45:A4
Authority key identifier: 80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E
Certificate issuer: /CN=80DF8BB38CBC3C159969522F39C2926484A3509E
Certificate serial: 72C7534D4D099F107F38CDE64122F521D8373F93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
Manifest number: 0105
Signing time: Sat 14 Nov 2026 08:19:45 +0000
Manifest this update: Sat 14 Nov 2026 08:14:45 +0000
Manifest next update: Sun 15 Nov 2026 10:52:45 +0000
Files and hashes: 1: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: Fkc3ZEGjxhAmx9yiD5p0cw71FlkcW6QQyX3i9KwIKmI=)
2: 80DF8BB38CBC3C159969522F39C2926484A3509E.crl (hash: bBX9j0oFLwX6S+Akw0CFk0kOJ4tTAV+fdDG2qZrGoew=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl
rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 10:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c7:53:4d:4d:09:9f:10:7f:38:cd:e6:41:22:f5:21:d8:37:3f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80DF8BB38CBC3C159969522F39C2926484A3509E
Validity
Not Before: Nov 14 08:14:45 2026 GMT
Not After : Nov 15 10:52:45 2026 GMT
Subject: CN=EA89494FEBC2A1970849ECE476447ED5DE1345A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:9c:f6:db:52:9c:54:48:1c:7e:67:c0:80:
30:6b:a5:40:7b:d8:eb:14:89:ca:9c:dd:3f:2b:cc:
07:ac:f9:ee:55:c1:33:75:f5:ef:28:85:da:88:d5:
c4:3b:5c:21:52:e0:22:a6:e8:ea:0d:55:40:8a:00:
96:83:67:a7:5c:20:8f:38:bc:b3:99:3c:e4:12:de:
41:d3:82:09:e2:00:53:08:0c:56:26:75:cf:e0:07:
c3:50:bb:49:30:9b:fb:5f:ef:2f:86:ad:20:fc:f2:
6d:49:8c:1d:e5:66:92:2f:13:98:4f:ca:66:b6:72:
53:d0:ec:57:6b:f7:f9:ad:65:28:21:98:f8:dc:95:
28:f8:47:4f:d1:ec:5f:c9:24:24:21:dc:08:4a:a3:
fd:fa:eb:ec:35:57:84:0a:5b:42:43:8b:18:63:59:
01:9f:d8:eb:0e:d2:25:d8:61:da:1e:3f:64:f1:62:
4f:ad:ae:19:ab:84:39:80:62:b5:1f:e4:98:47:24:
cd:ed:68:f9:13:33:57:f2:a3:9e:c9:78:a2:6b:c6:
8c:23:61:9c:e2:5e:e7:08:cd:7c:d1:66:27:9e:d2:
d1:da:a9:8e:45:d9:54:a5:a6:dd:50:96:5c:1a:c5:
7d:65:db:c4:7f:73:c1:49:9c:0b:54:26:55:4a:6e:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:89:49:4F:EB:C2:A1:97:08:49:EC:E4:76:44:7E:D5:DE:13:45:A4
X509v3 Authority Key Identifier:
keyid:80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:97:1b:c7:a0:a8:d9:7f:de:9b:5c:c9:61:11:1d:38:9c:4a:
f3:24:f0:ba:03:78:97:f5:2b:e9:a5:f9:89:9c:ed:db:f9:71:
2e:9a:03:b6:bb:0f:22:3e:6d:4e:a5:c2:f3:ba:b4:fb:ea:b7:
88:41:52:da:cd:cb:c9:b5:6a:e7:a4:4a:d7:f2:7f:4c:f6:62:
39:eb:c8:48:45:c6:93:ca:70:9e:84:68:56:d1:5e:c4:62:67:
e7:3d:f7:ff:f0:b0:9d:44:84:cc:da:7a:8f:89:a9:36:8c:18:
ab:2b:34:b2:9e:39:de:b7:13:5e:13:28:31:e1:96:72:06:8f:
07:fc:f8:3f:9d:41:fb:ec:4e:fb:04:ee:20:d1:a4:ae:bd:e2:
08:6b:16:84:4b:07:d8:0f:4b:bf:93:8b:48:4e:6a:38:e9:51:
7c:41:0c:8e:1a:fb:74:a2:4d:8f:fe:75:b2:61:cc:42:de:01:
f6:56:f0:9d:fb:20:3f:98:ca:52:d7:3d:fe:b0:96:e1:2d:82:
fe:ec:58:dd:64:d4:67:60:cb:57:b7:22:2b:32:3e:16:b6:d0:
06:75:b2:bb:cb:9c:fe:b5:6c:8d:19:29:d8:a6:78:de:8d:dc:
70:ce:ee:c5:d7:f0:e8:7c:33:0d:ee:ea:85:af:21:a5:1d:1d:
d9:98:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:17:44 2026 by rpki-client