$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft File: 45E5895753396A59380E8B15A613362BDD0B9399.mft (raw, json) Hash identifier: nSKkiNCdAcYIA6fh4dxIOvAx4cDXdkTI7l4Cs9TwrMw= Subject key identifier: BD:A6:55:D9:C1:32:EA:60:D4:27:63:1C:4B:1F:55:61:6A:33:FC:F3 Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 Certificate issuer: /CN=45E5895753396A59380E8B15A613362BDD0B9399 Certificate serial: 3551E8C8C2E1798E4A966EDEE0271BBE4EBC9488 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 06:41:37 +0000 Manifest this update: Wed 04 Nov 2026 06:36:37 +0000 Manifest next update: Thu 05 Nov 2026 07:50:37 +0000 Files and hashes: 1: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: apfoCrb1SRZGVQ94mZUP6Yq3PvFMs7dSvIUcNJlRoMg=) 2: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: 150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=) 3: 45E5895753396A59380E8B15A613362BDD0B9399.crl (hash: ioJhe5uWfywyaVVBdLMtI47W+sw6UcI1hy+P2El7eU4=) 4: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: KhIaiPcjWv7aKSlHmjk0jk/GmZyLW5p+ewjbZDKYFRM=) 5: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: 9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 07:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:51:e8:c8:c2:e1:79:8e:4a:96:6e:de:e0:27:1b:be:4e:bc:94:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399 Validity Not Before: Nov 4 06:36:37 2026 GMT Not After : Nov 5 07:50:37 2026 GMT Subject: CN=BDA655D9C132EA60D427631C4B1F55616A33FCF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:08:98:a4:bb:69:a6:31:c2:fa:80:11:35: 25:e7:5f:14:6e:e5:f6:86:59:a8:f8:53:26:6a:1e: f7:b5:ea:89:95:47:28:b1:98:fb:3b:96:8f:c5:fe: 54:46:5a:b7:6a:29:2a:75:b3:2a:c4:05:12:c5:59: 87:3d:f7:b2:6e:d5:96:b8:01:73:62:87:1a:d1:97: 07:b1:ec:9a:18:77:03:e7:af:6c:02:42:a0:19:b1: f7:8d:58:30:c3:3f:32:9f:ea:58:1b:f1:27:bf:32: 36:1b:e4:f8:e6:fc:c6:eb:3f:0f:71:ca:54:60:f8: 3a:0c:b6:fb:d3:00:50:1c:ab:07:7e:22:41:90:fe: ab:10:15:c4:52:61:c4:e9:5f:63:89:e8:9f:84:92: 41:45:69:ee:b3:65:ae:be:97:4d:5f:92:88:9a:05: ae:4f:a9:ef:b4:02:10:ac:b3:b6:fe:11:72:a6:83: 36:ef:d3:16:1d:56:ca:9b:49:bc:3f:e9:b2:ab:cc: d5:08:f9:0f:75:e2:2b:ee:bf:4e:93:9b:71:37:7e: d3:77:9f:8a:2b:b2:7f:66:a2:2e:67:f4:e1:e5:6d: dc:08:6d:7b:0c:4f:69:16:86:2a:80:a1:51:37:4c: fd:61:f7:27:22:dd:64:c7:de:28:27:e4:63:16:34: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A6:55:D9:C1:32:EA:60:D4:27:63:1C:4B:1F:55:61:6A:33:FC:F3 X509v3 Authority Key Identifier: keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8e:91:f5:5f:c1:41:3d:ce:5e:36:41:3a:9b:20:a1:e4:96: 43:29:64:ca:af:31:ed:d8:a5:80:29:e3:f9:22:0f:d5:fd:f1: 19:57:fd:09:e0:e6:55:aa:d9:c7:1a:65:47:bc:52:b0:db:40: 1b:0b:ed:36:5b:4e:35:fc:74:3f:25:3c:32:7d:36:80:9a:2e: a7:d1:fc:be:81:73:64:d7:0e:e6:35:69:aa:52:08:e7:64:37: a1:b0:12:08:77:28:d9:b7:f9:6e:ca:dd:64:5f:ef:18:ab:ff: 30:01:be:93:31:15:d7:89:4e:0c:6d:1e:50:7b:e9:83:3b:c8: e8:42:29:e1:1d:41:27:cd:40:19:eb:f3:46:38:14:90:c0:3b: db:0e:98:62:74:0c:87:4a:b9:88:ad:20:17:42:aa:b6:66:ec: 4b:78:8a:8e:5c:0b:bf:8e:05:28:87:57:e8:80:e1:4f:d9:9c: ef:d1:66:0d:7e:1c:6c:41:0a:59:a9:45:df:a3:7e:80:8c:99: 72:2b:b8:72:74:bc:65:6a:79:3d:e1:2d:fa:b6:31:b1:54:14: 64:59:62:ae:e7:f2:6c:3d:3f:85:ff:68:14:f9:89:fa:50:4b: 9f:9c:14:47:e5:58:51:ed:21:22:f1:7b:22:75:7a:dc:c7:de: 80:98:cf:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVHoyMLheY5Klm7e4Ccbvk68lIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJE RDBCOTM5OTAeFw0yNjExMDQwNjM2MzdaFw0yNjExMDUwNzUwMzdaMDMxMTAvBgNV BAMTKEJEQTY1NUQ5QzEzMkVBNjBENDI3NjMxQzRCMUY1NTYxNkEzM0ZDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkgiYpLtppjHC+oARNSXnXxRu 5faGWaj4UyZqHve16omVRyixmPs7lo/F/lRGWrdqKSp1syrEBRLFWYc997Ju1Za4 AXNihxrRlwex7JoYdwPnr2wCQqAZsfeNWDDDPzKf6lgb8Se/MjYb5Pjm/MbrPw9x ylRg+DoMtvvTAFAcqwd+IkGQ/qsQFcRSYcTpX2OJ6J+EkkFFae6zZa6+l01fkoia Ba5Pqe+0AhCss7b+EXKmgzbv0xYdVsqbSbw/6bKrzNUI+Q914ivuv06Tm3E3ftN3 n4orsn9moi5n9OHlbdwIbXsMT2kWhiqAoVE3TP1h9yci3WTH3ign5GMWNH7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvaZV2cEy6mDUJ2McSx9VYWoz/PMwHwYDVR0j BBgwFoAUReWJV1M5alk4DosVphM2K90Lk5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZiODdmZWItMGZlMi00MThhLWEzN2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1 MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJERDBCOTM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUU1ODk1NzUzMzk2QTU5MzgwRThCMTVBNjEzMzYyQkREMEI5 Mzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2 MkJERDBCOTM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACOkfVfwUE9zl42QTqbIKHklkMpZMqvMe3Y pYAp4/kiD9X98RlX/Qng5lWq2ccaZUe8UrDbQBsL7TZbTjX8dD8lPDJ9NoCaLqfR /L6Bc2TXDuY1aapSCOdkN6GwEgh3KNm3+W7K3WRf7xir/zABvpMxFdeJTgxtHlB7 6YM7yOhCKeEdQSfNQBnr80Y4FJDAO9sOmGJ0DIdKuYitIBdCqrZm7Et4io5cC7+O BSiHV+iA4U/ZnO/RZg1+HGxBClmpRd+jfoCMmXIruHJ0vGVqeT3hLfq2MbFUFGRZ Yq7n8mw9P4X/aBT5ifpQS5+cFEflWFHtISLxeyJ1etzH3oCYzwI= -----END CERTIFICATE-----Generated at Wed Nov 4 17:15:56 2026 by rpki-client