$ rpki-client -vvvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft (raw, json) Hash identifier: nGfxO4Dt10vE/No7WFoum4nh7691Dsi4lrZuIrDx/2k= Subject key identifier: AA:00:19:7D:41:24:AC:53:CB:AB:A3:42:EA:43:8F:AA:FB:9B:CC:FE Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Certificate serial: 105E2A688C9143B86FCDECCA3345B7F207311B37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:15:53 +0000 Manifest this update: Thu 24 Sep 2026 08:10:53 +0000 Manifest next update: Fri 25 Sep 2026 08:44:53 +0000 Files and hashes: 1: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=) 2: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl (hash: 5j2OmuRqfpG4MIU2Jn9oXVw/CYqHEUWa/mQuL1lOfKE=) 3: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI=) 4: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5e:2a:68:8c:91:43:b8:6f:cd:ec:ca:33:45:b7:f2:07:31:1b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Validity Not Before: Sep 24 08:10:53 2026 GMT Not After : Sep 25 08:44:53 2026 GMT Subject: CN=AA00197D4124AC53CBABA342EA438FAAFB9BCCFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:c3:31:87:60:b6:30:2d:1d:0d:8c:89:ac: 5b:21:3e:91:cc:c9:e9:c1:bd:f7:7c:2d:a7:13:8d: 00:23:76:88:20:71:03:f9:a6:5d:86:56:ec:c2:25: 3a:fa:af:78:06:2c:bd:38:9b:0c:85:ee:80:4f:28: 8e:0c:90:8f:41:cd:b5:81:8f:01:8a:d7:c7:d3:41: 87:7b:09:a1:ea:de:08:7c:85:b7:5d:9f:29:68:73: 99:e3:af:f4:f9:c7:66:9e:5b:af:52:96:5f:5d:a6: 03:8c:bc:f8:66:f2:ea:16:f1:2b:b0:9d:33:a7:ac: 62:56:6a:fd:0a:27:69:28:bc:24:2c:92:f0:80:fb: 78:22:bc:92:af:9a:da:25:c2:24:99:17:80:52:48: 1f:46:19:aa:1c:37:6e:24:40:84:26:f4:bd:66:af: 88:6a:d0:57:b1:8a:c1:fc:50:54:0c:51:26:1a:a4: 8e:50:03:f1:3c:c2:b4:4a:d2:48:19:ce:1a:f5:30: 71:ed:42:16:51:01:26:6e:fb:4f:6f:43:1d:70:2f: 8a:bf:b2:51:66:59:6d:a9:20:56:f8:89:5b:d1:ce: 44:88:ec:21:07:0f:51:0c:9e:e2:da:02:a3:e7:a3: af:13:2b:8a:7e:3b:e9:ce:1c:c9:a7:4b:e8:90:a4: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:00:19:7D:41:24:AC:53:CB:AB:A3:42:EA:43:8F:AA:FB:9B:CC:FE X509v3 Authority Key Identifier: keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:41:77:25:ea:06:9b:68:1d:16:f1:23:47:53:14:14:ba:53: a2:99:d9:32:eb:25:47:a0:59:f1:18:be:e4:a0:29:8c:8a:9b: 61:48:e0:02:d6:19:ff:cc:5b:2e:41:84:fb:26:af:df:15:a3: 65:74:07:00:d7:6c:c4:a9:b6:5c:d6:4d:26:17:b4:8b:a0:a8: 56:d4:1a:dd:9c:2a:87:55:39:18:cb:3b:72:27:84:f7:6a:28: 73:66:f4:28:2f:fc:cb:a3:a5:bf:b9:98:2a:e7:1a:2a:54:77: a7:2d:0f:71:d7:13:77:fc:c4:9d:45:73:d5:cf:a3:b9:c2:37: 58:ba:a7:8f:83:be:31:cc:5a:f4:49:e7:90:75:c9:b9:d5:05: 9d:29:fe:b4:68:a0:86:be:42:bc:c2:a4:f9:95:bd:9d:26:48: 81:87:cc:4e:f4:d6:cd:e8:28:51:b0:b1:a8:ac:e4:72:62:79: 92:87:96:cd:bd:04:c8:11:9b:fb:99:05:ba:58:b0:17:e8:17: e7:ea:fe:c1:e5:cc:2e:7f:af:77:1e:0c:d9:b1:b9:7d:ab:a4: a8:aa:06:a9:5c:00:82:2c:42:47:49:6f:5c:59:2c:ca:dc:f6: 04:65:e7:9a:2d:e7:d3:12:4d:9c:05:ac:75:2b:10:a5:80:83: 3a:89:87:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEF4qaIyRQ7hvzezKM0W38gcxGzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUz NjEwOEQwMjAeFw0yNjA5MjQwODEwNTNaFw0yNjA5MjUwODQ0NTNaMDMxMTAvBgNV BAMTKEFBMDAxOTdENDEyNEFDNTNDQkFCQTM0MkVBNDM4RkFBRkI5QkNDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRcMxh2C2MC0dDYyJrFshPpHM yenBvfd8LacTjQAjdoggcQP5pl2GVuzCJTr6r3gGLL04mwyF7oBPKI4MkI9BzbWB jwGK18fTQYd7CaHq3gh8hbddnyloc5njr/T5x2aeW69Sll9dpgOMvPhm8uoW8Suw nTOnrGJWav0KJ2kovCQskvCA+3givJKvmtolwiSZF4BSSB9GGaocN24kQIQm9L1m r4hq0FexisH8UFQMUSYapI5QA/E8wrRK0kgZzhr1MHHtQhZRASZu+09vQx1wL4q/ slFmWW2pIFb4iVvRzkSI7CEHD1EMnuLaAqPno68TK4p+O+nOHMmnS+iQpNVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqgAZfUEkrFPLq6NC6kOPqvubzP4wHwYDVR0j BBgwFoAURaHD8dynt8yo26Aj7sLVnjYQjQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgzZWQ3YWItMWFjOS00ZjQyLWFjZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFE Q0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUzNjEwOEQwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUExQzNGMURDQTdCN0NDQThEQkEwMjNFRUMyRDU5RTM2MTA4 RDAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1 OUUzNjEwOEQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlBdyXqBptoHRbxI0dTFBS6U6KZ2TLrJUeg WfEYvuSgKYyKm2FI4ALWGf/MWy5BhPsmr98Vo2V0BwDXbMSptlzWTSYXtIugqFbU Gt2cKodVORjLO3InhPdqKHNm9Cgv/Mujpb+5mCrnGipUd6ctD3HXE3f8xJ1Fc9XP o7nCN1i6p4+DvjHMWvRJ55B1ybnVBZ0p/rRooIa+QrzCpPmVvZ0mSIGHzE701s3o KFGwsais5HJieZKHls29BMgRm/uZBbpYsBfoF+fq/sHlzC5/r3ceDNmxuX2rpKiq BqlcAIIsQkdJb1xZLMrc9gRl55ot59MSTZwFrHUrEKWAgzqJh6w= -----END CERTIFICATE-----Generated at Thu Sep 24 19:19:36 2026 by rpki-client