$ rpki-client -vvf rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft (raw, json) Hash identifier: EetVLjlXLvz52PL2hLEQOA2fBW6nRKmOU/E6OIANQxE= Subject key identifier: 26:21:FA:2E:E0:9E:EF:20:73:30:42:21:21:BF:3F:FE:42:42:C8:4F Authority key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Certificate issuer: /CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Certificate serial: 595875BE65D6E20F866953FB181B4747B89DC009 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:08:24 +0000 Manifest this update: Tue 02 Jun 2026 15:03:24 +0000 Manifest next update: Wed 03 Jun 2026 18:38:24 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: bwSnt66rSTzmcS7aGzehGu0uATTN++QNXtznU8fkMRw=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: r7ncZa1eZkhiGYQA3/lYzQqMG78T/tq+6oH0TDPdwqs=) 3: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl (hash: 0d/HQCpe/n38u5Pa8CAvt2bqVLGIjEca12l9tOQeEWE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:58:75:be:65:d6:e2:0f:86:69:53:fb:18:1b:47:47:b8:9d:c0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Validity Not Before: Jun 2 15:03:24 2026 GMT Not After : Jun 3 18:38:24 2026 GMT Subject: CN=2621FA2EE09EEF207330422121BF3FFE4242C84F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:9b:18:b2:b0:23:8a:3f:29:71:3f:c3:79: 72:c0:c8:ea:06:54:60:39:41:8c:6a:0e:03:a0:71: 93:fb:a2:56:d2:00:6d:b6:ac:94:da:31:80:d5:10: 81:e9:c7:6d:9b:15:37:94:26:42:49:f2:1c:e1:b8: 86:04:c8:d3:c9:bd:aa:b4:77:8f:71:17:1f:5c:ac: 41:32:e8:16:36:32:bb:de:a6:ba:6e:ba:12:8c:0d: 41:25:72:d6:da:ea:55:de:4e:f5:93:c8:7f:05:18: 8e:75:65:57:3e:4c:6a:c5:ad:bd:02:fe:5d:5a:b2: d7:79:99:ec:50:10:a6:7e:9a:48:18:34:ed:f4:dd: 31:dc:fa:c5:ec:d8:fc:38:a1:05:bf:61:86:7f:9c: 93:86:51:31:ad:16:db:e6:43:e9:4a:12:34:f2:36: 16:13:24:9b:3b:73:c9:6b:b7:91:a3:a7:75:a0:d8: 7f:24:d5:30:65:c5:ed:ca:ac:59:07:d0:07:91:32: 04:43:41:d3:48:02:cd:45:9e:05:e6:28:49:87:af: 79:d7:da:95:c2:62:a8:e1:88:c0:26:ad:e2:1d:bf: 54:31:9d:dd:1f:3a:93:2f:45:d2:a3:44:28:54:54: 48:6a:94:ac:9b:b0:8c:bf:aa:01:b4:21:49:04:a6: f7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:21:FA:2E:E0:9E:EF:20:73:30:42:21:21:BF:3F:FE:42:42:C8:4F X509v3 Authority Key Identifier: keyid:45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:e4:c0:b8:30:83:f0:51:fd:52:0d:19:47:a5:d0:4d:0d:3b: ca:32:14:3b:5c:e9:07:67:82:aa:2c:b3:f7:07:a3:7d:6c:e6: 9c:b7:b5:48:76:5b:62:c5:d8:d7:72:1a:dd:a7:2e:c4:8d:26: c4:2f:76:38:b3:3f:f2:fa:d7:9b:9c:1e:2b:a0:21:2f:58:f4: 20:57:3b:5c:14:7d:c2:90:22:74:5d:4a:40:7e:23:32:88:0c: 1e:bb:d5:16:57:4d:08:3b:f0:1c:cb:79:80:52:e1:1e:5b:76: 63:e3:31:b5:33:ab:73:f1:bf:ec:c7:f7:43:e6:0d:52:39:5b: 70:19:a5:27:34:dd:32:9d:9b:3b:d1:a8:1d:28:3b:06:70:06: 7c:86:2f:3c:8a:08:1e:58:f7:20:f7:c1:cd:43:e7:b2:9f:e1: cf:ae:fe:56:e0:35:06:bd:5c:05:f1:cc:f0:c8:c2:8c:3c:96: 43:2e:e2:ed:52:38:51:17:2d:3e:ce:cf:79:c0:1f:62:c4:6c: 42:12:75:b9:15:0e:4e:e9:6f:2d:3a:5a:e9:a0:72:e7:71:ca: e4:e2:53:7a:3d:c4:10:00:90:75:b6:6a:ff:e4:5a:74:26:bf: 4c:fd:a8:8c:76:41:ba:1f:6e:14:ac:76:95:2e:57:70:40:c2: e5:b1:0f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVh1vmXW4g+GaVP7GBtHR7idwAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0 NzBFQzBERTAeFw0yNjA2MDIxNTAzMjRaFw0yNjA2MDMxODM4MjRaMDMxMTAvBgNV BAMTKDI2MjFGQTJFRTA5RUVGMjA3MzMwNDIyMTIxQkYzRkZFNDI0MkM4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstZsYsrAjij8pcT/DeXLAyOoG VGA5QYxqDgOgcZP7olbSAG22rJTaMYDVEIHpx22bFTeUJkJJ8hzhuIYEyNPJvaq0 d49xFx9crEEy6BY2MrveprpuuhKMDUElctba6lXeTvWTyH8FGI51ZVc+TGrFrb0C /l1astd5mexQEKZ+mkgYNO303THc+sXs2Pw4oQW/YYZ/nJOGUTGtFtvmQ+lKEjTy NhYTJJs7c8lrt5Gjp3Wg2H8k1TBlxe3KrFkH0AeRMgRDQdNIAs1FngXmKEmHr3nX 2pXCYqjhiMAmreIdv1Qxnd0fOpMvRdKjRChUVEhqlKybsIy/qgG0IUkEpvd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJiH6LuCe7yBzMEIhIb8//kJCyE8wHwYDVR0j BBgwFoAURb0NDLWnxMSb+7o0pxZSbEcOwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI5MzI5Y2YtMzEyMy00Y2UwLWE2ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENC NUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0NzBFQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUJEMEQwQ0I1QTdDNEM0OUJGQkJBMzRBNzE2NTI2QzQ3MEVD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUy NkM0NzBFQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMnkwLgwg/BR/VINGUel0E0NO8oyFDtc6Qdn gqoss/cHo31s5py3tUh2W2LF2NdyGt2nLsSNJsQvdjizP/L615ucHiugIS9Y9CBX O1wUfcKQInRdSkB+IzKIDB671RZXTQg78BzLeYBS4R5bdmPjMbUzq3Pxv+zH90Pm DVI5W3AZpSc03TKdmzvRqB0oOwZwBnyGLzyKCB5Y9yD3wc1D57Kf4c+u/lbgNQa9 XAXxzPDIwow8lkMu4u1SOFEXLT7Oz3nAH2LEbEISdbkVDk7pby06WumgcudxyuTi U3o9xBAAkHW2av/kWnQmv0z9qIx2QbofbhSsdpUuV3BAwuWxD2M= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:56 2026 by rpki-client