$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft File: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft (raw, json) Hash identifier: kkCoXngNrQH0sHH/cqlC9CGzgw8MUa4Jkpu9lj1TEJ8= Subject key identifier: CC:F1:6E:67:2D:A5:19:FB:94:15:DA:E4:C2:F7:83:45:1F:1A:D1:1E Authority key identifier: 98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA Certificate issuer: /CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Certificate serial: 67E039369FF572CFBEFA8C2D2591D74073147EF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 12:41:39 +0000 Manifest this update: Mon 09 Nov 2026 12:36:39 +0000 Manifest next update: Tue 10 Nov 2026 13:14:39 +0000 Files and hashes: 1: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: w7m0P2uotwUdeBK8OhSkycahjMGtA6/23NDdSEsWGzc=) 2: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: Afb6wq/4AMY8buYuveFg/qZwFE734ewlL99hfzyDLD8=) 3: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl (hash: rUVlxognGDnQuG0PGGPQ6kNBmi2rne+9uzhpvzIavJc=) 4: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: 9KwLkzzIMxFqs5It8qnMSZQlmMHzgn1zpWhuB6jKAEk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 13:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e0:39:36:9f:f5:72:cf:be:fa:8c:2d:25:91:d7:40:73:14:7e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Validity Not Before: Nov 9 12:36:39 2026 GMT Not After : Nov 10 13:14:39 2026 GMT Subject: CN=CCF16E672DA519FB9415DAE4C2F783451F1AD11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:e0:3a:b3:26:c9:ba:69:e1:07:50:9a:81:12: cd:2a:77:11:d7:2a:ce:5c:d3:65:89:02:ae:3a:d0: e2:19:b1:70:63:ec:6b:c5:78:8c:27:81:39:ff:0a: ce:3d:d5:3c:af:2b:b9:e0:f7:be:e5:5c:15:d2:07: 94:d6:63:52:6b:db:58:e9:cd:24:d8:ca:b2:ca:27: 90:80:25:e7:03:dc:ba:9a:11:ec:79:21:e4:ca:1c: b8:ee:6a:64:e8:67:b1:9f:cd:6d:07:76:39:bb:03: be:12:c1:f4:85:c4:9f:6f:73:51:7c:55:2a:67:81: 4d:43:32:f9:b9:f2:00:28:c3:dd:0e:eb:2d:af:9f: d1:8c:57:84:cd:bb:38:50:31:d6:06:52:27:7e:77: c3:60:0d:45:a6:b7:74:e7:8a:29:f7:e8:3b:af:8e: d4:9d:0a:a1:44:20:16:56:71:d7:67:b2:6b:11:10: 5f:ec:8b:6a:ea:44:c1:13:3e:62:b8:65:21:73:e8: a3:a4:b8:f4:63:7e:15:ae:0c:ed:b4:a6:76:42:b3: 03:65:d5:ef:4c:26:a5:d7:61:d2:13:24:a4:b5:d7: fd:31:b8:d3:16:16:6a:35:cd:25:12:94:d8:76:2c: a9:9b:43:09:f2:c6:72:c5:db:9b:ec:7d:d1:99:05: e4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F1:6E:67:2D:A5:19:FB:94:15:DA:E4:C2:F7:83:45:1F:1A:D1:1E X509v3 Authority Key Identifier: keyid:98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3c:50:87:bc:20:09:55:9a:1e:b6:cf:66:e5:3b:81:9d:be: 10:f3:96:27:63:89:16:18:1c:1c:26:56:30:67:7a:29:62:86: 71:df:5b:47:a3:8d:55:b2:88:38:10:9b:87:e2:1c:4e:2e:7b: da:a0:3c:c1:af:12:46:99:5b:21:06:7d:52:ca:a7:43:d2:36: 14:68:cf:dd:ca:c0:5d:15:b5:50:32:15:ab:a8:15:fe:f9:62: fc:66:e8:48:fa:40:14:19:7e:0d:d8:10:c3:44:3c:c7:65:a1: b9:6d:b2:06:40:96:78:83:76:66:3f:65:75:2a:08:67:9e:cd: 45:07:75:d7:23:d6:08:e3:31:af:2b:0d:46:04:17:80:6a:6d: d5:f3:fd:a7:eb:8d:3a:20:ce:12:1b:a2:8c:a0:d6:17:65:8a: b2:d7:7e:cd:b2:e0:80:15:fa:f4:2c:6c:a0:b5:d1:3e:97:23: c4:33:9d:c2:92:d9:d5:05:2a:71:87:37:e1:49:bc:c8:87:8d: d3:75:94:87:f8:27:71:a2:ee:e2:01:28:8e:d6:50:08:1e:f9: 7c:7c:7f:a4:70:ac:f6:de:5e:c3:4b:8c:9f:3d:7f:49:61:02: f9:d6:b3:52:34:c3:33:22:3e:49:7e:bf:8c:c3:76:29:42:e9: 18:3b:e2:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+A5Np/1cs+++owtJZHXQHMUfvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2 QjU1QTRFQTAeFw0yNjExMDkxMjM2MzlaFw0yNjExMTAxMzE0MzlaMDMxMTAvBgNV BAMTKENDRjE2RTY3MkRBNTE5RkI5NDE1REFFNEMyRjc4MzQ1MUYxQUQxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD74DqzJsm6aeEHUJqBEs0qdxHX Ks5c02WJAq460OIZsXBj7GvFeIwngTn/Cs491TyvK7ng977lXBXSB5TWY1Jr21jp zSTYyrLKJ5CAJecD3LqaEex5IeTKHLjuamToZ7GfzW0Hdjm7A74SwfSFxJ9vc1F8 VSpngU1DMvm58gAow90O6y2vn9GMV4TNuzhQMdYGUid+d8NgDUWmt3Tniin36Duv jtSdCqFEIBZWcddnsmsREF/si2rqRMETPmK4ZSFz6KOkuPRjfhWuDO20pnZCswNl 1e9MJqXXYdITJKS11/0xuNMWFmo1zSUSlNh2LKmbQwnyxnLF25vsfdGZBeQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzPFuZy2lGfuUFdrkwveDRR8a0R4wHwYDVR0j BBgwFoAUmA39rViPI8BIX9ix/mr502tVpOowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1YTVlNmQtOTFlZS00NDk3LWI0MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1 ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2QjU1QTRFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODBERkRBRDU4OEYyM0MwNDg1RkQ4QjFGRTZBRjlEMzZCNTVB NEVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5 RDM2QjU1QTRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU8UIe8IAlVmh62z2blO4GdvhDzlidjiRYY HBwmVjBneilihnHfW0ejjVWyiDgQm4fiHE4ue9qgPMGvEkaZWyEGfVLKp0PSNhRo z93KwF0VtVAyFauoFf75Yvxm6Ej6QBQZfg3YEMNEPMdlobltsgZAlniDdmY/ZXUq CGeezUUHddcj1gjjMa8rDUYEF4BqbdXz/afrjTogzhIbooyg1hdlirLXfs2y4IAV +vQsbKC10T6XI8QzncKS2dUFKnGHN+FJvMiHjdN1lIf4J3Gi7uIBKI7WUAge+Xx8 f6RwrPbeXsNLjJ89f0lhAvnWs1I0wzMiPkl+v4zDdilC6Rg74qs= -----END CERTIFICATE-----Generated at Tue Nov 10 03:56:38 2026 by rpki-client