$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: r4n1nY4zGkP0dU3JrW2tgYuPTQEEirE9bNgmLMpqiCQ= Subject key identifier: AC:04:10:4D:92:4B:00:5F:FB:AC:7F:62:61:DA:E6:BD:89:A6:88:A5 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 1D613E3B9A8879F33244F7F6EE3C17098D60257E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 0253 Signing time: Tue 24 Mar 2026 08:21:45 +0000 Manifest this update: Tue 24 Mar 2026 08:16:45 +0000 Manifest next update: Fri 27 Mar 2026 15:27:45 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: RmztKZ+8mEz5uGhhS5yAt9Gh6+ooTs1vTkWww1gaWe0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:61:3e:3b:9a:88:79:f3:32:44:f7:f6:ee:3c:17:09:8d:60:25:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Mar 24 08:16:45 2026 GMT Not After : Mar 27 15:27:45 2026 GMT Subject: CN=AC04104D924B005FFBAC7F6261DAE6BD89A688A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:44:dd:86:08:68:c6:e8:d2:71:35:62:e6: 6d:7b:b5:eb:46:aa:59:ee:28:56:e1:e3:3c:ed:18: c2:ad:a8:85:36:fe:d6:a5:43:85:19:ab:9b:6f:b9: 8a:63:ff:ac:95:0c:4f:86:eb:70:a2:b2:41:b7:1b: ba:0d:2d:ae:50:60:8a:2c:fc:bc:d5:db:f8:2a:e7: 3c:11:ae:e2:99:47:80:72:cc:53:c7:99:92:65:d4: a8:45:97:2f:d0:10:6f:65:93:1d:39:ae:09:6d:67: ee:a8:5b:3f:21:ed:c7:6c:dd:70:af:1f:7d:e5:80: 7b:19:3a:0a:f0:02:20:23:ee:ee:5e:be:86:b2:98: ef:82:f5:c9:23:6a:dc:91:28:d9:26:c5:bd:ed:dc: 0b:ed:a8:64:7f:7e:0e:43:b2:aa:89:8b:41:92:42: 32:07:d7:8c:de:6f:96:32:78:01:f5:e4:91:c5:71: cc:3c:24:b7:43:71:43:cb:a4:3f:0b:5e:ae:af:3b: aa:07:b2:da:45:b4:75:9a:8e:b6:17:16:2e:f8:af: 4f:06:74:20:50:fb:88:8c:e9:07:cd:38:49:55:bb: f1:e1:15:8a:5b:5c:84:5d:41:c7:37:bc:98:ec:bb: 31:0f:1d:b8:7e:17:10:b8:46:19:7e:9f:23:91:fc: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:04:10:4D:92:4B:00:5F:FB:AC:7F:62:61:DA:E6:BD:89:A6:88:A5 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ef:07:29:d6:c6:4f:bb:b4:b7:b7:e1:8d:e4:02:4d:2b:62: c6:ae:bd:8f:ff:75:89:7e:c2:06:05:60:5c:b4:06:be:9c:b9: 6b:a9:54:3d:8a:8e:0a:47:fd:17:5a:91:7a:a8:3c:3f:b5:04: 06:ec:fd:74:2e:97:dc:2f:fd:c6:fd:8d:af:0b:a3:63:7c:cf: 9d:32:8a:77:f1:92:79:78:e3:50:a4:86:c6:b6:f8:c0:76:4a: b1:80:e8:f7:95:46:3f:ef:c6:05:b5:9d:65:a0:65:80:f4:8c: d7:16:6e:5d:39:1d:cd:48:ef:dc:92:86:0e:e2:10:dd:4a:1d: 90:06:78:7d:6e:93:68:4c:ff:49:12:0c:80:8d:54:01:1e:b2: d7:e1:e4:d3:00:71:a3:8c:d6:3b:67:74:d9:f0:50:54:ed:52: 8c:4d:02:2e:7c:8e:d5:c7:a0:47:60:3b:8f:ff:a7:fa:10:72: b3:14:b2:51:a8:29:50:6a:ad:18:1f:33:55:ea:c3:1e:b1:c7: a1:57:b6:a3:41:4f:22:96:16:e9:2b:8f:6a:d6:9e:a0:a6:50: 4b:8a:f7:3f:2f:ec:5c:3b:2d:39:e2:65:09:3b:b4:c2:65:6c: c9:61:4f:09:48:fd:44:68:4d:14:97:28:57:48:4d:00:df:7f: f6:a2:70:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWE+O5qIefMyRPf27jwXCY1gJX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNjAzMjQwODE2NDVaFw0yNjAzMjcxNTI3NDVaMDMxMTAvBgNV BAMTKEFDMDQxMDREOTI0QjAwNUZGQkFDN0Y2MjYxREFFNkJEODlBNjg4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdy0TdhghoxujScTVi5m17tetG qlnuKFbh4zztGMKtqIU2/talQ4UZq5tvuYpj/6yVDE+G63CiskG3G7oNLa5QYIos /LzV2/gq5zwRruKZR4ByzFPHmZJl1KhFly/QEG9lkx05rgltZ+6oWz8h7cds3XCv H33lgHsZOgrwAiAj7u5evoaymO+C9ckjatyRKNkmxb3t3AvtqGR/fg5DsqqJi0GS QjIH14zeb5YyeAH15JHFccw8JLdDcUPLpD8LXq6vO6oHstpFtHWajrYXFi74r08G dCBQ+4iM6QfNOElVu/HhFYpbXIRdQcc3vJjsuzEPHbh+FxC4Rhl+nyOR/GqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrAQQTZJLAF/7rH9iYdrmvYmmiKUwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLvBynWxk+7tLe34Y3kAk0rYsauvY//dYl+ wgYFYFy0Br6cuWupVD2KjgpH/RdakXqoPD+1BAbs/XQul9wv/cb9ja8Lo2N8z50y infxknl441Ckhsa2+MB2SrGA6PeVRj/vxgW1nWWgZYD0jNcWbl05Hc1I79yShg7i EN1KHZAGeH1uk2hM/0kSDICNVAEestfh5NMAcaOM1jtndNnwUFTtUoxNAi58jtXH oEdgO4//p/oQcrMUslGoKVBqrRgfM1Xqwx6xx6FXtqNBTyKWFukrj2rWnqCmUEuK 9z8v7Fw7LTniZQk7tMJlbMlhTwlI/URoTRSXKFdITQDff/aicHs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:55 2026 by rpki-client