$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft File: 45E5895753396A59380E8B15A613362BDD0B9399.mft (raw, json) Hash identifier: r7AgKDw5lPsABmduzHR0U7S1I8eewyAGJQnrZYVZCt8= Subject key identifier: 30:B3:B1:85:75:A4:A7:7D:9C:52:A9:9B:46:0E:64:38:06:99:27:59 Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 Certificate issuer: /CN=45E5895753396A59380E8B15A613362BDD0B9399 Certificate serial: 0D7BD051F48D4FD72766F942CC1787A8009F3BA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft Manifest number: CD Signing time: Fri 02 Oct 2026 23:50:33 +0000 Manifest this update: Fri 02 Oct 2026 23:45:33 +0000 Manifest next update: Sun 04 Oct 2026 01:51:33 +0000 Files and hashes: 1: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: 150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=) 2: 45E5895753396A59380E8B15A613362BDD0B9399.crl (hash: dhnNjJcfnnjfSSyp2OVxb8TNRh2n49bzya+bc9MAQDA=) 3: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: apfoCrb1SRZGVQ94mZUP6Yq3PvFMs7dSvIUcNJlRoMg=) 4: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: KhIaiPcjWv7aKSlHmjk0jk/GmZyLW5p+ewjbZDKYFRM=) 5: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: 9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 01:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7b:d0:51:f4:8d:4f:d7:27:66:f9:42:cc:17:87:a8:00:9f:3b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399 Validity Not Before: Oct 2 23:45:33 2026 GMT Not After : Oct 4 01:51:33 2026 GMT Subject: CN=30B3B18575A4A77D9C52A99B460E643806992759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3d:50:39:19:2d:e6:be:2b:f4:42:ab:69:e4: a8:e7:ce:73:43:3e:8c:9c:8b:91:f7:ee:3b:c5:de: 5c:3a:e0:2e:4d:64:8b:e5:69:ba:1a:f4:b1:1b:56: e5:4c:8e:c7:df:e9:d3:ce:33:7c:de:b4:7b:e9:1b: b3:d1:97:c3:76:d0:b0:2d:33:4b:90:c4:b2:eb:be: 18:0d:66:16:c9:00:44:df:56:f2:71:90:44:b8:18: 01:c8:54:58:b2:7b:6a:f2:ab:87:08:cf:51:93:8f: 20:3e:48:e4:64:32:bb:d5:56:3a:f2:00:ba:8f:eb: b9:1f:7a:f8:ce:f1:01:fb:81:b9:d3:b7:3c:b4:fe: a9:56:35:cb:ad:45:9f:af:dc:33:bf:bd:0e:f1:1d: e8:ed:5b:5f:aa:2b:ea:60:37:a0:9a:a2:5e:66:da: 62:70:51:c6:7c:30:37:d5:d3:cc:05:c3:0a:38:d0: b5:2e:61:95:54:4a:2d:7d:65:13:71:40:6b:83:91: 70:49:1b:4e:7d:fd:0b:2c:79:79:0f:36:ff:72:fc: 61:a8:05:5f:0b:c4:eb:84:b1:68:2a:cb:c4:0f:f2: bb:ca:3b:6f:cc:df:9a:0e:c4:a1:d6:1d:4e:23:db: 79:2d:ca:7c:25:92:b8:68:05:14:b0:4b:fb:73:2f: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B3:B1:85:75:A4:A7:7D:9C:52:A9:9B:46:0E:64:38:06:99:27:59 X509v3 Authority Key Identifier: keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:86:d6:3b:c9:18:4a:ab:c4:9f:be:7c:eb:9e:80:60:30:2a: 31:22:d0:90:f5:95:21:27:64:12:e7:fb:96:07:36:09:17:31: 3a:e5:db:e0:d4:a6:72:2d:72:f4:25:bc:07:c0:d3:10:44:ee: 7b:35:54:2c:3b:05:4b:65:24:ff:34:0f:dc:96:af:a3:c2:2e: 88:bf:89:25:4d:cd:97:53:a9:7b:f3:87:b1:20:a3:be:37:6e: e4:f1:4e:99:6c:43:d1:4e:54:39:ba:8e:a9:94:9d:17:89:a0: d9:fa:4e:d7:d6:94:ce:8e:ce:56:20:5c:75:14:1a:0e:13:fd: 05:2f:40:fb:e3:df:5a:d2:61:07:98:da:93:fe:d5:05:89:29: c6:94:40:c4:95:94:97:3a:b8:3d:70:01:2e:a4:05:02:e6:d0: a8:63:1c:aa:be:56:6f:3b:2e:f8:ba:9b:b4:5a:20:2e:4d:46: c8:fb:04:f8:58:e7:09:73:d2:26:92:4e:f7:99:7f:d3:27:57: 40:69:c4:60:cb:a0:20:7d:63:9d:39:28:25:31:de:4f:a9:28: 4b:2c:ff:85:bc:40:f9:21:86:0f:4b:42:7d:f6:f6:95:27:85: 94:f5:62:e4:aa:ea:00:b3:01:ec:d9:4f:ac:e0:94:73:9d:09: 1c:5a:cf:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXvQUfSNT9cnZvlCzBeHqACfO6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJE RDBCOTM5OTAeFw0yNjEwMDIyMzQ1MzNaFw0yNjEwMDQwMTUxMzNaMDMxMTAvBgNV BAMTKDMwQjNCMTg1NzVBNEE3N0Q5QzUyQTk5QjQ2MEU2NDM4MDY5OTI3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQPVA5GS3mviv0Qqtp5KjnznND Poyci5H37jvF3lw64C5NZIvlaboa9LEbVuVMjsff6dPOM3zetHvpG7PRl8N20LAt M0uQxLLrvhgNZhbJAETfVvJxkES4GAHIVFiye2ryq4cIz1GTjyA+SORkMrvVVjry ALqP67kfevjO8QH7gbnTtzy0/qlWNcutRZ+v3DO/vQ7xHejtW1+qK+pgN6Caol5m 2mJwUcZ8MDfV08wFwwo40LUuYZVUSi19ZRNxQGuDkXBJG059/QsseXkPNv9y/GGo BV8LxOuEsWgqy8QP8rvKO2/M35oOxKHWHU4j23ktynwlkrhoBRSwS/tzL8iDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMLOxhXWkp32cUqmbRg5kOAaZJ1kwHwYDVR0j BBgwFoAUReWJV1M5alk4DosVphM2K90Lk5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZiODdmZWItMGZlMi00MThhLWEzN2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1 MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJERDBCOTM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUU1ODk1NzUzMzk2QTU5MzgwRThCMTVBNjEzMzYyQkREMEI5 Mzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2 MkJERDBCOTM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaG1jvJGEqrxJ++fOuegGAwKjEi0JD1lSEn ZBLn+5YHNgkXMTrl2+DUpnItcvQlvAfA0xBE7ns1VCw7BUtlJP80D9yWr6PCLoi/ iSVNzZdTqXvzh7Ego743buTxTplsQ9FOVDm6jqmUnReJoNn6TtfWlM6OzlYgXHUU Gg4T/QUvQPvj31rSYQeY2pP+1QWJKcaUQMSVlJc6uD1wAS6kBQLm0KhjHKq+Vm87 Lvi6m7RaIC5NRsj7BPhY5wlz0iaSTveZf9MnV0BpxGDLoCB9Y505KCUx3k+pKEss /4W8QPkhhg9LQn329pUnhZT1YuSq6gCzAezZT6zglHOdCRxaz/8= -----END CERTIFICATE-----Generated at Sat Oct 3 19:37:45 2026 by rpki-client