$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft File: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft (raw, json) Hash identifier: r9XlKIfqKZoCmMfK9DdYLCAXD3gVaBwRuDHtvs6XYh0= Subject key identifier: 3C:60:1C:2A:4B:2D:10:61:9A:4E:B8:71:8A:0A:34:FA:63:28:34:80 Authority key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B Certificate issuer: /CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Certificate serial: 69FB495CC6E59321BF39FFF0010A4B9162F79D84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft Manifest number: BE Signing time: Tue 22 Sep 2026 03:25:52 +0000 Manifest this update: Tue 22 Sep 2026 03:20:52 +0000 Manifest next update: Wed 23 Sep 2026 05:34:52 +0000 Files and hashes: 1: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: hd3heGYgnRZ+Tk6ekukJ3PqnB2LNr3afpBjr80SK/bw=) 2: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: fCLagHzLZSaa2cnRaKpFh16Ous6QosiWWcEmtC91g9A=) 3: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: 90yPyuCjRCD5lGn6lVhrYkuTOFFoJv0X9oFwGz4Y7ak=) 4: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl (hash: 7R2CERaRdNpycv6bPhU94giY7+gOzYdJb8A7Xo6GnZU=) 5: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: CMIcy7X5aCAauqTlERIV8khM7hpSoP3FOk5Ar2k00es=) 6: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gn2qTVHIkC7GBmvI9sm3mViU/5rk6Ham6sDiRDMn4HI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fb:49:5c:c6:e5:93:21:bf:39:ff:f0:01:0a:4b:91:62:f7:9d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Validity Not Before: Sep 22 03:20:52 2026 GMT Not After : Sep 23 05:34:52 2026 GMT Subject: CN=3C601C2A4B2D10619A4EB8718A0A34FA63283480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:fc:a5:c1:c4:f8:df:94:30:f7:bd:98:a1: 06:16:e9:1e:9f:9c:d5:98:3c:ce:b7:5d:34:95:a0: 78:bf:de:6f:83:ab:73:b5:a0:31:e6:8e:8b:0c:3a: a8:64:63:32:28:c1:1b:0d:84:a7:84:6f:64:c2:63: c2:fd:97:04:0f:fb:0c:14:99:a0:fa:b7:e8:85:a4: 89:19:f4:98:66:73:37:25:69:31:f3:9f:9a:54:34: b8:11:5d:c5:98:05:30:03:d5:8f:47:dd:43:20:26: 6e:82:4f:4d:71:9b:83:7e:24:ad:a2:f2:c2:e8:b5: 4b:7d:a4:7d:d8:70:97:82:a8:73:e8:b2:8d:55:84: 9e:fe:6b:c1:0a:11:37:00:6f:99:5e:e7:bb:27:15: c4:c0:af:27:27:73:0b:1f:a7:b0:bc:53:a8:54:22: 67:69:18:81:fb:25:93:1e:fe:a2:b2:75:72:96:da: 15:1c:01:94:3a:24:45:bc:f2:3e:0c:13:83:50:86: 58:5b:6a:fc:9d:91:f4:02:13:cf:fb:68:17:4a:b7: b0:fd:fd:38:3a:92:4f:a5:19:5d:3e:12:44:c6:57: e4:3a:54:cd:30:fc:9b:07:9e:3c:94:10:5c:07:f3: 44:6e:6a:bc:4a:2b:99:4f:bb:3a:9a:a9:0b:0e:16: 18:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:60:1C:2A:4B:2D:10:61:9A:4E:B8:71:8A:0A:34:FA:63:28:34:80 X509v3 Authority Key Identifier: keyid:45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:72:f0:ae:8d:31:8c:9c:78:30:a2:28:9f:f9:ad:5f:c9:ca: 67:f1:57:a1:65:cd:51:72:7c:e9:8f:69:3f:9d:1b:3b:3c:37: 28:45:3d:05:da:10:b9:5e:0b:7d:3c:84:0c:46:89:fc:b0:19: cf:f8:f2:09:40:6e:61:c0:1c:17:00:74:98:64:2c:d0:6a:1f: 03:9c:9d:b9:16:2f:f6:b8:99:a4:f6:fe:7c:d9:73:e2:9c:e2: ea:55:78:94:81:57:cb:e5:d8:ec:7e:39:4a:3e:98:8f:c6:8e: b0:22:ce:64:8f:e6:4e:58:f4:19:78:7f:ed:02:cb:93:fe:2f: b0:f8:ac:87:37:6a:d2:c0:a7:5f:f2:c8:c1:da:97:31:d5:47: b0:9b:8f:20:a6:54:ac:30:48:99:bc:69:a3:89:0c:dc:50:a1: d7:ee:f8:28:e9:bb:bf:2c:5b:ed:74:e8:61:8b:e2:ad:b4:d9: 6a:3c:25:27:10:f2:f7:bb:57:d8:eb:6f:e4:19:c6:f3:ff:f6: f7:58:38:a4:a0:06:41:16:c0:90:85:bf:35:cc:54:b2:f6:00: d8:5c:62:da:eb:6a:5c:ce:9d:da:bf:21:fc:ba:a3:ae:ad:7e: d1:e2:5b:83:f9:c5:69:13:23:e2:7a:9a:68:85:f8:4d:3b:00: f9:5b:4a:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaftJXMblkyG/Of/wAQpLkWL3nYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1 MDJCMzI3QjAeFw0yNjA5MjIwMzIwNTJaFw0yNjA5MjMwNTM0NTJaMDMxMTAvBgNV BAMTKDNDNjAxQzJBNEIyRDEwNjE5QTRFQjg3MThBMEEzNEZBNjMyODM0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5U/ylwcT435Qw972YoQYW6R6f nNWYPM63XTSVoHi/3m+Dq3O1oDHmjosMOqhkYzIowRsNhKeEb2TCY8L9lwQP+wwU maD6t+iFpIkZ9JhmczclaTHzn5pUNLgRXcWYBTAD1Y9H3UMgJm6CT01xm4N+JK2i 8sLotUt9pH3YcJeCqHPoso1VhJ7+a8EKETcAb5le57snFcTArycncwsfp7C8U6hU ImdpGIH7JZMe/qKydXKW2hUcAZQ6JEW88j4ME4NQhlhbavydkfQCE8/7aBdKt7D9 /Tg6kk+lGV0+EkTGV+Q6VM0w/JsHnjyUEFwH80RuarxKK5lPuzqaqQsOFhgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPGAcKkstEGGaTrhxigo0+mMoNIAwHwYDVR0j BBgwFoAURfTrN6oXiiQrjY3XI7XptVArMnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEyNGFhOGMtZGVkYy00Mzc2LTkzODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdB QTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1MDJCMzI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUY0RUIzN0FBMTc4QTI0MkI4RDhERDcyM0I1RTlCNTUwMkIz MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5 QjU1MDJCMzI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVy8K6NMYyceDCiKJ/5rV/JymfxV6FlzVFy fOmPaT+dGzs8NyhFPQXaELleC308hAxGifywGc/48glAbmHAHBcAdJhkLNBqHwOc nbkWL/a4maT2/nzZc+Kc4upVeJSBV8vl2Ox+OUo+mI/GjrAizmSP5k5Y9Bl4f+0C y5P+L7D4rIc3atLAp1/yyMHalzHVR7CbjyCmVKwwSJm8aaOJDNxQodfu+Cjpu78s W+106GGL4q202Wo8JScQ8ve7V9jrb+QZxvP/9vdYOKSgBkEWwJCFvzXMVLL2ANhc YtrralzOndq/Ify6o66tftHiW4P5xWkTI+J6mmiF+E07APlbSpE= -----END CERTIFICATE-----Generated at Tue Sep 22 18:51:08 2026 by rpki-client