$ rpki-client -vvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft (raw, json) Hash identifier: t3nPVul8pDkJLLVPkDek43U51KcjS1eEAsf3ND4MsZs= Subject key identifier: B2:22:AA:CA:CA:3A:1C:C7:66:65:B6:5A:E9:61:D0:E5:29:2C:19:7E Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Certificate serial: 65FF966AEBBA780A988CBBA13C54BD71B4493CAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:46:58 +0000 Manifest this update: Tue 02 Jun 2026 13:41:58 +0000 Manifest next update: Wed 03 Jun 2026 14:12:58 +0000 Files and hashes: 1: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI=) 2: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=) 3: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=) 4: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl (hash: FqEnqyryU00+kAK6zu6xLvOuc4qeytjK6Tlc2UJBr3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ff:96:6a:eb:ba:78:0a:98:8c:bb:a1:3c:54:bd:71:b4:49:3c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Validity Not Before: Jun 2 13:41:58 2026 GMT Not After : Jun 3 14:12:58 2026 GMT Subject: CN=B222AACACA3A1CC76665B65AE961D0E5292C197E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:c0:0e:0a:10:91:1f:03:90:fd:03:7c:a3: 63:44:90:4f:1f:b1:09:a8:53:a7:83:25:c5:63:75: 4d:eb:5e:d3:62:84:f1:76:14:d8:9a:60:5a:d3:4e: c5:96:c6:20:b3:23:d1:de:49:4c:84:10:a3:46:9e: 93:85:1c:ce:a6:35:1c:11:61:e6:6a:5d:3b:3a:2d: 2e:83:d5:a3:c2:90:74:35:f5:d6:81:0a:19:c1:9d: 0d:d7:c7:30:4e:ce:49:99:f7:b3:f9:1c:6f:ba:0f: b6:94:f7:a0:ac:a2:3b:e7:2c:26:98:07:df:63:55: c3:11:50:b9:31:23:51:9d:f2:81:a4:ac:0a:97:40: 57:d3:2a:14:2b:0c:cb:53:c7:0b:a4:20:6f:a7:a6: ca:f4:db:f8:23:22:07:7c:be:85:fe:c7:2c:ec:f9: bf:a0:88:ec:03:3d:85:b5:7d:ee:f1:fa:79:42:a0: e6:78:34:be:9c:0c:56:c6:f8:bd:47:c9:b7:51:b2: 4f:73:eb:2e:49:8e:c4:88:7b:0f:ef:ab:f9:ce:5f: d7:53:97:5a:55:59:c0:18:d7:39:59:5d:37:9c:4c: fd:d2:42:75:7c:b3:c8:f0:70:4a:fb:a1:0e:84:4a: af:20:42:59:b9:86:22:52:00:ce:6b:61:c8:5c:9e: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:22:AA:CA:CA:3A:1C:C7:66:65:B6:5A:E9:61:D0:E5:29:2C:19:7E X509v3 Authority Key Identifier: keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9d:a6:43:57:3f:f6:0c:9e:a5:17:79:77:6c:e2:78:43:d2: b6:e3:95:cf:5a:b6:9e:2e:f0:65:80:f6:b5:58:a7:17:6a:fc: 8c:17:f9:19:e9:c2:92:74:e7:4f:17:ec:97:92:e1:4d:16:7d: 62:23:64:26:b9:13:50:b5:65:eb:5c:4a:b7:6c:08:4d:35:8e: b7:57:90:d5:ed:18:1e:ea:83:b4:fc:e0:83:0c:b3:4c:9a:ae: 2e:26:43:87:22:32:c6:13:4e:e9:fa:23:63:3d:20:7d:41:fe: 46:ee:2d:18:f3:37:0e:21:e8:63:bd:58:92:09:53:6e:30:9d: 29:31:53:b9:00:e8:3b:13:5f:16:43:44:31:78:da:39:b9:1b: 68:a2:cb:ad:2a:fc:f3:cf:17:fe:0f:be:0e:d8:ba:f5:79:6c: fc:0d:84:35:d1:4e:a1:d9:34:9a:63:9b:dc:67:09:a6:ed:27: 54:82:ab:ca:ae:b0:3c:b4:84:6e:e3:72:32:74:1e:c0:db:8d: 09:6b:b3:bf:c2:30:71:20:e3:9f:db:4b:6e:e9:94:30:6d:c4: dc:d8:61:ff:34:52:a4:c3:02:5b:9f:73:36:4e:00:92:95:55: f3:fe:c9:06:ab:70:ec:1d:5d:89:86:e0:b9:4e:95:c9:30:ad: 17:37:35:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZf+Wauu6eAqYjLuhPFS9cbRJPKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUz NjEwOEQwMjAeFw0yNjA2MDIxMzQxNThaFw0yNjA2MDMxNDEyNThaMDMxMTAvBgNV BAMTKEIyMjJBQUNBQ0EzQTFDQzc2NjY1QjY1QUU5NjFEMEU1MjkyQzE5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9lMAOChCRHwOQ/QN8o2NEkE8f sQmoU6eDJcVjdU3rXtNihPF2FNiaYFrTTsWWxiCzI9HeSUyEEKNGnpOFHM6mNRwR YeZqXTs6LS6D1aPCkHQ19daBChnBnQ3XxzBOzkmZ97P5HG+6D7aU96CsojvnLCaY B99jVcMRULkxI1Gd8oGkrAqXQFfTKhQrDMtTxwukIG+npsr02/gjIgd8voX+xyzs +b+giOwDPYW1fe7x+nlCoOZ4NL6cDFbG+L1HybdRsk9z6y5JjsSIew/vq/nOX9dT l1pVWcAY1zlZXTecTP3SQnV8s8jwcEr7oQ6ESq8gQlm5hiJSAM5rYchcnmf1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsiKqyso6HMdmZbZa6WHQ5SksGX4wHwYDVR0j BBgwFoAURaHD8dynt8yo26Aj7sLVnjYQjQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgzZWQ3YWItMWFjOS00ZjQyLWFjZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFE Q0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUzNjEwOEQwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUExQzNGMURDQTdCN0NDQThEQkEwMjNFRUMyRDU5RTM2MTA4 RDAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1 OUUzNjEwOEQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJedpkNXP/YMnqUXeXds4nhD0rbjlc9atp4u 8GWA9rVYpxdq/IwX+RnpwpJ0508X7JeS4U0WfWIjZCa5E1C1ZetcSrdsCE01jrdX kNXtGB7qg7T84IMMs0yari4mQ4ciMsYTTun6I2M9IH1B/kbuLRjzNw4h6GO9WJIJ U24wnSkxU7kA6DsTXxZDRDF42jm5G2iiy60q/PPPF/4Pvg7YuvV5bPwNhDXRTqHZ NJpjm9xnCabtJ1SCq8qusDy0hG7jcjJ0HsDbjQlrs7/CMHEg45/bS27plDBtxNzY Yf80UqTDAlufczZOAJKVVfP+yQarcOwdXYmG4LlOlckwrRc3Nb4= -----END CERTIFICATE-----Generated at Tue Jun 2 21:36:05 2026 by rpki-client