$ rpki-client -vvvf rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft (raw, json) Hash identifier: 8Tvfm3K1opyHWdqNOdXs+6In97w+KrK/6d4tmpTQ4uI= Subject key identifier: 1C:D7:E6:FE:44:3A:DB:2D:F8:DB:9B:49:14:C1:E2:40:95:8D:AA:2C Authority key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Certificate issuer: /CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Certificate serial: 480DF645595920054E67930031C73AEB99B2BBA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft Manifest number: BF Signing time: Tue 22 Sep 2026 15:00:00 +0000 Manifest this update: Tue 22 Sep 2026 14:55:00 +0000 Manifest next update: Wed 23 Sep 2026 17:00:00 +0000 Files and hashes: 1: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl (hash: kDC+AI8Y21XPwk9fiyNRqZtNTaQ9bWb+SRw0EwJBb7U=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: r7ncZa1eZkhiGYQA3/lYzQqMG78T/tq+6oH0TDPdwqs=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: bwSnt66rSTzmcS7aGzehGu0uATTN++QNXtznU8fkMRw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0d:f6:45:59:59:20:05:4e:67:93:00:31:c7:3a:eb:99:b2:bb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Validity Not Before: Sep 22 14:55:00 2026 GMT Not After : Sep 23 17:00:00 2026 GMT Subject: CN=1CD7E6FE443ADB2DF8DB9B4914C1E240958DAA2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:89:2e:71:ed:65:02:fc:05:87:ed:c1:57: 69:55:02:9f:64:0b:71:6e:86:bb:f6:9d:04:9d:5c: f1:9b:39:78:23:79:e9:4a:0a:78:22:29:bc:2a:9a: 5f:f8:1d:51:7f:21:ff:1b:10:bc:08:d1:73:97:87: 0d:80:f4:61:3d:af:0d:50:b3:64:8f:0d:9e:ae:80: 47:9a:cc:07:09:c6:2f:2b:3f:15:a2:49:2c:30:b1: 74:ab:89:ae:31:fc:d2:9a:a1:b6:a4:7f:f4:5d:e9: f5:83:f6:6b:dc:c5:7a:ef:e9:30:48:a1:0b:93:35: 9e:cf:5e:0d:bf:21:60:e4:80:71:19:6c:18:78:c0: 90:6e:b6:9c:cf:40:c0:71:11:8a:7f:46:71:c6:45: fd:51:10:ee:26:a0:ab:04:3a:e1:15:58:35:79:5f: 21:44:4a:fc:fd:7c:40:43:25:c8:ec:36:cc:ca:5b: 82:f3:d8:dc:e6:b4:61:c1:47:9f:3b:06:0f:91:6b: 69:8b:6a:93:50:46:eb:7e:5f:26:3c:aa:4e:59:97: a4:93:d7:17:82:aa:3b:9e:cf:99:71:43:88:b6:63: 47:80:62:5f:fd:78:05:ad:f2:f9:fc:fc:dc:e7:2c: 15:d8:70:25:eb:7c:2c:af:7e:a6:ba:de:50:95:38: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D7:E6:FE:44:3A:DB:2D:F8:DB:9B:49:14:C1:E2:40:95:8D:AA:2C X509v3 Authority Key Identifier: keyid:45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d5:81:66:09:de:41:f0:2b:a6:c0:ed:82:c8:96:7d:54:cb: de:44:f0:c1:59:a9:1b:88:70:a5:b9:d0:99:3a:d2:42:3e:c0: c7:27:e7:1e:b2:46:96:5b:a3:c9:12:e8:a6:96:45:03:b9:09: 74:cf:af:21:e8:ff:96:51:9e:7a:83:a9:ca:26:0f:82:5b:f8: 7e:54:89:2e:16:cc:89:e6:ae:21:f3:6f:7e:03:1b:29:f8:f7: db:aa:06:1e:19:ca:25:6e:69:1e:e5:62:1e:5a:ab:7c:a3:ad: 9f:27:81:99:f5:23:28:df:1b:40:ff:b1:e3:fd:69:4d:e8:2c: b8:5d:9d:7e:5f:bd:50:e2:ba:f6:03:8b:83:aa:bd:44:c0:6c: 43:aa:d2:2c:3e:5c:96:b7:ce:e7:30:c0:94:3e:42:4d:4c:55: 11:1d:59:db:2e:7b:06:2e:8d:0f:35:3a:42:ad:39:dd:a8:ef: 3f:bd:22:73:14:a2:cc:a6:c7:af:d3:a4:0a:56:1f:5b:83:d8: e5:f5:51:37:47:52:f0:9f:ea:02:47:58:7d:5f:87:6c:45:84: fe:d2:9b:3c:90:09:83:09:cc:0c:c0:b9:bc:7f:a8:af:1c:4b: 49:1b:17:25:c9:cc:c7:44:0a:5e:c6:06:e7:4a:ea:c7:69:06: a6:b8:4e:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSA32RVlZIAVOZ5MAMcc665myu6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0 NzBFQzBERTAeFw0yNjA5MjIxNDU1MDBaFw0yNjA5MjMxNzAwMDBaMDMxMTAvBgNV BAMTKDFDRDdFNkZFNDQzQURCMkRGOERCOUI0OTE0QzFFMjQwOTU4REFBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkokuce1lAvwFh+3BV2lVAp9k C3Fuhrv2nQSdXPGbOXgjeelKCngiKbwqml/4HVF/If8bELwI0XOXhw2A9GE9rw1Q s2SPDZ6ugEeazAcJxi8rPxWiSSwwsXSria4x/NKaobakf/Rd6fWD9mvcxXrv6TBI oQuTNZ7PXg2/IWDkgHEZbBh4wJButpzPQMBxEYp/RnHGRf1REO4moKsEOuEVWDV5 XyFESvz9fEBDJcjsNszKW4Lz2NzmtGHBR587Bg+Ra2mLapNQRut+XyY8qk5Zl6ST 1xeCqjuez5lxQ4i2Y0eAYl/9eAWt8vn8/NznLBXYcCXrfCyvfqa63lCVOHLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHNfm/kQ62y3425tJFMHiQJWNqiwwHwYDVR0j BBgwFoAURb0NDLWnxMSb+7o0pxZSbEcOwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI5MzI5Y2YtMzEyMy00Y2UwLWE2ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENC NUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0NzBFQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUJEMEQwQ0I1QTdDNEM0OUJGQkJBMzRBNzE2NTI2QzQ3MEVD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUy NkM0NzBFQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3VgWYJ3kHwK6bA7YLIln1Uy95E8MFZqRuI cKW50Jk60kI+wMcn5x6yRpZbo8kS6KaWRQO5CXTPryHo/5ZRnnqDqcomD4Jb+H5U iS4WzInmriHzb34DGyn499uqBh4ZyiVuaR7lYh5aq3yjrZ8ngZn1IyjfG0D/seP9 aU3oLLhdnX5fvVDiuvYDi4OqvUTAbEOq0iw+XJa3zucwwJQ+Qk1MVREdWdsuewYu jQ81OkKtOd2o7z+9InMUosymx6/TpApWH1uD2OX1UTdHUvCf6gJHWH1fh2xFhP7S mzyQCYMJzAzAubx/qK8cS0kbFyXJzMdECl7GBudK6sdpBqa4Tjo= -----END CERTIFICATE-----Generated at Tue Sep 22 22:09:15 2026 by rpki-client