$ rpki-client -vvf rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft (raw, json) Hash identifier: y7HJAvOD832O6aE+Iabuid4zRKvxsqHt8sZ+Xzu2mDA= Subject key identifier: DE:B9:EB:E7:CE:39:B1:10:62:6D:1C:77:00:F1:66:19:F0:95:77:F4 Authority key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Certificate issuer: /CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Certificate serial: 542D698B5E20B996FF48857D37BF06F68F778EAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:45:36 +0000 Manifest this update: Tue 16 Jun 2026 21:40:36 +0000 Manifest next update: Thu 18 Jun 2026 01:39:36 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: bwSnt66rSTzmcS7aGzehGu0uATTN++QNXtznU8fkMRw=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: r7ncZa1eZkhiGYQA3/lYzQqMG78T/tq+6oH0TDPdwqs=) 3: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl (hash: KHAZHMTu7dOeRJCCg3sVjfO+y2oz8usP0lY5B6d/nwU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2d:69:8b:5e:20:b9:96:ff:48:85:7d:37:bf:06:f6:8f:77:8e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Validity Not Before: Jun 16 21:40:36 2026 GMT Not After : Jun 18 01:39:36 2026 GMT Subject: CN=DEB9EBE7CE39B110626D1C7700F16619F09577F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:35:be:97:4b:34:3f:ed:88:28:d4:bd:89:38: cd:6c:b1:b6:59:f8:4a:46:e0:77:a5:9d:37:41:f5: e6:f8:e5:d2:ec:ce:d8:cf:33:2a:7e:f4:55:27:1e: f8:38:f3:8a:ff:6b:29:85:d4:80:7e:3d:6b:be:6a: 0d:76:47:0a:83:69:c9:38:0b:18:94:e9:51:6a:cb: 74:a1:a0:d9:c9:a1:6a:67:3d:83:ed:ea:b2:72:b9: 6c:62:0b:6b:30:42:4c:33:1a:1f:91:41:b1:d2:c5: 41:22:8e:56:ca:a0:c0:f4:09:39:e8:b0:50:f3:f4: 05:ac:2f:9b:45:62:62:e7:83:5d:e4:d4:07:f4:af: 14:24:3d:af:b4:2c:dd:a9:5b:70:d4:12:d0:59:c8: 8c:3e:ba:e3:65:da:e1:31:85:91:86:a4:c8:b1:b5: ae:29:7e:e2:1b:f9:9d:55:c1:27:53:28:6a:f1:da: 6d:24:7c:a0:43:c5:49:88:dc:b0:d9:c5:bc:1f:9c: e1:16:ec:c1:c3:38:15:ec:ed:56:30:da:6a:22:08: 44:bd:86:29:b0:42:0e:34:c8:23:13:44:36:12:d7: ca:4d:b4:9e:31:01:a6:ef:d1:9c:b2:17:af:32:f6: 8d:d9:30:47:06:3e:6a:10:f3:92:41:dc:fc:0d:cc: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B9:EB:E7:CE:39:B1:10:62:6D:1C:77:00:F1:66:19:F0:95:77:F4 X509v3 Authority Key Identifier: keyid:45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1b:20:ee:2e:3b:d3:c0:19:c8:cc:75:d1:60:aa:3c:9f:ae: cb:39:b8:df:29:f6:34:dc:01:64:4a:d8:a2:84:f7:3c:ac:b4: 73:5a:9b:94:07:20:ef:74:08:7d:93:aa:01:96:05:ac:cf:aa: 59:11:9e:e0:8c:61:f2:c4:99:96:9b:25:12:80:47:59:50:3e: e3:10:cc:0c:6e:08:43:cc:db:a9:b9:fd:e0:a5:ce:f5:fb:f8: a8:54:5c:77:e9:bd:0d:b2:5e:7f:99:0d:1f:81:4d:52:d5:e8: 4b:7f:f5:b5:aa:80:a4:5e:da:6b:31:92:db:51:25:61:45:60: 5a:92:72:cc:27:44:c5:9b:21:9b:97:fc:c2:61:82:ff:7d:53: 1f:48:56:16:ed:10:e7:5d:7a:2b:8b:cb:d3:9e:e9:64:59:f1: a8:dc:6e:92:b1:db:db:f9:ce:e3:fe:fc:f2:8c:10:ed:17:6d: 88:a2:7f:da:0a:39:71:81:bc:c2:17:f7:8d:cd:4c:d1:f3:17: f3:be:29:a1:df:66:91:2a:61:70:02:2e:b3:f2:d8:07:6f:ad: fd:76:89:ef:1b:74:21:aa:6d:37:2d:17:7d:84:15:a4:f9:9b: ca:3c:74:07:9e:65:2b:fd:2e:c4:87:7f:11:7b:d4:b9:9e:43: e6:ca:75:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVC1pi14guZb/SIV9N78G9o93jqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0 NzBFQzBERTAeFw0yNjA2MTYyMTQwMzZaFw0yNjA2MTgwMTM5MzZaMDMxMTAvBgNV BAMTKERFQjlFQkU3Q0UzOUIxMTA2MjZEMUM3NzAwRjE2NjE5RjA5NTc3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMNb6XSzQ/7Ygo1L2JOM1ssbZZ +EpG4HelnTdB9eb45dLsztjPMyp+9FUnHvg484r/aymF1IB+PWu+ag12RwqDack4 CxiU6VFqy3ShoNnJoWpnPYPt6rJyuWxiC2swQkwzGh+RQbHSxUEijlbKoMD0CTno sFDz9AWsL5tFYmLng13k1Af0rxQkPa+0LN2pW3DUEtBZyIw+uuNl2uExhZGGpMix ta4pfuIb+Z1VwSdTKGrx2m0kfKBDxUmI3LDZxbwfnOEW7MHDOBXs7VYw2moiCES9 himwQg40yCMTRDYS18pNtJ4xAabv0ZyyF68y9o3ZMEcGPmoQ85JB3PwNzGbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rnr5845sRBibRx3APFmGfCVd/QwHwYDVR0j BBgwFoAURb0NDLWnxMSb+7o0pxZSbEcOwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI5MzI5Y2YtMzEyMy00Y2UwLWE2ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENC NUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0NzBFQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUJEMEQwQ0I1QTdDNEM0OUJGQkJBMzRBNzE2NTI2QzQ3MEVD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUy NkM0NzBFQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4bIO4uO9PAGcjMddFgqjyfrss5uN8p9jTc AWRK2KKE9zystHNam5QHIO90CH2TqgGWBazPqlkRnuCMYfLEmZabJRKAR1lQPuMQ zAxuCEPM26m5/eClzvX7+KhUXHfpvQ2yXn+ZDR+BTVLV6Et/9bWqgKRe2msxkttR JWFFYFqScswnRMWbIZuX/MJhgv99Ux9IVhbtEOddeiuLy9Oe6WRZ8ajcbpKx29v5 zuP+/PKMEO0XbYiif9oKOXGBvMIX943NTNHzF/O+KaHfZpEqYXACLrPy2Advrf12 ie8bdCGqbTctF32EFaT5m8o8dAeeZSv9LsSHfxF71LmeQ+bKdS4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:38 2026 by rpki-client