$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: SHwxduu0gP1LGaZZpb//XIqtCcAO67AjCQQutISmDtE= Subject key identifier: 28:6C:ED:63:CB:E3:F8:1C:28:02:DF:CF:BE:B1:3B:25:53:81:19:B6 Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 372E11C3AB8B73C011543EE58562194B32359019 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 027E Signing time: Sat 28 Feb 2026 13:42:35 +0000 Manifest this update: Sat 28 Feb 2026 13:37:35 +0000 Manifest next update: Tue 03 Mar 2026 18:25:35 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: yrRcMgeLnLzRqCMS4woXK4gQGqXy4IsT5gjHCbpSj7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2e:11:c3:ab:8b:73:c0:11:54:3e:e5:85:62:19:4b:32:35:90:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Feb 28 13:37:35 2026 GMT Not After : Mar 3 18:25:35 2026 GMT Subject: CN=286CED63CBE3F81C2802DFCFBEB13B25538119B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:bc:7a:a3:3f:d7:1e:a1:9f:63:21:f0:6c: 6d:7e:b4:5e:58:30:07:a1:41:51:fd:0f:25:65:bc: d4:61:41:75:7a:4d:fb:94:0f:74:24:9e:dc:06:cc: 53:fa:6c:e3:f0:d6:b5:64:2a:5c:79:a3:97:17:6e: 36:15:a6:a7:30:3b:bd:00:52:f9:05:b6:0c:34:dc: 71:fc:d1:3f:9d:a1:36:30:f6:57:eb:16:85:63:75: ff:21:77:e1:49:82:36:f7:63:e2:05:fe:60:54:01: 50:4c:c6:11:05:06:6f:25:1b:8a:1a:6f:3e:2c:a1: 3f:89:69:39:f9:ab:4a:de:28:b9:56:7b:3f:07:fb: 11:af:5b:41:e7:a4:06:d7:33:ba:0b:eb:99:25:00: 64:70:5f:06:d9:25:27:76:8a:62:8d:9b:18:6e:ff: 46:bb:bf:02:06:78:cd:a4:aa:1a:e0:2e:50:7c:a2: a4:f3:7f:4b:b8:44:a7:c8:51:4a:b2:62:d7:c7:03: a7:d7:8d:db:45:9c:ec:b8:29:a8:cf:6b:ef:77:59: 96:7d:07:62:36:0d:a6:0b:d9:62:ff:7f:e3:80:2c: 9b:18:88:10:2a:64:fd:5f:a9:75:8b:32:cc:4e:a0: 87:ff:38:71:05:92:cc:d0:f1:31:56:c5:70:31:aa: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6C:ED:63:CB:E3:F8:1C:28:02:DF:CF:BE:B1:3B:25:53:81:19:B6 X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b5:f8:3c:24:35:34:ae:f6:f1:29:7e:fb:49:df:ff:68:d1: 96:69:f4:0a:f6:cd:1d:e2:c9:11:a3:9c:32:ed:d3:c1:12:fe: 8d:03:0b:18:52:95:29:6b:bf:cf:ea:11:0e:e5:4c:0d:92:54: 2d:b9:31:c8:e7:e1:6e:75:80:ba:f1:a6:bc:6d:aa:2b:fe:86: ca:91:cf:d5:91:21:eb:ec:e3:2d:f9:6a:32:f4:d4:ce:3f:43: 8a:f2:1d:cc:4e:25:9a:79:9c:43:98:e4:74:65:96:0a:29:24: 46:a3:0e:d3:2a:7a:26:ec:35:37:24:66:12:76:d0:25:e9:b5: e5:ac:f5:57:60:fb:48:f2:6a:23:28:75:1f:97:2f:b1:fe:c6: fc:08:8e:fb:84:99:20:d8:72:b4:d5:49:74:98:56:2e:60:bd: ae:99:7b:2c:29:33:05:42:87:cc:52:e9:85:e3:7f:97:32:48: 55:17:ed:35:b6:81:c4:54:e6:dd:4c:6c:47:1a:62:cd:ac:98: 70:f5:83:d3:09:1f:8f:7f:97:7b:5e:1f:e5:7e:cd:d7:37:10: a3:e9:fb:22:0a:ee:e4:c7:31:91:f6:4d:51:43:ac:3b:6a:8f: 9b:90:3d:aa:23:11:ad:05:28:ef:0d:b6:51:b6:89:fa:c9:6a: 9f:43:c2:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNy4Rw6uLc8ARVD7lhWIZSzI1kBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNjAyMjgxMzM3MzVaFw0yNjAzMDMxODI1MzVaMDMxMTAvBgNV BAMTKDI4NkNFRDYzQ0JFM0Y4MUMyODAyREZDRkJFQjEzQjI1NTM4MTE5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCLx6oz/XHqGfYyHwbG1+tF5Y MAehQVH9DyVlvNRhQXV6TfuUD3QkntwGzFP6bOPw1rVkKlx5o5cXbjYVpqcwO70A UvkFtgw03HH80T+doTYw9lfrFoVjdf8hd+FJgjb3Y+IF/mBUAVBMxhEFBm8lG4oa bz4soT+JaTn5q0reKLlWez8H+xGvW0HnpAbXM7oL65klAGRwXwbZJSd2imKNmxhu /0a7vwIGeM2kqhrgLlB8oqTzf0u4RKfIUUqyYtfHA6fXjdtFnOy4KajPa+93WZZ9 B2I2DaYL2WL/f+OALJsYiBAqZP1fqXWLMsxOoIf/OHEFkszQ8TFWxXAxqlprAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGztY8vj+BwoAt/PvrE7JVOBGbYwHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu1+DwkNTSu9vEpfvtJ3/9o0ZZp9Ar2zR3i yRGjnDLt08ES/o0DCxhSlSlrv8/qEQ7lTA2SVC25Mcjn4W51gLrxprxtqiv+hsqR z9WRIevs4y35ajL01M4/Q4ryHcxOJZp5nEOY5HRllgopJEajDtMqeibsNTckZhJ2 0CXpteWs9Vdg+0jyaiModR+XL7H+xvwIjvuEmSDYcrTVSXSYVi5gva6ZeywpMwVC h8xS6YXjf5cySFUX7TW2gcRU5t1MbEcaYs2smHD1g9MJH49/l3teH+V+zdc3EKPp +yIK7uTHMZH2TVFDrDtqj5uQPaojEa0FKO8NtlG2ifrJap9Dwl8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:15:58 2026 by rpki-client