$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: p3tYV1H6kT9IXXkuPYTN0wrdkWg89/NLduYc9ZuiTFU= Subject key identifier: AB:FA:15:B7:13:54:33:51:7D:E2:49:C1:93:7D:E5:E0:FD:B5:C7:D3 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 1CB9E8C180D6F538E7AF32A99A584DA98D8AFB40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 055D Signing time: Thu 19 Mar 2026 21:31:40 +0000 Manifest this update: Thu 19 Mar 2026 21:26:40 +0000 Manifest next update: Mon 23 Mar 2026 06:47:40 +0000 Files and hashes: 1: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 2: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) 3: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 4: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: LXa+UwV5QoOr6ryIC+HdxZKJb45qeJP7i+J8Qr4V3C0=) 5: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 06:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b9:e8:c1:80:d6:f5:38:e7:af:32:a9:9a:58:4d:a9:8d:8a:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Mar 19 21:26:40 2026 GMT Not After : Mar 23 06:47:40 2026 GMT Subject: CN=ABFA15B7135433517DE249C1937DE5E0FDB5C7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:47:9d:6f:d0:32:f8:c4:db:5c:b3:df:21: a5:96:c5:a4:24:cc:c5:8a:2e:5d:d5:1f:cb:b5:98: 72:c8:54:b5:04:ff:74:ee:9a:21:b7:ae:5c:07:a0: 37:bd:d6:64:28:fe:12:74:d9:20:8d:84:82:0b:52: bf:8c:a4:db:ea:b1:57:e7:37:46:1d:10:65:b9:1e: 3d:2d:3c:2a:ee:e1:cf:2a:eb:8f:54:c4:ec:f5:40: e1:13:81:e6:22:4d:37:08:bc:9e:dc:b2:32:ac:c9: 19:57:d6:5b:c5:30:cf:c9:da:76:e1:93:dd:0f:5a: 90:a9:cc:dc:0b:dd:d8:09:3e:77:53:ae:09:31:1d: 32:0c:84:45:32:11:eb:e2:2a:4f:6e:93:40:8e:95: 90:56:ce:bc:c4:3d:86:57:d0:69:69:57:5d:87:54: f6:9e:62:c0:3c:7d:0d:5b:a3:a6:7d:a0:67:dd:89: 59:3a:9e:50:2b:c7:d5:2e:fb:af:d3:df:10:d9:14: e7:43:19:d9:86:38:1e:13:45:7d:c4:3a:60:62:8d: 1c:98:7b:88:24:ab:91:61:4d:ed:56:17:43:d3:68: 3a:47:ee:43:eb:8f:8c:08:93:4b:7a:a5:2a:30:5a: d9:f1:47:a4:b9:b3:68:90:87:96:71:d9:13:24:89: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FA:15:B7:13:54:33:51:7D:E2:49:C1:93:7D:E5:E0:FD:B5:C7:D3 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f9:61:6c:86:97:13:3a:44:50:ea:26:59:09:c4:b7:77:17: 9a:fb:16:57:b6:0c:ba:c8:49:9d:a2:b3:9d:29:47:d3:ef:5f: ff:e5:a5:86:28:67:e4:0f:91:a0:66:8f:a7:5d:bf:c2:72:d9: b6:35:5e:d3:00:2b:23:9d:18:03:aa:d0:2e:5f:7d:7b:12:54: 7a:d7:8f:44:d0:db:65:e9:88:a4:b4:97:39:21:76:01:5f:cc: ec:3e:96:c2:9d:df:eb:c8:42:36:e6:52:28:78:59:59:48:4a: 13:42:58:da:b0:a5:d8:14:17:42:f2:92:c7:44:92:b5:f9:0d: 03:b9:d2:ba:0a:4e:2b:14:d7:9f:32:73:eb:6f:e2:b1:e6:19: 8d:ee:d9:f5:6c:51:58:f2:59:21:bb:bd:71:ae:cc:1c:a0:a5: ae:49:d8:6e:11:fa:fe:7f:b1:54:5a:dd:05:b4:1c:0d:67:b9: 8a:d4:76:f4:07:e8:08:3e:84:e0:34:c1:1b:fc:59:51:16:fc: ce:dc:5e:28:5b:00:f8:06:68:88:79:22:be:2f:c9:8c:4e:c1: 99:b4:22:5a:45:bb:d1:a1:67:10:21:d5:bd:96:7d:ad:cd:a1: 3a:c2:2c:cd:3a:d2:a1:6c:40:e9:b9:b1:a8:a8:d6:95:1e:66: 44:60:ee:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLnowYDW9TjnrzKpmlhNqY2K+0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNjAzMTkyMTI2NDBaFw0yNjAzMjMwNjQ3NDBaMDMxMTAvBgNV BAMTKEFCRkExNUI3MTM1NDMzNTE3REUyNDlDMTkzN0RFNUUwRkRCNUM3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA40edb9Ay+MTbXLPfIaWWxaQk zMWKLl3VH8u1mHLIVLUE/3TumiG3rlwHoDe91mQo/hJ02SCNhIILUr+MpNvqsVfn N0YdEGW5Hj0tPCru4c8q649UxOz1QOETgeYiTTcIvJ7csjKsyRlX1lvFMM/J2nbh k90PWpCpzNwL3dgJPndTrgkxHTIMhEUyEeviKk9uk0COlZBWzrzEPYZX0GlpV12H VPaeYsA8fQ1bo6Z9oGfdiVk6nlArx9Uu+6/T3xDZFOdDGdmGOB4TRX3EOmBijRyY e4gkq5FhTe1WF0PTaDpH7kPrj4wIk0t6pSowWtnxR6S5s2iQh5Zx2RMkiftVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq/oVtxNUM1F94knBk33l4P21x9MwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKX5YWyGlxM6RFDqJlkJxLd3F5r7Fle2DLrI SZ2is50pR9PvX//lpYYoZ+QPkaBmj6ddv8Jy2bY1XtMAKyOdGAOq0C5ffXsSVHrX j0TQ22XpiKS0lzkhdgFfzOw+lsKd3+vIQjbmUih4WVlIShNCWNqwpdgUF0LyksdE krX5DQO50roKTisU158yc+tv4rHmGY3u2fVsUVjyWSG7vXGuzBygpa5J2G4R+v5/ sVRa3QW0HA1nuYrUdvQH6Ag+hOA0wRv8WVEW/M7cXihbAPgGaIh5Ir4vyYxOwZm0 IlpFu9GhZxAh1b2Wfa3NoTrCLM060qFsQOm5saio1pUeZkRg7rs= -----END CERTIFICATE-----Generated at Sat Mar 21 01:33:19 2026 by rpki-client