
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
File: 45E5895753396A59380E8B15A613362BDD0B9399.mft (raw, json)
Hash identifier: WfG9NXWhs84BfOUEBUBB8iHilRosGD8gmApZWmPLeKs=
Subject key identifier: 50:3E:C5:6F:F6:AF:2F:68:F6:AC:A7:68:D3:06:BB:04:F0:5E:09:7E
Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99
Certificate issuer: /CN=45E5895753396A59380E8B15A613362BDD0B9399
Certificate serial: 047DF251EDC91854724C9A5B0BC0FBC502F53F8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 20:10:57 +0000
Manifest this update: Wed 23 Sep 2026 20:05:57 +0000
Manifest next update: Thu 24 Sep 2026 23:36:57 +0000
Files and hashes: 1: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: KhIaiPcjWv7aKSlHmjk0jk/GmZyLW5p+ewjbZDKYFRM=)
2: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: apfoCrb1SRZGVQ94mZUP6Yq3PvFMs7dSvIUcNJlRoMg=)
3: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: 150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=)
4: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: 9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=)
5: 45E5895753396A59380E8B15A613362BDD0B9399.crl (hash: QlUC8oZ6gY1ST3IOsmeqxir9kG7qE3Ehyt6jZhxW25E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl
rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7d:f2:51:ed:c9:18:54:72:4c:9a:5b:0b:c0:fb:c5:02:f5:3f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399
Validity
Not Before: Sep 23 20:05:57 2026 GMT
Not After : Sep 24 23:36:57 2026 GMT
Subject: CN=503EC56FF6AF2F68F6ACA768D306BB04F05E097E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:81:ef:a5:65:a1:2d:0d:5d:14:86:c9:fb:
2a:7a:3a:a7:d5:ec:8f:f6:97:98:b7:ac:d8:63:82:
74:15:c8:f3:6b:5d:72:88:c0:16:07:49:d7:b3:53:
fd:fd:f4:9e:6f:b5:23:7a:42:48:85:e9:91:6d:24:
a1:b7:a7:a6:a6:b8:0f:7f:54:2b:ed:03:14:88:27:
aa:43:d3:2f:e5:e2:74:6c:d0:f2:f9:01:88:84:c7:
52:34:a4:10:34:a5:34:f9:c6:01:9b:f8:c2:94:62:
a1:d1:d0:03:64:86:43:31:e0:9f:ce:6b:9e:eb:38:
74:75:d0:b4:18:e7:31:e3:14:56:90:0e:1a:c5:35:
0c:fe:9d:4c:b1:70:0c:fa:9f:0f:54:a7:f2:01:fe:
2d:4d:a2:e7:a1:7d:6f:bf:6c:d5:c8:89:d2:15:11:
b1:0e:5e:74:9c:0b:d6:72:41:a1:9e:04:ef:63:5f:
84:b1:1b:37:d3:09:9c:4e:42:99:70:a8:d9:92:05:
4f:da:32:15:9a:ea:1e:63:63:04:f3:e9:49:64:0c:
6a:b8:7f:20:be:b8:f4:24:6c:f2:9e:bd:db:d9:58:
e4:c8:6f:fc:84:d5:57:8f:93:7c:51:88:fa:6f:c6:
61:98:e1:f4:48:7f:09:bb:12:93:57:44:ae:4b:a6:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3E:C5:6F:F6:AF:2F:68:F6:AC:A7:68:D3:06:BB:04:F0:5E:09:7E
X509v3 Authority Key Identifier:
keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7c:7c:1a:e8:2e:cf:fa:46:d5:cd:43:9c:49:9b:08:42:79:
77:8d:50:f1:67:2c:28:52:5d:fc:28:3f:62:8f:d4:89:da:8b:
72:75:1b:f1:69:fa:17:bc:a0:f7:a3:53:6c:2a:f9:86:8a:13:
e2:68:89:a8:28:ee:ad:8d:42:da:7a:46:b6:5d:21:e9:38:d2:
c1:63:1b:e1:02:40:86:2a:fd:c6:59:0e:ba:a0:b0:0c:d6:57:
0e:5f:3e:06:42:a6:83:c7:f0:07:44:96:84:78:a5:61:8d:19:
f6:21:f6:15:6f:1f:2a:29:5b:f4:a8:4d:4e:d5:1d:f7:56:66:
ea:fa:ff:4d:28:6d:4b:85:e7:39:ba:d6:36:db:36:0e:92:7c:
0f:5c:c8:d1:8a:51:57:98:51:8e:72:4e:30:70:42:8b:2a:29:
05:3f:f5:af:94:cb:b7:1b:b1:53:42:27:23:4c:12:26:55:5d:
19:d2:85:49:1d:7e:a4:c7:b0:13:56:6b:3a:1b:63:70:ee:75:
62:a5:9a:a3:88:27:66:60:b1:62:38:8c:60:07:4d:95:94:df:
1c:c7:66:ea:94:26:32:19:f5:9a:01:fb:c4:ae:d1:63:85:10:
90:ce:b0:96:d6:68:48:ca:29:c2:fe:f0:13:18:38:c3:4d:30:
49:36:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:54:10 2026 by rpki-client