$ rpki-client -vvf rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft File: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft (raw, json) Hash identifier: m/IIMnbZ3MlWeLr2cfGqxskjkHJ17UnD7ZvKTz3AhWc= Subject key identifier: 30:F3:38:B3:80:37:C7:44:A0:5A:F5:24:09:18:BB:9C:82:74:C4:D3 Authority key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B Certificate issuer: /CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Certificate serial: 77EEE833430259339F0969A21619FFB804AAB5DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:42:49 +0000 Manifest this update: Tue 12 May 2026 23:37:49 +0000 Manifest next update: Thu 14 May 2026 03:28:49 +0000 Files and hashes: 1: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: hd3heGYgnRZ+Tk6ekukJ3PqnB2LNr3afpBjr80SK/bw=) 2: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gn2qTVHIkC7GBmvI9sm3mViU/5rk6Ham6sDiRDMn4HI=) 3: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: fCLagHzLZSaa2cnRaKpFh16Ous6QosiWWcEmtC91g9A=) 4: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: 90yPyuCjRCD5lGn6lVhrYkuTOFFoJv0X9oFwGz4Y7ak=) 5: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: CMIcy7X5aCAauqTlERIV8khM7hpSoP3FOk5Ar2k00es=) 6: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl (hash: YyWrwL1k8EJGhLNT0m4MJtKq6XrFrT/9bRQqs82Hgbc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ee:e8:33:43:02:59:33:9f:09:69:a2:16:19:ff:b8:04:aa:b5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Validity Not Before: May 12 23:37:49 2026 GMT Not After : May 14 03:28:49 2026 GMT Subject: CN=30F338B38037C744A05AF5240918BB9C8274C4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:79:f8:23:44:25:cd:63:53:02:48:c0:de: 3f:b8:82:31:86:92:b9:a2:00:e4:ee:93:3f:1e:03: 81:f4:2c:56:93:f5:fe:4f:21:fd:67:08:c1:8e:2c: 59:fe:da:d4:6d:b0:1f:12:36:b9:0f:21:cb:72:88: d4:86:68:48:1c:b7:96:f1:d2:9d:d1:18:c7:dc:f7: 72:e4:9b:a5:66:db:53:2d:d5:d7:11:f8:e3:69:98: 03:8a:bb:48:f8:cd:e7:30:62:0e:44:96:7e:be:e7: cd:50:27:ce:ed:d5:05:72:41:40:81:a6:cd:b3:e6: 95:05:2e:50:75:6f:61:db:86:7b:74:27:64:9e:25: 39:3e:ef:66:23:6a:5d:54:a8:d3:fc:ae:86:43:d9: ac:40:ac:c0:7a:b1:c2:03:22:69:53:68:33:ba:fd: dd:ba:3e:3d:d1:0a:5b:9d:a0:1e:7e:b8:0b:d3:b3: a8:b2:7a:27:ee:8c:4a:d3:7b:6a:ec:4d:9e:44:4e: 2b:d0:82:fb:92:8d:b1:4b:14:c6:d8:fa:d3:d1:9c: ab:c9:e9:6b:2c:1a:7a:af:42:85:d9:10:ea:9f:95: 12:7e:c2:69:8f:ff:4f:75:46:dd:67:9d:8c:16:78: 27:fc:e4:b9:bd:04:55:29:ef:59:76:e0:36:b9:cc: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F3:38:B3:80:37:C7:44:A0:5A:F5:24:09:18:BB:9C:82:74:C4:D3 X509v3 Authority Key Identifier: keyid:45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1e:f0:ee:f8:34:f2:5b:2e:08:ce:33:ad:d2:ea:b8:3b:97: 88:3d:6d:83:bc:6f:db:03:b3:87:3e:84:63:17:f6:44:e8:2e: 83:fa:02:c3:7d:2c:91:09:c3:c9:fe:c3:45:d6:84:40:b6:d7: 52:f2:a9:ab:25:15:07:5d:8e:31:6e:6c:66:f2:96:57:f5:f7: 07:bf:89:fe:dc:82:91:0b:16:0b:6b:f2:01:bb:16:73:4c:b6: ee:a0:fd:fc:c2:1e:ad:dc:70:dc:d7:58:75:c6:77:02:20:ad: 0c:9c:bc:07:61:a3:87:af:48:3f:68:96:09:eb:01:1d:9c:dd: 43:52:68:b9:31:fa:3c:c3:3c:e2:50:89:db:ae:84:b5:83:23: 7c:0c:14:8c:35:ba:bf:56:fc:1f:37:2a:7c:9f:54:48:24:56: d5:f7:9c:60:65:c1:9d:e3:81:c5:83:1b:4a:06:9f:cf:99:e1: 98:b6:3b:bd:bb:93:ac:7d:a4:d8:b6:7c:e2:a5:b7:2b:f6:eb: 3d:1d:15:f0:be:77:22:46:1b:75:ba:ef:f7:df:bc:22:4a:8b: 9a:47:ee:80:00:79:19:08:ce:82:e0:c0:a3:70:12:b3:3b:b2: fe:06:5b:c2:d9:86:61:db:67:b5:ed:95:03:50:81:82:48:3d: 80:d0:48:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+7oM0MCWTOfCWmiFhn/uASqtd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1 MDJCMzI3QjAeFw0yNjA1MTIyMzM3NDlaFw0yNjA1MTQwMzI4NDlaMDMxMTAvBgNV BAMTKDMwRjMzOEIzODAzN0M3NDRBMDVBRjUyNDA5MThCQjlDODI3NEM0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+Xn4I0QlzWNTAkjA3j+4gjGG krmiAOTukz8eA4H0LFaT9f5PIf1nCMGOLFn+2tRtsB8SNrkPIctyiNSGaEgct5bx 0p3RGMfc93Lkm6Vm21Mt1dcR+ONpmAOKu0j4zecwYg5Eln6+581QJ87t1QVyQUCB ps2z5pUFLlB1b2Hbhnt0J2SeJTk+72Yjal1UqNP8roZD2axArMB6scIDImlTaDO6 /d26Pj3RCludoB5+uAvTs6iyeifujErTe2rsTZ5ETivQgvuSjbFLFMbY+tPRnKvJ 6WssGnqvQoXZEOqflRJ+wmmP/091Rt1nnYwWeCf85Lm9BFUp71l24Da5zAMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMPM4s4A3x0SgWvUkCRi7nIJ0xNMwHwYDVR0j BBgwFoAURfTrN6oXiiQrjY3XI7XptVArMnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEyNGFhOGMtZGVkYy00Mzc2LTkzODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdB QTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1MDJCMzI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUY0RUIzN0FBMTc4QTI0MkI4RDhERDcyM0I1RTlCNTUwMkIz MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5 QjU1MDJCMzI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABce8O74NPJbLgjOM63S6rg7l4g9bYO8b9sD s4c+hGMX9kToLoP6AsN9LJEJw8n+w0XWhEC211LyqaslFQddjjFubGbyllf19we/ if7cgpELFgtr8gG7FnNMtu6g/fzCHq3ccNzXWHXGdwIgrQycvAdho4evSD9olgnr AR2c3UNSaLkx+jzDPOJQiduuhLWDI3wMFIw1ur9W/B83KnyfVEgkVtX3nGBlwZ3j gcWDG0oGn8+Z4Zi2O727k6x9pNi2fOKltyv26z0dFfC+dyJGG3W67/ffvCJKi5pH 7oAAeRkIzoLgwKNwErM7sv4GW8LZhmHbZ7XtlQNQgYJIPYDQSFk= -----END CERTIFICATE-----Generated at Wed May 13 04:03:02 2026 by rpki-client