
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
File: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft (raw, json)
Hash identifier: 9l2I0jkPooAqk/L0dhl/2Kh0j7wGPXDSeEewNYzimxE=
Subject key identifier: FE:47:AD:40:E5:02:A7:1A:8C:95:F2:B1:15:96:F8:03:AC:C1:FD:FB
Authority key identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC
Certificate issuer: /CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC
Certificate serial: 2E844069F09DC42FB3ACFAF209CB4CA112CEED4E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
Manifest number: C5
Signing time: Sat 26 Sep 2026 01:16:45 +0000
Manifest this update: Sat 26 Sep 2026 01:11:45 +0000
Manifest next update: Sun 27 Sep 2026 03:57:45 +0000
Files and hashes: 1: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: dmGHcD14vklK6CHGP2dwt3SoTbZEUdzxsUS+JroI8zo=)
2: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: YKOMJLKY4/MM+iRWpGbN1vcrCXvxf8SN7FOq1BH9gB4=)
3: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: O5uC/L29P8IATSFs7V00fPXENgiidDt4Krk5PawD2S0=)
4: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl (hash: na4fAYc1YSnHmR80H7uNS1HNAafJOVWyDY199RkuSuw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl
rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:84:40:69:f0:9d:c4:2f:b3:ac:fa:f2:09:cb:4c:a1:12:ce:ed:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC
Validity
Not Before: Sep 26 01:11:45 2026 GMT
Not After : Sep 27 03:57:45 2026 GMT
Subject: CN=FE47AD40E502A71A8C95F2B11596F803ACC1FDFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:18:09:e2:e5:41:e6:5c:17:92:d0:37:85:
b2:7e:46:6b:54:a0:0e:a8:39:66:5a:3d:2d:de:53:
51:3e:40:7c:05:cf:73:53:7f:8d:9a:26:ee:81:56:
c7:35:48:68:97:77:e1:cf:f7:cb:84:89:95:5b:2f:
09:f2:e8:23:c2:d5:5e:92:ad:33:cf:65:8b:c3:8a:
3b:2e:a2:34:5a:dd:7d:72:6f:b7:9c:e0:ee:3b:99:
13:22:57:ca:c0:fb:d8:76:c1:bc:34:19:38:02:28:
c0:e4:cd:85:61:3f:dc:0a:17:9e:9d:07:02:a3:14:
8f:07:39:aa:24:ac:a5:fd:58:bb:ca:2b:81:19:f6:
23:2b:6c:31:26:00:d2:47:b9:b3:c0:33:67:cc:a2:
d8:1a:75:1b:37:6e:14:89:9f:6f:cb:a5:7d:da:8a:
ec:8e:a3:4e:ca:fa:70:54:6d:4d:b9:da:26:e6:99:
58:b2:53:8d:3e:db:c7:dc:33:62:a2:ba:8d:a7:ef:
39:d7:ef:29:3d:85:11:f1:13:11:8f:56:39:03:e1:
0c:47:a9:61:c1:5f:d9:df:86:dc:cd:56:d9:be:d7:
00:55:05:58:a6:8d:ce:7c:11:b8:c4:50:3e:83:92:
5a:be:45:4b:ca:67:1d:a6:61:a6:39:18:fb:6b:15:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:AD:40:E5:02:A7:1A:8C:95:F2:B1:15:96:F8:03:AC:C1:FD:FB
X509v3 Authority Key Identifier:
keyid:45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cf:ae:ef:81:0c:5f:bd:46:f7:81:7b:30:74:4d:d3:42:b1:
50:21:9d:46:6e:6f:6b:18:7e:3d:30:ea:fb:c3:0b:c1:e0:52:
5c:6e:9b:b0:23:f2:1c:c2:38:6b:63:32:ad:76:72:50:4a:13:
5a:57:54:b3:6c:1b:3f:ab:fe:79:56:50:cc:a9:ec:50:8c:5e:
63:c5:a4:bf:8b:3b:c5:d2:2a:b3:aa:59:83:3b:4f:b0:f0:63:
db:61:c8:78:7a:76:2f:6f:53:7b:17:bd:b3:5e:99:0f:e6:be:
b9:fa:d8:2e:f1:07:a5:ea:34:f6:36:53:22:05:2c:21:97:05:
7d:b9:d9:a8:cd:df:e6:0d:d8:c8:64:57:b0:9d:c1:9b:04:cb:
8c:02:b0:c1:c5:7d:c9:68:4b:7a:14:2b:71:c5:7a:5e:8a:a4:
b9:60:36:b6:26:ee:2d:b3:78:b7:30:3b:76:67:cc:0e:b8:1f:
96:d4:4c:dd:5f:ee:8a:73:b3:2b:a7:94:6e:c8:db:5c:80:8e:
35:c9:5b:15:61:d4:58:4a:23:03:73:7c:3b:66:aa:a9:ac:b6:
ee:32:b5:7d:2e:09:5b:94:5e:90:db:ce:ad:0d:47:91:4e:61:
eb:6d:4b:af:b2:3f:69:ac:25:18:ba:58:96:99:2c:ef:3d:36:
ea:91:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:48:27 2026 by rpki-client