
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
File: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft (raw, json)
Hash identifier: AWh6CLZJdZTDb0kllq8GYeAVkfCCd/ve/i5MChGp3U8=
Subject key identifier: 3C:1A:7E:1A:61:90:1B:07:51:43:E0:99:6D:52:5F:B9:D1:59:D5:D2
Authority key identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC
Certificate issuer: /CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC
Certificate serial: 05488EA3EBBFE6FA61E3101E40FD78A711BD9DE1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:34:19 +0000
Manifest this update: Tue 12 May 2026 21:29:19 +0000
Manifest next update: Thu 14 May 2026 00:02:19 +0000
Files and hashes: 1: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: O5uC/L29P8IATSFs7V00fPXENgiidDt4Krk5PawD2S0=)
2: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl (hash: QmMZmn+o/u9z3oiLUQyQEBRCcYXxp/U01RnQI+gTYms=)
3: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: YKOMJLKY4/MM+iRWpGbN1vcrCXvxf8SN7FOq1BH9gB4=)
4: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: dmGHcD14vklK6CHGP2dwt3SoTbZEUdzxsUS+JroI8zo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl
rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:48:8e:a3:eb:bf:e6:fa:61:e3:10:1e:40:fd:78:a7:11:bd:9d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC
Validity
Not Before: May 12 21:29:19 2026 GMT
Not After : May 14 00:02:19 2026 GMT
Subject: CN=3C1A7E1A61901B075143E0996D525FB9D159D5D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:12:c3:5e:9b:0d:8d:5d:58:91:7c:ec:e6:
fa:a8:f7:3e:d3:cf:52:44:88:0d:8d:b3:57:fc:81:
1f:90:41:c0:0d:9e:4e:8b:87:65:cb:75:53:97:8b:
2e:f9:01:32:94:f1:61:40:78:20:ad:39:f4:ad:b2:
c2:42:ad:e4:0c:a2:04:53:46:cd:2a:21:ff:ba:f0:
e9:e6:75:e1:d3:09:bf:a6:d5:4d:60:0b:f1:70:b6:
16:ab:78:05:2e:2e:25:01:f9:46:b0:08:ba:ab:bc:
56:a2:44:a6:95:3e:a0:6d:86:10:27:e7:a4:32:41:
12:32:12:88:54:41:a4:f2:87:16:7f:49:bd:b9:8a:
87:52:0b:da:04:ed:1f:e8:7c:8c:6d:4d:69:55:fd:
40:c4:df:85:dc:9c:71:9a:e0:7a:03:88:e0:5d:fd:
04:74:12:a7:97:54:86:60:27:0b:1f:76:0a:24:61:
3c:b7:e8:0d:a5:cc:fb:66:d6:04:1a:8f:8a:87:9e:
08:0b:ce:d8:e6:45:c5:a5:8a:48:63:79:82:30:ff:
8a:0f:06:81:5c:29:f7:31:f6:7b:56:24:47:87:d3:
e4:fb:14:a7:69:d7:ab:bf:52:9b:b3:23:0c:f2:f1:
76:2e:69:3c:9c:42:04:aa:60:4f:37:8d:69:25:e4:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:7E:1A:61:90:1B:07:51:43:E0:99:6D:52:5F:B9:D1:59:D5:D2
X509v3 Authority Key Identifier:
keyid:45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2c:d2:04:89:dd:a7:3e:55:60:96:6e:06:fc:bc:1c:fb:86:
61:fc:fb:a2:e3:2a:be:42:9e:d1:ae:a4:89:92:6d:0a:2b:02:
2d:b6:fc:23:58:30:cf:6c:94:e0:d3:bc:f3:c5:bd:42:e9:8f:
f0:db:fc:dd:f9:da:19:4c:72:b2:00:88:85:5a:ee:e3:bf:97:
5a:89:2a:1f:c7:be:7f:08:8e:7d:ff:f4:15:75:8c:0b:9d:7c:
97:56:73:70:58:bc:34:8e:05:68:9e:ca:0c:e2:24:b2:e3:67:
df:18:a2:05:e2:f8:93:f8:62:f4:25:86:b0:5d:8d:20:1b:64:
ab:c0:23:14:8b:84:10:d7:8e:60:bc:f0:97:c4:33:60:09:1b:
68:ac:75:95:ca:d7:cc:ec:ee:ff:d5:d0:a9:e0:8e:1d:42:47:
6a:5f:d2:ba:51:18:75:23:15:71:8d:a9:07:3a:cb:f1:4c:15:
e2:69:bd:1a:1a:d2:35:c1:76:9c:10:0c:9c:b4:2b:bf:80:83:
4a:12:d0:99:e7:6b:00:d9:e3:18:80:09:c5:2d:cb:b3:12:bf:
0f:91:98:9d:ec:59:3a:60:f2:56:f5:c6:fc:16:cf:20:7c:9c:
be:0d:9b:23:5f:c4:4d:50:11:cf:ce:04:67:e7:ef:3e:11:46:
cb:1c:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:13 2026 by rpki-client