$ rpki-client -vvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft File: 45E5895753396A59380E8B15A613362BDD0B9399.mft (raw, json) Hash identifier: u1FcyKXFY7AsBdfyvasulX7CGcCksXM2q2cwddU5adE= Subject key identifier: BB:78:EA:2E:1F:AA:67:45:52:4A:D1:EA:0D:71:90:7A:7B:E8:CF:0B Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 Certificate issuer: /CN=45E5895753396A59380E8B15A613362BDD0B9399 Certificate serial: 2F39BDC6461E637471D3344C6684AF1E53DBF94C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 07:48:23 +0000 Manifest this update: Sat 13 Jun 2026 07:43:23 +0000 Manifest next update: Sun 14 Jun 2026 11:45:23 +0000 Files and hashes: 1: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: apfoCrb1SRZGVQ94mZUP6Yq3PvFMs7dSvIUcNJlRoMg=) 2: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: 9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=) 3: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: KhIaiPcjWv7aKSlHmjk0jk/GmZyLW5p+ewjbZDKYFRM=) 4: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: 150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=) 5: 45E5895753396A59380E8B15A613362BDD0B9399.crl (hash: 3iX8J4I6HmwC2BrVFxQT1XbuFuU3ezO4WHXseFCBNGc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:39:bd:c6:46:1e:63:74:71:d3:34:4c:66:84:af:1e:53:db:f9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399 Validity Not Before: Jun 13 07:43:23 2026 GMT Not After : Jun 14 11:45:23 2026 GMT Subject: CN=BB78EA2E1FAA6745524AD1EA0D71907A7BE8CF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:d1:69:97:3a:2e:ef:94:6c:c4:3c:52:ad: 5d:d0:1a:59:8a:70:4c:8c:04:b8:17:27:23:85:dd: 25:c1:d7:d1:d3:48:d6:b2:af:6e:ea:01:80:d8:8f: c6:dc:ee:6e:7d:55:67:c2:66:76:30:fe:62:93:15: 3d:9c:6d:f8:bb:65:1f:4c:97:a5:aa:fb:80:9d:02: ba:66:d2:ef:f8:ee:87:53:f7:a2:64:56:b9:f6:c7: dd:d6:f6:01:4d:61:33:5b:71:c0:6b:30:4e:0f:a7: f6:c7:e7:11:c4:87:e2:b5:35:7b:71:a5:95:c3:f6: ac:c5:d2:ae:06:83:f4:12:5b:03:8f:8c:e0:71:df: a9:d1:3e:ba:95:34:41:d0:ce:ea:2e:c7:cb:9d:9d: 50:cd:f1:09:25:d6:e6:c1:40:48:f5:08:b9:a8:58: bd:93:fe:ba:f7:67:29:86:5a:68:1a:25:c3:a5:4d: c1:7f:53:d1:70:92:de:26:f2:ac:45:9c:59:f6:3c: 9e:8e:70:66:a4:8d:91:ca:cb:e9:bc:e2:9a:a1:45: 73:a7:7f:8b:85:dd:38:c8:b8:57:e6:1a:43:12:4b: b7:ad:03:b6:d7:fa:87:54:99:14:4d:eb:82:27:c0: 20:67:8b:3b:ce:9c:88:1e:da:7b:12:2e:70:62:a1: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:78:EA:2E:1F:AA:67:45:52:4A:D1:EA:0D:71:90:7A:7B:E8:CF:0B X509v3 Authority Key Identifier: keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:67:29:c6:52:c8:4a:14:b0:92:2c:8c:a1:8f:6f:51:85:e9: 36:f5:ca:60:4e:6a:93:17:aa:c8:1e:9e:33:ff:a9:56:5d:06: 5c:ef:05:b7:c8:4a:dd:a5:f2:fd:c5:c9:18:a7:ad:59:73:05: c3:a1:ec:1e:f5:55:92:0e:7e:ea:02:71:16:c3:97:f3:0c:e0: 4a:5f:b6:79:a9:68:56:30:06:f2:f5:a1:26:41:3e:5b:99:6a: 30:2b:ed:26:ce:9f:e7:c5:9e:62:24:dc:1a:f9:db:66:40:0e: f9:b1:f1:9e:de:62:91:aa:14:e7:85:7e:c3:98:e3:db:b5:db: 12:49:a0:eb:83:c8:fb:50:2a:71:ae:16:8e:0e:51:68:14:04: 48:c2:a0:49:47:d8:3f:72:05:b6:be:c4:59:c5:27:8a:e8:47: f9:f7:52:f6:96:34:ea:e6:33:cb:7e:c2:ba:10:61:c1:5a:94: 53:03:a8:86:f4:e8:35:df:0d:51:1a:6c:60:13:6c:94:ca:23: 6e:ee:2f:6d:d2:df:8f:c2:03:73:94:40:ea:f7:e7:9e:14:8b: 56:cb:04:74:34:7a:36:e5:11:cf:8e:af:6d:d0:f7:25:5b:20: 50:34:0b:e9:e8:19:ab:79:b4:1a:1c:26:a5:1f:f8:e2:68:33: fe:5c:3f:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzm9xkYeY3Rx0zRMZoSvHlPb+UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJE RDBCOTM5OTAeFw0yNjA2MTMwNzQzMjNaFw0yNjA2MTQxMTQ1MjNaMDMxMTAvBgNV BAMTKEJCNzhFQTJFMUZBQTY3NDU1MjRBRDFFQTBENzE5MDdBN0JFOENGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ2tFplzou75RsxDxSrV3QGlmK cEyMBLgXJyOF3SXB19HTSNayr27qAYDYj8bc7m59VWfCZnYw/mKTFT2cbfi7ZR9M l6Wq+4CdArpm0u/47odT96JkVrn2x93W9gFNYTNbccBrME4Pp/bH5xHEh+K1NXtx pZXD9qzF0q4Gg/QSWwOPjOBx36nRPrqVNEHQzuoux8udnVDN8Qkl1ubBQEj1CLmo WL2T/rr3ZymGWmgaJcOlTcF/U9Fwkt4m8qxFnFn2PJ6OcGakjZHKy+m84pqhRXOn f4uF3TjIuFfmGkMSS7etA7bX+odUmRRN64InwCBnizvOnIge2nsSLnBiocApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu3jqLh+qZ0VSStHqDXGQenvozwswHwYDVR0j BBgwFoAUReWJV1M5alk4DosVphM2K90Lk5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZiODdmZWItMGZlMi00MThhLWEzN2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1 MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJERDBCOTM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUU1ODk1NzUzMzk2QTU5MzgwRThCMTVBNjEzMzYyQkREMEI5 Mzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2 MkJERDBCOTM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBnKcZSyEoUsJIsjKGPb1GF6Tb1ymBOapMX qsgenjP/qVZdBlzvBbfISt2l8v3FyRinrVlzBcOh7B71VZIOfuoCcRbDl/MM4Epf tnmpaFYwBvL1oSZBPluZajAr7SbOn+fFnmIk3Br522ZADvmx8Z7eYpGqFOeFfsOY 49u12xJJoOuDyPtQKnGuFo4OUWgUBEjCoElH2D9yBba+xFnFJ4roR/n3UvaWNOrm M8t+wroQYcFalFMDqIb06DXfDVEabGATbJTKI27uL23S34/CA3OUQOr3554Ui1bL BHQ0ejblEc+Or23Q9yVbIFA0C+noGat5tBocJqUf+OJoM/5cP3Y= -----END CERTIFICATE-----Generated at Sat Jun 13 17:16:35 2026 by rpki-client