$ rpki-client -vvvf rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft (raw, json) Hash identifier: Je5bMcb7kMBTKoTSIPKHnVC68s4A/gZfhON3AhIwpx0= Subject key identifier: 7D:BA:48:AA:F9:78:C7:39:99:F8:DA:CF:FD:18:BD:45:B9:06:25:7C Authority key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Certificate issuer: /CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Certificate serial: 75EBAFFCEC9F1956A0B205212B10EA910F101435 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 04:44:00 +0000 Manifest this update: Wed 04 Nov 2026 04:39:00 +0000 Manifest next update: Thu 05 Nov 2026 06:11:00 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: r7ncZa1eZkhiGYQA3/lYzQqMG78T/tq+6oH0TDPdwqs=) 2: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl (hash: VqXbcGtwLsZYXQI2BbP0rkhV8mVGx6oDz1fslGuCaZk=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: bwSnt66rSTzmcS7aGzehGu0uATTN++QNXtznU8fkMRw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 06:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:eb:af:fc:ec:9f:19:56:a0:b2:05:21:2b:10:ea:91:0f:10:14:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Validity Not Before: Nov 4 04:39:00 2026 GMT Not After : Nov 5 06:11:00 2026 GMT Subject: CN=7DBA48AAF978C73999F8DACFFD18BD45B906257C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:b4:63:15:ca:46:29:3f:4f:25:51:c0:6f: 07:b2:67:a6:0b:68:21:08:3d:9f:86:e4:b7:17:75: 36:27:56:69:b0:81:45:40:f9:22:e5:8e:f4:dd:30: 4e:1d:29:da:06:45:1a:c2:09:7d:d6:bb:ed:d7:60: b2:72:63:51:6c:95:31:4e:c0:49:fc:5f:02:bc:7b: 09:05:49:b9:36:ba:25:5b:31:51:64:e0:4d:cf:6d: b3:4c:ca:69:2f:55:3c:8a:0d:60:f8:9c:e6:ae:a8: c0:c1:23:11:12:b7:11:c8:24:58:ea:a3:12:87:33: f3:3a:e0:a7:0b:5e:a0:e8:d8:a8:4d:10:68:b3:1b: ff:d4:6e:d0:7e:06:9f:3d:4e:8b:93:f0:f9:ee:39: e7:1b:98:c9:61:3f:12:02:d1:b0:d0:ca:e6:f4:22: 67:c2:e6:65:7c:e9:82:cc:93:32:ec:5a:cb:c3:e8: 19:be:e6:5c:05:39:2f:bc:3b:1b:0a:98:f0:7e:f4: f5:d6:6c:16:c9:b1:49:da:4c:79:ae:50:4a:ab:ff: fd:f5:35:f7:a1:d0:72:2f:f5:73:7f:ce:fa:51:f7: 2c:c3:80:73:8c:68:6b:fa:4c:95:7d:2a:08:ad:31: 52:83:3c:3e:3a:28:0c:0e:53:f0:aa:02:66:d2:bf: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BA:48:AA:F9:78:C7:39:99:F8:DA:CF:FD:18:BD:45:B9:06:25:7C X509v3 Authority Key Identifier: keyid:45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:31:42:b1:ae:a5:ae:5f:63:6f:c0:94:16:84:0d:27:23:c4: 06:b5:48:42:34:1e:80:19:1f:e1:91:fd:ee:62:8a:f5:aa:75: 8a:b8:4d:f6:b9:69:9b:4a:f2:81:88:88:0f:7b:86:86:f0:98: d3:cb:a0:d1:ae:33:8f:9c:c5:a7:a6:5a:36:22:06:30:99:04: 21:84:c0:ac:68:b3:bf:5c:66:49:47:39:fc:df:fb:0b:52:71: d8:3e:df:df:d4:c8:7f:3c:e8:3a:39:2e:08:30:a9:63:58:98: 89:d6:02:56:b6:8c:9f:db:10:2d:18:77:0e:f5:71:52:70:97: 05:10:65:f4:71:c8:01:f7:40:ad:ee:45:5c:51:7e:96:46:69: 48:d0:7a:6f:36:c9:01:f5:49:0b:42:bd:c7:a8:7d:f3:10:9d: 91:c7:e1:af:d7:82:a4:56:c8:68:89:a5:62:ec:11:6a:f0:6a: a6:a8:b0:90:da:10:ea:61:95:70:52:57:7b:74:e8:78:e9:8d: fd:fa:c2:04:6c:4e:f8:a2:5b:b8:f3:61:08:42:9d:87:af:04: 41:1a:10:5f:89:09:e7:d6:69:29:e4:bb:58:bb:39:4e:7f:2a: c8:de:f3:47:ee:1c:64:13:10:06:73:7f:d3:ee:8b:a0:c0:ca: 66:bd:ba:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdeuv/OyfGVagsgUhKxDqkQ8QFDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0 NzBFQzBERTAeFw0yNjExMDQwNDM5MDBaFw0yNjExMDUwNjExMDBaMDMxMTAvBgNV BAMTKDdEQkE0OEFBRjk3OEM3Mzk5OUY4REFDRkZEMThCRDQ1QjkwNjI1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFLRjFcpGKT9PJVHAbweyZ6YL aCEIPZ+G5LcXdTYnVmmwgUVA+SLljvTdME4dKdoGRRrCCX3Wu+3XYLJyY1FslTFO wEn8XwK8ewkFSbk2uiVbMVFk4E3PbbNMymkvVTyKDWD4nOauqMDBIxEStxHIJFjq oxKHM/M64KcLXqDo2KhNEGizG//UbtB+Bp89TouT8PnuOecbmMlhPxIC0bDQyub0 ImfC5mV86YLMkzLsWsvD6Bm+5lwFOS+8OxsKmPB+9PXWbBbJsUnaTHmuUEqr//31 Nfeh0HIv9XN/zvpR9yzDgHOMaGv6TJV9KgitMVKDPD46KAwOU/CqAmbSvygFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbpIqvl4xzmZ+NrP/Ri9RbkGJXwwHwYDVR0j BBgwFoAURb0NDLWnxMSb+7o0pxZSbEcOwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI5MzI5Y2YtMzEyMy00Y2UwLWE2ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENC NUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0NzBFQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUJEMEQwQ0I1QTdDNEM0OUJGQkJBMzRBNzE2NTI2QzQ3MEVD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUy NkM0NzBFQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8xQrGupa5fY2/AlBaEDScjxAa1SEI0HoAZ H+GR/e5iivWqdYq4Tfa5aZtK8oGIiA97hobwmNPLoNGuM4+cxaemWjYiBjCZBCGE wKxos79cZklHOfzf+wtScdg+39/UyH886Do5LggwqWNYmInWAla2jJ/bEC0Ydw71 cVJwlwUQZfRxyAH3QK3uRVxRfpZGaUjQem82yQH1SQtCvceoffMQnZHH4a/XgqRW yGiJpWLsEWrwaqaosJDaEOphlXBSV3t06Hjpjf36wgRsTviiW7jzYQhCnYevBEEa EF+JCefWaSnku1i7OU5/Ksje80fuHGQTEAZzf9Pui6DAyma9uoU= -----END CERTIFICATE-----Generated at Wed Nov 4 14:01:05 2026 by rpki-client