$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft File: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft (raw, json) Hash identifier: 5ARII4V1TzxaWbZk/kGpKRmG9H3GSyRko50kkqfZvsA= Subject key identifier: DD:6A:59:E5:3B:2D:BC:66:38:B2:17:EB:B8:AD:30:41:B5:FF:51:24 Authority key identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC Certificate issuer: /CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC Certificate serial: 37B109118F87DF5F9951B7AF2ED52CE4DED0D3DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:18:59 +0000 Manifest this update: Tue 02 Jun 2026 11:13:59 +0000 Manifest next update: Wed 03 Jun 2026 13:43:59 +0000 Files and hashes: 1: 45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl (hash: Rbg7TmXGQDawrAEKXATdDGckrvOfZq2Uh16D80I/YQE=) 2: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: O5uC/L29P8IATSFs7V00fPXENgiidDt4Krk5PawD2S0=) 3: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: YKOMJLKY4/MM+iRWpGbN1vcrCXvxf8SN7FOq1BH9gB4=) 4: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: dmGHcD14vklK6CHGP2dwt3SoTbZEUdzxsUS+JroI8zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b1:09:11:8f:87:df:5f:99:51:b7:af:2e:d5:2c:e4:de:d0:d3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC Validity Not Before: Jun 2 11:13:59 2026 GMT Not After : Jun 3 13:43:59 2026 GMT Subject: CN=DD6A59E53B2DBC6638B217EBB8AD3041B5FF5124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:f4:c3:70:02:c6:11:0f:74:64:78:e5:51: d3:68:6d:73:b6:b2:41:29:7a:80:62:c6:02:b3:f6: 61:e1:08:5e:a8:03:65:de:8c:61:9f:9e:0d:42:c9: 7b:e0:c2:f4:83:fe:74:5d:07:94:55:f4:16:10:82: 15:91:8f:89:c6:99:bc:84:7c:f6:fb:4e:37:02:5b: a2:f3:b6:07:a3:1b:d9:d2:5a:3c:81:31:22:d3:49: 7d:ba:06:dd:11:3a:52:d6:c4:5a:65:b6:75:0b:b1: 13:4a:8d:83:7c:75:ed:32:22:ea:e0:e8:63:b4:1a: 3b:8c:e2:5a:97:64:b9:7a:dc:c7:24:7e:ac:8d:f2: 66:6f:1c:a5:f6:74:31:35:b1:58:39:68:fc:0e:43: 06:dc:f5:f5:d5:44:ef:e0:5e:f4:0a:52:90:28:52: e0:85:30:b1:25:c6:b6:77:4e:e5:9c:68:e1:f3:96: 6a:ec:f1:e9:6f:ba:c0:07:91:4e:9e:e1:10:c5:f4: a5:34:1c:9c:f5:ed:6e:95:92:62:5c:7e:70:72:7d: 4d:e2:13:b0:47:b8:de:cd:44:e3:2e:18:cf:5f:0f: c1:a5:5a:6f:3f:1d:41:80:5f:02:95:98:b5:e1:ae: ca:df:7f:c0:3d:20:63:52:a8:fd:44:bc:c2:28:d9: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6A:59:E5:3B:2D:BC:66:38:B2:17:EB:B8:AD:30:41:B5:FF:51:24 X509v3 Authority Key Identifier: keyid:45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fe:3b:06:6e:1f:8e:63:6c:60:01:e0:18:41:79:52:5d:dc: 43:17:48:ab:11:ca:9d:08:6d:ac:ab:2e:54:f6:3e:68:42:11: b6:1d:3a:35:54:35:14:bf:44:8c:f6:7a:87:8a:6f:76:2a:52: 78:03:16:49:0c:63:de:b7:6c:44:21:0b:ee:b8:bb:a0:51:59: 36:14:1a:ce:cf:cb:61:e9:a0:2e:9d:b7:d9:54:7a:4f:b7:82: 48:e0:cd:d4:6b:43:7a:aa:f5:b9:f1:3b:99:22:a5:f8:70:a3: 77:dc:7e:e8:1d:16:f5:85:67:e7:fd:53:93:01:79:0b:50:f3: f1:d7:e2:c2:a0:19:08:03:67:2c:ee:5a:fd:aa:22:68:e1:f7: fc:02:e0:bf:7a:38:72:7b:ad:f8:b9:6a:3c:a7:7f:6f:1f:70: b9:54:d2:5e:58:ce:9d:5e:74:64:ce:dd:9a:1b:5f:86:aa:02: ca:8f:bf:e1:c3:43:7b:f5:b3:87:f8:f7:b0:ed:1c:93:7d:69: b0:35:13:b9:0d:99:e3:11:26:57:35:a6:64:36:fe:19:77:ab: 54:0a:d1:53:12:81:2d:87:dd:7f:2f:b5:b5:d5:03:1c:d8:e4: 16:7b:92:d4:c2:fd:b6:ac:84:0b:68:93:b4:53:98:e8:b4:a0: 17:eb:26:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7EJEY+H31+ZUbevLtUs5N7Q094wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGMzUwRTAyNDhDQThBMkIyMEI1M0EyMkJERDNCNkZD RjE2QzdBQzAeFw0yNjA2MDIxMTEzNTlaFw0yNjA2MDMxMzQzNTlaMDMxMTAvBgNV BAMTKERENkE1OUU1M0IyREJDNjYzOEIyMTdFQkI4QUQzMDQxQjVGRjUxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6vTDcALGEQ90ZHjlUdNobXO2 skEpeoBixgKz9mHhCF6oA2XejGGfng1CyXvgwvSD/nRdB5RV9BYQghWRj4nGmbyE fPb7TjcCW6LztgejG9nSWjyBMSLTSX26Bt0ROlLWxFpltnULsRNKjYN8de0yIurg 6GO0GjuM4lqXZLl63MckfqyN8mZvHKX2dDE1sVg5aPwOQwbc9fXVRO/gXvQKUpAo UuCFMLElxrZ3TuWcaOHzlmrs8elvusAHkU6e4RDF9KU0HJz17W6VkmJcfnByfU3i E7BHuN7NROMuGM9fD8GlWm8/HUGAXwKVmLXhrsrff8A9IGNSqP1EvMIo2Y/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3WpZ5TstvGY4shfruK0wQbX/USQwHwYDVR0j BBgwFoAURfNQ4CSMqKKyC1OiK907b88Wx6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmMyYWIwNjItODcwMy00ZGE2LWFkNzItODBkMjVhZThiZjVmLzAvNDVGMzUwRTAy NDhDQThBMkIyMEI1M0EyMkJERDNCNkZDRjE2QzdBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUYzNTBFMDI0OENBOEEyQjIwQjUzQTIyQkREM0I2RkNGMTZD N0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmMyYWIwNjItODcwMy00ZGE2LWFk NzItODBkMjVhZThiZjVmLzAvNDVGMzUwRTAyNDhDQThBMkIyMEI1M0EyMkJERDNC NkZDRjE2QzdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABv+OwZuH45jbGAB4BhBeVJd3EMXSKsRyp0I bayrLlT2PmhCEbYdOjVUNRS/RIz2eoeKb3YqUngDFkkMY963bEQhC+64u6BRWTYU Gs7Py2HpoC6dt9lUek+3gkjgzdRrQ3qq9bnxO5kipfhwo3fcfugdFvWFZ+f9U5MB eQtQ8/HX4sKgGQgDZyzuWv2qImjh9/wC4L96OHJ7rfi5ajynf28fcLlU0l5Yzp1e dGTO3ZobX4aqAsqPv+HDQ3v1s4f497DtHJN9abA1E7kNmeMRJlc1pmQ2/hl3q1QK 0VMSgS2H3X8vtbXVAxzY5BZ7ktTC/bashAtok7RTmOi0oBfrJqw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:30 2026 by rpki-client