$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft File: 45C9770C2C07C2696447FAA1E820E46170A3C56C.mft (raw, json) Hash identifier: TpZSg9QGTS7hYqOfg79JNQvp/rN2Gzmi+ro3UlHMiv4= Subject key identifier: A4:0F:64:C8:37:0C:86:F3:D9:EB:5D:64:30:A7:86:0B:E1:3C:A6:D1 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 44D1DEF633679364094DB7CF50DC491E37C210F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft Manifest number: 0308 Signing time: Thu 26 Mar 2026 10:10:49 +0000 Manifest this update: Thu 26 Mar 2026 10:05:49 +0000 Manifest next update: Sun 29 Mar 2026 12:04:49 +0000 Files and hashes: 1: 45C9770C2C07C2696447FAA1E820E46170A3C56C.crl (hash: wnRvzax9+wwjQWeqNZOEqILY8uJMV1JD5CIFjyQtt5U=) 2: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: eP5B4+66lNDZRwwB0EJUDL9Pn71RI/Oa3/zagGI4Izk=) 3: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: cidgl2SIo3vuKAc4LvPzn48241T8Yqf3Lk4VBRTBdhc=) 4: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: pXWaAnAiDsjhVjMrMqsJ0d+NFEE6GHbDUnVNomzIFpY=) 5: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: vm5PhQ9OCf0FV3z/CHJ+RxKQHUnZeKsqWqWQwv0pY+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d1:de:f6:33:67:93:64:09:4d:b7:cf:50:dc:49:1e:37:c2:10:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Mar 26 10:05:49 2026 GMT Not After : Mar 29 12:04:49 2026 GMT Subject: CN=A40F64C8370C86F3D9EB5D6430A7860BE13CA6D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:bd:8a:8d:0d:5e:a7:0c:bc:5d:9e:8c:04:3a: 8d:1c:b4:21:c6:16:3e:82:31:68:30:e2:53:5a:bd: d0:c2:5d:1d:64:66:94:e5:87:fc:dd:47:f2:23:56: 3f:3f:2e:70:cf:23:7b:63:4f:0d:23:f1:18:53:65: 48:5e:03:73:cb:73:19:10:42:2b:c2:59:ef:3a:58: 8b:ff:05:f0:3e:44:3f:37:6b:53:c4:04:ab:7a:4f: 24:79:a3:42:40:46:84:03:b2:8e:81:0a:a7:2b:73: 28:d6:b9:5b:4f:31:2a:71:61:d6:55:0e:a9:7b:ba: 07:47:73:4d:ad:cb:0b:84:24:85:87:31:87:64:69: 06:72:8f:df:19:f4:cb:8e:cd:5f:2b:ed:e1:08:83: aa:dc:18:a1:b6:eb:a9:08:28:e2:e8:62:74:43:23: 4e:e3:78:8c:e4:8e:f2:7d:e4:b4:8a:1b:c6:88:79: b7:c8:c6:19:5c:63:9a:ed:0b:86:09:ca:d9:a2:88: db:8b:bb:d4:42:5c:29:16:b6:66:83:39:87:22:a1: 03:34:d9:b9:f8:c0:ee:3f:05:e0:09:e7:81:7d:10: 95:6d:ac:98:b5:33:0d:cb:49:e6:13:0b:95:77:e2: 0f:35:78:ce:71:84:42:a4:bc:d8:86:b8:7a:95:9e: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0F:64:C8:37:0C:86:F3:D9:EB:5D:64:30:A7:86:0B:E1:3C:A6:D1 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:00:21:86:16:fb:4b:42:b4:26:1a:3a:40:a6:0e:e6:f0:68: a4:80:cf:77:74:86:19:e4:9b:48:6b:78:49:d2:c0:ca:15:e1: cc:03:cf:61:0e:b0:c3:93:2f:84:03:b4:3c:96:26:36:ef:6c: 64:ca:b0:87:01:01:54:77:ba:a1:a4:8c:7f:34:43:5e:5e:0e: 43:7d:88:a1:c2:43:ad:8b:75:77:28:07:74:d3:67:b9:5c:7b: 98:5e:c6:fb:c6:bf:e4:48:36:02:43:40:51:5d:ff:db:dd:e2: c1:34:b3:a1:e2:13:c9:be:0a:62:59:2e:ac:e0:9c:6f:4e:88: e0:58:ec:a4:1b:17:14:1d:90:6b:18:9e:47:ee:df:97:a5:df: c4:34:a1:7a:5c:a7:66:12:03:d4:c0:e2:cf:d2:d0:36:15:46: d5:3c:3c:4e:e9:ad:06:63:f2:aa:0e:63:29:bf:68:15:8e:47: 13:5a:e8:44:2a:50:ca:04:4b:7f:94:0d:35:b6:38:f2:8b:6d: 4d:74:37:e5:2b:9c:d0:d5:e2:1e:b6:bf:74:a0:23:8a:43:0e: 80:6d:7f:ed:88:1f:10:31:7e:95:98:d7:bb:07:ee:51:84:62: f1:4f:ad:78:37:7e:b5:fa:ca:9c:b4:02:0d:92:8c:93:16:5b: 38:9c:e4:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNHe9jNnk2QJTbfPUNxJHjfCEPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNjAzMjYxMDA1NDlaFw0yNjAzMjkxMjA0NDlaMDMxMTAvBgNV BAMTKEE0MEY2NEM4MzcwQzg2RjNEOUVCNUQ2NDMwQTc4NjBCRTEzQ0E2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7vYqNDV6nDLxdnowEOo0ctCHG Fj6CMWgw4lNavdDCXR1kZpTlh/zdR/IjVj8/LnDPI3tjTw0j8RhTZUheA3PLcxkQ QivCWe86WIv/BfA+RD83a1PEBKt6TyR5o0JARoQDso6BCqcrcyjWuVtPMSpxYdZV Dql7ugdHc02tywuEJIWHMYdkaQZyj98Z9MuOzV8r7eEIg6rcGKG266kIKOLoYnRD I07jeIzkjvJ95LSKG8aIebfIxhlcY5rtC4YJytmiiNuLu9RCXCkWtmaDOYcioQM0 2bn4wO4/BeAJ54F9EJVtrJi1Mw3LSeYTC5V34g81eM5xhEKkvNiGuHqVnhQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpA9kyDcMhvPZ611kMKeGC+E8ptEwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0 NjE3MEEzQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEAIYYW+0tCtCYaOkCmDubwaKSAz3d0hhnk m0hreEnSwMoV4cwDz2EOsMOTL4QDtDyWJjbvbGTKsIcBAVR3uqGkjH80Q15eDkN9 iKHCQ62LdXcoB3TTZ7lce5hexvvGv+RINgJDQFFd/9vd4sE0s6HiE8m+CmJZLqzg nG9OiOBY7KQbFxQdkGsYnkfu35el38Q0oXpcp2YSA9TA4s/S0DYVRtU8PE7prQZj 8qoOYym/aBWORxNa6EQqUMoES3+UDTW2OPKLbU10N+UrnNDV4h62v3SgI4pDDoBt f+2IHxAxfpWY17sH7lGEYvFPrXg3frX6ypy0Ag2SjJMWWzic5Bo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:26 2026 by rpki-client