$ rpki-client -vvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft (raw, json) Hash identifier: TM+eCKEnkUPFq7AbXOMQAh7OOVTIj2ejX4o19Aneme0= Subject key identifier: DC:82:CB:C8:BA:8F:DF:17:A9:62:31:0E:A2:BB:17:CE:A4:AC:87:4F Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Certificate serial: 4E7811591FED9FC7B0334A5452800DED0FE5BC3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 01:10:35 +0000 Manifest this update: Fri 24 Jul 2026 01:05:35 +0000 Manifest next update: Sat 25 Jul 2026 01:57:35 +0000 Files and hashes: 1: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl (hash: RMIsMCZN5ZUFrBmixDTsPwrXVpTm5WyLeYOTzyyVXC0=) 2: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=) 3: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=) 4: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:78:11:59:1f:ed:9f:c7:b0:33:4a:54:52:80:0d:ed:0f:e5:bc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Validity Not Before: Jul 24 01:05:35 2026 GMT Not After : Jul 25 01:57:35 2026 GMT Subject: CN=DC82CBC8BA8FDF17A962310EA2BB17CEA4AC874F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:54:f4:61:ba:ae:50:c3:e4:aa:e8:ea:fe: ec:66:42:63:fc:dc:bb:a2:e2:ec:a2:99:c2:7f:3b: e2:00:f2:68:d2:ad:a8:8f:39:e6:ed:cf:42:79:05: 5b:11:65:0c:ff:bc:af:e6:4c:ca:85:8e:87:a1:d7: 8c:fa:01:33:41:73:df:86:0f:47:ed:6f:0f:d2:a2: 2b:fd:1a:02:45:cd:1c:7b:8d:3c:d3:a2:21:4a:c2: 19:34:9d:6b:e4:56:36:92:92:03:d4:55:d4:7e:00: 8f:01:83:02:9d:90:2b:ee:71:63:49:82:19:62:8c: 5d:0b:42:72:20:48:00:9e:f4:58:9b:98:39:0a:c7: da:06:01:fa:c1:6e:2b:4f:d4:b4:47:84:43:f2:f2: 91:43:a0:c3:59:c1:5a:b7:f9:4a:1f:43:ed:3e:cf: 23:c7:c4:da:02:07:b8:d6:a1:8e:5b:06:5f:64:c1: 50:93:ed:c2:5a:16:be:d4:69:f4:b7:aa:cb:0d:40: 7f:3a:bb:8e:87:65:1e:89:d9:b7:2b:92:59:f8:a1: 4c:9a:5a:4d:bf:1d:be:4c:41:ce:01:c8:b4:25:19: ab:f8:a0:54:7d:6d:c5:c1:1c:8a:7e:3d:dd:1b:db: ff:36:40:b7:16:98:99:3f:7b:58:01:f5:04:33:cb: 5b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:CB:C8:BA:8F:DF:17:A9:62:31:0E:A2:BB:17:CE:A4:AC:87:4F X509v3 Authority Key Identifier: keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:70:d0:54:d4:ab:49:93:16:8b:9c:8e:9d:6d:7c:30:b0:24: 7d:23:7c:bd:88:04:fe:f6:52:aa:39:23:bc:b5:11:7a:d7:b9: 3e:cb:74:aa:44:03:c0:67:e5:6c:d8:d5:75:ff:c8:d6:1e:a4: 15:b3:46:84:52:16:e6:0e:a8:1f:99:4b:b5:c5:e0:f3:10:fd: 40:72:36:de:5f:e0:9a:02:f3:60:a6:4c:d4:ce:83:4d:99:af: 12:fb:fa:89:d5:12:25:4c:f1:b2:bc:19:75:e0:b6:26:40:f4: f7:fe:e7:e5:80:a6:57:54:10:58:e9:2e:1c:db:a4:8c:ed:e6: 16:18:d2:ec:f1:72:dc:4b:fd:b0:a7:fb:25:92:a4:d1:a5:b9: 30:0c:09:e0:50:4e:a8:4d:9e:04:8c:f5:0c:e2:77:0c:1b:a3: 5e:cf:f9:83:ae:12:ca:cf:5a:95:81:2e:40:5f:c1:31:dd:30: be:60:96:09:0a:a2:e6:58:84:a2:f0:9b:64:96:33:52:8c:69: 00:93:5c:e9:30:d4:b4:cb:b2:f0:0d:81:99:f6:6e:0b:f4:44: d9:fe:2c:70:b1:4e:0a:1e:24:3e:7e:15:a5:a2:54:61:14:d7: e4:31:b9:ec:df:d5:5c:00:e5:17:b1:94:6a:d2:b5:55:1f:b8: e0:84:de:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTngRWR/tn8ewM0pUUoAN7Q/lvDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUz NjEwOEQwMjAeFw0yNjA3MjQwMTA1MzVaFw0yNjA3MjUwMTU3MzVaMDMxMTAvBgNV BAMTKERDODJDQkM4QkE4RkRGMTdBOTYyMzEwRUEyQkIxN0NFQTRBQzg3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYa1T0YbquUMPkqujq/uxmQmP8 3Lui4uyimcJ/O+IA8mjSraiPOebtz0J5BVsRZQz/vK/mTMqFjoeh14z6ATNBc9+G D0ftbw/Soiv9GgJFzRx7jTzToiFKwhk0nWvkVjaSkgPUVdR+AI8BgwKdkCvucWNJ ghlijF0LQnIgSACe9FibmDkKx9oGAfrBbitP1LRHhEPy8pFDoMNZwVq3+UofQ+0+ zyPHxNoCB7jWoY5bBl9kwVCT7cJaFr7UafS3qssNQH86u46HZR6J2bcrkln4oUya Wk2/Hb5MQc4ByLQlGav4oFR9bcXBHIp+Pd0b2/82QLcWmJk/e1gB9QQzy1vpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ILLyLqP3xepYjEOorsXzqSsh08wHwYDVR0j BBgwFoAURaHD8dynt8yo26Aj7sLVnjYQjQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgzZWQ3YWItMWFjOS00ZjQyLWFjZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFE Q0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUzNjEwOEQwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUExQzNGMURDQTdCN0NDQThEQkEwMjNFRUMyRDU5RTM2MTA4 RDAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1 OUUzNjEwOEQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdw0FTUq0mTFoucjp1tfDCwJH0jfL2IBP72 Uqo5I7y1EXrXuT7LdKpEA8Bn5WzY1XX/yNYepBWzRoRSFuYOqB+ZS7XF4PMQ/UBy Nt5f4JoC82CmTNTOg02ZrxL7+onVEiVM8bK8GXXgtiZA9Pf+5+WApldUEFjpLhzb pIzt5hYY0uzxctxL/bCn+yWSpNGluTAMCeBQTqhNngSM9Qzidwwbo17P+YOuEsrP WpWBLkBfwTHdML5glgkKouZYhKLwm2SWM1KMaQCTXOkw1LTLsvANgZn2bgv0RNn+ LHCxTgoeJD5+FaWiVGEU1+Qxuezf1VwA5RexlGrStVUfuOCE3uo= -----END CERTIFICATE-----Generated at Fri Jul 24 07:44:31 2026 by rpki-client