$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft File: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft (raw, json) Hash identifier: 66cXtAUTMnAXsGbZSLDyQ6K1Meyad5pPBaU434re9rw= Subject key identifier: 1F:38:E8:83:77:B3:2F:78:A6:9C:16:1F:B4:B9:4B:7A:0D:DE:99:69 Authority key identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC Certificate issuer: /CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC Certificate serial: 1FBA9BE721273CDF119937D4F2DDA79A15C96C6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:14:55 +0000 Manifest this update: Tue 16 Jun 2026 21:09:55 +0000 Manifest next update: Wed 17 Jun 2026 21:40:55 +0000 Files and hashes: 1: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: O5uC/L29P8IATSFs7V00fPXENgiidDt4Krk5PawD2S0=) 2: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: dmGHcD14vklK6CHGP2dwt3SoTbZEUdzxsUS+JroI8zo=) 3: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: YKOMJLKY4/MM+iRWpGbN1vcrCXvxf8SN7FOq1BH9gB4=) 4: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl (hash: M/3ugbeqAHsOJDaHk6s78QTnnIBpsVHBOEitpK7kG9w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ba:9b:e7:21:27:3c:df:11:99:37:d4:f2:dd:a7:9a:15:c9:6c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC Validity Not Before: Jun 16 21:09:55 2026 GMT Not After : Jun 17 21:40:55 2026 GMT Subject: CN=1F38E88377B32F78A69C161FB4B94B7A0DDE9969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:b3:98:2c:2e:ab:76:08:81:1b:fd:88:4c: 07:2e:fa:0a:d3:c2:f8:ea:70:1f:51:ad:18:8b:5f: dd:bc:d7:28:05:c5:1b:c0:ed:70:93:03:36:00:21: bd:d2:9e:fe:7c:19:92:a9:29:5f:62:84:58:4f:49: 3a:17:62:be:e5:02:99:62:66:77:7b:a3:41:02:90: 2d:4e:2f:ff:d3:de:d9:87:0a:c4:f9:2a:fd:45:f9: ca:69:c2:de:2d:18:b0:a9:18:ef:ba:16:48:a8:49: 98:65:13:57:d4:b9:f9:34:3a:56:50:c4:6c:bd:c4: 8b:88:9f:6e:64:18:a1:eb:d8:2d:90:92:bb:26:ff: 10:1b:6e:7f:6f:af:98:01:0b:bc:1e:5d:1c:2f:6c: 2b:4e:a1:6a:13:98:f0:4b:43:33:13:ed:7e:ca:0c: a2:82:4d:c3:79:eb:2b:36:44:cb:14:51:ba:3a:b5: 68:29:90:88:de:de:e6:51:d1:1a:bc:f6:e9:ba:23: 7c:6f:dd:2e:c1:0f:e9:c2:aa:a6:74:e2:ee:62:48: 31:0d:2b:a1:c6:18:0b:a5:af:85:c4:33:21:0a:d3: 99:a5:50:9c:fb:0c:72:3b:01:8d:f4:df:76:35:f0: f7:f2:aa:4f:25:9e:5a:7e:fe:4f:6c:3b:db:5d:ae: 71:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:38:E8:83:77:B3:2F:78:A6:9C:16:1F:B4:B9:4B:7A:0D:DE:99:69 X509v3 Authority Key Identifier: keyid:45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f3:11:c2:84:19:a5:0a:9b:95:db:98:9b:b5:1a:06:2b:37: e6:99:84:76:37:54:de:93:81:98:74:23:8d:05:4b:5e:09:ff: 28:12:82:7f:1a:76:34:24:69:74:b7:08:d1:63:86:b7:fa:8f: 41:20:dc:c9:8f:be:26:14:06:2b:03:ab:8b:19:dc:c7:f3:51: a4:72:f1:8c:58:ed:61:0c:78:ad:ac:13:aa:f8:de:1d:33:0d: 11:07:a9:85:07:7d:3e:ef:b6:e1:9c:29:cc:87:7d:4a:88:b1: 6e:fc:14:8c:e3:68:75:bd:9a:64:5b:52:61:dc:df:53:c5:14: c7:2f:e1:1e:fa:99:26:19:d2:95:6c:1f:e1:17:25:76:03:79: d6:1d:54:a1:d6:c3:1b:dc:ca:3d:c3:10:b7:48:bc:25:0f:63: 61:ac:f7:35:4c:9d:22:f3:30:0f:74:8b:65:ad:39:3d:3f:4b: fe:13:0a:4d:4e:bd:f3:93:55:9d:41:40:57:9f:05:7a:27:18: 88:a8:ab:a3:af:dc:f0:73:84:c4:7a:9b:fd:b4:d9:b3:72:10: 37:b1:9d:fc:c9:de:60:6e:59:11:da:3d:1e:09:82:76:74:a2: 3e:f4:07:24:2d:9c:eb:13:11:00:4d:a6:ae:57:79:0a:91:5d: 0a:77:7c:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7qb5yEnPN8RmTfU8t2nmhXJbG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGMzUwRTAyNDhDQThBMkIyMEI1M0EyMkJERDNCNkZD RjE2QzdBQzAeFw0yNjA2MTYyMTA5NTVaFw0yNjA2MTcyMTQwNTVaMDMxMTAvBgNV BAMTKDFGMzhFODgzNzdCMzJGNzhBNjlDMTYxRkI0Qjk0QjdBMERERTk5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrurOYLC6rdgiBG/2ITAcu+grT wvjqcB9RrRiLX9281ygFxRvA7XCTAzYAIb3Snv58GZKpKV9ihFhPSToXYr7lApli Znd7o0ECkC1OL//T3tmHCsT5Kv1F+cppwt4tGLCpGO+6FkioSZhlE1fUufk0OlZQ xGy9xIuIn25kGKHr2C2Qkrsm/xAbbn9vr5gBC7weXRwvbCtOoWoTmPBLQzMT7X7K DKKCTcN56ys2RMsUUbo6tWgpkIje3uZR0Rq89um6I3xv3S7BD+nCqqZ04u5iSDEN K6HGGAulr4XEMyEK05mlUJz7DHI7AY3033Y18Pfyqk8lnlp+/k9sO9tdrnE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHzjog3ezL3imnBYftLlLeg3emWkwHwYDVR0j BBgwFoAURfNQ4CSMqKKyC1OiK907b88Wx6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmMyYWIwNjItODcwMy00ZGE2LWFkNzItODBkMjVhZThiZjVmLzAvNDVGMzUwRTAy NDhDQThBMkIyMEI1M0EyMkJERDNCNkZDRjE2QzdBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUYzNTBFMDI0OENBOEEyQjIwQjUzQTIyQkREM0I2RkNGMTZD N0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmMyYWIwNjItODcwMy00ZGE2LWFk NzItODBkMjVhZThiZjVmLzAvNDVGMzUwRTAyNDhDQThBMkIyMEI1M0EyMkJERDNC NkZDRjE2QzdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDzEcKEGaUKm5XbmJu1GgYrN+aZhHY3VN6T gZh0I40FS14J/ygSgn8adjQkaXS3CNFjhrf6j0Eg3MmPviYUBisDq4sZ3MfzUaRy 8YxY7WEMeK2sE6r43h0zDREHqYUHfT7vtuGcKcyHfUqIsW78FIzjaHW9mmRbUmHc 31PFFMcv4R76mSYZ0pVsH+EXJXYDedYdVKHWwxvcyj3DELdIvCUPY2Gs9zVMnSLz MA90i2WtOT0/S/4TCk1OvfOTVZ1BQFefBXonGIioq6Ov3PBzhMR6m/202bNyEDex nfzJ3mBuWRHaPR4JgnZ0oj70ByQtnOsTEQBNpq5XeQqRXQp3fCo= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:03 2026 by rpki-client