$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: 4gNJTOU1fGAj4pTtvw3ENH9FcGVm/DrI3Hv/lefmVNA= Subject key identifier: 3B:0F:DE:A8:6C:F1:44:77:FC:21:F9:37:E2:18:A6:DD:0E:C6:4E:BD Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 60897C2D572EC1D77E2D1B3440FF9EFCC9E5BC79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 055F Signing time: Tue 24 Mar 2026 13:41:04 +0000 Manifest this update: Tue 24 Mar 2026 13:36:04 +0000 Manifest next update: Fri 27 Mar 2026 21:28:04 +0000 Files and hashes: 1: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 2: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: uNsyhqf0lZ1iOEtg3JYfZ1jHuFmPMxTcdMa5GWh6x6k=) 3: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 4: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) 5: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:89:7c:2d:57:2e:c1:d7:7e:2d:1b:34:40:ff:9e:fc:c9:e5:bc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Mar 24 13:36:04 2026 GMT Not After : Mar 27 21:28:04 2026 GMT Subject: CN=3B0FDEA86CF14477FC21F937E218A6DD0EC64EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e2:31:99:23:fa:aa:b4:a3:0b:c7:89:0c:22: 1c:97:cf:31:39:db:31:55:8e:f8:30:f8:1f:d1:fb: a8:bd:a3:6c:41:32:ee:6c:a6:88:bf:ab:3c:63:6a: d4:8b:96:e7:48:04:46:45:23:f7:fd:f8:f6:d8:e4: d1:c1:58:6d:87:a5:1e:7a:ae:eb:5f:f1:92:bd:93: 2e:c7:e5:46:c7:7e:d2:a2:16:f4:28:fb:cf:6c:57: cb:c8:2c:1e:42:5b:1a:df:99:cb:54:33:b7:30:75: fd:e3:7d:13:85:41:57:1c:82:80:0a:96:cb:c4:57: a0:b8:6f:70:16:22:ca:a4:e4:c2:4a:7a:b0:ae:fd: 44:be:02:04:73:73:1a:3b:cb:52:db:49:6a:4e:6f: 05:23:2f:9f:7e:43:8e:3c:72:73:b0:47:e2:b8:9a: 2d:a0:93:f1:f6:54:f2:68:b9:48:38:6a:30:24:2c: 69:f1:8d:5d:f8:b4:89:8d:9c:ef:a9:04:ea:1d:5a: d5:6f:5f:a5:2b:fc:6b:99:73:c7:b1:9a:14:ff:66: cf:fe:9d:c5:40:08:99:51:11:b8:cd:d7:20:0c:0b: f2:6a:e3:be:8a:e9:de:be:b6:51:c8:08:f3:1f:00: cc:96:8e:0e:1b:5f:92:db:95:59:c8:23:ad:05:24: 94:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:DE:A8:6C:F1:44:77:FC:21:F9:37:E2:18:A6:DD:0E:C6:4E:BD X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:46:a8:c7:1a:d0:b2:6e:2e:e5:6a:2c:72:1f:d9:8c:b5:1d: 63:c5:12:5c:69:f6:29:06:fb:78:c4:dc:c5:87:11:18:3e:69: ef:c0:58:53:73:99:fe:7e:57:ca:70:b4:3c:65:1b:5c:0a:6d: 0e:9d:4a:f5:b3:9b:9e:8e:e3:2b:a0:5a:3d:23:15:ff:cc:99: 64:ba:95:8c:0d:b7:3d:9c:a2:7b:60:50:51:49:da:27:0f:98: 72:f6:a7:4a:35:c3:40:7a:ff:9d:65:aa:d5:1c:cc:73:65:9e: 6c:3e:fc:4a:29:23:90:c5:60:a5:38:a8:81:af:47:a8:d6:ac: 25:9e:e1:8a:96:63:d8:4b:cb:50:35:99:04:7a:b8:d7:2a:9e: ab:78:70:fa:f5:3c:26:2f:6c:4f:c1:52:04:03:d0:3a:69:fe: 58:52:3f:9b:3f:82:57:60:28:05:07:74:98:2b:dc:0e:0d:9b: da:a9:77:09:4e:a4:73:f8:75:a1:92:b8:aa:98:ac:43:35:cf: 26:f4:16:7e:17:69:43:37:2f:27:e3:a4:35:6d:fd:33:7a:41: d5:b0:e5:88:0b:53:2f:9e:94:81:63:11:24:f4:3a:70:53:81: a7:7f:7a:a9:3a:3b:c1:96:e1:47:b6:e0:e3:9a:77:c5:07:27: 7e:3c:95:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIl8LVcuwdd+LRs0QP+e/MnlvHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNjAzMjQxMzM2MDRaFw0yNjAzMjcyMTI4MDRaMDMxMTAvBgNV BAMTKDNCMEZERUE4NkNGMTQ0NzdGQzIxRjkzN0UyMThBNkREMEVDNjRFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz4jGZI/qqtKMLx4kMIhyXzzE5 2zFVjvgw+B/R+6i9o2xBMu5spoi/qzxjatSLludIBEZFI/f9+PbY5NHBWG2HpR56 rutf8ZK9ky7H5UbHftKiFvQo+89sV8vILB5CWxrfmctUM7cwdf3jfROFQVccgoAK lsvEV6C4b3AWIsqk5MJKerCu/US+AgRzcxo7y1LbSWpObwUjL59+Q448cnOwR+K4 mi2gk/H2VPJouUg4ajAkLGnxjV34tImNnO+pBOodWtVvX6Ur/GuZc8exmhT/Zs/+ ncVACJlREbjN1yAMC/Jq476K6d6+tlHICPMfAMyWjg4bX5LblVnII60FJJQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOw/eqGzxRHf8Ifk34him3Q7GTr0wHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdGqMca0LJuLuVqLHIf2Yy1HWPFElxp9ikG +3jE3MWHERg+ae/AWFNzmf5+V8pwtDxlG1wKbQ6dSvWzm56O4yugWj0jFf/MmWS6 lYwNtz2contgUFFJ2icPmHL2p0o1w0B6/51lqtUczHNlnmw+/EopI5DFYKU4qIGv R6jWrCWe4YqWY9hLy1A1mQR6uNcqnqt4cPr1PCYvbE/BUgQD0Dpp/lhSP5s/gldg KAUHdJgr3A4Nm9qpdwlOpHP4daGSuKqYrEM1zyb0Fn4XaUM3LyfjpDVt/TN6QdWw 5YgLUy+elIFjEST0OnBTgad/eqk6O8GW4Ue24OOad8UHJ348lYA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:26 2026 by rpki-client