$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: di6d6+ITH1O66SwY7+dmto4uRFM0qFs7Jo4Gi0k67vg= Subject key identifier: 2A:8D:36:A5:BE:B2:81:62:F1:95:C6:31:3E:2D:F8:39:42:C2:EA:E6 Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 29AA23F6378729377A3D51FC8A12F14AEEC3B57B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 0392 Signing time: Sun 19 Apr 2026 04:01:15 +0000 Manifest this update: Sun 19 Apr 2026 03:56:15 +0000 Manifest next update: Wed 22 Apr 2026 07:54:15 +0000 Files and hashes: 1: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: H9wL101+fO+XAXjmdLy2BsE4Gk5B/qm3589qLKncPgg=) 2: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: qQ9TB/fOGPMy4nKrfIDEVKCHF57/eXmK8qCPrZLgsk0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:aa:23:f6:37:87:29:37:7a:3d:51:fc:8a:12:f1:4a:ee:c3:b5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: Apr 19 03:56:15 2026 GMT Not After : Apr 22 07:54:15 2026 GMT Subject: CN=2A8D36A5BEB28162F195C6313E2DF83942C2EAE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:63:12:53:8e:2e:34:8f:23:41:b8:55:55: b0:f4:db:7b:63:3a:2e:42:de:53:af:aa:77:84:3e: 1d:97:3d:51:67:43:3e:6a:85:aa:ec:c6:d0:ec:28: c6:b3:3f:09:ee:f6:8c:6b:9a:94:aa:08:fe:06:ae: f2:f0:7f:21:96:5c:54:8f:60:6e:32:72:38:3a:c9: 52:85:d8:d3:f2:01:83:f0:69:4f:a9:16:30:23:10: 54:82:15:2e:f0:61:fd:0e:74:be:36:89:35:63:5f: 3d:9e:d5:94:43:47:8c:9c:03:e0:dc:22:53:5b:71: b0:01:c0:7d:be:6c:f9:10:9c:ba:33:a5:2b:f2:62: 0f:dc:90:00:72:bf:f3:a5:be:4d:7f:f0:0f:ec:b5: 65:ca:bf:7d:2a:00:16:b3:ea:9b:e0:86:f3:cf:be: c4:a6:f2:ab:63:1b:24:25:05:38:4d:25:d7:33:79: b2:b8:7e:be:a6:16:48:ef:0f:00:bd:c0:a7:1f:7b: 01:48:5c:d6:96:1c:64:0a:ce:c9:c7:86:2e:9b:ac: 2b:b6:07:1f:4e:ac:7e:8b:87:f1:63:91:7b:4c:35: be:98:08:54:0b:8a:96:51:1d:6b:13:1d:28:e5:21: 84:63:8c:56:d5:86:19:a6:9a:5e:e2:4a:2c:8c:ca: a8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8D:36:A5:BE:B2:81:62:F1:95:C6:31:3E:2D:F8:39:42:C2:EA:E6 X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:7a:fd:18:a4:6f:6e:ad:06:8c:83:e5:ff:de:eb:fa:12: 05:f2:99:18:25:14:dd:b6:13:2e:6b:d7:0b:b5:34:9c:55:62: a3:6f:b9:f6:9d:d6:20:d3:3f:6f:a6:4d:b8:dc:16:ce:6b:dd: 8d:13:64:fa:93:b7:af:64:ec:c5:33:3f:9d:6f:8c:81:cc:da: fc:24:c3:73:78:17:e0:49:d3:dc:94:db:f3:99:6d:1c:45:94: 70:6b:0b:48:24:78:ce:8e:d0:f0:bc:98:35:df:43:ec:a9:f7: d9:1c:ce:e2:2c:45:e0:8e:1d:2f:05:f1:ed:03:79:d0:23:9c: cf:b0:e9:24:5b:e4:4c:d4:4d:a1:b3:4a:5c:db:9d:9d:5d:2d: cc:29:a3:60:15:9d:cd:e2:c9:b3:ee:8e:48:69:b3:1e:b3:1a: 2a:05:88:18:3b:1a:35:c1:8a:1f:51:23:03:71:b2:90:9f:0c: 91:a6:bd:68:31:86:44:13:9a:c5:92:53:2e:ee:07:b1:29:10: 6c:8a:64:b1:dc:79:a9:e7:16:f7:6e:df:6e:76:39:16:b4:f9: 5a:d9:7d:75:0d:1b:4b:fc:5b:41:bb:9f:e0:d9:26:03:5c:43: 7d:4e:5d:8f:2b:4d:1f:54:b0:9e:d5:1b:ec:9a:75:1b:47:d5: 60:87:d0:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKaoj9jeHKTd6PVH8ihLxSu7DtXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNjA0MTkwMzU2MTVaFw0yNjA0MjIwNzU0MTVaMDMxMTAvBgNV BAMTKDJBOEQzNkE1QkVCMjgxNjJGMTk1QzYzMTNFMkRGODM5NDJDMkVBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmGMSU44uNI8jQbhVVbD023tj Oi5C3lOvqneEPh2XPVFnQz5qharsxtDsKMazPwnu9oxrmpSqCP4GrvLwfyGWXFSP YG4ycjg6yVKF2NPyAYPwaU+pFjAjEFSCFS7wYf0OdL42iTVjXz2e1ZRDR4ycA+Dc IlNbcbABwH2+bPkQnLozpSvyYg/ckAByv/Olvk1/8A/stWXKv30qABaz6pvghvPP vsSm8qtjGyQlBThNJdczebK4fr6mFkjvDwC9wKcfewFIXNaWHGQKzsnHhi6brCu2 Bx9OrH6Lh/FjkXtMNb6YCFQLipZRHWsTHSjlIYRjjFbVhhmmml7iSiyMyqjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKo02pb6ygWLxlcYxPi34OULC6uYwHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWzev0YpG9urQaMg+X/3uv6EgXymRglFN22 Ey5r1wu1NJxVYqNvufad1iDTP2+mTbjcFs5r3Y0TZPqTt69k7MUzP51vjIHM2vwk w3N4F+BJ09yU2/OZbRxFlHBrC0gkeM6O0PC8mDXfQ+yp99kczuIsReCOHS8F8e0D edAjnM+w6SRb5EzUTaGzSlzbnZ1dLcwpo2AVnc3iybPujkhpsx6zGioFiBg7GjXB ih9RIwNxspCfDJGmvWgxhkQTmsWSUy7uB7EpEGyKZLHceannFvdu3252ORa0+VrZ fXUNG0v8W0G7n+DZJgNcQ31OXY8rTR9UsJ7VG+yadRtH1WCH0A4= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:16 2026 by rpki-client