$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft File: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft (raw, json) Hash identifier: 0jC9YZytWkASKB685X3TozWhYAVJYlXUBynw5M3869Q= Subject key identifier: 3A:E1:13:08:84:53:BE:5F:87:86:2C:04:47:D2:F0:B1:49:85:7A:C9 Authority key identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC Certificate issuer: /CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC Certificate serial: 70B596F772C062E9C7D143CCB34781C3C44B9136 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 09:42:00 +0000 Manifest this update: Mon 28 Sep 2026 09:37:00 +0000 Manifest next update: Tue 29 Sep 2026 12:14:00 +0000 Files and hashes: 1: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl (hash: WHrNFOrx4TWzxLBoTEGEy4YECiTyvFDX8O1iC+aRaY8=) 2: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: O5uC/L29P8IATSFs7V00fPXENgiidDt4Krk5PawD2S0=) 3: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: dmGHcD14vklK6CHGP2dwt3SoTbZEUdzxsUS+JroI8zo=) 4: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: YKOMJLKY4/MM+iRWpGbN1vcrCXvxf8SN7FOq1BH9gB4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 12:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b5:96:f7:72:c0:62:e9:c7:d1:43:cc:b3:47:81:c3:c4:4b:91:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC Validity Not Before: Sep 28 09:37:00 2026 GMT Not After : Sep 29 12:14:00 2026 GMT Subject: CN=3AE113088453BE5F87862C0447D2F0B149857AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:9b:17:e6:d2:c6:c9:ff:a0:ac:36:7d:45: c5:eb:bb:29:21:0d:36:4b:28:2b:8f:fb:ba:b6:66: 40:a8:8d:c6:da:cf:75:98:8e:b9:7c:0c:25:ec:a1: 7b:4d:3e:52:f2:e6:48:78:51:7f:67:10:e1:f2:da: 87:13:33:d9:ee:5a:77:4e:1d:6e:80:d8:6f:db:0a: ba:20:f2:ff:d9:2b:e1:5f:51:81:a0:31:f8:d2:ee: c0:88:a4:97:e8:6c:1a:0e:98:c2:af:52:6a:92:0c: 88:20:de:53:a7:fc:84:6d:3d:f3:38:87:fe:75:b6: 6b:f2:85:04:86:e3:a8:3e:88:2e:e0:ad:a6:f7:11: 55:0d:aa:4d:87:ac:37:0c:64:63:bd:d0:0f:3a:d8: 44:4a:fe:4b:66:54:45:12:c6:ea:43:3b:2d:0a:19: 55:66:b9:72:85:2f:42:62:da:fb:e2:13:2c:82:c2: 4d:d0:b1:ea:a6:0f:87:9f:bc:7c:4e:62:2a:1e:ae: 98:56:28:a2:5c:bc:09:79:0c:96:69:7f:79:72:34: ea:ae:d7:b9:91:27:c9:e0:44:6d:b8:44:6e:6a:37: 7f:13:2f:46:a7:50:03:6f:ec:3f:71:b5:5e:cb:a9: 5a:a3:31:dc:d9:ec:67:bb:dd:db:4c:f1:5f:e7:3c: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E1:13:08:84:53:BE:5F:87:86:2C:04:47:D2:F0:B1:49:85:7A:C9 X509v3 Authority Key Identifier: keyid:45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8e:fc:7d:c5:03:0e:f5:75:2c:09:8e:b9:43:ff:51:18:5a: 66:c8:e3:2c:f4:66:41:80:e3:b2:db:9a:86:f4:17:13:31:7b: d2:e4:36:fe:90:34:fc:21:98:dc:9e:03:ad:70:f3:2c:01:15: 60:7d:40:db:d1:aa:c9:46:65:fc:9f:20:61:32:dd:ea:5f:a9: 16:70:bf:20:ce:7a:6b:11:14:de:fd:81:12:9a:5c:e1:57:3e: 39:11:ca:db:8f:0b:d5:12:59:a8:05:90:70:96:03:e3:f4:ae: 2a:52:7f:2a:c8:c5:a5:f9:57:be:c2:08:71:44:23:5f:44:3b: 9b:30:a2:19:d1:d6:95:3c:aa:01:eb:24:02:3d:ee:95:28:12: 03:0e:cc:f0:01:79:fd:63:dc:41:29:12:52:0a:9d:41:45:2a: 44:92:3b:24:eb:fc:3e:c2:37:c8:4f:46:08:2f:68:25:76:3d: b1:b2:99:7c:17:f9:c3:f7:70:10:7e:7f:cf:9b:fb:4f:53:a7: c3:88:5e:08:f9:3a:ba:43:4a:7f:33:aa:d1:aa:b6:77:ab:bc: 8d:b4:70:d8:e3:c1:47:37:c8:8d:f8:08:5e:6f:49:dc:b9:22: b5:9f:50:3b:ba:c8:af:a8:e0:a1:69:b2:00:6a:e4:43:52:c8: c7:35:38:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLWW93LAYunH0UPMs0eBw8RLkTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGMzUwRTAyNDhDQThBMkIyMEI1M0EyMkJERDNCNkZD RjE2QzdBQzAeFw0yNjA5MjgwOTM3MDBaFw0yNjA5MjkxMjE0MDBaMDMxMTAvBgNV BAMTKDNBRTExMzA4ODQ1M0JFNUY4Nzg2MkMwNDQ3RDJGMEIxNDk4NTdBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdJsX5tLGyf+grDZ9RcXruykh DTZLKCuP+7q2ZkCojcbaz3WYjrl8DCXsoXtNPlLy5kh4UX9nEOHy2ocTM9nuWndO HW6A2G/bCrog8v/ZK+FfUYGgMfjS7sCIpJfobBoOmMKvUmqSDIgg3lOn/IRtPfM4 h/51tmvyhQSG46g+iC7grab3EVUNqk2HrDcMZGO90A862ERK/ktmVEUSxupDOy0K GVVmuXKFL0Ji2vviEyyCwk3QseqmD4efvHxOYioerphWKKJcvAl5DJZpf3lyNOqu 17mRJ8ngRG24RG5qN38TL0anUANv7D9xtV7LqVqjMdzZ7Ge73dtM8V/nPAqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOuETCIRTvl+HhiwER9LwsUmFeskwHwYDVR0j BBgwFoAURfNQ4CSMqKKyC1OiK907b88Wx6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmMyYWIwNjItODcwMy00ZGE2LWFkNzItODBkMjVhZThiZjVmLzAvNDVGMzUwRTAy NDhDQThBMkIyMEI1M0EyMkJERDNCNkZDRjE2QzdBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUYzNTBFMDI0OENBOEEyQjIwQjUzQTIyQkREM0I2RkNGMTZD N0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmMyYWIwNjItODcwMy00ZGE2LWFk NzItODBkMjVhZThiZjVmLzAvNDVGMzUwRTAyNDhDQThBMkIyMEI1M0EyMkJERDNC NkZDRjE2QzdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOO/H3FAw71dSwJjrlD/1EYWmbI4yz0ZkGA 47Lbmob0FxMxe9LkNv6QNPwhmNyeA61w8ywBFWB9QNvRqslGZfyfIGEy3epfqRZw vyDOemsRFN79gRKaXOFXPjkRytuPC9USWagFkHCWA+P0ripSfyrIxaX5V77CCHFE I19EO5swohnR1pU8qgHrJAI97pUoEgMOzPABef1j3EEpElIKnUFFKkSSOyTr/D7C N8hPRggvaCV2PbGymXwX+cP3cBB+f8+b+09Tp8OIXgj5OrpDSn8zqtGqtnervI20 cNjjwUc3yI34CF5vSdy5IrWfUDu6yK+o4KFpsgBq5ENSyMc1OGc= -----END CERTIFICATE-----Generated at Mon Sep 28 18:29:12 2026 by rpki-client