$ rpki-client -vvf rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft (raw, json) Hash identifier: dFKYuv2gxecFuVjJybq0SdiD5pLEja1G7qqKcsgvUD0= Subject key identifier: 81:C8:1E:CB:FF:23:0C:B4:A2:B8:A5:53:81:AE:22:16:30:6A:B9:B8 Authority key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Certificate issuer: /CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Certificate serial: 626B814447103979C0A2DE3BC1BFC7699E0280C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:06:52 +0000 Manifest this update: Tue 12 May 2026 17:01:52 +0000 Manifest next update: Wed 13 May 2026 17:13:52 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: bwSnt66rSTzmcS7aGzehGu0uATTN++QNXtznU8fkMRw=) 2: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl (hash: laucP1Cs5OqSeU/+mZdKBH5iRcjqsyR1fc3FDp3td7g=) 3: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: r7ncZa1eZkhiGYQA3/lYzQqMG78T/tq+6oH0TDPdwqs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6b:81:44:47:10:39:79:c0:a2:de:3b:c1:bf:c7:69:9e:02:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Validity Not Before: May 12 17:01:52 2026 GMT Not After : May 13 17:13:52 2026 GMT Subject: CN=81C81ECBFF230CB4A2B8A55381AE2216306AB9B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:f7:b5:51:97:c3:34:a0:b5:fe:af:03:46: 9e:54:8d:91:83:28:da:a8:5b:00:c1:5c:aa:32:eb: 3e:13:82:d9:92:7c:68:c0:46:51:48:cb:9d:3b:67: 11:13:14:6d:b9:26:49:13:a7:93:09:4a:27:eb:e5: c8:bf:05:d1:2c:30:53:a6:07:e3:d5:91:77:2f:d2: 79:c1:6d:39:92:8a:3d:15:fe:c5:98:92:a2:22:20: 6d:5a:e5:a9:d3:55:6c:c7:3c:19:53:8a:44:ef:10: 98:04:d2:a7:38:bc:00:2f:7a:3b:15:d1:12:e0:05: 2e:ae:1e:7a:af:97:55:be:06:a1:9e:7a:45:85:6d: eb:49:8d:1c:7d:4b:98:8f:6f:e9:c1:b5:6b:61:c5: 8c:b7:69:d6:52:cf:e8:24:17:c4:ac:04:fe:38:1b: 31:b5:b2:f5:b6:82:0a:4d:e2:5c:2c:a2:04:55:71: 94:db:04:8c:b1:b0:7b:eb:ac:19:b4:24:69:10:d7: e1:6b:67:ac:df:e2:60:db:e9:49:7c:9b:a0:31:cc: 34:34:d9:c7:f7:de:58:4c:97:6e:0c:2d:e3:d0:e8: da:a0:07:d4:c6:9a:35:a5:27:e3:98:a9:12:ec:48: 6e:13:53:63:18:20:c2:e1:ef:c7:2c:f7:2d:aa:f6: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C8:1E:CB:FF:23:0C:B4:A2:B8:A5:53:81:AE:22:16:30:6A:B9:B8 X509v3 Authority Key Identifier: keyid:45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:87:c3:33:47:dc:e6:a6:fa:b9:80:db:82:57:ba:c5:5c:71: 88:17:1a:af:b7:fa:14:63:28:c6:3f:45:35:cf:c2:98:59:0b: e8:de:71:4a:46:b8:90:a9:eb:d8:e2:f6:46:73:fa:42:d0:b4: 49:7e:56:c9:4e:91:86:7a:3a:ec:c3:25:e1:8b:7b:b2:50:f1: 26:15:6e:0b:3d:d2:95:7a:a0:9c:fb:2d:06:4a:cb:0b:8b:0b: f5:3a:8d:52:39:93:68:68:f6:46:51:38:9d:91:a4:74:2c:a6: 1b:29:38:fd:1d:da:56:0f:9e:f3:2b:e8:3d:7f:87:85:71:df: 19:c5:ba:89:f2:b6:e4:84:66:a2:4e:37:e4:7f:10:74:a2:40: c7:f3:6e:a7:51:ec:2a:74:76:39:f0:16:54:3f:20:0b:5b:10: bc:2f:82:9b:41:2f:84:e2:42:da:1c:7e:96:c7:d6:bb:a6:07: 8b:f4:f5:1d:18:81:92:bf:b7:fd:a7:88:bd:ea:19:b5:58:89: ab:41:9a:4b:dd:f2:78:66:ec:09:ce:aa:8a:84:62:a8:0f:c1: d6:42:1e:e6:5e:e6:62:e6:b4:83:af:b2:3d:e6:9c:86:7a:d3: 48:c9:e1:ce:80:6c:24:eb:b5:d7:c8:a7:a7:24:85:31:35:c9: 16:9c:95:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmuBREcQOXnAot47wb/HaZ4CgMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0 NzBFQzBERTAeFw0yNjA1MTIxNzAxNTJaFw0yNjA1MTMxNzEzNTJaMDMxMTAvBgNV BAMTKDgxQzgxRUNCRkYyMzBDQjRBMkI4QTU1MzgxQUUyMjE2MzA2QUI5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmfe1UZfDNKC1/q8DRp5UjZGD KNqoWwDBXKoy6z4TgtmSfGjARlFIy507ZxETFG25JkkTp5MJSifr5ci/BdEsMFOm B+PVkXcv0nnBbTmSij0V/sWYkqIiIG1a5anTVWzHPBlTikTvEJgE0qc4vAAvejsV 0RLgBS6uHnqvl1W+BqGeekWFbetJjRx9S5iPb+nBtWthxYy3adZSz+gkF8SsBP44 GzG1svW2ggpN4lwsogRVcZTbBIyxsHvrrBm0JGkQ1+FrZ6zf4mDb6Ul8m6AxzDQ0 2cf33lhMl24MLePQ6NqgB9TGmjWlJ+OYqRLsSG4TU2MYIMLh78cs9y2q9kULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgcgey/8jDLSiuKVTga4iFjBqubgwHwYDVR0j BBgwFoAURb0NDLWnxMSb+7o0pxZSbEcOwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI5MzI5Y2YtMzEyMy00Y2UwLWE2ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENC NUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0NzBFQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUJEMEQwQ0I1QTdDNEM0OUJGQkJBMzRBNzE2NTI2QzQ3MEVD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUy NkM0NzBFQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOHwzNH3Oam+rmA24JXusVccYgXGq+3+hRj KMY/RTXPwphZC+jecUpGuJCp69ji9kZz+kLQtEl+VslOkYZ6OuzDJeGLe7JQ8SYV bgs90pV6oJz7LQZKywuLC/U6jVI5k2ho9kZROJ2RpHQsphspOP0d2lYPnvMr6D1/ h4Vx3xnFuonytuSEZqJON+R/EHSiQMfzbqdR7Cp0djnwFlQ/IAtbELwvgptBL4Ti QtocfpbH1rumB4v09R0YgZK/t/2niL3qGbVYiatBmkvd8nhm7AnOqoqEYqgPwdZC HuZe5mLmtIOvsj3mnIZ600jJ4c6AbCTrtdfIp6ckhTE1yRaclXk= -----END CERTIFICATE-----Generated at Wed May 13 05:47:13 2026 by rpki-client