$ rpki-client -vvf rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft File: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft (raw, json) Hash identifier: Zm5OliceEbKXZvGuJwEfn0cvjYYIGew1S00ahJBOrVg= Subject key identifier: D4:1E:D0:F8:DE:EB:E4:0F:24:C9:56:3C:AB:EF:A6:2B:5E:7C:A1:40 Authority key identifier: 80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 Certificate issuer: /CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Certificate serial: 01FF8625D44BB0068F393931A4A340D3F90B5A7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 12:09:22 +0000 Manifest this update: Sat 13 Jun 2026 12:04:22 +0000 Manifest next update: Sun 14 Jun 2026 13:51:22 +0000 Files and hashes: 1: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: KSC50JIeH8ScOew84zEAbd5sRPIPNqne4mtxlU+Kjl4=) 2: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl (hash: SvzpAMrbxChitBhws/rDx8T1MAtP5CdzUKADsj6/+ao=) 3: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: ju41spnPdcHn0VAkhkr7SjNUGWOqHvM+2TsOOFmj39s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ff:86:25:d4:4b:b0:06:8f:39:39:31:a4:a3:40:d3:f9:0b:5a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209 Validity Not Before: Jun 13 12:04:22 2026 GMT Not After : Jun 14 13:51:22 2026 GMT Subject: CN=D41ED0F8DEEBE40F24C9563CABEFA62B5E7CA140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:2f:70:f9:40:f2:f3:71:1f:05:8d:b7:bd: b0:f2:b9:dd:5a:39:f7:b0:36:45:d7:25:f9:b6:ce: 9d:13:04:1e:e5:37:86:19:32:e4:1f:6e:8f:64:9f: c4:e2:31:0b:63:ea:71:09:4b:80:66:0d:49:4b:c8: 60:0f:71:72:6d:cb:d9:a6:61:e0:2d:85:87:fa:43: 1f:b4:3e:a0:9f:22:ea:52:3d:bf:22:2e:f7:21:c7: 40:66:a2:16:88:23:ad:33:1d:7e:e4:2c:ad:44:5e: eb:c1:b8:6c:94:4a:5f:de:9c:a4:ad:98:c6:3b:c8: 17:c8:bb:e4:44:b5:de:66:bb:a8:0c:17:76:23:69: ff:2f:39:1c:d6:c9:28:5a:86:88:5d:e9:21:ac:83: 9c:6f:c4:ef:90:55:c2:38:29:ff:8c:dd:fc:8d:a9: 2b:8a:da:7e:ed:e4:49:f8:91:45:66:74:17:f6:96: 37:93:b1:1d:ad:8b:cb:91:96:d9:f2:22:a9:21:d2: 56:ba:a0:53:e9:c8:9d:88:01:4e:a5:0d:b3:19:8a: 13:48:60:60:58:fe:43:0a:e3:0a:dc:91:89:3d:9a: 81:80:c1:85:2a:55:e7:b7:a1:3c:a8:65:d5:2d:0c: 77:94:ce:ff:b5:c1:06:d7:96:18:3c:df:97:44:04: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1E:D0:F8:DE:EB:E4:0F:24:C9:56:3C:AB:EF:A6:2B:5E:7C:A1:40 X509v3 Authority Key Identifier: keyid:80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:47:90:8d:da:1e:97:5a:e9:fd:b6:9d:09:14:02:ba:13:9a: 5f:40:8f:2b:2d:37:75:d2:7d:c6:3e:87:ce:9c:d2:68:bc:79: 53:2b:3e:43:c6:49:5e:d8:04:45:9d:26:9d:81:42:cb:dd:3d: 71:a9:a7:95:89:f0:3b:56:58:84:e8:8b:83:98:83:c9:90:60: 69:a2:9f:ab:5a:bb:78:d4:93:2a:a5:17:b7:a3:23:02:f3:18: 78:9c:9d:51:12:d0:ef:ff:6a:f7:7f:bd:14:00:00:37:33:e8: b0:fe:fb:92:5f:5e:54:f5:13:20:7c:43:7f:b7:12:29:20:de: 02:aa:85:9a:fc:54:dd:bc:e6:a5:9a:ed:07:e0:cf:cf:fe:35: f1:54:75:c7:2c:c9:09:a5:39:34:61:05:b8:74:7d:79:16:ae: e8:a9:75:8a:43:6a:05:b2:27:6b:af:75:3d:67:fb:42:b5:e1: 25:59:fe:93:d4:c0:a2:9f:d8:3e:04:fe:0d:2f:89:69:4a:6b: 9c:64:7e:91:71:89:06:2e:a3:d7:62:af:e5:2e:04:d6:3d:74: d7:ae:52:56:3c:7c:c8:75:c2:2d:5f:9d:95:94:5b:1f:99:59: 8c:f2:c8:21:3a:be:01:c5:ab:2e:dc:ee:61:f1:bb:78:85:b8: 26:1a:82:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAf+GJdRLsAaPOTkxpKNA0/kLWnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNC MURFMDIwOTAeFw0yNjA2MTMxMjA0MjJaFw0yNjA2MTQxMzUxMjJaMDMxMTAvBgNV BAMTKEQ0MUVEMEY4REVFQkU0MEYyNEM5NTYzQ0FCRUZBNjJCNUU3Q0ExNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rS9w+UDy83EfBY23vbDyud1a OfewNkXXJfm2zp0TBB7lN4YZMuQfbo9kn8TiMQtj6nEJS4BmDUlLyGAPcXJty9mm YeAthYf6Qx+0PqCfIupSPb8iLvchx0BmohaII60zHX7kLK1EXuvBuGyUSl/enKSt mMY7yBfIu+REtd5mu6gMF3Yjaf8vORzWyShahohd6SGsg5xvxO+QVcI4Kf+M3fyN qSuK2n7t5En4kUVmdBf2ljeTsR2ti8uRltnyIqkh0la6oFPpyJ2IAU6lDbMZihNI YGBY/kMK4wrckYk9moGAwYUqVee3oTyoZdUtDHeUzv+1wQbXlhg835dEBJrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1B7Q+N7r5A8kyVY8q++mK158oUAwHwYDVR0j BBgwFoAUgO4+dxIPZcGIbAnxN7MNLLHeAgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzOGY2YWEtZjI3ZC00OTA2LTk1MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcx MjBGNjVDMTg4NkMwOUYxMzdCMzBEMkNCMURFMDIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MEVFM0U3NzEyMEY2NUMxODg2QzA5RjEzN0IzMEQyQ0IxREUw MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvODBFRTNFNzcxMjBGNjVDMTg4NkMwOUYxMzdCMzBE MkNCMURFMDIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlHkI3aHpda6f22nQkUAroTml9AjystN3XS fcY+h86c0mi8eVMrPkPGSV7YBEWdJp2BQsvdPXGpp5WJ8DtWWIToi4OYg8mQYGmi n6tau3jUkyqlF7ejIwLzGHicnVES0O//avd/vRQAADcz6LD++5JfXlT1EyB8Q3+3 Eikg3gKqhZr8VN285qWa7Qfgz8/+NfFUdccsyQmlOTRhBbh0fXkWruipdYpDagWy J2uvdT1n+0K14SVZ/pPUwKKf2D4E/g0viWlKa5xkfpFxiQYuo9dir+UuBNY9dNeu UlY8fMh1wi1fnZWUWx+ZWYzyyCE6vgHFqy7c7mHxu3iFuCYagtw= -----END CERTIFICATE-----Generated at Sun Jun 14 03:35:55 2026 by rpki-client