$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: oc1WACm0TgQX4w3QG94/cwtO8F8oAGUZs2rVt3PVTl8= Subject key identifier: 86:76:10:06:7D:23:45:AB:EE:DE:38:2E:4A:E5:B4:8E:7A:4F:7E:9E Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 64019BE46B642DA76F504B9C887496CB3E7EF070 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 0295 Signing time: Fri 17 Apr 2026 12:01:13 +0000 Manifest this update: Fri 17 Apr 2026 11:56:13 +0000 Manifest next update: Mon 20 Apr 2026 19:05:13 +0000 Files and hashes: 1: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: xLlUVjFI+FhsdfKLoxr1eu8p3gZYwK9hEI61aInKZ/k=) 2: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: cguq4oNr1TGal57sKoh6yP2CeznnB5jHxZL1G1cEH1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:01:9b:e4:6b:64:2d:a7:6f:50:4b:9c:88:74:96:cb:3e:7e:f0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Apr 17 11:56:13 2026 GMT Not After : Apr 20 19:05:13 2026 GMT Subject: CN=867610067D2345ABEEDE382E4AE5B48E7A4F7E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:81:73:e3:e5:53:dc:a9:86:b3:4a:da:2e: 54:b2:87:86:5b:ce:84:5d:a4:e0:15:3d:c4:0f:47: 8e:d3:3f:6e:5d:af:10:2b:79:3e:3d:ad:91:1d:43: f5:de:4f:d8:1e:32:aa:5f:0e:08:d6:7f:11:4f:ac: 4d:c3:31:c2:30:68:c0:99:cc:b2:66:07:81:3c:68: 33:26:45:77:42:10:27:ed:84:7e:c4:c6:64:82:b6: 44:4e:c0:ad:ea:ab:71:5a:e1:8c:d7:da:dc:9b:af: 31:8a:5b:be:cc:29:0c:c7:0a:9e:17:bf:ad:cc:ef: 86:bc:c6:a9:2d:29:b5:27:02:56:08:90:0e:5d:a9: 62:68:09:f7:a0:8f:82:d5:19:d7:b6:ce:af:8b:a7: 23:55:16:5e:9f:b4:ed:97:14:b4:36:d7:c1:6c:ba: 89:2b:0a:be:e9:23:7d:63:96:7d:a9:af:35:6c:dd: 3a:0b:a1:9d:eb:25:ab:2f:d6:63:ca:f8:59:37:98: d7:3e:30:24:89:d8:18:e5:82:09:cb:9d:e0:2f:e5: 46:64:22:49:71:b6:f5:9b:f3:b0:2d:87:e8:90:71: 39:72:23:9b:37:63:f4:8e:d9:99:e2:a8:da:8f:1d: 2d:5c:d6:5b:42:98:f1:7c:0e:d9:96:aa:4b:6a:cc: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:76:10:06:7D:23:45:AB:EE:DE:38:2E:4A:E5:B4:8E:7A:4F:7E:9E X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:03:53:7c:fe:c1:f8:1d:ec:80:84:ee:dc:2a:b2:b6:47:3f: 9b:96:b8:f5:16:7a:a3:c8:0a:3a:4d:3f:41:2f:37:e7:d8:85: bd:73:67:34:16:61:27:0d:8f:f3:0d:4e:ed:25:80:b4:98:05: ff:e9:a6:a5:9b:97:f2:e0:0a:24:24:ee:62:9b:d6:95:45:bc: 24:d4:36:1a:8c:45:f9:c2:c8:8b:c8:79:59:33:2b:e0:52:c2: a4:de:7d:9e:72:da:56:ad:31:8d:82:04:00:41:e8:67:d3:a1: f0:c9:0b:82:22:a1:1f:d2:a2:32:a1:27:bf:ef:4d:57:90:a5: 1e:92:77:66:4f:22:bc:f5:e0:60:fc:93:79:d7:e2:5a:01:6e: 68:75:56:81:8c:ee:18:60:8f:5b:9f:98:31:c6:a5:62:f3:04: f4:59:98:a5:9f:8c:4b:ab:61:9d:3d:d0:fd:8b:bc:38:71:26: 01:bf:fb:84:74:e7:7c:da:ee:98:ae:9e:40:d2:e3:c4:e3:75: 18:bd:63:d9:7f:a0:ac:2d:37:33:4d:b7:20:67:33:e0:49:ac: 7c:a4:39:b5:3e:a9:a2:3d:ae:c2:2f:b2:4d:b5:fc:37:d4:40: 99:ba:d8:d9:83:70:e9:8e:f5:27:7f:66:d5:5a:79:fd:43:93: 06:37:4a:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAGb5GtkLadvUEuciHSWyz5+8HAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNjA0MTcxMTU2MTNaFw0yNjA0MjAxOTA1MTNaMDMxMTAvBgNV BAMTKDg2NzYxMDA2N0QyMzQ1QUJFRURFMzgyRTRBRTVCNDhFN0E0RjdFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLIFz4+VT3KmGs0raLlSyh4Zb zoRdpOAVPcQPR47TP25drxAreT49rZEdQ/XeT9geMqpfDgjWfxFPrE3DMcIwaMCZ zLJmB4E8aDMmRXdCECfthH7ExmSCtkROwK3qq3Fa4YzX2tybrzGKW77MKQzHCp4X v63M74a8xqktKbUnAlYIkA5dqWJoCfegj4LVGde2zq+LpyNVFl6ftO2XFLQ218Fs uokrCr7pI31jln2przVs3ToLoZ3rJasv1mPK+Fk3mNc+MCSJ2BjlggnLneAv5UZk IklxtvWb87Ath+iQcTlyI5s3Y/SO2ZniqNqPHS1c1ltCmPF8DtmWqktqzNSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhnYQBn0jRavu3jguSuW0jnpPfp4wHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoDU3z+wfgd7ICE7twqsrZHP5uWuPUWeqPI CjpNP0EvN+fYhb1zZzQWYScNj/MNTu0lgLSYBf/ppqWbl/LgCiQk7mKb1pVFvCTU NhqMRfnCyIvIeVkzK+BSwqTefZ5y2latMY2CBABB6GfTofDJC4IioR/SojKhJ7/v TVeQpR6Sd2ZPIrz14GD8k3nX4loBbmh1VoGM7hhgj1ufmDHGpWLzBPRZmKWfjEur YZ090P2LvDhxJgG/+4R053za7piunkDS48TjdRi9Y9l/oKwtNzNNtyBnM+BJrHyk ObU+qaI9rsIvsk21/DfUQJm62NmDcOmO9Sd/ZtVaef1DkwY3SoU= -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:27 2026 by rpki-client