$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: 9jzoX+zzcdFoGYgpR/93kKgdnrI1WEKBX4KNBSqXAUE= Subject key identifier: 63:59:B8:BA:15:85:5E:F2:6C:80:89:AA:7F:19:00:00:A0:3E:F5:98 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 3C1D4A87562891E1EDD20B79FE5535CBD9457880 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 055D Signing time: Tue 17 Mar 2026 20:51:02 +0000 Manifest this update: Tue 17 Mar 2026 20:46:02 +0000 Manifest next update: Sat 21 Mar 2026 05:56:02 +0000 Files and hashes: 1: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) 2: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: I96oER7I4SAnLTmFgz/UHfKBBJtYNAYhsP/QV5HEkGk=) 3: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: jZ+GecsObxDZdFB8Z1R6O4w8Qv4LKv4ZVffnfbuW04o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 05:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1d:4a:87:56:28:91:e1:ed:d2:0b:79:fe:55:35:cb:d9:45:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Mar 17 20:46:02 2026 GMT Not After : Mar 21 05:56:02 2026 GMT Subject: CN=6359B8BA15855EF26C8089AA7F190000A03EF598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:cb:59:bf:7f:46:1f:98:1d:f8:4c:d6:30: 42:02:2c:38:cd:f7:3f:63:cf:53:32:e2:82:c6:5a: d7:5f:45:39:b7:b7:fc:4a:dc:2b:03:e5:d3:32:cc: af:8b:02:c9:ed:ec:6e:23:c6:db:be:29:51:61:c0: 91:f5:df:27:57:bd:27:a6:d0:c9:c7:7e:10:5e:83: 99:14:d6:f8:cf:3b:17:80:e3:09:28:03:b4:ef:03: a3:7f:f8:f2:0f:27:7b:ad:65:ba:81:bd:38:59:0d: 1c:e2:6f:44:5a:cd:60:f1:a7:77:61:88:f1:47:06: 41:f9:e4:75:8b:71:56:9c:df:eb:76:8d:58:55:4c: ea:17:a0:9d:ec:91:60:80:14:ca:9d:e7:19:ee:34: 34:ac:81:5a:14:d7:f8:0a:9d:5a:21:96:65:1f:e9: 18:7b:34:45:f4:2b:c6:77:bf:06:63:d5:81:6a:72: 36:e6:5f:fa:d4:4e:56:ba:35:87:88:e2:62:16:8e: 4d:57:e2:eb:18:9e:7f:dc:87:21:4f:58:6c:08:79: 03:ea:33:85:c2:fd:b9:46:0b:16:4f:ba:ed:54:3e: c3:c5:cb:c0:a0:14:77:a1:ab:11:57:60:92:57:05: ec:68:46:31:a9:30:a4:6b:3c:7b:a9:7f:5a:e4:36: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:59:B8:BA:15:85:5E:F2:6C:80:89:AA:7F:19:00:00:A0:3E:F5:98 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8a:2f:29:fe:70:15:0b:3b:cb:f0:3f:73:3d:99:ca:0d:ae: 53:c9:83:03:b0:f1:9a:8b:f2:07:3e:84:aa:f4:7a:45:db:1b: a9:55:ca:10:11:39:b3:bb:55:9a:4b:86:22:6a:4d:7b:a3:9f: 84:e3:a6:f6:95:8a:d2:4f:48:7f:65:47:87:3c:f1:97:40:a3: 69:c2:8e:4a:67:ee:73:4f:c6:c5:f4:b0:2e:0a:12:12:7e:e7: cc:37:ab:2d:24:d4:8d:3a:4f:8b:d1:b1:fb:75:1b:fd:4f:39: 69:d8:af:b2:db:5e:1a:ef:48:bf:70:16:36:5c:79:2f:1c:8b: e9:dd:a4:ec:ec:45:26:06:ac:91:10:7c:53:54:97:8b:0a:5c: d8:27:4d:ed:ec:0a:bb:df:5e:bc:cc:1a:1e:44:dd:85:00:6d: 16:4d:5d:aa:2e:3e:6f:c4:a6:66:1c:66:c0:2e:9f:d9:3c:8b: 0c:23:d2:e2:4d:79:1b:c7:ce:bd:3c:30:ef:25:d4:83:78:74: 30:ec:6a:00:4b:a4:a7:e0:b0:9a:33:9d:f1:c9:bf:fd:3d:47: 87:ea:2d:f7:4d:1e:ca:40:3d:42:0d:ab:85:33:2c:3f:60:ea: 94:c2:c2:5b:11:b6:dc:46:ac:c3:63:b7:63:b6:7f:c3:88:eb: f6:04:bd:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPB1Kh1YokeHt0gt5/lU1y9lFeIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNjAzMTcyMDQ2MDJaFw0yNjAzMjEwNTU2MDJaMDMxMTAvBgNV BAMTKDYzNTlCOEJBMTU4NTVFRjI2QzgwODlBQTdGMTkwMDAwQTAzRUY1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNo8tZv39GH5gd+EzWMEICLDjN 9z9jz1My4oLGWtdfRTm3t/xK3CsD5dMyzK+LAsnt7G4jxtu+KVFhwJH13ydXvSem 0MnHfhBeg5kU1vjPOxeA4wkoA7TvA6N/+PIPJ3utZbqBvThZDRzib0RazWDxp3dh iPFHBkH55HWLcVac3+t2jVhVTOoXoJ3skWCAFMqd5xnuNDSsgVoU1/gKnVohlmUf 6Rh7NEX0K8Z3vwZj1YFqcjbmX/rUTla6NYeI4mIWjk1X4usYnn/chyFPWGwIeQPq M4XC/blGCxZPuu1UPsPFy8CgFHehqxFXYJJXBexoRjGpMKRrPHupf1rkNnL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY1m4uhWFXvJsgImqfxkAAKA+9ZgwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSKLyn+cBULO8vwP3M9mcoNrlPJgwOw8ZqL 8gc+hKr0ekXbG6lVyhARObO7VZpLhiJqTXujn4TjpvaVitJPSH9lR4c88ZdAo2nC jkpn7nNPxsX0sC4KEhJ+58w3qy0k1I06T4vRsft1G/1POWnYr7LbXhrvSL9wFjZc eS8ci+ndpOzsRSYGrJEQfFNUl4sKXNgnTe3sCrvfXrzMGh5E3YUAbRZNXaouPm/E pmYcZsAun9k8iwwj0uJNeRvHzr08MO8l1IN4dDDsagBLpKfgsJoznfHJv/09R4fq LfdNHspAPUINq4UzLD9g6pTCwlsRttxGrMNjt2O2f8OI6/YEvWI= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:27 2026 by rpki-client