$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: i/DMLuo/Q8ZMkzE6mR8mYAh3hKMcwmNDEUTcB/D9rMY= Subject key identifier: AF:9A:64:FB:31:8D:C4:FB:CE:64:CC:97:6B:93:CC:56:62:85:95:91 Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 4C56D68B6F9B3EC687932AA47310920C9CD79C16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 0288 Signing time: Mon 23 Mar 2026 21:12:41 +0000 Manifest this update: Mon 23 Mar 2026 21:07:41 +0000 Manifest next update: Fri 27 Mar 2026 08:18:41 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: 7hpPHLYYqbK9Bw42T+ZYb3BI6nDKl+mWoiL8UOtzWSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:56:d6:8b:6f:9b:3e:c6:87:93:2a:a4:73:10:92:0c:9c:d7:9c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Mar 23 21:07:41 2026 GMT Not After : Mar 27 08:18:41 2026 GMT Subject: CN=AF9A64FB318DC4FBCE64CC976B93CC5662859591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:e7:b1:0a:67:30:c5:ff:0b:1e:af:c1:b5: 45:8f:08:17:6f:c7:54:48:65:df:0d:2a:a9:57:3d: 51:9c:df:4c:80:66:71:30:53:dc:9d:1b:8c:12:15: ad:21:1a:eb:2e:1c:2e:eb:5b:f6:7e:73:f2:0f:73: d6:33:bf:34:d4:2e:67:74:73:0f:76:4e:b4:43:d2: 61:e2:e3:21:62:ed:79:aa:08:cd:ca:d5:af:44:8a: 6d:58:00:67:e0:19:53:15:58:ff:8d:7f:be:53:f5: c1:38:0a:d0:3a:ba:c3:c9:2b:2d:b2:29:65:b1:0e: 2d:be:fc:cc:23:94:17:12:69:05:33:60:e7:77:c7: cc:1b:69:37:92:40:39:fd:75:dd:d0:5c:2c:44:71: 69:fc:0b:46:7c:8c:a0:1d:02:7b:7c:bd:9e:a0:36: 5f:c3:cc:9d:2e:65:7a:02:94:2a:86:f7:c3:83:e1: 38:f1:f4:c6:d9:9a:83:2b:ff:94:2c:8d:c6:f6:0b: 0e:d4:4d:79:03:fd:3a:29:30:de:d9:87:a5:24:d2: 69:9a:99:8f:d3:66:a5:c0:7f:e6:ff:92:92:04:c3: ee:eb:b2:eb:16:10:72:a8:9c:f0:ca:5d:1c:77:ad: 30:bd:86:e2:65:ec:21:dc:e7:c6:fc:ad:a2:7a:ca: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9A:64:FB:31:8D:C4:FB:CE:64:CC:97:6B:93:CC:56:62:85:95:91 X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:03:ff:3d:fb:2d:af:63:f8:34:e0:1d:8c:b3:a7:cd:cd:fc: b5:2f:c5:71:6a:2b:a8:cb:ce:d6:c1:f5:4c:2f:c0:ae:1c:8f: 19:65:64:af:df:3a:38:3e:33:02:48:f2:80:e6:30:63:d0:1d: 62:53:48:b7:77:2d:09:e7:6a:a1:d1:10:a8:b0:95:81:11:05: 12:2e:19:c8:03:3c:7a:9d:3a:b7:ab:1a:65:ff:b2:97:a7:dc: 7f:22:d5:32:c0:e5:fc:f2:8a:8e:63:72:2d:24:36:44:d4:b6: fc:d8:90:3a:75:ac:46:7b:03:07:4f:50:f2:89:54:82:b9:d2: e9:25:39:37:a0:02:0c:5f:b8:48:91:50:06:97:5e:4c:59:36: 43:05:2c:7a:eb:c9:86:46:83:9d:18:af:82:74:68:45:d3:e8: 6e:e4:52:e2:27:0f:0c:79:f8:4b:26:f7:9f:81:49:e9:f0:aa: 17:ff:80:d7:60:53:7a:95:d6:de:60:45:91:33:05:0d:83:2a: 05:9b:0f:16:59:41:b9:09:e5:ff:a7:6c:9b:41:3f:c7:f6:62: f9:9b:8a:27:f9:6f:d9:e1:64:83:26:78:d9:c4:3b:3f:b1:d5: c9:98:2a:be:e3:87:99:72:88:7f:ca:ce:6f:75:7d:f2:d4:44: e2:dd:35:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFbWi2+bPsaHkyqkcxCSDJzXnBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNjAzMjMyMTA3NDFaFw0yNjAzMjcwODE4NDFaMDMxMTAvBgNV BAMTKEFGOUE2NEZCMzE4REM0RkJDRTY0Q0M5NzZCOTNDQzU2NjI4NTk1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6TOexCmcwxf8LHq/BtUWPCBdv x1RIZd8NKqlXPVGc30yAZnEwU9ydG4wSFa0hGusuHC7rW/Z+c/IPc9YzvzTULmd0 cw92TrRD0mHi4yFi7XmqCM3K1a9Eim1YAGfgGVMVWP+Nf75T9cE4CtA6usPJKy2y KWWxDi2+/MwjlBcSaQUzYOd3x8wbaTeSQDn9dd3QXCxEcWn8C0Z8jKAdAnt8vZ6g Nl/DzJ0uZXoClCqG98OD4Tjx9MbZmoMr/5Qsjcb2Cw7UTXkD/TopMN7Zh6Uk0mma mY/TZqXAf+b/kpIEw+7rsusWEHKonPDKXRx3rTC9huJl7CHc58b8raJ6yiZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr5pk+zGNxPvOZMyXa5PMVmKFlZEwHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYD/z37La9j+DTgHYyzp83N/LUvxXFqK6jL ztbB9UwvwK4cjxllZK/fOjg+MwJI8oDmMGPQHWJTSLd3LQnnaqHREKiwlYERBRIu GcgDPHqdOrerGmX/spen3H8i1TLA5fzyio5jci0kNkTUtvzYkDp1rEZ7AwdPUPKJ VIK50uklOTegAgxfuEiRUAaXXkxZNkMFLHrryYZGg50Yr4J0aEXT6G7kUuInDwx5 +Esm95+BSenwqhf/gNdgU3qV1t5gRZEzBQ2DKgWbDxZZQbkJ5f+nbJtBP8f2Yvmb iif5b9nhZIMmeNnEOz+x1cmYKr7jh5lyiH/Kzm91ffLUROLdNRI= -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:00 2026 by rpki-client