
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
File: 80810D47BA27B751C4A9441187D412B7B4FA5089.mft (raw, json)
Hash identifier: bUpXMl+OlQtqMwykE6gCYFhON1JpO3pUEg1oiHLiSWM=
Subject key identifier: 25:45:E5:93:A8:36:59:22:F7:3D:15:3D:91:06:BC:EC:9A:32:00:2F
Authority key identifier: 80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89
Certificate issuer: /CN=80810D47BA27B751C4A9441187D412B7B4FA5089
Certificate serial: 4EA79FBE89D3F41E093112C2A0BAA5ADFA45BE25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 23:25:48 +0000
Manifest this update: Mon 21 Sep 2026 23:20:48 +0000
Manifest next update: Wed 23 Sep 2026 00:21:48 +0000
Files and hashes: 1: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: UeJxolbXL3BMQ04oIpha9WXgWRITl1oJXfXm7RSMha8=)
2: 80810D47BA27B751C4A9441187D412B7B4FA5089.crl (hash: DL1guWTArZi+j4nD4PE6Rj0OSuBoyq8jHNj+F+GLzE0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl
rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a7:9f:be:89:d3:f4:1e:09:31:12:c2:a0:ba:a5:ad:fa:45:be:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80810D47BA27B751C4A9441187D412B7B4FA5089
Validity
Not Before: Sep 21 23:20:48 2026 GMT
Not After : Sep 23 00:21:48 2026 GMT
Subject: CN=2545E593A8365922F73D153D9106BCEC9A32002F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:91:8f:5d:aa:95:21:21:aa:f7:2d:f3:21:
6f:9d:03:67:e4:38:f2:a1:0a:22:0d:41:07:05:34:
01:1b:08:53:fa:14:1e:52:18:44:b4:de:50:c5:87:
40:91:af:2c:de:9e:5e:c6:0b:a5:74:b1:0e:ae:fb:
8c:35:d2:7c:e7:b4:7f:3e:06:72:25:52:b7:75:f3:
ff:b8:8a:7f:ce:26:90:69:f8:18:b9:87:e2:08:73:
7a:05:ac:72:57:02:48:1d:74:8f:b1:1c:4e:55:39:
f3:8e:ab:52:7f:4c:37:14:60:a2:cf:bc:61:5c:da:
55:67:2b:89:f3:9a:55:4e:34:42:a2:e2:95:87:f1:
d7:f0:96:88:6c:7f:28:42:12:f0:e4:f4:4a:26:5c:
fa:ef:55:0c:e9:17:08:c1:88:24:91:11:b6:47:39:
8b:18:55:00:1c:bd:01:f2:54:de:91:4f:f6:e8:8a:
d6:0a:a0:78:ca:fa:88:50:42:7e:dd:fe:68:c1:41:
50:8a:d7:a9:0b:21:92:ae:cd:e0:bd:73:82:1f:01:
46:c7:d3:d5:c3:18:79:ab:bc:a9:40:86:a2:5d:6a:
59:cb:4e:03:c0:8f:a1:2b:8c:96:77:c8:48:bb:4f:
36:d1:ad:35:3a:6a:66:16:3b:fa:51:d4:bd:c0:91:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:45:E5:93:A8:36:59:22:F7:3D:15:3D:91:06:BC:EC:9A:32:00:2F
X509v3 Authority Key Identifier:
keyid:80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f1:29:c7:dc:8c:b9:35:d7:80:6a:eb:39:4b:9f:88:85:07:
c8:9d:cf:76:82:a4:e6:8a:0e:8f:ce:68:e0:8e:58:c7:ca:9f:
78:05:87:3c:69:8d:18:85:0e:ef:80:25:ae:23:53:17:d4:b3:
75:ee:ad:e7:21:e4:40:59:a3:c2:8d:1f:4e:15:d2:0d:2c:d7:
92:62:77:6d:c0:0e:d2:e0:3d:62:a9:28:c3:74:d3:bb:8c:3a:
de:3e:38:ec:57:57:b8:13:7d:bd:cd:14:90:2c:c8:40:e2:14:
bb:0d:e8:17:1f:b1:29:1c:7b:b4:54:3d:8a:d5:df:d8:51:5e:
71:b1:88:e7:2a:67:88:d3:88:81:a4:40:b1:26:aa:42:a8:ac:
c1:9a:37:01:21:7b:03:20:5b:9f:1a:8b:ad:b9:c8:fa:15:8f:
f2:f4:0a:1f:05:14:fe:49:96:03:8a:cd:3f:2d:77:b2:b7:e2:
0a:23:3e:c5:a6:46:6e:d7:61:c8:ab:50:0f:31:61:3a:c8:1e:
0f:b2:0d:73:c0:8a:95:68:8a:81:02:a4:57:fa:51:42:72:c2:
c7:19:98:e4:b5:cd:5b:27:ca:40:da:13:a5:a8:a7:e4:71:e4:
90:46:90:b0:ac:31:86:61:89:93:2c:94:9e:99:21:c1:d1:48:
b3:27:46:50
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTqefvonT9B4JMRLCoLqlrfpFviUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA4MTBENDdCQTI3Qjc1MUM0QTk0NDExODdENDEyQjdC
NEZBNTA4OTAeFw0yNjA5MjEyMzIwNDhaFw0yNjA5MjMwMDIxNDhaMDMxMTAvBgNV
BAMTKDI1NDVFNTkzQTgzNjU5MjJGNzNEMTUzRDkxMDZCQ0VDOUEzMjAwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RZGPXaqVISGq9y3zIW+dA2fk
OPKhCiINQQcFNAEbCFP6FB5SGES03lDFh0CRryzenl7GC6V0sQ6u+4w10nzntH8+
BnIlUrd18/+4in/OJpBp+Bi5h+IIc3oFrHJXAkgddI+xHE5VOfOOq1J/TDcUYKLP
vGFc2lVnK4nzmlVONEKi4pWH8dfwlohsfyhCEvDk9EomXPrvVQzpFwjBiCSREbZH
OYsYVQAcvQHyVN6RT/boitYKoHjK+ohQQn7d/mjBQVCK16kLIZKuzeC9c4IfAUbH
09XDGHmrvKlAhqJdalnLTgPAj6ErjJZ3yEi7TzbRrTU6amYWO/pR1L3AkYEtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJUXlk6g2WSL3PRU9kQa87JoyAC8wHwYDVR0j
BBgwFoAUgIENR7ont1HEqUQRh9QSt7T6UIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmNiMWYxMDktYjlmZS00MzIzLTg0ZTMtYjYwYmI0ZGMxZWNjLzAvODA4MTBENDdC
QTI3Qjc1MUM0QTk0NDExODdENDEyQjdCNEZBNTA4OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MDgxMEQ0N0JBMjdCNzUxQzRBOTQ0MTE4N0Q0MTJCN0I0RkE1
MDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0
ZTMtYjYwYmI0ZGMxZWNjLzAvODA4MTBENDdCQTI3Qjc1MUM0QTk0NDExODdENDEy
QjdCNEZBNTA4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABTxKcfcjLk114Bq6zlLn4iFB8idz3aCpOaK
Do/OaOCOWMfKn3gFhzxpjRiFDu+AJa4jUxfUs3Xurech5EBZo8KNH04V0g0s15Ji
d23ADtLgPWKpKMN007uMOt4+OOxXV7gTfb3NFJAsyEDiFLsN6BcfsSkce7RUPYrV
39hRXnGxiOcqZ4jTiIGkQLEmqkKorMGaNwEhewMgW58ai625yPoVj/L0Ch8FFP5J
lgOKzT8td7K34gojPsWmRm7XYcirUA8xYTrIHg+yDXPAipVoioECpFf6UUJywscZ
mOS1zVsnykDaE6Wop+Rx5JBGkLCsMYZhiZMslJ6ZIcHRSLMnRlA=
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:22:02 2026 by rpki-client