$ rpki-client -vvf rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft (raw, json) Hash identifier: vdivl1sOBm6WOfPxiIHn3c6W5C6/oZ4mY/6Vqyg5Z6Y= Subject key identifier: 85:8D:E9:18:81:A6:D4:1B:D9:9C:0A:E5:72:8C:74:0D:32:89:9B:5A Authority key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Certificate issuer: /CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Certificate serial: 242FBA165E70EE1D2FF8A94B2128DE194FBB64FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 21:53:11 +0000 Manifest this update: Mon 20 Jul 2026 21:48:11 +0000 Manifest next update: Wed 22 Jul 2026 01:32:11 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: r7ncZa1eZkhiGYQA3/lYzQqMG78T/tq+6oH0TDPdwqs=) 2: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl (hash: 6M26eVqsO3anaAZM2M1DCSLkrgCM2eYwDpw3tU8VCvM=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: bwSnt66rSTzmcS7aGzehGu0uATTN++QNXtznU8fkMRw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2f:ba:16:5e:70:ee:1d:2f:f8:a9:4b:21:28:de:19:4f:bb:64:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Validity Not Before: Jul 20 21:48:11 2026 GMT Not After : Jul 22 01:32:11 2026 GMT Subject: CN=858DE91881A6D41BD99C0AE5728C740D32899B5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:d7:d5:90:18:fc:95:fa:c0:af:ab:68:0b: ae:35:22:24:24:ee:df:d7:1a:95:30:ad:98:69:15: 90:9e:1c:71:73:98:3a:36:e7:aa:b6:6a:87:8e:b6: ac:d7:ad:a0:95:f5:69:81:14:68:34:cb:a1:ce:8d: 0a:fe:93:88:53:03:fe:b3:71:e7:e0:d6:91:b4:6b: 37:11:34:62:b6:0d:d2:77:ed:33:7e:b0:55:e6:1d: ea:4e:b3:15:9f:54:4c:44:c5:fa:87:12:b6:cf:df: ab:eb:1b:bc:29:63:9e:3c:4c:1e:92:c3:5b:6a:e9: d9:48:c4:72:bc:8d:7f:e2:d1:54:f1:2b:e7:a1:75: 57:4e:6c:85:f7:8a:3c:84:41:40:b1:51:cc:48:7e: 14:71:a8:45:63:87:92:95:3a:c3:61:e9:5b:9d:3d: 2d:af:1f:e6:41:27:56:c4:87:fd:3b:19:8c:94:1a: a9:68:f4:df:18:b4:4d:00:55:58:02:66:49:80:9d: 67:ee:37:b3:ab:af:44:c3:39:40:24:be:58:92:c7: b2:ee:dc:0c:9a:7e:c1:43:3d:36:d2:dd:87:99:72: 06:0d:b5:23:d3:3a:45:f6:fb:04:da:a3:a0:a6:dc: b6:76:61:ee:6b:f4:fe:cc:48:c7:64:85:41:70:f1: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8D:E9:18:81:A6:D4:1B:D9:9C:0A:E5:72:8C:74:0D:32:89:9B:5A X509v3 Authority Key Identifier: keyid:45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:62:43:b0:c7:ee:ea:6f:ca:10:68:a2:cc:75:d5:2f:3b:c5: 01:59:76:ad:71:6c:ab:c0:f6:a4:c3:9e:4a:9f:63:d5:7f:b0: 16:f7:51:b6:c8:b8:4f:cf:3f:10:6f:b5:29:e8:e8:23:8b:e9: 05:e3:cb:45:1c:c8:b8:fa:e5:dc:ee:90:8e:3c:cc:c5:15:ab: 08:54:d9:72:a4:c7:e1:c2:9a:09:f4:97:4a:ab:1a:5c:a9:05: ad:b8:5d:ee:55:2e:95:57:86:80:e2:e8:de:9e:f1:ba:1b:0b: c9:2a:ad:ed:3e:50:21:50:47:93:f1:33:aa:b2:af:3a:95:ff: 05:59:20:14:99:b7:60:cc:0d:b0:0d:6f:94:8a:77:db:9f:1c: e6:fc:1d:18:89:06:0d:c8:6a:6a:93:c4:95:36:07:ec:61:80: 70:ec:49:3f:6e:e4:a7:15:fd:9b:bd:d4:a9:a0:64:f4:25:c5: d2:4b:01:9e:51:2c:61:bb:d1:46:82:ca:63:66:26:de:e0:33: 99:52:00:2b:f9:1c:60:61:cf:61:23:84:86:4a:69:25:5f:8b: e7:b5:b4:c9:48:ab:8a:2a:ab:da:9d:d3:d4:35:58:a0:b0:77: 1c:0c:58:5f:7a:d7:82:a6:50:2c:a8:c8:a9:90:f8:fc:20:83: 53:0e:62:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJC+6Fl5w7h0v+KlLISjeGU+7ZP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0 NzBFQzBERTAeFw0yNjA3MjAyMTQ4MTFaFw0yNjA3MjIwMTMyMTFaMDMxMTAvBgNV BAMTKDg1OERFOTE4ODFBNkQ0MUJEOTlDMEFFNTcyOEM3NDBEMzI4OTlCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZ9fVkBj8lfrAr6toC641IiQk 7t/XGpUwrZhpFZCeHHFzmDo256q2aoeOtqzXraCV9WmBFGg0y6HOjQr+k4hTA/6z cefg1pG0azcRNGK2DdJ37TN+sFXmHepOsxWfVExExfqHErbP36vrG7wpY548TB6S w1tq6dlIxHK8jX/i0VTxK+ehdVdObIX3ijyEQUCxUcxIfhRxqEVjh5KVOsNh6Vud PS2vH+ZBJ1bEh/07GYyUGqlo9N8YtE0AVVgCZkmAnWfuN7Orr0TDOUAkvliSx7Lu 3AyafsFDPTbS3YeZcgYNtSPTOkX2+wTao6Cm3LZ2Ye5r9P7MSMdkhUFw8aTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhY3pGIGm1BvZnArlcox0DTKJm1owHwYDVR0j BBgwFoAURb0NDLWnxMSb+7o0pxZSbEcOwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI5MzI5Y2YtMzEyMy00Y2UwLWE2ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENC NUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0NzBFQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUJEMEQwQ0I1QTdDNEM0OUJGQkJBMzRBNzE2NTI2QzQ3MEVD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUy NkM0NzBFQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIliQ7DH7upvyhBoosx11S87xQFZdq1xbKvA 9qTDnkqfY9V/sBb3UbbIuE/PPxBvtSno6COL6QXjy0UcyLj65dzukI48zMUVqwhU 2XKkx+HCmgn0l0qrGlypBa24Xe5VLpVXhoDi6N6e8bobC8kqre0+UCFQR5PxM6qy rzqV/wVZIBSZt2DMDbANb5SKd9ufHOb8HRiJBg3IamqTxJU2B+xhgHDsST9u5KcV /Zu91KmgZPQlxdJLAZ5RLGG70UaCymNmJt7gM5lSACv5HGBhz2EjhIZKaSVfi+e1 tMlIq4oqq9qd09Q1WKCwdxwMWF9614KmUCyoyKmQ+Pwgg1MOYt8= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:36 2026 by rpki-client