$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: SsCL5EXfLfjKzJvecErZfZw3QLrt0ETXPrDKxIEr87E= Subject key identifier: 32:90:E0:1A:CD:9D:B0:71:0C:C2:D3:74:9A:7B:1F:D8:26:96:BE:27 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 0228339C83DE03E2472A32138D6EFE3983921A5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 0249 Signing time: Sun 01 Mar 2026 07:51:44 +0000 Manifest this update: Sun 01 Mar 2026 07:46:44 +0000 Manifest next update: Wed 04 Mar 2026 18:57:44 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: b3zj6DshmARr2yCSBKbtihQkyOIQgR0R+A1H8sasFDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:28:33:9c:83:de:03:e2:47:2a:32:13:8d:6e:fe:39:83:92:1a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Mar 1 07:46:44 2026 GMT Not After : Mar 4 18:57:44 2026 GMT Subject: CN=3290E01ACD9DB0710CC2D3749A7B1FD82696BE27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:5f:0f:8c:1b:90:26:b8:14:00:73:89:61: fe:7f:f9:ba:82:01:80:41:ef:33:6b:2f:6b:ef:76: 0d:37:2b:0e:4a:01:f7:b1:ea:ff:74:03:2d:89:e3: ae:58:65:08:c8:64:5f:75:c8:23:86:00:cd:c9:15: 14:6a:20:53:7b:cf:00:37:98:48:84:4c:b2:4a:b0: 60:00:9f:77:5a:20:af:9f:93:51:e0:f7:1e:9b:38: c0:6e:e6:cc:cc:4d:0c:75:1c:ca:a7:d3:00:5d:a8: fd:dd:c3:a8:b5:5b:e1:8f:46:6b:f3:f7:d7:db:b3: 4d:3e:15:af:85:d9:72:e3:d5:90:02:9f:12:e7:78: 04:1b:67:9c:3e:26:a8:5b:96:e7:32:91:64:f8:27: 13:54:00:17:64:27:2c:25:b4:ec:2d:f8:c2:d5:e2: 1e:e5:0f:f8:e5:00:23:43:8e:77:4a:3d:ac:62:4d: fb:fc:b8:a4:5f:dc:8c:f8:d4:15:89:b2:31:9b:e3: ec:ab:9d:aa:e1:f0:2e:b3:72:af:b8:20:d2:dd:31: 30:ea:3d:25:5a:9b:0c:bd:2a:d5:a6:d8:fc:3b:83: 86:a3:5a:9b:eb:e5:d6:0d:70:c5:07:72:ba:9b:b6: 20:75:d2:db:31:b6:06:a1:75:8e:ff:33:17:68:94: 5e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:E0:1A:CD:9D:B0:71:0C:C2:D3:74:9A:7B:1F:D8:26:96:BE:27 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5c:c1:f7:ac:d1:71:f4:62:9a:74:b3:03:0e:74:18:62:2f: 8b:fb:1b:4d:33:2a:f8:3d:2b:df:4f:18:9d:95:86:8d:8b:a9: cf:75:98:f9:f4:84:36:b4:10:9e:19:d9:24:09:f1:9e:41:d4: a9:2a:63:c0:80:a9:e3:b7:43:eb:a9:ee:e4:d7:8a:ec:ab:40: 91:6b:3c:39:7b:04:76:34:ea:33:c7:45:66:4b:97:0a:5b:e8: fb:c2:df:c3:38:3e:c9:85:9d:af:90:cb:f0:48:04:6b:c9:85: 00:9d:0c:c7:08:3a:a6:27:18:f1:d2:ac:2c:b6:92:99:77:41: 2a:5d:93:07:75:3f:67:04:23:35:cf:bb:14:8c:b7:91:b7:65: c7:62:0e:59:61:ba:2e:c0:d0:2f:8b:41:b4:7a:ce:db:43:43: 9e:e5:3f:ac:aa:b2:79:19:0b:91:2f:2d:b7:25:bc:7c:21:21: 99:af:74:aa:df:58:76:f0:01:be:19:bc:df:26:e6:0d:60:13: 9c:6b:77:a9:f4:22:b8:84:03:65:b2:61:31:d5:79:7b:6a:46: f7:71:0e:09:f6:85:07:c6:bf:1d:91:0d:4e:86:3b:3e:2d:9e: 00:26:e6:fb:5b:44:4c:4d:41:c0:a8:e4:82:ac:cf:aa:d0:1b: eb:dc:0b:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAigznIPeA+JHKjITjW7+OYOSGl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNjAzMDEwNzQ2NDRaFw0yNjAzMDQxODU3NDRaMDMxMTAvBgNV BAMTKDMyOTBFMDFBQ0Q5REIwNzEwQ0MyRDM3NDlBN0IxRkQ4MjY5NkJFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfF8PjBuQJrgUAHOJYf5/+bqC AYBB7zNrL2vvdg03Kw5KAfex6v90Ay2J465YZQjIZF91yCOGAM3JFRRqIFN7zwA3 mEiETLJKsGAAn3daIK+fk1Hg9x6bOMBu5szMTQx1HMqn0wBdqP3dw6i1W+GPRmvz 99fbs00+Fa+F2XLj1ZACnxLneAQbZ5w+JqhblucykWT4JxNUABdkJywltOwt+MLV 4h7lD/jlACNDjndKPaxiTfv8uKRf3Iz41BWJsjGb4+yrnarh8C6zcq+4INLdMTDq PSVamwy9KtWm2Pw7g4ajWpvr5dYNcMUHcrqbtiB10tsxtgahdY7/MxdolF7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMpDgGs2dsHEMwtN0mnsf2CaWvicwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFcwfes0XH0Ypp0swMOdBhiL4v7G00zKvg9 K99PGJ2Vho2Lqc91mPn0hDa0EJ4Z2SQJ8Z5B1KkqY8CAqeO3Q+up7uTXiuyrQJFr PDl7BHY06jPHRWZLlwpb6PvC38M4PsmFna+Qy/BIBGvJhQCdDMcIOqYnGPHSrCy2 kpl3QSpdkwd1P2cEIzXPuxSMt5G3ZcdiDllhui7A0C+LQbR6zttDQ57lP6yqsnkZ C5EvLbclvHwhIZmvdKrfWHbwAb4ZvN8m5g1gE5xrd6n0IriEA2WyYTHVeXtqRvdx Dgn2hQfGvx2RDU6GOz4tngAm5vtbRExNQcCo5IKsz6rQG+vcC8w= -----END CERTIFICATE-----Generated at Mon Mar 2 02:41:16 2026 by rpki-client