$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: QK2zEV6U6mcbIYVqZDi5pKbmSN7NldtsukcWIdmLLT4= Subject key identifier: 4A:A2:C9:51:84:25:03:1C:81:BB:6C:DE:1B:E5:C0:48:53:56:31:20 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 5AA052BE0C6D05FA2FBA21CA24F280AACFA24214 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 0556 Signing time: Sun 01 Mar 2026 16:01:03 +0000 Manifest this update: Sun 01 Mar 2026 15:56:03 +0000 Manifest next update: Wed 04 Mar 2026 21:54:03 +0000 Files and hashes: 1: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) 2: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: YHN6qL4HNUIXko+aKNyn9Q8mQ0HlzVZ7VxUwRhvUP0Q=) 3: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: I96oER7I4SAnLTmFgz/UHfKBBJtYNAYhsP/QV5HEkGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a0:52:be:0c:6d:05:fa:2f:ba:21:ca:24:f2:80:aa:cf:a2:42:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Mar 1 15:56:03 2026 GMT Not After : Mar 4 21:54:03 2026 GMT Subject: CN=4AA2C9518425031C81BB6CDE1BE5C04853563120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:99:e6:7b:d0:c2:1c:86:f9:8e:13:ee:95: 9b:f7:14:47:02:5f:90:56:6e:2b:d7:9b:02:56:1c: ea:29:9d:8d:8f:8a:b0:88:25:cc:99:58:5a:96:91: 54:b4:aa:4a:e7:83:c7:81:d5:4a:36:b4:c2:88:86: e0:6c:5b:cc:48:8b:4b:d4:ce:1f:51:05:01:f5:69: a0:a3:67:4e:fe:a5:c1:d2:a1:ec:41:90:a3:80:44: c6:70:2c:c1:77:ca:ce:04:97:ab:6c:62:23:5c:7b: 93:3f:a4:3f:9c:73:c1:61:8c:56:cc:fa:ff:a8:5a: 87:b1:6e:5d:81:82:05:14:55:28:1c:7c:e7:97:0a: da:07:3b:c4:3a:82:16:60:9f:7f:01:dc:b9:a1:ac: b2:2d:a9:fe:f0:5c:d1:3e:10:08:21:a3:25:1e:6f: d4:4b:5a:da:50:f7:6a:0d:fe:22:5c:cb:52:17:a4: 33:d1:2f:ce:76:2c:08:2b:f9:03:63:6e:2e:34:84: fe:c7:57:b7:16:cf:71:97:96:82:5c:b3:4c:45:1b: b3:74:8c:41:65:50:25:a6:78:7e:2f:de:5b:76:f2: 70:d7:db:65:a7:0f:d0:b3:c9:23:67:fc:f8:bb:85: 9f:ab:b4:f6:a6:26:f1:33:49:cd:34:09:11:85:32: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A2:C9:51:84:25:03:1C:81:BB:6C:DE:1B:E5:C0:48:53:56:31:20 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:99:cf:af:17:6a:1f:ca:0f:71:53:ff:3c:11:9c:8d:cc:38: dd:59:4e:f3:03:74:3e:bc:2c:84:01:9c:e4:84:b4:f2:32:c4: c9:8f:33:63:d2:62:a2:a4:37:db:c5:b0:1d:20:b1:f5:8e:c2: 14:11:74:43:77:64:22:c6:de:e0:77:18:5b:5d:8e:01:7e:89: a2:70:73:ad:56:ec:d4:50:e3:d5:d9:0c:7a:49:f9:14:c6:7a: 80:02:91:65:bf:c8:91:80:64:4b:eb:50:35:ec:a9:de:36:01: 44:d0:d7:59:a3:4d:44:c9:86:63:ea:66:45:29:44:ca:d2:0c: 2f:97:0b:1e:62:db:4a:b4:20:ab:e7:0f:13:34:90:cc:e7:51: 1b:8b:ee:c1:64:05:7e:e1:83:04:ff:21:5f:9f:74:b8:70:61: d5:81:87:59:8c:f5:67:91:0a:e3:24:6d:e6:3e:01:14:fe:25: 07:25:64:8d:76:40:91:aa:37:a0:51:cb:16:95:44:5d:42:6a: c1:ab:f0:91:25:e6:e3:72:71:b9:4a:3b:03:6e:15:98:18:17: 88:15:98:7e:6e:25:24:b1:36:74:01:51:fb:8b:10:0c:3e:42: 42:5b:c4:c6:b8:fa:a1:b4:50:b4:72:3f:84:70:2f:0d:b1:05: 0a:6c:82:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqBSvgxtBfovuiHKJPKAqs+iQhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNjAzMDExNTU2MDNaFw0yNjAzMDQyMTU0MDNaMDMxMTAvBgNV BAMTKDRBQTJDOTUxODQyNTAzMUM4MUJCNkNERTFCRTVDMDQ4NTM1NjMxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPJnme9DCHIb5jhPulZv3FEcC X5BWbivXmwJWHOopnY2PirCIJcyZWFqWkVS0qkrng8eB1Uo2tMKIhuBsW8xIi0vU zh9RBQH1aaCjZ07+pcHSoexBkKOARMZwLMF3ys4El6tsYiNce5M/pD+cc8FhjFbM +v+oWoexbl2BggUUVSgcfOeXCtoHO8Q6ghZgn38B3LmhrLItqf7wXNE+EAghoyUe b9RLWtpQ92oN/iJcy1IXpDPRL852LAgr+QNjbi40hP7HV7cWz3GXloJcs0xFG7N0 jEFlUCWmeH4v3lt28nDX22WnD9CzySNn/Pi7hZ+rtPamJvEzSc00CRGFMms/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSqLJUYQlAxyBu2zeG+XASFNWMSAwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeZz68Xah/KD3FT/zwRnI3MON1ZTvMDdD68 LIQBnOSEtPIyxMmPM2PSYqKkN9vFsB0gsfWOwhQRdEN3ZCLG3uB3GFtdjgF+iaJw c61W7NRQ49XZDHpJ+RTGeoACkWW/yJGAZEvrUDXsqd42AUTQ11mjTUTJhmPqZkUp RMrSDC+XCx5i20q0IKvnDxM0kMznURuL7sFkBX7hgwT/IV+fdLhwYdWBh1mM9WeR CuMkbeY+ART+JQclZI12QJGqN6BRyxaVRF1CasGr8JEl5uNycblKOwNuFZgYF4gV mH5uJSSxNnQBUfuLEAw+QkJbxMa4+qG0ULRyP4RwLw2xBQpsglQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:15 2026 by rpki-client