$ rpki-client -vvf rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft File: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft (raw, json) Hash identifier: viwJGP3748ZeLHg+AR9n059Yor6R8d3/JqaOoqR09xE= Subject key identifier: 9F:87:4A:03:EE:9F:F9:26:98:A7:18:69:19:4E:10:91:D0:29:C0:78 Authority key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B Certificate issuer: /CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Certificate serial: 1BF453FE75907ABE9C73198B2258A7F6DAC6ED6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:22:49 +0000 Manifest this update: Tue 16 Jun 2026 15:17:49 +0000 Manifest next update: Wed 17 Jun 2026 17:36:49 +0000 Files and hashes: 1: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: hd3heGYgnRZ+Tk6ekukJ3PqnB2LNr3afpBjr80SK/bw=) 2: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gn2qTVHIkC7GBmvI9sm3mViU/5rk6Ham6sDiRDMn4HI=) 3: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: CMIcy7X5aCAauqTlERIV8khM7hpSoP3FOk5Ar2k00es=) 4: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: fCLagHzLZSaa2cnRaKpFh16Ous6QosiWWcEmtC91g9A=) 5: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: 90yPyuCjRCD5lGn6lVhrYkuTOFFoJv0X9oFwGz4Y7ak=) 6: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl (hash: 0c9o2FPbxX4rtlSghhdkyk85znXQKY/P45hQWsnl2eQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f4:53:fe:75:90:7a:be:9c:73:19:8b:22:58:a7:f6:da:c6:ed:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Validity Not Before: Jun 16 15:17:49 2026 GMT Not After : Jun 17 17:36:49 2026 GMT Subject: CN=9F874A03EE9FF92698A71869194E1091D029C078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:1c:c9:6a:58:32:90:bd:b7:1e:b9:8f:e1: f3:c8:f0:6f:3f:99:5d:f7:ac:2a:9e:57:24:8c:9b: 7f:74:39:bb:81:1c:46:45:ff:33:98:5a:af:11:60: 42:a2:39:9e:22:e8:19:41:a2:c8:1c:0c:c3:04:37: 1c:07:90:a1:9f:7a:31:25:5c:b3:4e:44:8b:21:0d: 1d:f1:57:77:70:cc:f8:0e:74:22:1c:df:7b:f6:a0: 81:2b:3a:6f:56:27:2b:d2:42:2a:71:47:59:1c:20: 0b:75:8d:63:a7:4d:19:ff:cc:d2:45:2a:ba:72:7e: ab:11:07:c8:03:65:1c:0f:c6:37:0c:96:b0:89:ae: a8:b7:28:33:22:48:31:e0:94:fa:7f:6b:11:c9:e7: 01:a7:e2:36:40:fe:0f:3d:a2:1e:f1:c0:90:c8:85: 57:bd:ff:ba:87:79:9d:7e:00:25:5d:ab:51:84:d9: 27:dd:bf:19:d9:6e:68:7d:2d:7c:7e:5b:5d:0a:54: e2:eb:68:e4:0b:d3:6a:f8:4d:11:06:1e:5d:4b:0b: fb:c8:1a:b9:84:b7:b8:3a:0a:48:72:5c:fb:04:45: ce:71:f5:04:24:05:eb:e4:45:9f:b1:54:e6:7d:1a: 0e:65:58:5d:54:da:da:4d:52:fa:4e:97:cc:55:e2: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:87:4A:03:EE:9F:F9:26:98:A7:18:69:19:4E:10:91:D0:29:C0:78 X509v3 Authority Key Identifier: keyid:45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:31:a7:20:2d:cb:a4:4f:c1:8d:b7:a9:8a:bc:79:6a:ab:be: b6:ac:f5:43:65:73:58:c4:c9:ae:24:f7:5e:b6:40:7d:7a:d5: e2:46:de:f2:b9:8a:a2:d3:32:5b:53:f5:bf:ee:67:a0:f6:82: 40:56:7b:e6:5f:fe:23:86:32:57:3e:b6:68:c7:37:6e:d3:f8: 9a:bf:90:fd:81:33:01:7b:4c:8d:63:56:90:05:91:30:6b:e2: 3d:f8:f9:b1:68:fa:5b:4e:01:0a:4b:16:4f:be:6b:39:3b:1c: a4:34:fa:da:38:c4:0b:e8:80:d0:b3:fb:c8:b8:63:50:92:c3: 7c:89:7a:e4:6f:5a:67:31:1a:49:83:02:b7:be:18:56:54:39: 59:2a:39:4d:36:7e:57:4d:16:fe:de:e7:a7:22:f3:39:d8:e2: 01:f2:bc:e8:fd:ce:5c:27:de:bb:8d:b3:c7:1d:2f:43:66:e2: 76:6c:2c:b9:89:f7:86:9c:42:d0:2b:69:3a:68:8c:ed:33:93: da:70:ed:31:36:bf:95:bf:ee:48:c1:d7:72:01:34:89:96:9e: e6:00:15:82:a0:47:a1:61:f1:b8:3e:fb:82:a7:9a:f6:44:53: f7:2d:c0:2d:33:34:e5:92:f3:8b:92:37:be:ec:08:df:75:d4: 8a:f0:ae:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/RT/nWQer6ccxmLIlin9trG7WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1 MDJCMzI3QjAeFw0yNjA2MTYxNTE3NDlaFw0yNjA2MTcxNzM2NDlaMDMxMTAvBgNV BAMTKDlGODc0QTAzRUU5RkY5MjY5OEE3MTg2OTE5NEUxMDkxRDAyOUMwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCRzJalgykL23HrmP4fPI8G8/ mV33rCqeVySMm390ObuBHEZF/zOYWq8RYEKiOZ4i6BlBosgcDMMENxwHkKGfejEl XLNORIshDR3xV3dwzPgOdCIc33v2oIErOm9WJyvSQipxR1kcIAt1jWOnTRn/zNJF KrpyfqsRB8gDZRwPxjcMlrCJrqi3KDMiSDHglPp/axHJ5wGn4jZA/g89oh7xwJDI hVe9/7qHeZ1+ACVdq1GE2SfdvxnZbmh9LXx+W10KVOLraOQL02r4TREGHl1LC/vI GrmEt7g6CkhyXPsERc5x9QQkBevkRZ+xVOZ9Gg5lWF1U2tpNUvpOl8xV4lq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn4dKA+6f+SaYpxhpGU4QkdApwHgwHwYDVR0j BBgwFoAURfTrN6oXiiQrjY3XI7XptVArMnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEyNGFhOGMtZGVkYy00Mzc2LTkzODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdB QTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1MDJCMzI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUY0RUIzN0FBMTc4QTI0MkI4RDhERDcyM0I1RTlCNTUwMkIz MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5 QjU1MDJCMzI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUxpyAty6RPwY23qYq8eWqrvras9UNlc1jE ya4k9162QH161eJG3vK5iqLTMltT9b/uZ6D2gkBWe+Zf/iOGMlc+tmjHN27T+Jq/ kP2BMwF7TI1jVpAFkTBr4j34+bFo+ltOAQpLFk++azk7HKQ0+to4xAvogNCz+8i4 Y1CSw3yJeuRvWmcxGkmDAre+GFZUOVkqOU02fldNFv7e56ci8znY4gHyvOj9zlwn 3ruNs8cdL0Nm4nZsLLmJ94acQtAraTpojO0zk9pw7TE2v5W/7kjB13IBNImWnuYA FYKgR6Fh8bg++4KnmvZEU/ctwC0zNOWS84uSN77sCN911Irwrjc= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:11 2026 by rpki-client