
$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft
File: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft (raw, json)
Hash identifier: 4ntdJas3856fCQ8kFuqKaxSCgvoCUyZXoAc9fUhrOws=
Subject key identifier: C0:35:A1:86:F6:2A:13:DF:C2:AB:F7:36:66:D1:64:C9:81:70:3C:C1
Authority key identifier: 98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA
Certificate issuer: /CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA
Certificate serial: 318BB8B72BF99E9508A4A615C8BA6F267D98F9B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 07:31:55 +0000
Manifest this update: Wed 17 Jun 2026 07:26:55 +0000
Manifest next update: Thu 18 Jun 2026 09:33:55 +0000
Files and hashes: 1: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: w7m0P2uotwUdeBK8OhSkycahjMGtA6/23NDdSEsWGzc=)
2: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: 9KwLkzzIMxFqs5It8qnMSZQlmMHzgn1zpWhuB6jKAEk=)
3: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl (hash: WuICADNquUsUOmPTEpE7srKYv7QPOqTqKXNftZ6IisY=)
4: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: Afb6wq/4AMY8buYuveFg/qZwFE734ewlL99hfzyDLD8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl
rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8b:b8:b7:2b:f9:9e:95:08:a4:a6:15:c8:ba:6f:26:7d:98:f9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA
Validity
Not Before: Jun 17 07:26:55 2026 GMT
Not After : Jun 18 09:33:55 2026 GMT
Subject: CN=C035A186F62A13DFC2ABF73666D164C981703CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:46:b0:57:aa:5d:52:df:e2:19:51:1b:d9:
e8:26:22:6f:4c:ac:8a:ef:67:75:cc:78:7a:86:64:
2f:e7:3d:d8:f6:ab:19:aa:e1:fe:58:42:34:bf:d2:
56:75:a3:5a:e8:d9:c8:0a:8f:b3:a6:65:77:5f:c5:
1d:74:29:65:7e:08:98:43:e5:5a:9c:e3:3c:d3:2e:
87:6b:88:20:e0:0d:f6:bc:38:61:fb:35:1e:27:b7:
3a:b8:3d:aa:7f:4c:b0:78:62:71:3f:04:53:a9:1b:
31:e2:61:f4:b7:e9:99:aa:1b:f7:dd:df:f4:32:ff:
80:48:e1:7e:01:f1:08:a4:81:fd:06:ac:6f:1b:59:
9d:1b:55:5f:16:a7:cf:ea:f7:ed:81:41:e6:5b:18:
7c:be:33:1e:a4:f9:3a:bb:fa:8d:a1:92:18:16:99:
5a:a1:4d:f0:16:c1:cd:75:64:7d:30:3e:6b:59:74:
1e:b1:13:23:3d:18:65:ab:33:10:15:d4:f5:c7:e5:
4b:ff:8d:6e:b4:68:2b:7f:09:0a:e9:08:95:4d:d1:
3b:55:d6:97:dc:4f:2b:f4:1a:09:aa:e9:2f:e6:a2:
54:b2:ea:4b:9b:d6:ba:8c:0e:a5:b8:8e:e2:d8:fd:
fe:18:ae:dd:f4:fe:67:43:a2:12:25:f4:69:02:f8:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:35:A1:86:F6:2A:13:DF:C2:AB:F7:36:66:D1:64:C9:81:70:3C:C1
X509v3 Authority Key Identifier:
keyid:98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1b:e6:e1:6a:64:09:3b:30:ee:ff:3c:8e:9c:19:5f:fb:5b:
bd:c4:73:cc:ca:61:f4:b6:b6:48:74:c9:bc:9d:9c:7c:2b:ff:
e2:37:47:91:0d:34:47:33:75:d7:08:1c:f3:c9:a5:50:47:b2:
ca:df:8b:5f:50:1e:3e:7e:64:f7:63:3f:85:36:54:ff:2b:fa:
cb:ee:53:18:d3:58:90:ff:9d:f0:71:ac:50:34:9a:a1:f3:b6:
4b:e7:c7:8f:6e:cb:9e:d6:98:e4:26:1c:73:18:55:b0:3a:b0:
26:23:97:97:ab:86:9a:dc:99:be:f9:fb:29:fe:ba:6b:11:75:
ce:7d:16:cc:92:7d:e0:62:6b:d2:6c:df:5e:d0:12:a1:e5:c3:
db:60:b2:fa:e7:3b:a3:a5:42:69:90:8d:f6:41:86:2d:6e:44:
68:46:1b:44:60:66:83:87:7b:9d:01:7d:d5:59:eb:d7:ab:76:
f2:92:60:47:06:a6:eb:ac:cf:07:6b:14:9a:7d:09:95:82:1d:
a2:17:c0:85:1e:a1:ca:21:8b:ec:4b:5f:a5:25:e2:12:e7:07:
e7:57:69:5e:a1:5a:8c:74:c1:d4:42:0a:ea:e0:ca:0c:5b:64:
db:6d:2a:af:c0:cb:3d:9b:64:55:25:e9:80:47:62:c8:da:f4:
4d:bc:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:33 2026 by rpki-client