$ rpki-client -vvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft (raw, json) Hash identifier: 1nM+IOQCzwQUbufqE/Zy6pTTtPwmVMSBw3mfrDQtlNw= Subject key identifier: 48:E5:1A:DE:F9:7C:27:23:90:B6:CB:E9:AD:4D:1C:61:BC:60:EA:E8 Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Certificate serial: 4D9363746594DA377F21CC6633C09AB5FFFBD706 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 02:44:30 +0000 Manifest this update: Wed 29 Jul 2026 02:39:30 +0000 Manifest next update: Thu 30 Jul 2026 03:09:30 +0000 Files and hashes: 1: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=) 2: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl (hash: 42TlmDq+LgV35TCJWEicp7i/YIxH2SjBpeJxXWL2cLA=) 3: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=) 4: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:93:63:74:65:94:da:37:7f:21:cc:66:33:c0:9a:b5:ff:fb:d7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Validity Not Before: Jul 29 02:39:30 2026 GMT Not After : Jul 30 03:09:30 2026 GMT Subject: CN=48E51ADEF97C272390B6CBE9AD4D1C61BC60EAE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:cc:1f:37:f3:8a:04:80:e1:03:54:2e:50: df:7f:84:a3:5d:e2:2f:00:5f:40:3f:69:af:1d:c1: da:c0:ed:a9:64:b2:bc:b0:5e:82:08:eb:62:57:2c: 63:da:33:c8:aa:f3:c3:6e:66:d6:96:dd:88:c6:46: 72:02:cf:c7:e6:9c:2f:27:3e:40:34:20:b3:22:b5: 6b:1c:36:c1:68:89:1b:f7:f9:22:a2:64:f1:68:95: 59:ff:b7:e2:3a:38:87:81:43:59:26:35:62:97:2f: 97:37:e9:48:b6:20:b8:f0:95:49:c6:2b:8d:5d:21: b8:f6:1a:47:9f:bc:c0:7e:d0:1f:35:93:4c:9c:77: f6:a7:61:b5:a2:0b:a1:d5:c2:db:32:f3:01:bd:25: f3:f4:88:66:84:f1:4d:d4:cb:73:28:9f:d6:7c:91: 3d:cd:5b:2e:08:e8:13:35:57:37:3d:0b:21:99:47: 12:5f:78:2b:2d:bf:06:a7:0b:37:d1:f5:e2:d4:9f: 0c:b5:79:d1:a1:17:51:7e:6e:17:22:5c:9f:bc:74: 91:26:93:9a:fd:70:d0:2f:d8:ca:a4:12:d0:6e:15: dc:e9:2b:6e:9b:54:29:93:d1:dc:45:08:33:00:9c: ce:da:9c:e8:cf:e6:5e:c1:fc:5d:32:ab:6b:dd:66: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E5:1A:DE:F9:7C:27:23:90:B6:CB:E9:AD:4D:1C:61:BC:60:EA:E8 X509v3 Authority Key Identifier: keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:db:b2:b4:f9:28:97:d7:0f:f9:a5:0a:8e:d5:dd:12:91:db: e5:f9:4b:0c:37:dd:f4:e2:bf:52:71:63:e9:b9:61:3e:16:14: 44:ff:4b:b4:cb:06:07:41:64:2c:67:96:c4:06:11:27:2e:25: 29:ea:0b:65:60:55:80:17:60:b1:5c:63:20:61:58:b5:ca:46: f4:69:40:5b:15:a6:f2:55:ce:6e:30:00:21:bc:b2:bd:78:28: 93:05:3f:1a:db:a5:17:60:67:76:ca:c0:7f:0b:9c:ff:9e:80: d1:b5:28:75:c5:ea:47:37:f5:c1:ab:b6:ab:45:84:c1:20:5d: 88:04:f5:97:20:ef:5a:27:be:5f:59:28:d3:92:90:08:b0:e7: 74:38:5e:a0:10:a8:7a:ff:2c:d2:0c:a5:58:8b:ca:f0:92:61: 04:a1:41:7e:e9:b1:34:f8:bc:a4:65:bd:8b:b5:a9:07:95:63: f2:8a:07:ec:15:54:90:99:e9:29:9a:e9:e5:3f:7e:cb:cd:21: ef:aa:1e:10:85:30:05:ed:09:af:75:fe:a8:7d:05:1e:1b:52: cb:3f:62:3f:d7:80:cf:9e:15:5a:52:ad:e7:55:59:b3:67:b1: 79:1d:ba:76:fb:cc:2e:e2:95:ec:8c:b6:8a:cf:3d:de:1d:15: 6d:94:59:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZNjdGWU2jd/IcxmM8Catf/71wYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUz NjEwOEQwMjAeFw0yNjA3MjkwMjM5MzBaFw0yNjA3MzAwMzA5MzBaMDMxMTAvBgNV BAMTKDQ4RTUxQURFRjk3QzI3MjM5MEI2Q0JFOUFENEQxQzYxQkM2MEVBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bcwfN/OKBIDhA1QuUN9/hKNd 4i8AX0A/aa8dwdrA7alksrywXoII62JXLGPaM8iq88NuZtaW3YjGRnICz8fmnC8n PkA0ILMitWscNsFoiRv3+SKiZPFolVn/t+I6OIeBQ1kmNWKXL5c36Ui2ILjwlUnG K41dIbj2GkefvMB+0B81k0ycd/anYbWiC6HVwtsy8wG9JfP0iGaE8U3Uy3Mon9Z8 kT3NWy4I6BM1Vzc9CyGZRxJfeCstvwanCzfR9eLUnwy1edGhF1F+bhciXJ+8dJEm k5r9cNAv2MqkEtBuFdzpK26bVCmT0dxFCDMAnM7anOjP5l7B/F0yq2vdZkPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOUa3vl8JyOQtsvprU0cYbxg6ugwHwYDVR0j BBgwFoAURaHD8dynt8yo26Aj7sLVnjYQjQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgzZWQ3YWItMWFjOS00ZjQyLWFjZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFE Q0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUzNjEwOEQwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUExQzNGMURDQTdCN0NDQThEQkEwMjNFRUMyRDU5RTM2MTA4 RDAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1 OUUzNjEwOEQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHbsrT5KJfXD/mlCo7V3RKR2+X5Sww33fTi v1JxY+m5YT4WFET/S7TLBgdBZCxnlsQGEScuJSnqC2VgVYAXYLFcYyBhWLXKRvRp QFsVpvJVzm4wACG8sr14KJMFPxrbpRdgZ3bKwH8LnP+egNG1KHXF6kc39cGrtqtF hMEgXYgE9Zcg71onvl9ZKNOSkAiw53Q4XqAQqHr/LNIMpViLyvCSYQShQX7psTT4 vKRlvYu1qQeVY/KKB+wVVJCZ6Sma6eU/fsvNIe+qHhCFMAXtCa91/qh9BR4bUss/ Yj/XgM+eFVpSredVWbNnsXkdunb7zC7ileyMtorPPd4dFW2UWRQ= -----END CERTIFICATE-----Generated at Wed Jul 29 13:10:47 2026 by rpki-client