$ rpki-client -vvvf rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft (raw, json) Hash identifier: OY62L+LJtnog06oRH7MAwAQnE/Id8hp+RLxwHaFM5KU= Subject key identifier: 1B:0E:4D:F9:22:CB:D8:D9:CD:79:F7:30:B0:7E:49:5E:5A:9D:99:9D Authority key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Certificate issuer: /CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Certificate serial: 237149247EBCE206495BAC8841829FFD811B6E9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 09:50:49 +0000 Manifest this update: Thu 17 Sep 2026 09:45:49 +0000 Manifest next update: Fri 18 Sep 2026 11:09:49 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: r7ncZa1eZkhiGYQA3/lYzQqMG78T/tq+6oH0TDPdwqs=) 2: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl (hash: neg+kNgzTwvGbt/6HJYhXFTb0SsnD8xSmUDuyV2q4D0=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: bwSnt66rSTzmcS7aGzehGu0uATTN++QNXtznU8fkMRw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:71:49:24:7e:bc:e2:06:49:5b:ac:88:41:82:9f:fd:81:1b:6e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Validity Not Before: Sep 17 09:45:49 2026 GMT Not After : Sep 18 11:09:49 2026 GMT Subject: CN=1B0E4DF922CBD8D9CD79F730B07E495E5A9D999D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:86:64:71:2c:1a:9c:20:28:0a:94:f7:c8: 99:46:a9:86:7e:00:04:88:29:d4:df:a9:7f:0d:38: 60:5d:bb:55:3a:eb:c6:34:eb:13:b6:69:63:5f:a4: 8e:3f:6f:66:8b:44:87:c2:2a:a0:26:67:71:52:3a: 89:5c:69:c9:be:a3:08:48:b7:0f:2b:ec:cd:63:43: 8f:8a:a8:e2:ef:ed:75:a9:8c:39:3c:b0:97:e8:5c: 5a:b2:b7:30:9d:20:0d:21:84:bb:ea:18:46:1c:3b: 1b:77:06:b9:f2:90:d7:c0:e5:b3:a2:b4:eb:9f:3a: 3e:b3:ad:ad:76:9c:28:22:24:66:d0:31:bc:80:a7: 88:1a:5a:24:e7:6b:0d:da:9d:45:9b:c2:5d:f3:ed: 30:7b:ec:e6:2b:f0:66:fe:2d:8c:99:37:64:ec:c8: 6b:fb:35:9c:46:8c:be:db:09:c4:ea:5a:26:16:4c: 3f:2f:ab:9f:93:55:30:89:02:bb:87:e0:54:30:2a: 37:90:bc:ff:0b:4c:58:e0:03:cf:fa:db:b2:4a:76: 04:4b:ec:92:8f:65:5a:75:da:03:15:de:e5:98:f4: be:ba:75:86:39:47:bf:e3:df:ff:8c:e1:2e:8a:e2: 2a:c0:38:03:dc:0e:59:aa:e5:f4:13:65:b3:f0:64: e6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0E:4D:F9:22:CB:D8:D9:CD:79:F7:30:B0:7E:49:5E:5A:9D:99:9D X509v3 Authority Key Identifier: keyid:45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:6e:fb:e2:3f:73:8b:02:88:74:57:45:70:8b:76:85:8a:b7: f1:de:d9:92:ca:9d:1c:06:c9:17:05:4c:17:39:84:a3:53:aa: 59:e7:dd:e8:b9:0f:6c:3e:73:80:c4:59:07:1c:80:df:9d:95: 0d:7a:24:28:1e:85:2d:7b:41:03:5d:71:c8:b7:46:59:ad:ba: ef:fc:e2:89:d2:c7:d0:94:24:c1:63:de:7a:ef:f4:8c:75:34: 4c:70:02:a0:20:54:28:5c:d7:95:0d:2c:57:9b:91:a0:89:8e: 39:58:8e:73:e0:32:8c:20:0e:92:33:53:4b:c2:86:96:0e:0a: 8f:06:2e:77:1b:d3:4a:91:9e:79:c2:37:d4:8b:51:ac:e8:eb: 6f:d0:ef:9d:41:04:67:63:4e:c9:ac:46:2f:41:50:c1:09:85: 92:be:e4:0a:47:84:1d:d9:41:bd:18:a6:8a:db:e8:4c:31:a2: ee:d6:56:50:ea:de:dc:e5:22:f3:28:52:b1:bd:27:6f:a4:c4: 93:64:f1:ab:8e:51:b5:7a:fc:b7:b4:7d:96:ff:c8:09:b8:ad: 19:85:6c:7a:eb:1c:e9:45:08:21:b2:05:06:bf:87:ca:7a:91: ac:5d:4e:b5:41:f9:25:0d:36:fe:ff:37:32:04:9d:c4:03:f6: 46:5c:11:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3FJJH684gZJW6yIQYKf/YEbbp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0 NzBFQzBERTAeFw0yNjA5MTcwOTQ1NDlaFw0yNjA5MTgxMTA5NDlaMDMxMTAvBgNV BAMTKDFCMEU0REY5MjJDQkQ4RDlDRDc5RjczMEIwN0U0OTVFNUE5RDk5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mIZkcSwanCAoCpT3yJlGqYZ+ AASIKdTfqX8NOGBdu1U668Y06xO2aWNfpI4/b2aLRIfCKqAmZ3FSOolcacm+owhI tw8r7M1jQ4+KqOLv7XWpjDk8sJfoXFqytzCdIA0hhLvqGEYcOxt3BrnykNfA5bOi tOufOj6zra12nCgiJGbQMbyAp4gaWiTnaw3anUWbwl3z7TB77OYr8Gb+LYyZN2Ts yGv7NZxGjL7bCcTqWiYWTD8vq5+TVTCJAruH4FQwKjeQvP8LTFjgA8/627JKdgRL 7JKPZVp12gMV3uWY9L66dYY5R7/j3/+M4S6K4irAOAPcDlmq5fQTZbPwZOZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGw5N+SLL2NnNefcwsH5JXlqdmZ0wHwYDVR0j BBgwFoAURb0NDLWnxMSb+7o0pxZSbEcOwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI5MzI5Y2YtMzEyMy00Y2UwLWE2ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENC NUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0NzBFQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUJEMEQwQ0I1QTdDNEM0OUJGQkJBMzRBNzE2NTI2QzQ3MEVD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUy NkM0NzBFQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVu++I/c4sCiHRXRXCLdoWKt/He2ZLKnRwG yRcFTBc5hKNTqlnn3ei5D2w+c4DEWQccgN+dlQ16JCgehS17QQNdcci3Rlmtuu/8 4onSx9CUJMFj3nrv9Ix1NExwAqAgVChc15UNLFebkaCJjjlYjnPgMowgDpIzU0vC hpYOCo8GLncb00qRnnnCN9SLUazo62/Q751BBGdjTsmsRi9BUMEJhZK+5ApHhB3Z Qb0Yporb6Ewxou7WVlDq3tzlIvMoUrG9J2+kxJNk8auOUbV6/Le0fZb/yAm4rRmF bHrrHOlFCCGyBQa/h8p6kaxdTrVB+SUNNv7/NzIEncQD9kZcEYI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:21:08 2026 by rpki-client