$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft File: 045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft (raw, json) Hash identifier: F2rtYQHJikgDboMzQHmjwlxkntbpco+ZPZRhe4+z6Mc= Subject key identifier: E9:DC:9C:BD:28:CB:5B:07:10:22:5E:4E:F6:64:39:F2:75:CD:3A:7C Authority key identifier: 04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 Certificate issuer: /CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4 Certificate serial: 4E3AE44CAC9515DFE163C902F0099BFE0F2D8CAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:54:32 +0000 Manifest this update: Tue 12 May 2026 18:49:32 +0000 Manifest next update: Wed 13 May 2026 19:56:32 +0000 Files and hashes: 1: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: Tg4cupk2DXjSvW5xjuL6mIy6JAE0QREMVdBvwDzs2pY=) 2: 045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl (hash: mME4RcBjiy7bdnzsm23SiqeLE8mHfSNMsR/3KhbHaNw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3a:e4:4c:ac:95:15:df:e1:63:c9:02:f0:09:9b:fe:0f:2d:8c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4 Validity Not Before: May 12 18:49:32 2026 GMT Not After : May 13 19:56:32 2026 GMT Subject: CN=E9DC9CBD28CB5B0710225E4EF66439F275CD3A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:9c:49:ac:04:e7:03:83:cd:62:dc:1b:97: 1b:c8:f5:45:d8:ab:88:6d:99:88:a0:b4:f3:45:bc: 4f:61:26:ec:6b:a0:30:c8:97:1d:40:f7:df:b5:a4: a4:a8:fd:16:00:ff:0c:73:71:a4:48:b8:30:10:8f: 1f:5a:7e:11:07:49:9f:52:ae:94:ef:ea:8a:77:2f: 44:c9:d7:67:3b:e7:16:f1:0f:ef:65:db:d0:c3:74: a9:0e:2b:cb:d9:e8:67:1e:ae:53:1f:2a:e2:7e:74: e6:1f:d7:8b:cc:89:2c:01:23:3c:bd:5f:9b:83:14: 5b:d0:8c:db:97:90:77:96:f8:cd:82:5e:bc:dc:72: 3f:64:a4:50:f5:01:ce:43:93:8d:5f:15:04:e9:4a: 63:3c:56:6b:ac:c0:54:a6:ee:7c:ce:75:e4:86:65: f4:19:c0:63:27:69:a5:50:31:b5:2c:9e:fb:86:47: a2:3d:a5:1a:29:0a:a7:c3:a3:ed:e8:37:72:c8:f5: 26:76:86:76:7a:dd:12:15:28:cf:e6:c0:a1:55:65: 6b:ef:8a:7e:ec:a8:2f:fe:7c:89:e3:69:19:94:f9: 54:27:9c:08:49:47:ab:e2:23:ea:9f:a0:a1:33:3b: 29:6d:52:e2:b0:3a:9b:ae:a7:92:da:9f:85:2e:7c: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DC:9C:BD:28:CB:5B:07:10:22:5E:4E:F6:64:39:F2:75:CD:3A:7C X509v3 Authority Key Identifier: keyid:04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:48:31:16:a3:89:27:39:2d:e5:00:f1:58:16:7f:63:7b:92: 2b:a7:53:56:40:64:03:65:36:02:77:16:e2:a1:cd:84:ff:f1: 09:24:41:9b:f0:07:ab:70:66:26:ab:79:1d:65:c7:2c:42:87: d3:4c:42:cd:a3:e9:3f:4d:94:46:a2:5f:3e:e7:77:91:16:e9: 9f:fa:43:cb:a1:aa:7c:aa:f0:93:6e:b0:72:3d:37:89:84:4d: 74:79:55:cb:17:8f:e4:10:4d:ba:25:c3:89:92:3c:3d:ee:d3: 9f:27:6c:f6:24:1d:50:fe:da:5e:58:b9:15:a6:74:86:05:f5: 7f:f5:b4:99:a4:4d:a4:b4:2f:78:fa:6c:98:e8:82:e5:2f:0f: 99:f9:b8:69:b9:5d:04:55:95:b3:cd:53:3d:96:09:55:c0:18: 27:58:39:ff:ad:a8:62:fc:02:36:19:69:80:60:fd:fd:3a:9d: 29:44:05:67:94:f4:82:3a:77:24:c3:34:8b:70:4b:42:eb:1e: c4:6e:4c:39:a8:24:50:b0:44:75:b1:8c:0f:8f:81:2b:29:76: f3:f6:dc:02:df:7b:24:01:fa:7a:78:6e:31:3c:b8:dc:91:51: 57:8c:c8:df:f1:51:1b:0b:11:1a:44:50:2f:53:71:ff:7c:96: c4:9e:21:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjrkTKyVFd/hY8kC8Amb/g8tjKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1RDlFNDZFRTZFNkJCRDJBRkVFNDc3OTY0QzZEOUJB OUJDMURENDAeFw0yNjA1MTIxODQ5MzJaFw0yNjA1MTMxOTU2MzJaMDMxMTAvBgNV BAMTKEU5REM5Q0JEMjhDQjVCMDcxMDIyNUU0RUY2NjQzOUYyNzVDRDNBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSZxJrATnA4PNYtwblxvI9UXY q4htmYigtPNFvE9hJuxroDDIlx1A99+1pKSo/RYA/wxzcaRIuDAQjx9afhEHSZ9S rpTv6op3L0TJ12c75xbxD+9l29DDdKkOK8vZ6GcerlMfKuJ+dOYf14vMiSwBIzy9 X5uDFFvQjNuXkHeW+M2CXrzccj9kpFD1Ac5Dk41fFQTpSmM8VmuswFSm7nzOdeSG ZfQZwGMnaaVQMbUsnvuGR6I9pRopCqfDo+3oN3LI9SZ2hnZ63RIVKM/mwKFVZWvv in7sqC/+fInjaRmU+VQnnAhJR6viI+qfoKEzOyltUuKwOpuup5Lan4UufDC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6dycvSjLWwcQIl5O9mQ58nXNOnwwHwYDVR0j BBgwFoAUBF2eRu5ua70q/uR3lkxtm6m8HdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzRmOWY5YTEtNGFkOC00OWNlLTlmYTktZDQ3NjU3M2FmNTBmLzAvMDQ1RDlFNDZF RTZFNkJCRDJBRkVFNDc3OTY0QzZEOUJBOUJDMURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDVEOUU0NkVFNkU2QkJEMkFGRUU0Nzc5NjRDNkQ5QkE5QkMx REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMDQ1RDlFNDZFRTZFNkJCRDJBRkVFNDc3OTY0QzZE OUJBOUJDMURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9IMRajiSc5LeUA8VgWf2N7kiunU1ZAZANl NgJ3FuKhzYT/8QkkQZvwB6twZiareR1lxyxCh9NMQs2j6T9NlEaiXz7nd5EW6Z/6 Q8uhqnyq8JNusHI9N4mETXR5VcsXj+QQTbolw4mSPD3u058nbPYkHVD+2l5YuRWm dIYF9X/1tJmkTaS0L3j6bJjoguUvD5n5uGm5XQRVlbPNUz2WCVXAGCdYOf+tqGL8 AjYZaYBg/f06nSlEBWeU9II6dyTDNItwS0LrHsRuTDmoJFCwRHWxjA+PgSspdvP2 3ALfeyQB+np4bjE8uNyRUVeMyN/xURsLERpEUC9Tcf98lsSeIa4= -----END CERTIFICATE-----Generated at Wed May 13 00:44:30 2026 by rpki-client