$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft File: 045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft (raw, json) Hash identifier: 1tStEMl5c+NkMiqyOSIecuY3clfyLkD0v+n1W96uPlg= Subject key identifier: 83:E1:5F:68:4D:C2:4D:CD:4E:03:FA:BA:85:A4:3A:BD:D2:3A:6A:5D Authority key identifier: 04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 Certificate issuer: /CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4 Certificate serial: 53B54E503636E18D52178B39109526613D34E4B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:31:29 +0000 Manifest this update: Wed 23 Sep 2026 16:26:29 +0000 Manifest next update: Thu 24 Sep 2026 20:03:29 +0000 Files and hashes: 1: 045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl (hash: kYsRDTq2Dt0lvTWUf4UraLQxGBJpqWUhzmkErAv9K/w=) 2: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: Tg4cupk2DXjSvW5xjuL6mIy6JAE0QREMVdBvwDzs2pY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b5:4e:50:36:36:e1:8d:52:17:8b:39:10:95:26:61:3d:34:e4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4 Validity Not Before: Sep 23 16:26:29 2026 GMT Not After : Sep 24 20:03:29 2026 GMT Subject: CN=83E15F684DC24DCD4E03FABA85A43ABDD23A6A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:ff:4e:38:e9:24:4f:14:88:65:73:3a:37: 40:02:1d:6f:41:f5:13:49:bc:7a:25:3c:56:67:54: fa:6b:65:6b:63:6f:02:85:ac:fe:54:23:b9:19:25: 25:13:58:e7:6e:4d:38:9c:ea:e7:35:1c:42:a5:0f: 6e:a3:ee:af:9b:26:67:0f:81:ef:dd:f2:11:e4:51: 9b:da:ac:0d:0c:48:a7:50:84:2e:1f:9c:8d:a3:c0: c0:e4:9c:69:e8:64:0b:6e:b2:05:a8:ed:cd:7f:57: 6d:c0:eb:2a:31:d7:02:df:8a:a8:43:cb:8a:28:60: 87:bb:cc:f0:4d:3a:97:ad:24:b8:1b:dc:79:7f:f3: f2:a2:f0:fb:ab:80:b8:b4:b0:10:d3:30:4a:2c:e2: 9a:d7:d8:11:9c:ea:8e:f0:3c:b9:b2:69:dc:dc:88: 9a:70:65:4e:35:54:52:0f:5d:d4:2e:08:6c:17:aa: c4:78:39:68:f0:6d:5b:fc:1d:88:2e:39:7b:d9:c3: af:cf:17:28:97:97:fa:da:22:66:7e:a4:fb:d9:10: 82:07:22:eb:e6:af:0c:94:1a:37:5c:23:be:e3:81: 77:b1:d1:56:1a:f0:a1:33:dc:44:75:0e:1d:eb:81: c8:bb:d8:90:a9:03:20:79:8e:6b:b9:b9:8f:b1:e3: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E1:5F:68:4D:C2:4D:CD:4E:03:FA:BA:85:A4:3A:BD:D2:3A:6A:5D X509v3 Authority Key Identifier: keyid:04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ec:e9:94:76:33:77:26:2e:c7:68:89:f9:58:8d:11:b7:4e: 15:fb:26:e9:1b:b3:53:51:81:55:75:1d:0d:d3:40:c6:bb:61: a8:40:53:92:4e:ff:3c:77:47:8c:36:45:cf:0a:26:5c:17:f1: 1e:e8:03:09:01:2d:69:ea:fd:9a:3f:30:24:ca:97:86:a5:12: 1e:14:7a:76:ed:45:72:51:b8:b9:87:f1:e3:82:a9:03:2a:4c: 99:d0:ab:3b:ff:bc:58:b9:d6:00:be:f1:c8:0e:ec:5b:32:35: 1a:67:73:d3:44:12:f5:b1:bf:75:bb:8f:cb:4e:2a:97:9f:0f: ef:b7:65:18:4e:de:c7:86:be:19:36:88:63:a2:50:fd:20:1a: f7:a8:10:0f:c2:38:01:34:db:66:fa:b7:20:af:57:de:dd:7e: b0:1f:c2:22:29:7d:7f:c9:34:5e:41:02:46:e0:32:b3:b1:23: d0:bf:51:60:1b:95:72:d6:e7:fe:5c:5a:ba:22:fd:91:59:13: e6:e4:40:bc:38:49:4f:68:0f:1c:e1:b6:e1:6c:2b:23:2f:cd: be:cc:bb:ae:6d:d9:ab:2d:e9:9d:65:ee:af:49:43:d1:21:5b: a3:f8:49:61:b3:42:ac:65:cc:cf:24:15:6b:4f:c6:b7:e1:53: 03:ce:33:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7VOUDY24Y1SF4s5EJUmYT005LAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1RDlFNDZFRTZFNkJCRDJBRkVFNDc3OTY0QzZEOUJB OUJDMURENDAeFw0yNjA5MjMxNjI2MjlaFw0yNjA5MjQyMDAzMjlaMDMxMTAvBgNV BAMTKDgzRTE1RjY4NERDMjREQ0Q0RTAzRkFCQTg1QTQzQUJERDIzQTZBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYA/9OOOkkTxSIZXM6N0ACHW9B 9RNJvHolPFZnVPprZWtjbwKFrP5UI7kZJSUTWOduTTic6uc1HEKlD26j7q+bJmcP ge/d8hHkUZvarA0MSKdQhC4fnI2jwMDknGnoZAtusgWo7c1/V23A6yox1wLfiqhD y4ooYIe7zPBNOpetJLgb3Hl/8/Ki8PurgLi0sBDTMEos4prX2BGc6o7wPLmyadzc iJpwZU41VFIPXdQuCGwXqsR4OWjwbVv8HYguOXvZw6/PFyiXl/raImZ+pPvZEIIH IuvmrwyUGjdcI77jgXex0VYa8KEz3ER1Dh3rgci72JCpAyB5jmu5uY+x45ZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg+FfaE3CTc1OA/q6haQ6vdI6al0wHwYDVR0j BBgwFoAUBF2eRu5ua70q/uR3lkxtm6m8HdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzRmOWY5YTEtNGFkOC00OWNlLTlmYTktZDQ3NjU3M2FmNTBmLzAvMDQ1RDlFNDZF RTZFNkJCRDJBRkVFNDc3OTY0QzZEOUJBOUJDMURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDVEOUU0NkVFNkU2QkJEMkFGRUU0Nzc5NjRDNkQ5QkE5QkMx REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMDQ1RDlFNDZFRTZFNkJCRDJBRkVFNDc3OTY0QzZE OUJBOUJDMURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzs6ZR2M3cmLsdoiflYjRG3ThX7Jukbs1NR gVV1HQ3TQMa7YahAU5JO/zx3R4w2Rc8KJlwX8R7oAwkBLWnq/Zo/MCTKl4alEh4U enbtRXJRuLmH8eOCqQMqTJnQqzv/vFi51gC+8cgO7FsyNRpnc9NEEvWxv3W7j8tO KpefD++3ZRhO3seGvhk2iGOiUP0gGveoEA/COAE022b6tyCvV97dfrAfwiIpfX/J NF5BAkbgMrOxI9C/UWAblXLW5/5cWroi/ZFZE+bkQLw4SU9oDxzhtuFsKyMvzb7M u65t2ast6Z1l7q9JQ9EhW6P4SWGzQqxlzM8kFWtPxrfhUwPOMzA= -----END CERTIFICATE-----Generated at Thu Sep 24 12:58:39 2026 by rpki-client