$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft File: 80DF8BB38CBC3C159969522F39C2926484A3509E.mft (raw, json) Hash identifier: vkBhkmXQiWU8EYx/plgejkDM0Eqt96Fi6W7MTfztRiE= Subject key identifier: FC:44:D2:A9:8A:51:8B:00:5E:EC:67:A7:C1:9C:11:C9:63:49:A6:45 Authority key identifier: 80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E Certificate issuer: /CN=80DF8BB38CBC3C159969522F39C2926484A3509E Certificate serial: 3464A55C035D6F27D334F8A4748E2547309BE88C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:42:05 +0000 Manifest this update: Mon 21 Sep 2026 12:37:05 +0000 Manifest next update: Tue 22 Sep 2026 15:06:05 +0000 Files and hashes: 1: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: Fkc3ZEGjxhAmx9yiD5p0cw71FlkcW6QQyX3i9KwIKmI=) 2: 80DF8BB38CBC3C159969522F39C2926484A3509E.crl (hash: 2Au1nyUKrJp8knNZR0JV2tvHqqtkpTETOTYAMSP3GJI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:64:a5:5c:03:5d:6f:27:d3:34:f8:a4:74:8e:25:47:30:9b:e8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80DF8BB38CBC3C159969522F39C2926484A3509E Validity Not Before: Sep 21 12:37:05 2026 GMT Not After : Sep 22 15:06:05 2026 GMT Subject: CN=FC44D2A98A518B005EEC67A7C19C11C96349A645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:23:ef:91:33:69:6b:de:15:73:7d:d4:65:0b: bb:46:85:e8:9d:17:3a:14:d9:38:97:60:3c:c1:21: b2:8f:78:8c:fc:a1:bd:cd:83:c2:45:1b:a7:a3:fa: 52:1f:80:e9:54:0f:ce:6c:94:6d:2f:b4:33:4b:a9: 4f:32:54:b5:78:27:ad:56:f8:3f:ab:c8:78:97:e0: 1e:71:7f:ea:ef:21:07:6e:52:18:e1:0c:2e:7d:a3: b2:82:c7:81:98:e3:b1:5f:aa:74:fb:dd:fe:25:06: 39:c6:a4:8d:c9:83:fa:43:a0:85:27:81:ec:5f:fe: e8:29:48:28:0d:83:f5:50:32:c6:1c:8f:0e:ac:ff: 04:cc:49:34:aa:40:df:7b:23:77:33:3d:45:6a:12: b7:6f:76:0a:a8:3b:36:b2:c5:14:e7:04:6e:44:ef: ff:32:6a:0a:58:43:2d:57:a9:e1:46:8f:3d:9d:4e: d2:6a:ec:5f:45:87:9b:37:dc:d4:a7:cb:b4:73:87: fe:84:1e:6f:2e:fa:5b:6c:01:3c:50:c7:02:56:cf: d5:93:b8:0e:58:08:a4:56:14:8a:35:1b:e0:53:09: 53:a7:ef:8a:36:0e:d2:0f:b9:7a:e2:bd:c1:8e:c8: 31:7e:a6:05:72:6e:c4:e1:83:fa:96:c7:35:d4:c9: 6f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:44:D2:A9:8A:51:8B:00:5E:EC:67:A7:C1:9C:11:C9:63:49:A6:45 X509v3 Authority Key Identifier: keyid:80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e6:f5:bb:9f:9b:3f:60:a6:8e:33:53:8b:97:83:47:a4:86: 3d:a8:9f:01:95:89:ac:49:c4:6d:8b:b7:fe:32:c4:4b:5c:87: f8:5f:ff:d0:48:64:97:03:be:cb:39:f6:35:95:9c:66:e6:76: 7a:4e:be:12:0d:ad:08:16:81:19:c3:b0:4e:c5:ec:a9:f1:02: f5:3e:ef:2b:dd:f0:c2:24:88:24:e7:e9:4e:1a:e9:15:dc:cb: 4b:30:c1:a6:5d:7e:a3:38:ad:f8:b6:38:07:e1:81:34:d5:c9: 74:cf:4d:27:b5:c7:f2:8f:b7:2d:4d:71:83:b7:48:4c:5d:48: c1:85:a1:d3:d6:61:a3:39:ba:7d:1e:b6:6f:5c:0f:ee:89:cd: c6:b5:03:b5:ae:aa:38:dd:dd:d8:1a:36:9a:dd:47:7a:61:e7: 04:f6:2f:b8:2f:82:3d:06:55:6d:c2:8b:7f:fb:42:c0:8f:b6: 94:8b:99:ec:b8:34:62:bd:50:82:81:f3:4d:b1:06:d7:bf:1c: c7:82:13:ca:ac:a0:26:f2:20:b9:16:37:c9:c1:c8:2f:71:04: 98:f8:78:a5:1f:1f:5c:31:76:a3:76:06:ac:c0:16:23:44:a1: b8:85:70:ad:57:cc:b9:bc:da:46:90:91:bf:a3:d9:82:a8:a5: fb:f4:31:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGSlXANdbyfTNPikdI4lRzCb6IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBERjhCQjM4Q0JDM0MxNTk5Njk1MjJGMzlDMjkyNjQ4 NEEzNTA5RTAeFw0yNjA5MjExMjM3MDVaFw0yNjA5MjIxNTA2MDVaMDMxMTAvBgNV BAMTKEZDNDREMkE5OEE1MThCMDA1RUVDNjdBN0MxOUMxMUM5NjM0OUE2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZI++RM2lr3hVzfdRlC7tGheid FzoU2TiXYDzBIbKPeIz8ob3Ng8JFG6ej+lIfgOlUD85slG0vtDNLqU8yVLV4J61W +D+ryHiX4B5xf+rvIQduUhjhDC59o7KCx4GY47FfqnT73f4lBjnGpI3Jg/pDoIUn gexf/ugpSCgNg/VQMsYcjw6s/wTMSTSqQN97I3czPUVqErdvdgqoOzayxRTnBG5E 7/8yagpYQy1XqeFGjz2dTtJq7F9Fh5s33NSny7Rzh/6EHm8u+ltsATxQxwJWz9WT uA5YCKRWFIo1G+BTCVOn74o2DtIPuXrivcGOyDF+pgVybsThg/qWxzXUyW+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ETSqYpRiwBe7GenwZwRyWNJpkUwHwYDVR0j BBgwFoAUgN+Ls4y8PBWZaVIvOcKSZISjUJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5MmJmMjYtYzhlNi00YTg2LTliMzMtZWEzYTJhZjU1N2YwLzAvODBERjhCQjM4 Q0JDM0MxNTk5Njk1MjJGMzlDMjkyNjQ4NEEzNTA5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MERGOEJCMzhDQkMzQzE1OTk2OTUyMkYzOUMyOTI2NDg0QTM1 MDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5MmJmMjYtYzhlNi00YTg2LTli MzMtZWEzYTJhZjU1N2YwLzAvODBERjhCQjM4Q0JDM0MxNTk5Njk1MjJGMzlDMjky NjQ4NEEzNTA5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbm9bufmz9gpo4zU4uXg0ekhj2onwGViaxJ xG2Lt/4yxEtch/hf/9BIZJcDvss59jWVnGbmdnpOvhINrQgWgRnDsE7F7KnxAvU+ 7yvd8MIkiCTn6U4a6RXcy0swwaZdfqM4rfi2OAfhgTTVyXTPTSe1x/KPty1NcYO3 SExdSMGFodPWYaM5un0etm9cD+6Jzca1A7Wuqjjd3dgaNprdR3ph5wT2L7gvgj0G VW3Ci3/7QsCPtpSLmey4NGK9UIKB802xBte/HMeCE8qsoCbyILkWN8nByC9xBJj4 eKUfH1wxdqN2BqzAFiNEobiFcK1XzLm82kaQkb+j2YKopfv0Mdc= -----END CERTIFICATE-----Generated at Mon Sep 21 20:03:35 2026 by rpki-client