$ rpki-client -vvvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft (raw, json) Hash identifier: 34M2CTB5l1VTcamap4PDUZ4zp8FfErRUpFMzX70eIpE= Subject key identifier: C7:86:98:5D:C4:9A:8F:28:D7:10:24:BD:94:21:80:45:38:D4:C9:19 Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Certificate serial: 3DA075B096BC62F85E05BD5A88D7E915C13CDD0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft Manifest number: E6 Signing time: Wed 21 Oct 2026 16:24:31 +0000 Manifest this update: Wed 21 Oct 2026 16:19:31 +0000 Manifest next update: Thu 22 Oct 2026 19:52:31 +0000 Files and hashes: 1: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl (hash: PyDKqb0ikiTbURGFsIyASH6/5L3njH5FnX1xeHX4WaE=) 2: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=) 3: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI=) 4: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 19:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a0:75:b0:96:bc:62:f8:5e:05:bd:5a:88:d7:e9:15:c1:3c:dd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Validity Not Before: Oct 21 16:19:31 2026 GMT Not After : Oct 22 19:52:31 2026 GMT Subject: CN=C786985DC49A8F28D71024BD9421804538D4C919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:50:1f:0f:f1:21:04:ef:04:c8:59:f1:6a: 73:68:e1:f4:6d:ce:17:c7:69:b1:fa:f6:22:31:32: cb:67:1e:b5:1b:db:a6:a2:d9:f0:d1:61:6a:2f:bd: 59:83:65:e7:f4:0f:1f:38:0a:45:33:5e:7c:27:8a: d5:cc:92:30:10:85:46:68:da:c5:0e:0e:9c:9b:1d: cd:8a:de:c2:77:d1:d4:11:73:98:b9:c5:8f:85:d7: c9:fe:9a:14:2f:2e:20:f4:64:f9:10:0a:79:a2:7a: 6e:30:96:9a:a5:15:ab:18:b3:af:b3:72:6b:f3:ab: 36:a2:0b:48:d1:6a:2e:3b:ad:8e:3a:44:74:3b:80: c8:bd:55:d6:85:ad:7b:1e:9c:1f:15:6c:42:57:ef: 80:b7:c5:50:dd:c1:66:1e:bc:8c:2f:2a:30:8f:bc: 4a:9c:63:fa:b2:9d:ea:39:6c:f3:5d:c6:54:85:a8: 31:a1:cf:b0:69:0d:0a:7e:cb:4b:cf:f4:dd:3a:bc: 62:5c:92:0c:79:12:67:4d:43:09:54:6f:8c:9e:c1: 1f:38:68:04:b4:70:8a:2a:9b:21:93:a3:03:73:ad: ed:cf:bc:90:ef:55:79:e4:16:72:87:5d:66:db:21: a2:57:68:86:a0:1b:5c:85:bb:bd:00:39:39:99:bb: 97:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:86:98:5D:C4:9A:8F:28:D7:10:24:BD:94:21:80:45:38:D4:C9:19 X509v3 Authority Key Identifier: keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:17:36:2e:b5:dc:ee:16:ef:cf:74:39:63:70:7e:9a:0f:b7: c6:09:00:7a:d4:a2:58:7b:9c:bb:c1:58:c9:a8:22:68:9d:65: 13:26:fb:3b:57:48:14:6b:95:1d:ba:cb:77:7e:35:59:81:87: ee:cf:96:15:39:d7:47:b6:a6:7e:7b:73:ed:74:58:c0:9f:07: 20:06:db:d4:73:19:34:d4:d6:5d:9d:5d:80:16:d3:9e:6b:d7: e0:0c:a4:07:f5:de:1f:fd:e9:14:a9:de:74:a6:ee:f9:eb:ea: 04:6f:d3:69:29:44:97:52:0b:fa:66:ae:2c:10:22:e5:c0:0f: f1:b6:3f:ae:24:ed:cf:3d:d0:38:8b:36:f0:9d:b0:68:64:b2: 10:49:98:5f:c2:66:1f:06:81:08:24:ff:f1:c2:6d:dc:52:05: 29:67:50:9d:b1:88:d8:a5:6c:d2:ce:30:a0:c9:89:87:9c:30: c5:ba:b0:7b:16:f0:9b:0f:0a:1d:c0:fd:d3:81:12:ac:30:7e: 50:1e:5f:5a:b6:15:db:ed:c8:a9:4c:13:72:96:47:1a:98:65: 64:05:47:29:18:5d:7a:37:da:f8:9f:e9:61:c8:5c:ce:24:63: fb:8d:07:ba:9d:f1:83:a4:b3:49:95:c1:2b:65:35:d1:01:c0: d8:0d:dc:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaB1sJa8YvheBb1aiNfpFcE83Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUz NjEwOEQwMjAeFw0yNjEwMjExNjE5MzFaFw0yNjEwMjIxOTUyMzFaMDMxMTAvBgNV BAMTKEM3ODY5ODVEQzQ5QThGMjhENzEwMjRCRDk0MjE4MDQ1MzhENEM5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOh1AfD/EhBO8EyFnxanNo4fRt zhfHabH69iIxMstnHrUb26ai2fDRYWovvVmDZef0Dx84CkUzXnwnitXMkjAQhUZo 2sUODpybHc2K3sJ30dQRc5i5xY+F18n+mhQvLiD0ZPkQCnmiem4wlpqlFasYs6+z cmvzqzaiC0jRai47rY46RHQ7gMi9VdaFrXsenB8VbEJX74C3xVDdwWYevIwvKjCP vEqcY/qyneo5bPNdxlSFqDGhz7BpDQp+y0vP9N06vGJckgx5EmdNQwlUb4yewR84 aAS0cIoqmyGTowNzre3PvJDvVXnkFnKHXWbbIaJXaIagG1yFu70AOTmZu5fJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx4aYXcSajyjXECS9lCGARTjUyRkwHwYDVR0j BBgwFoAURaHD8dynt8yo26Aj7sLVnjYQjQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgzZWQ3YWItMWFjOS00ZjQyLWFjZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFE Q0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUzNjEwOEQwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUExQzNGMURDQTdCN0NDQThEQkEwMjNFRUMyRDU5RTM2MTA4 RDAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1 OUUzNjEwOEQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkXNi613O4W7890OWNwfpoPt8YJAHrUolh7 nLvBWMmoImidZRMm+ztXSBRrlR26y3d+NVmBh+7PlhU510e2pn57c+10WMCfByAG 29RzGTTU1l2dXYAW055r1+AMpAf13h/96RSp3nSm7vnr6gRv02kpRJdSC/pmriwQ IuXAD/G2P64k7c890DiLNvCdsGhkshBJmF/CZh8GgQgk//HCbdxSBSlnUJ2xiNil bNLOMKDJiYecMMW6sHsW8JsPCh3A/dOBEqwwflAeX1q2FdvtyKlME3KWRxqYZWQF RykYXXo32vif6WHIXM4kY/uNB7qd8YOks0mVwStlNdEBwNgN3Fg= -----END CERTIFICATE-----Generated at Thu Oct 22 07:57:08 2026 by rpki-client