$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: hGv96bOobmu1NGdOs7qEhUeltWQQySJrtHQuSll/gno= Subject key identifier: FD:60:3E:7F:EC:8D:5C:D5:16:BE:87:36:D5:95:C2:C2:0D:19:B5:CD Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 2106ED5B079B65E1EFD3FFF98F5E0EBF3236993D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 0293 Signing time: Sat 18 Apr 2026 09:52:43 +0000 Manifest this update: Sat 18 Apr 2026 09:47:43 +0000 Manifest next update: Tue 21 Apr 2026 12:00:43 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: CCGEHFJb65PCgV6H4+D+qqadB6EqKRCwLZ+SmcIMo6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:06:ed:5b:07:9b:65:e1:ef:d3:ff:f9:8f:5e:0e:bf:32:36:99:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Apr 18 09:47:43 2026 GMT Not After : Apr 21 12:00:43 2026 GMT Subject: CN=FD603E7FEC8D5CD516BE8736D595C2C20D19B5CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:f8:aa:f3:88:e1:60:18:c9:42:30:73:1a: 82:11:40:87:f9:bf:a7:fb:04:41:09:33:71:70:2c: 82:d4:de:db:51:96:5a:6d:96:f2:59:54:e9:5b:82: 18:b0:9e:9c:b0:a2:88:6c:5a:b0:9f:84:0f:e8:78: 71:b5:2e:79:93:b1:48:c3:9d:44:df:82:a2:ad:4e: 8a:89:d7:6d:e4:76:40:78:66:91:eb:a8:f9:5c:9c: 12:e3:cd:ab:28:9d:e3:86:8b:1f:9b:35:06:ae:2f: 95:49:6c:53:6b:fa:d4:c5:63:1c:5c:2e:70:b1:8f: b5:b2:05:ab:46:da:9e:e0:1e:0c:8a:c4:5b:75:fa: 08:47:e7:9f:5f:08:e3:23:c1:e5:c1:35:24:1a:a8: f9:77:28:a5:b3:df:5e:30:06:fb:68:41:d3:c4:aa: a0:9a:a8:87:fd:ad:d4:31:a9:f8:8e:eb:48:20:5a: 77:a5:ad:cb:6a:bd:92:c9:bc:73:df:cc:3b:bb:b5: bd:d6:35:43:f3:90:c6:9d:51:94:60:a0:c9:17:cb: 3f:47:52:96:7a:a2:80:a0:38:7e:08:f4:ee:52:17: a5:7d:3e:e2:f4:c4:62:b3:42:fe:25:41:a8:25:34: ef:cb:55:fd:93:78:9d:d1:56:81:87:a3:f9:8f:65: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:60:3E:7F:EC:8D:5C:D5:16:BE:87:36:D5:95:C2:C2:0D:19:B5:CD X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ce:e4:a8:5d:be:b8:18:a0:e8:a5:59:8c:52:05:30:18:8b: 5a:f7:cb:f5:95:7c:e4:71:e1:fb:86:cd:d8:b7:d5:c7:ec:e8: 1d:c9:7c:f1:f4:4c:70:fe:df:12:fc:49:5b:d4:c7:38:fd:93: 40:4b:40:4b:25:c5:82:b8:fc:46:7d:24:53:e0:85:e9:27:ae: 06:a0:53:b3:98:b5:57:d2:ab:ac:96:09:d5:2a:f6:39:d4:2b: 69:dd:80:fc:5b:d0:9e:73:71:55:54:1b:c6:1c:46:79:d1:5f: 0a:78:41:e0:0b:fb:5c:ab:5c:9c:1f:1b:fe:af:3d:63:f5:0f: 3d:09:ef:d1:cd:3d:0b:65:94:6e:af:1d:c6:6f:03:d2:36:d6: e1:dc:ac:10:0b:8e:73:77:27:42:64:02:3b:6f:79:b0:f7:3e: 25:2e:a9:c5:b2:48:a5:8f:64:14:8b:4f:bd:7f:09:22:1a:88: 06:e0:2f:79:06:37:2f:b0:71:3e:c6:1b:50:87:34:ea:f9:fe: cf:08:cc:1e:81:a4:22:92:af:ff:0f:08:cd:c8:56:2c:fd:3b: 24:ee:db:d8:28:e1:91:bc:d6:c0:1b:53:a8:59:6a:a7:df:cb: 7c:95:ef:b1:61:d8:da:16:f6:8e:b6:64:33:c1:c2:f2:10:b0: 6d:15:c2:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQbtWwebZeHv0//5j14OvzI2mT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNjA0MTgwOTQ3NDNaFw0yNjA0MjExMjAwNDNaMDMxMTAvBgNV BAMTKEZENjAzRTdGRUM4RDVDRDUxNkJFODczNkQ1OTVDMkMyMEQxOUI1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCviq84jhYBjJQjBzGoIRQIf5 v6f7BEEJM3FwLILU3ttRllptlvJZVOlbghiwnpywoohsWrCfhA/oeHG1LnmTsUjD nUTfgqKtToqJ123kdkB4ZpHrqPlcnBLjzasoneOGix+bNQauL5VJbFNr+tTFYxxc LnCxj7WyBatG2p7gHgyKxFt1+ghH559fCOMjweXBNSQaqPl3KKWz314wBvtoQdPE qqCaqIf9rdQxqfiO60ggWnelrctqvZLJvHPfzDu7tb3WNUPzkMadUZRgoMkXyz9H UpZ6ooCgOH4I9O5SF6V9PuL0xGKzQv4lQaglNO/LVf2TeJ3RVoGHo/mPZfkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/WA+f+yNXNUWvoc21ZXCwg0Ztc0wHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7O5KhdvrgYoOilWYxSBTAYi1r3y/WVfORx 4fuGzdi31cfs6B3JfPH0THD+3xL8SVvUxzj9k0BLQEslxYK4/EZ9JFPgheknrgag U7OYtVfSq6yWCdUq9jnUK2ndgPxb0J5zcVVUG8YcRnnRXwp4QeAL+1yrXJwfG/6v PWP1Dz0J79HNPQtllG6vHcZvA9I21uHcrBALjnN3J0JkAjtvebD3PiUuqcWySKWP ZBSLT71/CSIaiAbgL3kGNy+wcT7GG1CHNOr5/s8IzB6BpCKSr/8PCM3IViz9OyTu 29go4ZG81sAbU6hZaqffy3yV77Fh2NoW9o62ZDPBwvIQsG0Vwps= -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:12 2026 by rpki-client