$ rpki-client -vvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft (raw, json) Hash identifier: X/m2bxYbNIRtY5B1hQ8Wwq51RU83ipqhenngQYRJlW0= Subject key identifier: 25:C7:10:9D:11:2E:89:68:98:DD:B2:83:5D:88:4D:FD:2F:EE:1E:A3 Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Certificate serial: 4CDA01C7A6AC137E1856C47F2889D4118510BE44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 20:08:44 +0000 Manifest this update: Sat 13 Jun 2026 20:03:44 +0000 Manifest next update: Sun 14 Jun 2026 22:11:44 +0000 Files and hashes: 1: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl (hash: FBhirVOMjYS7E7EiGCTa72wG+aMSAc3YmL4AN+JUj28=) 2: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=) 3: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI=) 4: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:da:01:c7:a6:ac:13:7e:18:56:c4:7f:28:89:d4:11:85:10:be:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Validity Not Before: Jun 13 20:03:44 2026 GMT Not After : Jun 14 22:11:44 2026 GMT Subject: CN=25C7109D112E896898DDB2835D884DFD2FEE1EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:89:db:d6:ba:34:99:13:89:ef:69:26:5b: 92:ac:04:1e:3f:54:5e:3f:27:49:28:e2:e3:34:7c: 31:96:dd:2f:f1:11:c8:a6:f5:6a:e2:96:e2:28:ac: cc:51:ac:3b:f3:e3:96:c7:c3:bb:d1:18:48:60:a8: 2d:77:4c:cb:91:6d:cc:32:44:14:b2:22:7a:86:7e: d3:ee:d4:f0:60:90:11:12:3a:e9:08:8b:70:73:4a: 65:0d:d6:17:16:e8:c4:b6:45:64:1f:9c:2e:07:1b: c4:42:2a:2c:90:60:5b:ea:e8:3a:c2:8b:a7:0c:25: c8:22:3d:61:ad:29:18:f6:1b:0e:30:8f:41:94:f2: 9e:9a:83:52:c6:30:8a:37:de:68:99:e7:82:f3:a3: 28:42:8d:65:f2:b4:ef:0b:51:d6:68:8a:38:82:08: bf:e7:1d:63:0b:69:46:fc:bc:d1:35:45:1a:e8:ae: 0d:8d:f1:30:ca:1e:6c:ce:0b:ed:57:78:76:95:29: f9:2c:ce:ae:d8:86:b4:3a:68:79:f5:a3:f6:8f:32: a1:f2:c6:ae:82:00:23:66:9c:fd:7d:0d:69:b3:d4: fa:d9:b1:fb:54:54:0c:12:1c:08:74:ae:54:aa:27: 0c:78:40:be:9a:37:4e:61:3a:20:76:5b:ff:8e:82: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C7:10:9D:11:2E:89:68:98:DD:B2:83:5D:88:4D:FD:2F:EE:1E:A3 X509v3 Authority Key Identifier: keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4e:4f:b5:0c:cd:49:ed:28:35:c7:44:09:2f:ae:c2:6e:47: 33:6a:f1:25:6d:a5:68:7b:8f:5a:3d:f7:28:11:96:0d:56:c3: c0:43:23:9a:90:37:b7:d3:06:25:85:d7:82:00:1d:80:cb:c2: 3f:53:2e:70:48:79:60:a0:7c:74:32:3a:98:e3:38:5d:49:40: b7:f8:c3:ae:2d:16:60:78:50:e7:a9:5b:46:0f:b1:af:7a:a0: c5:65:bf:d1:c8:42:b0:07:a2:3a:7d:f4:c0:99:c2:02:64:14: ce:da:f9:4a:a4:54:33:31:21:79:5c:85:e1:a3:67:f3:2e:0c: 0b:b4:72:70:55:c3:a8:70:99:84:0e:96:bb:ef:1e:a9:79:c5: ee:aa:4a:02:7e:fe:01:bb:a4:f9:e1:2c:e7:93:f8:b6:6f:10: 98:30:33:a9:d9:55:58:42:ca:fb:32:a3:fc:88:c0:90:f2:dc: fd:88:da:22:f4:de:d4:6b:e9:e5:77:3d:e4:16:e7:5b:82:5f: ec:ce:b9:16:25:9b:ca:06:d4:4c:b6:fd:b7:ac:78:b8:96:c9: f4:82:64:1b:61:ac:df:8c:06:c6:a1:cb:e5:39:72:86:02:64: bd:a3:40:69:54:24:26:9e:0a:69:21:7c:d4:78:e2:13:ab:15: fc:4c:84:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNoBx6asE34YVsR/KInUEYUQvkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUz NjEwOEQwMjAeFw0yNjA2MTMyMDAzNDRaFw0yNjA2MTQyMjExNDRaMDMxMTAvBgNV BAMTKDI1QzcxMDlEMTEyRTg5Njg5OEREQjI4MzVEODg0REZEMkZFRTFFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItInb1ro0mROJ72kmW5KsBB4/ VF4/J0ko4uM0fDGW3S/xEcim9WriluIorMxRrDvz45bHw7vRGEhgqC13TMuRbcwy RBSyInqGftPu1PBgkBESOukIi3BzSmUN1hcW6MS2RWQfnC4HG8RCKiyQYFvq6DrC i6cMJcgiPWGtKRj2Gw4wj0GU8p6ag1LGMIo33miZ54LzoyhCjWXytO8LUdZoijiC CL/nHWMLaUb8vNE1RRrorg2N8TDKHmzOC+1XeHaVKfkszq7YhrQ6aHn1o/aPMqHy xq6CACNmnP19DWmz1PrZsftUVAwSHAh0rlSqJwx4QL6aN05hOiB2W/+OgnjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJccQnREuiWiY3bKDXYhN/S/uHqMwHwYDVR0j BBgwFoAURaHD8dynt8yo26Aj7sLVnjYQjQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgzZWQ3YWItMWFjOS00ZjQyLWFjZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFE Q0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUzNjEwOEQwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUExQzNGMURDQTdCN0NDQThEQkEwMjNFRUMyRDU5RTM2MTA4 RDAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1 OUUzNjEwOEQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlOT7UMzUntKDXHRAkvrsJuRzNq8SVtpWh7 j1o99ygRlg1Ww8BDI5qQN7fTBiWF14IAHYDLwj9TLnBIeWCgfHQyOpjjOF1JQLf4 w64tFmB4UOepW0YPsa96oMVlv9HIQrAHojp99MCZwgJkFM7a+UqkVDMxIXlcheGj Z/MuDAu0cnBVw6hwmYQOlrvvHql5xe6qSgJ+/gG7pPnhLOeT+LZvEJgwM6nZVVhC yvsyo/yIwJDy3P2I2iL03tRr6eV3PeQW51uCX+zOuRYlm8oG1Ey2/beseLiWyfSC ZBthrN+MBsahy+U5coYCZL2jQGlUJCaeCmkhfNR44hOrFfxMhCc= -----END CERTIFICATE-----Generated at Sun Jun 14 02:43:55 2026 by rpki-client