$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft File: 45C9770C2C07C2696447FAA1E820E46170A3C56C.mft (raw, json) Hash identifier: yUXEzLcBTVeGNXK/OsAlWklhKEQ1wREQdeO4ZWK1WPo= Subject key identifier: 5E:6D:F7:BC:DA:8E:EC:00:00:2D:F4:76:73:17:D7:0B:70:29:D3:AD Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 16280246F1A40162203B7A77D5A1FAAFA0C089FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft Manifest number: 0311 Signing time: Wed 15 Apr 2026 17:40:49 +0000 Manifest this update: Wed 15 Apr 2026 17:35:49 +0000 Manifest next update: Sat 18 Apr 2026 23:23:49 +0000 Files and hashes: 1: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: pXWaAnAiDsjhVjMrMqsJ0d+NFEE6GHbDUnVNomzIFpY=) 2: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: vm5PhQ9OCf0FV3z/CHJ+RxKQHUnZeKsqWqWQwv0pY+4=) 3: 45C9770C2C07C2696447FAA1E820E46170A3C56C.crl (hash: epFmkZS1r8O8+NcJxiRmxZ97xvq2WREGuvI2W3nxYUc=) 4: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: cidgl2SIo3vuKAc4LvPzn48241T8Yqf3Lk4VBRTBdhc=) 5: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: eP5B4+66lNDZRwwB0EJUDL9Pn71RI/Oa3/zagGI4Izk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:28:02:46:f1:a4:01:62:20:3b:7a:77:d5:a1:fa:af:a0:c0:89:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Apr 15 17:35:49 2026 GMT Not After : Apr 18 23:23:49 2026 GMT Subject: CN=5E6DF7BCDA8EEC00002DF4767317D70B7029D3AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6a:5e:27:8e:bc:48:d9:8b:18:96:16:76:a3: 7d:1e:81:ab:71:90:79:3b:db:ee:13:00:c0:ff:48: a1:6b:e8:02:52:70:b3:50:8d:91:15:1a:e1:cf:d5: 5b:9f:6d:21:53:86:d6:00:e3:17:72:6d:98:c4:3f: a0:90:61:e0:de:3b:42:4d:fd:d8:9a:24:13:38:74: 25:cc:39:97:74:7a:0e:a2:14:69:87:1e:9f:50:9f: cc:2e:60:7d:73:e0:08:3e:c0:97:a0:8a:67:b6:34: 59:67:eb:7a:71:b7:fc:51:10:51:b7:55:bb:01:00: 46:1a:98:9a:79:6a:65:91:8a:43:fd:0f:d2:cf:9c: ea:72:33:a3:1e:d8:ea:a3:75:01:01:6d:8d:43:90: c9:7f:1b:1f:86:b4:3a:f3:bd:cc:b7:35:a4:1d:c8: 2f:e0:c9:67:fa:41:52:5c:b6:39:81:23:e1:31:73: 99:98:83:57:1a:28:a3:e3:f2:f3:c4:b3:b3:7f:f9: 0c:ae:d0:68:29:e4:d0:ad:cc:6d:65:d1:bc:f5:c1: e0:1f:33:0c:b2:63:bc:2d:37:97:17:f2:ba:20:fb: 2b:99:9d:22:7b:e9:8d:45:0e:11:6d:56:da:86:5d: 02:eb:ab:fd:ae:35:6c:10:8c:9e:eb:e6:98:a3:5e: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6D:F7:BC:DA:8E:EC:00:00:2D:F4:76:73:17:D7:0B:70:29:D3:AD X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b4:85:7e:01:63:b8:ea:fb:74:72:08:ae:a5:34:b4:e3:d6: 93:e5:c4:4c:db:d3:19:e5:84:3e:20:ae:84:50:00:b4:7c:94: d7:27:35:9b:9a:55:1f:8c:a9:fe:56:af:ba:b5:52:e0:38:24: 74:1f:68:10:a2:cf:59:92:12:e6:cf:81:57:1a:f9:e3:09:b6: 6b:01:a5:ac:0c:90:b6:45:9a:fe:8b:c1:1b:94:d0:76:fd:4d: b5:c8:02:7f:b6:d9:aa:53:bd:a5:d6:99:a6:0f:e0:ab:ea:a5: 5e:66:2d:e8:1d:11:52:f7:02:1d:47:88:f0:74:ee:58:31:38: 0a:00:6d:34:9f:5c:6f:29:1a:bd:24:4b:5f:52:91:23:d1:97: 8e:d8:c1:b4:76:bf:69:e0:96:90:72:43:e9:e4:37:e4:66:c8: ef:ff:a7:89:0e:0b:7a:dd:11:78:71:bb:e2:43:26:dd:a3:a5: 11:cc:e8:00:9d:94:74:09:6f:c5:41:79:ad:c9:04:e8:6e:0b: be:29:6d:43:5c:f0:e4:a0:11:ef:f6:44:88:1d:00:a6:a8:0f: f8:aa:c3:22:52:97:2c:4f:b1:5d:2b:d0:50:cf:9a:f2:6c:ac: 09:cb:fb:d8:a7:ab:88:ea:e2:5e:99:ce:30:16:44:59:4c:9e: 01:b2:29:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFigCRvGkAWIgO3p31aH6r6DAif0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNjA0MTUxNzM1NDlaFw0yNjA0MTgyMzIzNDlaMDMxMTAvBgNV BAMTKDVFNkRGN0JDREE4RUVDMDAwMDJERjQ3NjczMTdENzBCNzAyOUQzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsal4njrxI2YsYlhZ2o30egatx kHk72+4TAMD/SKFr6AJScLNQjZEVGuHP1VufbSFThtYA4xdybZjEP6CQYeDeO0JN /diaJBM4dCXMOZd0eg6iFGmHHp9Qn8wuYH1z4Ag+wJegime2NFln63pxt/xREFG3 VbsBAEYamJp5amWRikP9D9LPnOpyM6Me2OqjdQEBbY1DkMl/Gx+GtDrzvcy3NaQd yC/gyWf6QVJctjmBI+Exc5mYg1caKKPj8vPEs7N/+Qyu0Ggp5NCtzG1l0bz1weAf MwyyY7wtN5cX8rog+yuZnSJ76Y1FDhFtVtqGXQLrq/2uNWwQjJ7r5pijXjxfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXm33vNqO7AAALfR2cxfXC3Ap060wHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0 NjE3MEEzQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa0hX4BY7jq+3RyCK6lNLTj1pPlxEzb0xnl hD4groRQALR8lNcnNZuaVR+Mqf5Wr7q1UuA4JHQfaBCiz1mSEubPgVca+eMJtmsB pawMkLZFmv6LwRuU0Hb9TbXIAn+22apTvaXWmaYP4KvqpV5mLegdEVL3Ah1HiPB0 7lgxOAoAbTSfXG8pGr0kS19SkSPRl47YwbR2v2nglpByQ+nkN+RmyO//p4kOC3rd EXhxu+JDJt2jpRHM6ACdlHQJb8VBea3JBOhuC74pbUNc8OSgEe/2RIgdAKaoD/iq wyJSlyxPsV0r0FDPmvJsrAnL+9inq4jq4l6ZzjAWRFlMngGyKaI= -----END CERTIFICATE-----Generated at Fri Apr 17 20:47:48 2026 by rpki-client