$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: nrkeIThKMYXzFWLk0nW2vVyMHoc1RiiF4nMcC4I3maQ= Subject key identifier: 10:12:A0:F9:41:FE:76:D1:26:B0:37:DC:A3:7A:4E:A6:0F:3E:EE:71 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 418B0FCF503430C00FA40126082EBB588425D0B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 0555 Signing time: Mon 02 Mar 2026 02:23:28 +0000 Manifest this update: Mon 02 Mar 2026 02:18:28 +0000 Manifest next update: Thu 05 Mar 2026 12:40:28 +0000 Files and hashes: 1: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: 5FQaJHM14iHQ9FW/yCZLwB37/KfO/5fg2gFJjho5SkA=) 2: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 3: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 4: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) 5: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8b:0f:cf:50:34:30:c0:0f:a4:01:26:08:2e:bb:58:84:25:d0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Mar 2 02:18:28 2026 GMT Not After : Mar 5 12:40:28 2026 GMT Subject: CN=1012A0F941FE76D126B037DCA37A4EA60F3EEE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:34:91:03:b2:5c:19:b2:94:ed:d6:07:6e: 8d:10:28:94:fc:a3:4e:44:ad:21:a0:38:71:fb:00: be:fe:0a:cd:5c:5b:0e:b9:e5:bb:1f:e6:13:78:9e: 0b:91:56:03:c5:8d:54:b2:a4:34:4d:4c:86:28:2d: de:95:17:1c:0e:5a:25:c1:d7:a9:0f:26:b7:5c:3f: fd:6f:8c:7c:5b:2e:ef:8a:58:79:33:9c:55:ce:9c: 13:d1:8d:8f:af:a8:25:10:ac:5e:fe:14:f7:cd:45: 2c:3b:1e:45:71:44:65:7d:a1:68:76:bc:99:df:b2: c2:04:ae:30:75:7e:aa:40:7a:2f:6d:12:67:af:bd: 7e:db:97:c3:07:19:50:44:9c:de:cd:a5:c2:be:b5: 2e:7f:a8:f3:71:8c:18:be:12:14:bf:a2:5d:71:2f: bb:47:a0:53:2e:92:ed:f9:5a:54:f6:89:67:dc:68: 10:7a:2a:6a:85:8b:78:d9:b1:aa:d7:a4:78:aa:02: 8c:88:3c:42:27:d7:23:f7:68:dd:df:76:e8:b5:26: 7a:4a:b2:2d:b7:25:21:6b:c4:81:a2:f5:9d:30:5d: 0a:57:da:ce:64:96:05:e4:60:3a:86:b3:a7:37:89: 48:83:c0:e7:71:65:0a:a2:5a:53:f6:db:8d:73:77: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:12:A0:F9:41:FE:76:D1:26:B0:37:DC:A3:7A:4E:A6:0F:3E:EE:71 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3f:39:92:7c:0d:0e:34:cd:ad:40:47:f0:3a:35:a5:14:c1: d8:a0:6b:30:f7:f5:ac:3f:80:9a:25:ac:78:d4:88:a7:c2:57: 9c:36:cc:03:32:59:84:9b:a2:75:29:41:ae:5b:00:d8:54:11: 07:3d:30:99:88:f7:49:4c:d2:e6:6a:24:42:c3:74:6f:89:86: 56:e3:2e:44:ab:d0:c7:0f:33:8a:43:39:1e:ac:b1:db:72:d0: e9:e1:0a:c9:5f:29:f4:24:bf:47:fa:00:30:a0:bb:20:80:0a: 94:91:6b:3a:4d:1d:93:36:3e:8c:f4:42:b5:d6:9d:90:27:d9: ae:49:08:ff:04:a9:38:76:b0:2e:a9:b4:71:30:12:cf:64:49: be:a5:34:cf:69:27:52:62:1d:9b:20:73:65:49:71:fc:7e:7f: 04:44:9a:6d:a5:c5:df:b2:04:32:3e:6e:5b:54:5e:70:0e:82: cd:1b:fa:63:35:ca:7f:87:42:64:ec:05:4d:35:bb:8f:17:73: f2:a1:07:32:29:50:79:56:95:42:42:bd:a7:e6:55:d5:ae:a4: d5:ac:e9:b3:7d:dd:f5:58:71:71:f5:45:65:04:9c:9d:8f:23: bf:2c:87:ea:cf:2d:df:fa:67:9f:9e:8b:41:80:cc:22:ab:ef: da:ed:1c:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYsPz1A0MMAPpAEmCC67WIQl0LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNjAzMDIwMjE4MjhaFw0yNjAzMDUxMjQwMjhaMDMxMTAvBgNV BAMTKDEwMTJBMEY5NDFGRTc2RDEyNkIwMzdEQ0EzN0E0RUE2MEYzRUVFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIjSRA7JcGbKU7dYHbo0QKJT8 o05ErSGgOHH7AL7+Cs1cWw655bsf5hN4nguRVgPFjVSypDRNTIYoLd6VFxwOWiXB 16kPJrdcP/1vjHxbLu+KWHkznFXOnBPRjY+vqCUQrF7+FPfNRSw7HkVxRGV9oWh2 vJnfssIErjB1fqpAei9tEmevvX7bl8MHGVBEnN7NpcK+tS5/qPNxjBi+EhS/ol1x L7tHoFMuku35WlT2iWfcaBB6KmqFi3jZsarXpHiqAoyIPEIn1yP3aN3fdui1JnpK si23JSFrxIGi9Z0wXQpX2s5klgXkYDqGs6c3iUiDwOdxZQqiWlP2241zd9yDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEBKg+UH+dtEmsDfco3pOpg8+7nEwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ/OZJ8DQ40za1AR/A6NaUUwdigazD39aw/ gJolrHjUiKfCV5w2zAMyWYSbonUpQa5bANhUEQc9MJmI90lM0uZqJELDdG+Jhlbj LkSr0McPM4pDOR6ssdty0OnhCslfKfQkv0f6ADCguyCACpSRazpNHZM2Poz0QrXW nZAn2a5JCP8EqTh2sC6ptHEwEs9kSb6lNM9pJ1JiHZsgc2VJcfx+fwREmm2lxd+y BDI+bltUXnAOgs0b+mM1yn+HQmTsBU01u48Xc/KhBzIpUHlWlUJCvafmVdWupNWs 6bN93fVYcXH1RWUEnJ2PI78sh+rPLd/6Z5+ei0GAzCKr79rtHP8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:16:14 2026 by rpki-client