$ rpki-client -vvf rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft File: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft (raw, json) Hash identifier: eHH6E67aX066oZwoayqfGdbtK7/XGbvaPVbt/pex0j0= Subject key identifier: 92:FE:8B:BA:B3:AD:C9:D6:D0:CA:F8:F7:0F:75:8B:40:16:D8:43:E3 Authority key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B Certificate issuer: /CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Certificate serial: 30CE58FB52F0D2F97D8741671F7DEAAFFE749C88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 07:03:51 +0000 Manifest this update: Tue 02 Jun 2026 06:58:51 +0000 Manifest next update: Wed 03 Jun 2026 10:55:51 +0000 Files and hashes: 1: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gn2qTVHIkC7GBmvI9sm3mViU/5rk6Ham6sDiRDMn4HI=) 2: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: hd3heGYgnRZ+Tk6ekukJ3PqnB2LNr3afpBjr80SK/bw=) 3: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl (hash: LnssFI5f3pH1qutiYv8q3NgQsHq9hVj6u69fhBQ8YTs=) 4: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: fCLagHzLZSaa2cnRaKpFh16Ous6QosiWWcEmtC91g9A=) 5: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: CMIcy7X5aCAauqTlERIV8khM7hpSoP3FOk5Ar2k00es=) 6: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: 90yPyuCjRCD5lGn6lVhrYkuTOFFoJv0X9oFwGz4Y7ak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ce:58:fb:52:f0:d2:f9:7d:87:41:67:1f:7d:ea:af:fe:74:9c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Validity Not Before: Jun 2 06:58:51 2026 GMT Not After : Jun 3 10:55:51 2026 GMT Subject: CN=92FE8BBAB3ADC9D6D0CAF8F70F758B4016D843E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:9a:04:bc:b6:00:b2:11:2d:56:29:a9:64: c8:1a:11:58:c3:d0:76:2d:5b:25:1a:a8:c8:19:d6: ee:69:ba:3b:c6:dc:70:db:c3:cb:bc:b9:93:fa:3b: 2e:d8:03:0e:7b:b3:1d:b3:97:8f:71:8a:97:99:4c: c6:a6:00:c6:ca:ba:17:5e:5c:cf:9e:7a:02:84:ef: 25:9d:34:c8:ce:99:28:f1:30:a9:4d:d2:07:f9:68: 8a:d5:c9:82:8e:f8:a1:f2:e9:71:3b:22:ac:85:f8: 2e:41:d0:f7:77:31:2f:d4:72:7a:ef:4d:6f:b9:6a: 7f:bd:51:b5:c5:1c:3e:27:12:e3:91:4a:01:d9:3a: c0:91:ea:cc:c5:b9:eb:b0:d4:26:3f:23:59:a2:4a: 22:d6:a0:21:b4:05:f8:02:e0:67:a6:23:b7:11:06: 7f:95:e3:cf:96:bc:6e:6e:3b:c2:25:03:09:1a:1e: 0c:dd:56:a0:a0:37:3e:1e:24:cd:25:3a:96:d0:bd: ab:59:3f:59:2e:04:1e:33:2d:15:17:34:3f:80:e8: 98:0c:f1:5f:ff:e1:a3:ec:a1:2e:34:1f:99:52:8e: fc:68:72:2c:9f:f0:d2:c1:05:d8:95:1d:0a:96:86: 1f:49:35:a4:7a:d4:4c:1d:f3:49:1e:16:06:5f:6c: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FE:8B:BA:B3:AD:C9:D6:D0:CA:F8:F7:0F:75:8B:40:16:D8:43:E3 X509v3 Authority Key Identifier: keyid:45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6d:23:f8:b6:9e:80:b0:e9:e7:13:c0:14:7c:0a:13:f4:e6: a8:f1:47:2c:75:5f:db:d0:ec:be:bd:4b:32:f8:50:89:8e:66: 35:d4:db:5b:3d:83:44:5d:6e:62:d0:f2:52:d5:95:ac:f2:fb: ed:0d:59:2f:b0:6f:ef:a3:09:eb:f5:f3:19:7f:59:3b:0b:90: 88:1a:24:b1:59:ea:ab:78:6b:99:70:3e:54:f1:f7:40:21:fd: f4:99:57:5c:fa:fc:9d:03:91:fd:cc:7b:f3:30:3d:c7:f0:46: 60:f9:26:23:e3:93:e2:30:a6:09:7b:89:26:9f:61:22:88:53: 7c:9c:fa:91:c8:7b:35:b0:2d:2a:9c:94:44:aa:73:08:11:20: 2c:bf:f4:c6:e6:b2:c6:74:c4:e1:f8:c5:3c:61:96:aa:a0:7e: a8:c8:01:c0:0d:63:8d:b2:9e:03:90:c0:66:8f:1e:35:5e:ea: c3:5b:f2:a1:af:a4:28:58:dd:4e:d5:bd:e2:d2:c3:74:bc:52: 2e:8b:23:99:65:81:ca:9f:36:73:86:6a:cd:a3:f3:81:e7:8c: 9b:d6:87:82:32:c8:f6:d1:d2:86:88:96:e9:97:9b:5c:b9:37: 0d:ae:45:16:9a:74:b5:b9:b7:d9:bc:7a:25:9c:97:77:29:23: fb:7e:df:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMM5Y+1Lw0vl9h0FnH33qr/50nIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1 MDJCMzI3QjAeFw0yNjA2MDIwNjU4NTFaFw0yNjA2MDMxMDU1NTFaMDMxMTAvBgNV BAMTKDkyRkU4QkJBQjNBREM5RDZEMENBRjhGNzBGNzU4QjQwMTZEODQzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEA5oEvLYAshEtVimpZMgaEVjD 0HYtWyUaqMgZ1u5pujvG3HDbw8u8uZP6Oy7YAw57sx2zl49xipeZTMamAMbKuhde XM+eegKE7yWdNMjOmSjxMKlN0gf5aIrVyYKO+KHy6XE7IqyF+C5B0Pd3MS/Ucnrv TW+5an+9UbXFHD4nEuORSgHZOsCR6szFueuw1CY/I1miSiLWoCG0BfgC4GemI7cR Bn+V48+WvG5uO8IlAwkaHgzdVqCgNz4eJM0lOpbQvatZP1kuBB4zLRUXND+A6JgM 8V//4aPsoS40H5lSjvxociyf8NLBBdiVHQqWhh9JNaR61Ewd80keFgZfbK2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkv6LurOtydbQyvj3D3WLQBbYQ+MwHwYDVR0j BBgwFoAURfTrN6oXiiQrjY3XI7XptVArMnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEyNGFhOGMtZGVkYy00Mzc2LTkzODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdB QTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1MDJCMzI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUY0RUIzN0FBMTc4QTI0MkI4RDhERDcyM0I1RTlCNTUwMkIz MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5 QjU1MDJCMzI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFltI/i2noCw6ecTwBR8ChP05qjxRyx1X9vQ 7L69SzL4UImOZjXU21s9g0RdbmLQ8lLVlazy++0NWS+wb++jCev18xl/WTsLkIga JLFZ6qt4a5lwPlTx90Ah/fSZV1z6/J0Dkf3Me/MwPcfwRmD5JiPjk+Iwpgl7iSaf YSKIU3yc+pHIezWwLSqclESqcwgRICy/9MbmssZ0xOH4xTxhlqqgfqjIAcANY42y ngOQwGaPHjVe6sNb8qGvpChY3U7VveLSw3S8Ui6LI5llgcqfNnOGas2j84HnjJvW h4IyyPbR0oaIlumXm1y5Nw2uRRaadLW5t9m8eiWcl3cpI/t+338= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:22 2026 by rpki-client