$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft File: C45A558750D6CF5BE02532DDE80326AEF5012912.mft (raw, json) Hash identifier: QcMi9vatmDnlLgXKGXkpMBA4hIxHv1iKGgk4ewLXJiE= Subject key identifier: A9:4E:AB:F1:AD:CF:DE:37:E5:16:F7:33:53:DE:FD:8A:A6:FD:CE:34 Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Certificate issuer: /CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Certificate serial: 7219BC5C6549CB5C58446E03E9417D693F865012 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft Manifest number: 03D9 Signing time: Wed 15 Apr 2026 15:21:26 +0000 Manifest this update: Wed 15 Apr 2026 15:16:26 +0000 Manifest next update: Sat 18 Apr 2026 21:25:26 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: a+wMArmXBN5Q5BwSH4uSiBpq8In9MmU3oywpm7TpyrM=) 2: C45A558750D6CF5BE02532DDE80326AEF5012912.crl (hash: /tQBXuR5pY5gUTWGK8ZvlGtqLiHPJizTUimZjxrPJmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:19:bc:5c:65:49:cb:5c:58:44:6e:03:e9:41:7d:69:3f:86:50:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Validity Not Before: Apr 15 15:16:26 2026 GMT Not After : Apr 18 21:25:26 2026 GMT Subject: CN=A94EABF1ADCFDE37E516F73353DEFD8AA6FDCE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5f:05:b4:55:fa:9a:03:0c:6d:9e:eb:c3:69: 41:da:85:88:fc:2c:47:fd:42:89:cf:67:24:76:6e: d2:e8:44:e9:75:72:f1:07:cd:12:4a:1c:1a:f4:2c: 82:3c:59:ca:94:50:c1:5c:22:53:6e:ad:17:b4:80: 78:43:3a:93:c5:ff:bb:37:c4:59:0f:ba:26:ac:7c: 06:c6:a6:91:e2:f1:29:b7:eb:f8:13:78:c2:92:b9: 90:de:c2:ef:76:81:9a:2f:fd:5c:a5:0a:63:3d:28: e1:2e:13:c5:08:91:a8:32:24:74:e9:b8:6c:dc:7b: bb:77:43:58:97:70:ad:02:1a:ba:76:5e:a2:3b:8d: 88:ac:d7:7b:06:89:ff:00:ea:fb:6f:f3:56:48:2a: 45:3d:27:0d:ec:72:aa:d3:39:f9:8f:f2:54:46:e1: fa:e0:8a:22:d8:98:ed:0d:15:8e:5b:d1:e1:00:49: 41:1c:31:d1:63:54:0e:bc:44:0f:e1:22:b2:6d:e1: 28:76:f6:62:d8:3b:f8:fb:d1:5f:94:64:6d:c5:15: 48:d8:aa:a2:f3:f1:a6:08:3d:97:2b:56:97:d7:9e: 87:32:f0:96:de:64:b0:e0:36:71:8e:a0:6e:93:4d: 1c:be:c0:f4:66:63:ec:b3:a3:77:8d:7a:3b:96:92: a2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4E:AB:F1:AD:CF:DE:37:E5:16:F7:33:53:DE:FD:8A:A6:FD:CE:34 X509v3 Authority Key Identifier: keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:57:21:d8:c5:00:8e:40:c8:f8:48:d6:e0:c1:36:82:09:f1: 63:bd:92:f6:ec:77:af:b2:b3:69:a0:57:22:49:49:98:8a:b7: 50:0b:f6:d1:df:1b:93:be:5d:0c:c9:eb:c4:94:5e:53:17:5e: ca:1e:04:37:ed:79:a6:3c:ce:cc:22:e2:18:ee:22:f5:2c:71: 7f:3d:61:23:dc:ff:a1:1b:05:a0:08:88:76:c7:0d:76:6b:c9: 59:37:a5:87:8c:32:0e:27:56:32:04:00:ea:a6:fd:21:47:92: 47:75:18:c0:e8:b4:54:e0:67:83:d7:6a:1b:3d:4b:92:ca:f7: 75:6e:3b:43:d0:77:7c:08:89:53:9a:23:c2:c0:42:1d:a1:e3: 96:d3:78:a1:1a:2e:01:f3:bf:49:12:b8:04:68:6d:d5:51:e5: 84:d3:ab:23:14:4c:1d:d8:2e:7d:f5:0d:0d:45:24:5f:74:32: 84:aa:2e:1b:f9:5b:87:6b:72:91:e7:f8:5f:53:37:28:5d:da: 5a:2f:eb:31:6e:1a:0a:2d:2a:1a:73:9f:25:02:6d:1a:21:b0: 99:94:07:25:9a:e3:5d:14:9c:d9:65:80:b4:6e:0a:e5:55:3e: 57:0b:e1:4e:1c:6c:c1:1c:f0:07:d7:cd:30:75:8c:42:c0:da: a5:f1:53:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchm8XGVJy1xYRG4D6UF9aT+GUBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVG NTAxMjkxMjAeFw0yNjA0MTUxNTE2MjZaFw0yNjA0MTgyMTI1MjZaMDMxMTAvBgNV BAMTKEE5NEVBQkYxQURDRkRFMzdFNTE2RjczMzUzREVGRDhBQTZGRENFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoXwW0VfqaAwxtnuvDaUHahYj8 LEf9QonPZyR2btLoROl1cvEHzRJKHBr0LII8WcqUUMFcIlNurRe0gHhDOpPF/7s3 xFkPuiasfAbGppHi8Sm36/gTeMKSuZDewu92gZov/VylCmM9KOEuE8UIkagyJHTp uGzce7t3Q1iXcK0CGrp2XqI7jYis13sGif8A6vtv81ZIKkU9Jw3scqrTOfmP8lRG 4frgiiLYmO0NFY5b0eEASUEcMdFjVA68RA/hIrJt4Sh29mLYO/j70V+UZG3FFUjY qqLz8aYIPZcrVpfXnocy8JbeZLDgNnGOoG6TTRy+wPRmY+yzo3eNejuWkqJdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqU6r8a3P3jflFvczU979iqb9zjQwHwYDVR0j BBgwFoAUxFpVh1DWz1vgJTLd6AMmrvUBKRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC9DNDVBNTU4NzUw RDZDRjVCRTAyNTMyRERFODAzMjZBRUY1MDEyOTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVGNTAx MjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2 QUVGNTAxMjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhXIdjFAI5AyPhI1uDBNoIJ8WO9kvbsd6+y s2mgVyJJSZiKt1AL9tHfG5O+XQzJ68SUXlMXXsoeBDfteaY8zswi4hjuIvUscX89 YSPc/6EbBaAIiHbHDXZryVk3pYeMMg4nVjIEAOqm/SFHkkd1GMDotFTgZ4PXahs9 S5LK93VuO0PQd3wIiVOaI8LAQh2h45bTeKEaLgHzv0kSuARobdVR5YTTqyMUTB3Y Ln31DQ1FJF90MoSqLhv5W4drcpHn+F9TNyhd2lov6zFuGgotKhpznyUCbRohsJmU ByWa410UnNllgLRuCuVVPlcL4U4cbMEc8AfXzTB1jELA2qXxU9k= -----END CERTIFICATE-----Generated at Fri Apr 17 19:40:33 2026 by rpki-client