$ rpki-client -vvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft File: 45E5895753396A59380E8B15A613362BDD0B9399.mft (raw, json) Hash identifier: mO3iE/bYTucS24nwhZNt7N49irt8ilcpVEK1jSkK2uU= Subject key identifier: 2F:79:63:4B:BD:D2:6D:B7:30:B4:4E:60:1D:DD:7A:E2:C3:71:4F:81 Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 Certificate issuer: /CN=45E5895753396A59380E8B15A613362BDD0B9399 Certificate serial: 019C165648C31F2A04185082E0B1C94CB2882B10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:56:36 +0000 Manifest this update: Tue 02 Jun 2026 17:51:36 +0000 Manifest next update: Wed 03 Jun 2026 20:03:36 +0000 Files and hashes: 1: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: 150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=) 2: 45E5895753396A59380E8B15A613362BDD0B9399.crl (hash: xQudj2WMhmN6pScFYGj+hItbVGU6Jvt0JNpkrBV93w0=) 3: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: 9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=) 4: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: apfoCrb1SRZGVQ94mZUP6Yq3PvFMs7dSvIUcNJlRoMg=) 5: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: KhIaiPcjWv7aKSlHmjk0jk/GmZyLW5p+ewjbZDKYFRM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:16:56:48:c3:1f:2a:04:18:50:82:e0:b1:c9:4c:b2:88:2b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399 Validity Not Before: Jun 2 17:51:36 2026 GMT Not After : Jun 3 20:03:36 2026 GMT Subject: CN=2F79634BBDD26DB730B44E601DDD7AE2C3714F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:c0:bf:5c:94:70:ef:fa:32:a1:1b:36:45: d2:a4:66:a2:53:f2:9f:3b:b0:d9:e2:ea:7f:0d:10: be:52:a0:b9:e7:df:d5:bc:9b:ba:22:be:ad:a9:2d: 21:c5:62:4f:f3:85:5a:ba:ce:33:49:df:d8:b7:25: 60:ce:c2:b4:52:ef:59:be:bd:f2:97:71:92:6d:fd: 6d:5b:8b:fd:95:85:39:a4:3d:9c:e4:4f:f9:60:27: 7e:a0:77:a8:d5:89:fc:17:7e:6e:95:80:64:48:ad: 7d:a7:bc:84:fc:15:78:4b:d1:7e:1c:e0:ff:ff:5b: 6f:4b:5e:7d:07:86:c0:05:12:69:97:25:57:cd:c1: 1c:c4:12:b9:9d:e5:b2:b6:54:a6:49:86:71:cf:4c: e0:b3:21:24:c5:90:6e:f1:64:ff:bc:c1:96:17:0a: 84:71:7c:84:ee:4a:cb:ba:ac:11:2d:57:a7:2b:9d: f4:69:17:6d:11:00:13:88:d0:09:34:10:b6:42:35: 28:7b:20:28:60:7b:49:cb:c7:f7:1e:50:cf:06:43: 2b:99:e5:b9:7d:59:76:53:13:e0:b2:c1:d1:77:0a: fb:c7:f1:c5:d6:b6:cf:67:5f:b6:c1:47:17:dd:5c: 2e:48:06:a6:3e:a7:aa:4d:17:49:b0:45:55:ed:e1: 6d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:79:63:4B:BD:D2:6D:B7:30:B4:4E:60:1D:DD:7A:E2:C3:71:4F:81 X509v3 Authority Key Identifier: keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ee:12:f9:c3:a5:81:87:3d:fb:34:a2:e3:af:72:05:03:61: 71:45:ea:66:7b:5e:86:dd:f4:be:80:ef:24:b7:50:96:5c:cc: 2b:52:99:92:a7:ce:9a:f4:b2:89:38:bd:4e:00:70:6f:7e:15: ec:1a:6b:e2:d4:4b:dd:5e:96:c8:47:ac:6b:f1:15:f3:e1:18: 9b:6c:f0:f8:54:fd:3b:22:53:2d:2c:ff:c9:7d:48:61:6b:b3: e8:54:bb:fd:e6:ed:0e:9e:31:04:aa:f9:8f:e1:cc:f0:4b:ff: 94:ce:ff:23:27:bd:a5:88:ce:75:8a:1a:52:9d:b9:e4:70:ad: 03:56:f8:9f:51:1b:1e:84:78:4c:05:84:96:47:7a:b1:64:43: 7a:fd:8b:b3:14:e6:97:fb:6f:65:22:09:17:3b:f2:e8:1f:72: 0f:01:4f:19:6f:7a:21:4d:b5:2c:02:a9:5d:8d:67:5b:72:d8: 91:59:80:b4:da:d1:c5:b7:59:81:1c:39:c3:c0:c6:eb:44:e4: c4:06:99:28:e9:20:03:61:a1:d1:cd:a2:a4:ee:30:f6:fd:12: 7d:47:ea:67:2b:23:4e:f9:d5:b1:05:a6:71:93:7e:ff:a3:23: 73:38:74:19:2c:50:e5:ca:dd:24:4b:f7:40:d0:f2:c5:e7:0a: bb:0d:ec:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZwWVkjDHyoEGFCC4LHJTLKIKxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJE RDBCOTM5OTAeFw0yNjA2MDIxNzUxMzZaFw0yNjA2MDMyMDAzMzZaMDMxMTAvBgNV BAMTKDJGNzk2MzRCQkREMjZEQjczMEI0NEU2MDFEREQ3QUUyQzM3MTRGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNcC/XJRw7/oyoRs2RdKkZqJT 8p87sNni6n8NEL5SoLnn39W8m7oivq2pLSHFYk/zhVq6zjNJ39i3JWDOwrRS71m+ vfKXcZJt/W1bi/2VhTmkPZzkT/lgJ36gd6jVifwXfm6VgGRIrX2nvIT8FXhL0X4c 4P//W29LXn0HhsAFEmmXJVfNwRzEErmd5bK2VKZJhnHPTOCzISTFkG7xZP+8wZYX CoRxfITuSsu6rBEtV6crnfRpF20RABOI0Ak0ELZCNSh7IChge0nLx/ceUM8GQyuZ 5bl9WXZTE+CywdF3CvvH8cXWts9nX7bBRxfdXC5IBqY+p6pNF0mwRVXt4W0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL3ljS73SbbcwtE5gHd164sNxT4EwHwYDVR0j BBgwFoAUReWJV1M5alk4DosVphM2K90Lk5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZiODdmZWItMGZlMi00MThhLWEzN2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1 MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJERDBCOTM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUU1ODk1NzUzMzk2QTU5MzgwRThCMTVBNjEzMzYyQkREMEI5 Mzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2 MkJERDBCOTM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7uEvnDpYGHPfs0ouOvcgUDYXFF6mZ7Xobd 9L6A7yS3UJZczCtSmZKnzpr0sok4vU4AcG9+Fewaa+LUS91elshHrGvxFfPhGJts 8PhU/TsiUy0s/8l9SGFrs+hUu/3m7Q6eMQSq+Y/hzPBL/5TO/yMnvaWIznWKGlKd ueRwrQNW+J9RGx6EeEwFhJZHerFkQ3r9i7MU5pf7b2UiCRc78ugfcg8BTxlveiFN tSwCqV2NZ1ty2JFZgLTa0cW3WYEcOcPAxutE5MQGmSjpIANhodHNoqTuMPb9En1H 6mcrI0751bEFpnGTfv+jI3M4dBksUOXK3SRL90DQ8sXnCrsN7Og= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:45 2026 by rpki-client