$ rpki-client -vvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft (raw, json) Hash identifier: W5/9/3wi+W6QdEMCJohT/PSt63FPJj/zA+uQ6lLwbn4= Subject key identifier: B6:86:AC:D6:8F:0E:53:FD:F8:20:56:01:47:9C:B2:00:30:45:35:B7 Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Certificate serial: 422CEAD8F9F6040448878C833EE3D107268114B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:20:12 +0000 Manifest this update: Wed 13 May 2026 01:15:12 +0000 Manifest next update: Thu 14 May 2026 03:01:12 +0000 Files and hashes: 1: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl (hash: YBHj8Z8YAI6O66C6J550lIr5NTFQQCC4batXuCO6/h4=) 2: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=) 3: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=) 4: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2c:ea:d8:f9:f6:04:04:48:87:8c:83:3e:e3:d1:07:26:81:14:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Validity Not Before: May 13 01:15:12 2026 GMT Not After : May 14 03:01:12 2026 GMT Subject: CN=B686ACD68F0E53FDF8205601479CB200304535B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:68:90:53:21:71:40:11:3b:fe:94:fe:29: 72:cd:d2:0b:6a:b0:a5:7d:c1:8e:2f:b7:72:5c:ef: b8:ef:c1:4a:a4:1d:eb:37:89:2e:13:35:52:55:db: 47:c3:20:bb:db:d6:8c:b7:64:99:3d:5f:c1:e3:0f: 45:a4:46:86:ee:9a:b7:ec:a5:d5:1e:be:b7:7c:12: eb:54:6a:ae:a1:af:fc:44:d0:99:38:4c:94:31:2b: 7b:ce:26:be:05:ab:7d:a6:4a:88:f4:5c:59:88:9d: d1:cd:7d:bb:77:95:88:a9:8b:10:1c:4c:3d:61:7f: 46:41:f8:1a:5d:33:a9:86:f3:e9:09:25:3e:94:54: 40:b3:5a:3c:84:95:96:f5:0e:20:47:57:f1:e7:d5: 7f:0e:24:6d:42:73:c4:3e:c4:ec:12:06:98:80:15: e4:e4:0f:db:5e:c3:96:84:05:95:a5:4c:b7:31:ec: 22:ae:cf:39:eb:d6:eb:04:0a:62:5f:66:51:29:9a: 4c:76:1c:32:e0:9d:ad:1f:8a:13:89:99:ed:03:c4: 51:5f:f7:1d:a5:79:b0:ba:c6:1e:e4:11:b5:35:f7: dd:7d:7f:f0:63:53:c4:a5:1a:0f:80:88:cc:9e:82: 4a:4e:b9:29:2d:d4:8d:fc:c9:d4:11:aa:dc:f8:4c: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:86:AC:D6:8F:0E:53:FD:F8:20:56:01:47:9C:B2:00:30:45:35:B7 X509v3 Authority Key Identifier: keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8d:24:bb:0e:75:f0:24:52:92:d8:c9:fc:e1:53:20:31:34: f7:b9:fa:0f:3b:59:59:d9:48:32:22:33:6d:62:96:46:62:33: f1:a9:ad:c3:dd:b2:d7:da:89:76:0c:5d:6d:62:59:04:6d:9e: d0:c0:ce:20:4a:c0:54:3c:57:4b:d5:24:ec:58:48:9e:96:32: 8c:a0:2f:d6:83:c7:03:9b:37:d8:40:79:cf:ca:9d:73:8c:64: 36:1b:b5:0b:89:dc:67:de:fe:5e:c8:44:c1:a7:97:12:d6:41: 91:90:95:c8:3b:2c:54:84:0b:8d:e4:0a:36:c2:eb:b6:f2:08: 3c:c0:42:56:93:bc:9e:46:d7:74:62:29:0c:9f:36:1c:b2:eb: 43:94:83:5b:78:c9:34:86:d8:a4:a4:14:1d:d1:3f:66:50:a3: 70:8e:be:c6:02:6f:6d:02:4c:53:cf:e9:4a:25:b8:ee:1c:4b: 7c:51:10:32:74:11:aa:47:87:73:60:d5:a6:18:d4:86:d9:90: f8:68:1a:6a:e1:9f:3c:0f:64:4e:71:f6:92:b0:b1:63:5d:d5: a1:b1:a6:58:d1:b5:17:9d:80:88:98:66:3f:c0:45:05:a3:3f: dd:88:80:2c:35:61:e3:96:3b:de:68:04:d8:e4:2b:4c:f4:84: ac:7b:35:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQizq2Pn2BARIh4yDPuPRByaBFLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUz NjEwOEQwMjAeFw0yNjA1MTMwMTE1MTJaFw0yNjA1MTQwMzAxMTJaMDMxMTAvBgNV BAMTKEI2ODZBQ0Q2OEYwRTUzRkRGODIwNTYwMTQ3OUNCMjAwMzA0NTM1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWumiQUyFxQBE7/pT+KXLN0gtq sKV9wY4vt3Jc77jvwUqkHes3iS4TNVJV20fDILvb1oy3ZJk9X8HjD0WkRobumrfs pdUevrd8EutUaq6hr/xE0Jk4TJQxK3vOJr4Fq32mSoj0XFmIndHNfbt3lYipixAc TD1hf0ZB+BpdM6mG8+kJJT6UVECzWjyElZb1DiBHV/Hn1X8OJG1Cc8Q+xOwSBpiA FeTkD9tew5aEBZWlTLcx7CKuzznr1usECmJfZlEpmkx2HDLgna0fihOJme0DxFFf 9x2lebC6xh7kEbU19919f/BjU8SlGg+AiMyegkpOuSkt1I38ydQRqtz4TMFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtoas1o8OU/34IFYBR5yyADBFNbcwHwYDVR0j BBgwFoAURaHD8dynt8yo26Aj7sLVnjYQjQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgzZWQ3YWItMWFjOS00ZjQyLWFjZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFE Q0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUzNjEwOEQwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUExQzNGMURDQTdCN0NDQThEQkEwMjNFRUMyRDU5RTM2MTA4 RDAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1 OUUzNjEwOEQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKNJLsOdfAkUpLYyfzhUyAxNPe5+g87WVnZ SDIiM21ilkZiM/GprcPdstfaiXYMXW1iWQRtntDAziBKwFQ8V0vVJOxYSJ6WMoyg L9aDxwObN9hAec/KnXOMZDYbtQuJ3Gfe/l7IRMGnlxLWQZGQlcg7LFSEC43kCjbC 67byCDzAQlaTvJ5G13RiKQyfNhyy60OUg1t4yTSG2KSkFB3RP2ZQo3COvsYCb20C TFPP6UoluO4cS3xREDJ0EapHh3Ng1aYY1IbZkPhoGmrhnzwPZE5x9pKwsWNd1aGx pljRtRedgIiYZj/ARQWjP92IgCw1YeOWO95oBNjkK0z0hKx7NcI= -----END CERTIFICATE-----Generated at Wed May 13 03:59:36 2026 by rpki-client