$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: wXtMHxSkDglO3K792evW0crQBMMrmsA/J/BnmNHSiac= Subject key identifier: 3B:DB:62:A8:3C:75:3C:B7:69:76:44:8B:7A:8F:7B:7C:F5:11:57:4A Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 14550B2AADFD3FD6B990B40AB778807003710AC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 0569 Signing time: Thu 16 Apr 2026 16:21:04 +0000 Manifest this update: Thu 16 Apr 2026 16:16:04 +0000 Manifest next update: Sun 19 Apr 2026 21:47:04 +0000 Files and hashes: 1: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 2: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: 996ZjvolgePUBefanuGTsd0ig5xgBDzOK9ldrd7PuTY=) 3: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 4: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) 5: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 21:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:55:0b:2a:ad:fd:3f:d6:b9:90:b4:0a:b7:78:80:70:03:71:0a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Apr 16 16:16:04 2026 GMT Not After : Apr 19 21:47:04 2026 GMT Subject: CN=3BDB62A83C753CB76976448B7A8F7B7CF511574A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:db:a4:9d:ab:d3:b0:78:dd:52:53:49:ac:48: 23:3e:fa:b9:43:24:a9:8e:4e:f8:68:d5:b2:93:3b: a1:db:f7:f3:d5:39:9a:90:4c:11:e8:0b:9b:e2:9d: 30:3a:48:55:6e:ea:12:14:9a:57:6e:de:85:7f:18: f6:18:8d:86:45:33:53:d1:9a:b8:71:7a:75:d9:95: 35:93:4a:8f:21:61:39:b6:17:ef:c2:11:e8:22:58: c9:ba:47:b2:69:5e:29:84:80:1c:4e:fc:ce:a4:34: 30:bc:48:13:8d:9a:ad:60:13:57:35:f4:76:93:25: f4:96:ea:5e:2d:d5:7c:76:40:b2:7d:c8:ff:e2:85: 14:dc:23:97:24:b4:90:a7:a1:c8:a2:47:ed:69:62: db:e9:b1:9a:91:88:ec:68:3a:55:78:36:af:f8:0f: aa:db:6e:1f:4d:dd:5f:60:5b:3d:c3:21:ee:7e:9b: 0c:3b:13:ef:47:09:0d:bb:cb:ec:91:78:5c:03:52: dd:35:6c:1d:28:f0:be:22:4b:60:84:0a:90:8f:ff: 90:73:a7:80:2a:40:a6:f0:9a:1c:16:dc:56:53:e8: 26:7b:f4:56:84:5a:07:fc:1b:3b:0b:29:4c:f8:27: 2c:12:48:92:72:96:ad:a2:d9:21:0d:91:7a:50:4a: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DB:62:A8:3C:75:3C:B7:69:76:44:8B:7A:8F:7B:7C:F5:11:57:4A X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:30:79:ce:b1:58:9a:32:a4:49:74:1c:44:3e:43:19:86:fa: a2:d9:39:4b:48:17:10:ee:5f:59:15:a9:3c:e9:ae:03:8c:05: c0:12:73:da:61:43:2c:db:cc:e1:a7:6c:b1:d6:09:2e:a0:6e: ff:f6:dc:cb:f9:bc:3e:87:7d:bb:85:4e:bb:05:84:cf:d0:a2: fc:10:5f:c1:75:74:fc:06:24:48:ad:c5:85:96:cf:83:a1:60: 8a:af:3a:53:d1:91:1d:5a:e9:b0:cb:38:6a:51:0f:d2:02:4e: e6:c7:b3:08:95:34:20:ae:01:63:27:66:3e:8e:ba:3b:75:c5: c6:ea:31:9f:07:95:cf:4f:b4:dd:90:8c:83:60:d5:10:26:67: a9:a8:58:9e:be:29:e2:a5:34:54:ca:23:a9:25:80:f6:f0:df: b1:61:01:36:c1:97:85:4e:6a:8d:58:68:a4:df:ec:7f:4a:96: 46:f3:00:01:26:52:3c:42:53:b4:1c:bb:a3:6b:61:ff:dd:58: 0b:41:94:29:c3:0c:0c:59:52:40:3d:06:20:36:dc:6c:18:1b: c7:64:22:c4:3f:a1:9a:6b:1f:63:c1:fb:75:f2:4f:fa:50:50: 16:61:3e:fb:83:5b:20:bc:42:57:b4:ca:0f:2e:7a:f5:ee:5c: 8b:ac:cd:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFULKq39P9a5kLQKt3iAcANxCsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNjA0MTYxNjE2MDRaFw0yNjA0MTkyMTQ3MDRaMDMxMTAvBgNV BAMTKDNCREI2MkE4M0M3NTNDQjc2OTc2NDQ4QjdBOEY3QjdDRjUxMTU3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu26Sdq9OweN1SU0msSCM++rlD JKmOTvho1bKTO6Hb9/PVOZqQTBHoC5vinTA6SFVu6hIUmldu3oV/GPYYjYZFM1PR mrhxenXZlTWTSo8hYTm2F+/CEegiWMm6R7JpXimEgBxO/M6kNDC8SBONmq1gE1c1 9HaTJfSW6l4t1Xx2QLJ9yP/ihRTcI5cktJCnociiR+1pYtvpsZqRiOxoOlV4Nq/4 D6rbbh9N3V9gWz3DIe5+mww7E+9HCQ27y+yReFwDUt01bB0o8L4iS2CECpCP/5Bz p4AqQKbwmhwW3FZT6CZ79FaEWgf8GzsLKUz4JywSSJJylq2i2SENkXpQSnD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9tiqDx1PLdpdkSLeo97fPURV0owHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEowec6xWJoypEl0HEQ+QxmG+qLZOUtIFxDu X1kVqTzprgOMBcASc9phQyzbzOGnbLHWCS6gbv/23Mv5vD6HfbuFTrsFhM/QovwQ X8F1dPwGJEitxYWWz4OhYIqvOlPRkR1a6bDLOGpRD9ICTubHswiVNCCuAWMnZj6O ujt1xcbqMZ8Hlc9PtN2QjINg1RAmZ6moWJ6+KeKlNFTKI6klgPbw37FhATbBl4VO ao1YaKTf7H9KlkbzAAEmUjxCU7Qcu6NrYf/dWAtBlCnDDAxZUkA9BiA23GwYG8dk IsQ/oZprH2PB+3XyT/pQUBZhPvuDWyC8Qle0yg8uevXuXIuszZ0= -----END CERTIFICATE-----Generated at Sat Apr 18 00:11:59 2026 by rpki-client