$ rpki-client -vvvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft (raw, json) Hash identifier: bQAmILB2ZnvW/5tIrouXPuV03aSucbRNy8YlLwtMu4g= Subject key identifier: 0C:F0:F7:87:94:0B:B9:DF:2F:39:E6:A2:A3:A4:8C:43:1A:2E:60:C8 Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Certificate serial: 750313CB5D7CE134BDC2527B66853EC01746018C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 11:16:00 +0000 Manifest this update: Thu 03 Sep 2026 11:11:00 +0000 Manifest next update: Fri 04 Sep 2026 12:01:00 +0000 Files and hashes: 1: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI=) 2: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=) 3: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl (hash: 6fTYgKMObKJFd8KodEF24neDOCXPePSiedaSB6lUVBI=) 4: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:03:13:cb:5d:7c:e1:34:bd:c2:52:7b:66:85:3e:c0:17:46:01:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Validity Not Before: Sep 3 11:11:00 2026 GMT Not After : Sep 4 12:01:00 2026 GMT Subject: CN=0CF0F787940BB9DF2F39E6A2A3A48C431A2E60C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:f5:60:11:2a:f7:e4:4b:ce:aa:7c:e5:dd: bf:aa:70:2d:59:c2:74:86:04:83:61:e2:47:1f:77: 34:53:6b:c7:76:63:08:d9:18:3a:78:e0:5e:85:28: e2:cf:05:f9:37:19:dd:3c:d8:2a:62:3d:48:0c:35: b3:83:d4:0a:72:85:d8:43:be:70:bf:2e:52:e6:6b: 25:10:03:e5:3e:f8:03:ed:01:bf:4d:12:46:42:99: f5:54:69:8a:25:1d:94:44:79:52:e5:10:c0:d1:89: f9:63:79:e4:63:a6:93:af:87:59:16:e3:8d:22:a4: e4:cd:a7:2a:c7:44:85:fc:6c:94:ab:bd:b4:55:40: b8:3b:6d:d1:02:8f:84:09:86:57:b5:8f:1e:87:19: c2:bf:c5:0b:62:38:fb:cf:ef:33:85:3f:39:37:c2: d0:8d:ca:bf:db:57:35:df:92:a7:f8:0a:ed:50:3f: 60:2d:54:aa:76:b7:53:ec:7a:86:5e:b1:60:ce:e2: d7:e5:cf:c6:ff:b7:fc:ec:77:04:d2:8e:0a:e6:21: 77:e0:bf:13:dc:b6:00:f1:d4:c1:ec:ef:a8:79:61: 17:55:f4:b8:05:c7:90:8e:b9:e6:1f:76:01:d5:9a: 01:44:a1:1b:3c:b4:79:97:b7:a3:33:a4:79:2f:76: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F0:F7:87:94:0B:B9:DF:2F:39:E6:A2:A3:A4:8C:43:1A:2E:60:C8 X509v3 Authority Key Identifier: keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:de:e5:4a:f5:07:7d:91:03:c3:65:6e:df:39:4c:27:83:af: cc:a3:f4:3c:d9:72:22:ce:42:dd:86:aa:15:3c:0e:a9:a4:21: 1f:da:9f:59:72:c4:a1:3b:f0:ce:9b:68:90:25:5b:dc:3d:78: a6:3f:b5:74:41:51:07:96:0d:8b:e3:f8:e3:63:c7:af:1c:c8: 24:ed:dc:f1:23:68:95:a9:ae:75:b4:9a:7e:60:7d:dd:fb:e1: ef:6b:8f:ee:54:0f:f2:92:54:94:7d:06:6b:1a:bd:f1:12:d6: 74:dc:42:42:88:cb:95:be:d5:93:d7:23:c0:9f:ee:72:31:80: 86:9f:78:88:79:a6:4c:53:e0:c3:1a:1b:7f:7a:4e:dd:b5:b7: d9:12:d6:a1:70:7e:aa:30:95:e2:a8:14:ec:cc:3d:ed:35:25: 67:78:2f:cf:e9:84:30:6f:57:af:f6:db:f3:08:e3:58:a7:09: 54:88:b8:88:b3:31:74:b4:68:d8:6c:f7:0d:ed:ab:75:89:f2: 9b:01:b6:59:f4:7f:8a:65:52:25:8a:5b:de:36:1a:25:0e:75: fc:5d:87:17:cd:6e:48:95:bb:37:b4:80:1e:5c:e7:d0:cd:fa: 32:ee:1c:89:37:1c:ac:82:9f:14:40:30:dd:5a:30:c7:76:f8: b6:8b:db:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQMTy1184TS9wlJ7ZoU+wBdGAYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUz NjEwOEQwMjAeFw0yNjA5MDMxMTExMDBaFw0yNjA5MDQxMjAxMDBaMDMxMTAvBgNV BAMTKDBDRjBGNzg3OTQwQkI5REYyRjM5RTZBMkEzQTQ4QzQzMUEyRTYwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY+/VgESr35EvOqnzl3b+qcC1Z wnSGBINh4kcfdzRTa8d2YwjZGDp44F6FKOLPBfk3Gd082CpiPUgMNbOD1ApyhdhD vnC/LlLmayUQA+U++APtAb9NEkZCmfVUaYolHZREeVLlEMDRifljeeRjppOvh1kW 440ipOTNpyrHRIX8bJSrvbRVQLg7bdECj4QJhle1jx6HGcK/xQtiOPvP7zOFPzk3 wtCNyr/bVzXfkqf4Cu1QP2AtVKp2t1PseoZesWDO4tflz8b/t/zsdwTSjgrmIXfg vxPctgDx1MHs76h5YRdV9LgFx5COueYfdgHVmgFEoRs8tHmXt6MzpHkvdr1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDPD3h5QLud8vOeaio6SMQxouYMgwHwYDVR0j BBgwFoAURaHD8dynt8yo26Aj7sLVnjYQjQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgzZWQ3YWItMWFjOS00ZjQyLWFjZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFE Q0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUzNjEwOEQwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUExQzNGMURDQTdCN0NDQThEQkEwMjNFRUMyRDU5RTM2MTA4 RDAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1 OUUzNjEwOEQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGve5Ur1B32RA8Nlbt85TCeDr8yj9DzZciLO Qt2GqhU8DqmkIR/an1lyxKE78M6baJAlW9w9eKY/tXRBUQeWDYvj+ONjx68cyCTt 3PEjaJWprnW0mn5gfd374e9rj+5UD/KSVJR9BmsavfES1nTcQkKIy5W+1ZPXI8Cf 7nIxgIafeIh5pkxT4MMaG396Tt21t9kS1qFwfqowleKoFOzMPe01JWd4L8/phDBv V6/22/MI41inCVSIuIizMXS0aNhs9w3tq3WJ8psBtln0f4plUiWKW942GiUOdfxd hxfNbkiVuze0gB5c59DN+jLuHIk3HKyCnxRAMN1aMMd2+LaL2ys= -----END CERTIFICATE-----Generated at Thu Sep 3 22:42:46 2026 by rpki-client