$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft File: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft (raw, json) Hash identifier: 5SnqEL8HSWQq0c63YuHIHZqne5kYZhrGPFPYXTsx5N8= Subject key identifier: C2:2A:D9:C3:4B:7A:34:38:45:A7:B6:39:28:97:02:B7:0C:A8:C4:28 Authority key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B Certificate issuer: /CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Certificate serial: 32248E37814FE93EC0349ED6A5CA4C0FD4B2F3FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 13:58:22 +0000 Manifest this update: Wed 23 Sep 2026 13:53:22 +0000 Manifest next update: Thu 24 Sep 2026 17:02:22 +0000 Files and hashes: 1: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: fCLagHzLZSaa2cnRaKpFh16Ous6QosiWWcEmtC91g9A=) 2: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: hd3heGYgnRZ+Tk6ekukJ3PqnB2LNr3afpBjr80SK/bw=) 3: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: CMIcy7X5aCAauqTlERIV8khM7hpSoP3FOk5Ar2k00es=) 4: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: 90yPyuCjRCD5lGn6lVhrYkuTOFFoJv0X9oFwGz4Y7ak=) 5: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl (hash: IE9naD7S7fccUWQDtMLBFILfH1gqZpMpKR7SHRSwBqM=) 6: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gn2qTVHIkC7GBmvI9sm3mViU/5rk6Ham6sDiRDMn4HI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:24:8e:37:81:4f:e9:3e:c0:34:9e:d6:a5:ca:4c:0f:d4:b2:f3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Validity Not Before: Sep 23 13:53:22 2026 GMT Not After : Sep 24 17:02:22 2026 GMT Subject: CN=C22AD9C34B7A343845A7B639289702B70CA8C428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:d7:56:87:0b:22:1a:10:57:ae:0c:d7:cc: d3:a9:fe:74:48:99:ee:2a:26:2d:5f:79:23:29:b7: f0:25:bc:50:42:0c:66:37:be:df:64:e5:33:7f:d1: a7:f4:49:56:5d:59:9e:26:a7:53:0f:f5:ad:29:e3: 8f:e2:2a:2c:bc:15:77:a2:a0:b4:f5:df:f9:97:30: 69:37:cb:39:e6:20:0f:2e:d6:d0:e4:99:aa:c1:21: 54:ee:37:e2:d9:44:da:e8:a8:5d:e8:96:5b:5e:84: 19:60:f6:a7:cd:2e:fe:00:3f:9d:99:5e:62:59:16: 9c:c7:8e:f7:5b:fe:82:27:d5:c8:5a:dc:77:9f:1d: 38:51:ca:c3:72:d9:1e:06:2b:43:c0:8f:2b:44:61: b9:01:c8:23:f5:ab:d4:33:d1:c7:52:8c:c1:c6:db: 95:3f:cd:5c:f6:b1:a6:a6:12:4e:74:a6:8c:3e:3e: e1:29:fc:68:2a:b8:c7:45:26:10:1c:b1:ab:c1:5b: c5:71:52:52:52:7a:93:1b:88:a0:2d:d1:e7:5e:c1: 08:f8:0f:be:36:19:89:a1:90:03:b4:21:0f:e7:37: 66:1b:7e:90:b6:46:32:a3:e6:c4:a5:88:68:91:8c: d5:1a:83:e1:14:80:d9:f8:e2:e3:2e:16:0c:ef:3a: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:D9:C3:4B:7A:34:38:45:A7:B6:39:28:97:02:B7:0C:A8:C4:28 X509v3 Authority Key Identifier: keyid:45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d9:c5:f6:d2:79:0f:73:f9:ad:07:08:28:50:f2:a1:f3:34: 0c:04:67:4c:b0:be:bc:c4:44:5b:27:65:ff:f6:cd:02:ca:68: 73:49:5b:6b:ce:81:2c:59:8c:90:36:38:c9:11:6f:ae:f2:dd: cd:2d:a1:6a:12:7f:8d:a7:1e:07:24:a0:9d:63:bc:e9:d3:e9: 58:7b:05:7f:52:53:90:68:76:63:59:f1:63:3c:39:21:3e:9d: 16:00:a5:d0:78:ed:11:a5:b9:ae:d0:f0:2b:63:c0:c3:67:b2: 8d:d6:e7:37:cb:f6:45:12:06:89:52:83:e3:62:78:98:0e:f2: 1b:96:05:db:8b:8c:17:20:12:2a:10:55:33:ab:d6:ac:dd:64: ee:8e:d7:16:0f:a1:c6:ae:77:b5:ca:9b:6c:96:4d:5d:cb:48: bd:e6:b9:6b:a4:08:d9:6e:af:ab:64:23:30:db:f3:de:ce:4b: f5:20:72:85:fd:25:55:bd:b7:14:b4:a7:f5:0a:49:70:79:29: 09:94:8f:f7:13:6e:46:18:ae:d5:76:74:01:d0:a8:e9:67:c8: e3:14:99:c7:91:e2:68:91:e8:0c:b5:21:15:52:b6:11:b8:6d: 26:88:f0:ab:e4:2b:b5:c2:3a:75:09:da:e7:46:33:f2:ee:6b: 87:87:6e:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiSON4FP6T7ANJ7WpcpMD9Sy8/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1 MDJCMzI3QjAeFw0yNjA5MjMxMzUzMjJaFw0yNjA5MjQxNzAyMjJaMDMxMTAvBgNV BAMTKEMyMkFEOUMzNEI3QTM0Mzg0NUE3QjYzOTI4OTcwMkI3MENBOEM0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyftdWhwsiGhBXrgzXzNOp/nRI me4qJi1feSMpt/AlvFBCDGY3vt9k5TN/0af0SVZdWZ4mp1MP9a0p44/iKiy8FXei oLT13/mXMGk3yznmIA8u1tDkmarBIVTuN+LZRNroqF3olltehBlg9qfNLv4AP52Z XmJZFpzHjvdb/oIn1cha3HefHThRysNy2R4GK0PAjytEYbkByCP1q9Qz0cdSjMHG 25U/zVz2saamEk50pow+PuEp/GgquMdFJhAcsavBW8VxUlJSepMbiKAt0edewQj4 D742GYmhkAO0IQ/nN2YbfpC2RjKj5sSliGiRjNUag+EUgNn44uMuFgzvOtcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwirZw0t6NDhFp7Y5KJcCtwyoxCgwHwYDVR0j BBgwFoAURfTrN6oXiiQrjY3XI7XptVArMnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEyNGFhOGMtZGVkYy00Mzc2LTkzODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdB QTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1MDJCMzI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUY0RUIzN0FBMTc4QTI0MkI4RDhERDcyM0I1RTlCNTUwMkIz MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5 QjU1MDJCMzI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErZxfbSeQ9z+a0HCChQ8qHzNAwEZ0ywvrzE RFsnZf/2zQLKaHNJW2vOgSxZjJA2OMkRb67y3c0toWoSf42nHgckoJ1jvOnT6Vh7 BX9SU5BodmNZ8WM8OSE+nRYApdB47RGlua7Q8CtjwMNnso3W5zfL9kUSBolSg+Ni eJgO8huWBduLjBcgEioQVTOr1qzdZO6O1xYPocaud7XKm2yWTV3LSL3muWukCNlu r6tkIzDb897OS/UgcoX9JVW9txS0p/UKSXB5KQmUj/cTbkYYrtV2dAHQqOlnyOMU mceR4miR6Ay1IRVSthG4bSaI8KvkK7XCOnUJ2udGM/Lua4eHboI= -----END CERTIFICATE-----Generated at Thu Sep 24 01:48:52 2026 by rpki-client