$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: lxPuI5sL0saIwncjnc+gnOI5rVFApGWYb6+a55RaMmo= Subject key identifier: BA:9B:29:AA:FF:19:7A:84:F7:5C:21:A0:51:35:39:DD:6C:A4:9D:F0 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 70EE5FBF17076B0125FE0D2EB2D77BC90A446ECD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 028B Signing time: Wed 25 Mar 2026 14:31:13 +0000 Manifest this update: Wed 25 Mar 2026 14:26:13 +0000 Manifest next update: Sun 29 Mar 2026 00:32:13 +0000 Files and hashes: 1: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: 9pN34bfvJQyAKpT4xmMGEWOu2FE77WWb3LTac5TPmoA=) 2: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: cguq4oNr1TGal57sKoh6yP2CeznnB5jHxZL1G1cEH1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ee:5f:bf:17:07:6b:01:25:fe:0d:2e:b2:d7:7b:c9:0a:44:6e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Mar 25 14:26:13 2026 GMT Not After : Mar 29 00:32:13 2026 GMT Subject: CN=BA9B29AAFF197A84F75C21A0513539DD6CA49DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:43:55:9f:fc:de:67:fd:e0:57:47:67:c1: 6a:d5:b6:c2:b4:78:b4:a9:9c:98:d4:ae:68:93:f0: 41:f0:96:ea:de:77:81:66:46:ff:3d:da:0f:32:f9: d8:50:ac:52:f7:b1:83:d1:51:b8:63:09:fc:9c:8f: 0d:6d:35:39:d8:3e:10:1a:f6:9c:ac:8e:ab:fc:8f: c0:9e:a0:8e:51:9a:8a:75:68:94:ac:28:96:39:2c: 93:0b:63:bb:a6:e5:93:fc:60:ae:cb:e9:b9:68:4e: 50:06:37:be:2b:89:fe:b1:54:80:45:bd:71:7b:02: a0:20:d1:56:ff:c9:9d:b8:1f:5a:ff:08:b3:5e:ba: a9:8a:ae:4c:c8:6a:c3:61:17:ce:2e:04:bb:4c:7b: 4b:a0:96:0c:a1:e4:76:a8:fc:a1:13:44:68:f7:4a: 2a:5f:26:57:38:08:94:7c:56:88:2d:e0:5e:f8:67: e7:bf:b7:69:60:4e:cc:bc:85:04:06:07:b6:ad:22: a8:91:bb:ba:7f:cd:37:74:f5:fa:a8:30:19:d2:bd: ba:18:b0:bf:8d:e2:3e:a5:86:c8:3d:c5:41:85:ab: eb:16:e1:a1:26:62:c6:ae:25:0b:ee:05:b5:52:98: 68:aa:66:db:e5:99:ee:74:cc:5b:8a:bb:4e:35:5a: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:29:AA:FF:19:7A:84:F7:5C:21:A0:51:35:39:DD:6C:A4:9D:F0 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2a:2c:b3:4a:89:78:ed:ab:1d:c7:a6:54:11:89:13:98:64: 67:3f:17:69:be:52:fa:6f:13:da:aa:7e:5d:19:1e:0a:27:1b: 5c:fd:55:92:f1:66:4b:a8:66:76:9d:6b:e8:d4:91:74:40:b2: f4:84:0c:0d:aa:a7:7f:1e:73:04:8a:89:fa:20:76:2d:ce:76: 73:04:9f:7e:ab:9e:57:a2:82:32:16:18:c2:28:84:01:be:af: b7:01:8c:1c:ba:74:1a:7f:84:28:ca:36:9f:7e:76:b6:fa:89: a1:55:1d:0d:ff:6d:fb:03:c8:03:4a:a2:d5:70:90:27:3b:83: bf:1b:44:5b:e8:53:b6:99:b4:92:5f:d0:b2:c1:59:e4:5d:c9: 15:3b:8b:08:ac:f8:d7:c0:7b:7c:7c:af:c6:d5:11:e8:a2:39: 3b:e0:b2:dd:82:1d:53:c1:1d:52:ea:ea:74:e9:08:83:d7:62: f5:33:ac:0d:99:d9:d7:ea:84:a5:1e:97:02:79:90:b5:dd:66: 9b:56:0e:b2:16:68:5b:c8:b5:4a:65:5f:09:c2:cc:0b:b3:fa: a0:16:05:3b:a7:9c:81:68:31:96:2a:95:ed:5b:e2:b4:35:a8: 1f:44:21:78:ab:50:bc:a0:de:9b:b8:f6:54:a4:37:b6:0d:34: 76:05:6c:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcO5fvxcHawEl/g0ustd7yQpEbs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNjAzMjUxNDI2MTNaFw0yNjAzMjkwMDMyMTNaMDMxMTAvBgNV BAMTKEJBOUIyOUFBRkYxOTdBODRGNzVDMjFBMDUxMzUzOURENkNBNDlERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+kNVn/zeZ/3gV0dnwWrVtsK0 eLSpnJjUrmiT8EHwlured4FmRv892g8y+dhQrFL3sYPRUbhjCfycjw1tNTnYPhAa 9pysjqv8j8CeoI5Rmop1aJSsKJY5LJMLY7um5ZP8YK7L6bloTlAGN74rif6xVIBF vXF7AqAg0Vb/yZ24H1r/CLNeuqmKrkzIasNhF84uBLtMe0uglgyh5Hao/KETRGj3 SipfJlc4CJR8Vogt4F74Z+e/t2lgTsy8hQQGB7atIqiRu7p/zTd09fqoMBnSvboY sL+N4j6lhsg9xUGFq+sW4aEmYsauJQvuBbVSmGiqZtvlme50zFuKu041WlIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUupspqv8ZeoT3XCGgUTU53WyknfAwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkqLLNKiXjtqx3HplQRiROYZGc/F2m+Uvpv E9qqfl0ZHgonG1z9VZLxZkuoZnada+jUkXRAsvSEDA2qp38ecwSKifogdi3OdnME n36rnleigjIWGMIohAG+r7cBjBy6dBp/hCjKNp9+drb6iaFVHQ3/bfsDyANKotVw kCc7g78bRFvoU7aZtJJf0LLBWeRdyRU7iwis+NfAe3x8r8bVEeiiOTvgst2CHVPB HVLq6nTpCIPXYvUzrA2Z2dfqhKUelwJ5kLXdZptWDrIWaFvItUplXwnCzAuz+qAW BTunnIFoMZYqle1b4rQ1qB9EIXirULyg3pu49lSkN7YNNHYFbEc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:57 2026 by rpki-client