$ rpki-client -vvvf rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft (raw, json) Hash identifier: lTjh81YPQda9hPd4c8ivetEjUWf5H1HYROoGRpZXFN4= Subject key identifier: 06:94:1C:61:5B:E4:F5:B0:81:67:AA:DC:79:6C:A3:1A:EF:58:1F:8F Authority key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Certificate issuer: /CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Certificate serial: 103FF6C9E307B4A26E5ADE06758FE8A1B08A9521 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 08:35:30 +0000 Manifest this update: Sat 26 Sep 2026 08:30:30 +0000 Manifest next update: Sun 27 Sep 2026 10:13:30 +0000 Files and hashes: 1: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl (hash: ZhV3HFAPcqKN0DORY/xFxtcI4FyNbAiwog1Fp2BndO8=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: r7ncZa1eZkhiGYQA3/lYzQqMG78T/tq+6oH0TDPdwqs=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: bwSnt66rSTzmcS7aGzehGu0uATTN++QNXtznU8fkMRw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 10:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3f:f6:c9:e3:07:b4:a2:6e:5a:de:06:75:8f:e8:a1:b0:8a:95:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Validity Not Before: Sep 26 08:30:30 2026 GMT Not After : Sep 27 10:13:30 2026 GMT Subject: CN=06941C615BE4F5B08167AADC796CA31AEF581F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9b:32:ba:1e:62:c9:9e:28:dd:d5:66:42:89: ae:bd:21:fe:87:a4:21:62:df:f4:4c:3b:7f:e9:7a: c9:b7:65:38:31:5f:3c:10:91:fb:04:c4:f7:3d:20: d8:bd:3a:2d:51:d5:b1:c9:03:5d:b8:bf:04:90:b3: 5c:8e:d8:4c:38:67:08:75:11:54:cc:26:21:4a:d0: d0:15:df:f2:be:7d:9f:9b:bd:79:7c:ae:df:d2:b4: 68:c2:2f:8f:5e:d5:7f:82:de:1f:e9:45:a9:5b:96: fe:ac:f0:60:57:24:73:2c:43:53:d9:73:13:ef:ce: 92:8b:9d:e2:a6:50:e1:c3:eb:89:0d:4a:36:06:b4: 6a:0e:88:e9:77:91:b6:20:7b:dd:60:28:c9:85:34: 3e:d6:b0:21:c9:79:bf:26:e3:f2:e4:b2:af:67:71: 37:4f:ec:c5:d7:e3:c1:4f:9a:d8:3e:54:fe:1a:d9: 62:ba:c9:d2:39:b3:33:41:ef:dd:d8:30:e6:d7:62: 59:1e:18:96:fc:59:70:6f:70:d0:50:1a:43:41:cc: 46:75:73:45:bb:60:fe:f0:38:13:8c:4e:05:0e:08: d2:bb:ae:1d:f2:52:0b:76:ca:2a:68:74:54:d5:56: 7a:43:68:19:83:b9:a2:bb:38:40:90:31:ff:6a:8a: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:94:1C:61:5B:E4:F5:B0:81:67:AA:DC:79:6C:A3:1A:EF:58:1F:8F X509v3 Authority Key Identifier: keyid:45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9c:cf:35:d3:ce:62:46:9a:6f:ff:51:ba:19:e1:c1:81:d6: 29:24:f9:22:dc:1e:d6:e4:e8:2a:5f:d7:2d:5e:2b:2f:44:44: 35:70:be:24:34:a4:94:d0:ca:10:75:cd:42:1f:a0:5e:6d:0c: 7d:ca:9b:30:1f:6e:f6:ac:18:77:c9:57:be:c0:d8:fa:13:c2: 2f:80:d9:ad:eb:02:c9:81:6d:66:d4:b4:64:6c:5d:53:68:31: 6d:b9:21:3c:cf:b5:9e:c6:e4:32:72:2a:76:40:bf:93:e9:4d: b7:d2:c0:1a:82:66:6b:1b:54:8e:10:8c:fc:c9:b9:09:1d:7a: c5:48:53:b7:f9:d7:a1:94:41:de:55:7a:f1:0d:28:38:27:c1: 1f:b1:58:60:fa:c4:57:4b:96:89:b4:e4:6b:bc:59:d0:24:30: 01:0e:67:95:0d:c9:74:56:db:64:fa:d0:79:b7:6d:35:24:7f: 44:70:22:30:34:46:6a:db:07:2d:cd:dd:d0:fa:95:56:50:0b: ad:a6:ea:17:4b:e9:77:ae:77:39:d6:88:7c:6f:4b:17:f2:5c: 2b:96:84:0e:3e:07:2e:dc:67:d8:81:0d:cb:ad:ed:e8:5a:87: 34:2c:bf:1b:87:93:08:a1:78:7e:a8:ff:9c:c4:6c:10:92:e1: 04:ab:e9:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUED/2yeMHtKJuWt4GdY/oobCKlSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0 NzBFQzBERTAeFw0yNjA5MjYwODMwMzBaFw0yNjA5MjcxMDEzMzBaMDMxMTAvBgNV BAMTKDA2OTQxQzYxNUJFNEY1QjA4MTY3QUFEQzc5NkNBMzFBRUY1ODFGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvmzK6HmLJnijd1WZCia69If6H pCFi3/RMO3/pesm3ZTgxXzwQkfsExPc9INi9Oi1R1bHJA124vwSQs1yO2Ew4Zwh1 EVTMJiFK0NAV3/K+fZ+bvXl8rt/StGjCL49e1X+C3h/pRalblv6s8GBXJHMsQ1PZ cxPvzpKLneKmUOHD64kNSjYGtGoOiOl3kbYge91gKMmFND7WsCHJeb8m4/Lksq9n cTdP7MXX48FPmtg+VP4a2WK6ydI5szNB793YMObXYlkeGJb8WXBvcNBQGkNBzEZ1 c0W7YP7wOBOMTgUOCNK7rh3yUgt2yipodFTVVnpDaBmDuaK7OECQMf9qinU3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBpQcYVvk9bCBZ6rceWyjGu9YH48wHwYDVR0j BBgwFoAURb0NDLWnxMSb+7o0pxZSbEcOwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI5MzI5Y2YtMzEyMy00Y2UwLWE2ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENC NUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0NzBFQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUJEMEQwQ0I1QTdDNEM0OUJGQkJBMzRBNzE2NTI2QzQ3MEVD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUy NkM0NzBFQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWczzXTzmJGmm//UboZ4cGB1ikk+SLcHtbk 6Cpf1y1eKy9ERDVwviQ0pJTQyhB1zUIfoF5tDH3KmzAfbvasGHfJV77A2PoTwi+A 2a3rAsmBbWbUtGRsXVNoMW25ITzPtZ7G5DJyKnZAv5PpTbfSwBqCZmsbVI4QjPzJ uQkdesVIU7f516GUQd5VevENKDgnwR+xWGD6xFdLlom05Gu8WdAkMAEOZ5UNyXRW 22T60Hm3bTUkf0RwIjA0RmrbBy3N3dD6lVZQC62m6hdL6XeudznWiHxvSxfyXCuW hA4+By7cZ9iBDcut7ehahzQsvxuHkwiheH6o/5zEbBCS4QSr6b4= -----END CERTIFICATE-----Generated at Sun Sep 27 02:52:22 2026 by rpki-client