$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft File: 45E5895753396A59380E8B15A613362BDD0B9399.mft (raw, json) Hash identifier: aim0n4jQs3CoCPJXGyXJ47BXGOTrdcS6QMV4T0UJa8c= Subject key identifier: 8B:D1:A2:F1:E2:56:C9:0E:F9:35:ED:AC:8D:E7:7E:49:2C:0F:0F:8F Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 Certificate issuer: /CN=45E5895753396A59380E8B15A613362BDD0B9399 Certificate serial: 25A72B2D949BB437E712D20AE8FFB05D06D68B59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:02:15 +0000 Manifest this update: Thu 17 Sep 2026 02:57:15 +0000 Manifest next update: Fri 18 Sep 2026 05:38:15 +0000 Files and hashes: 1: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: 9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=) 2: 45E5895753396A59380E8B15A613362BDD0B9399.crl (hash: IysPvU4JdE+SIDNNUGZgZ6tiXYIghxvmvyy3sRifc3U=) 3: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: apfoCrb1SRZGVQ94mZUP6Yq3PvFMs7dSvIUcNJlRoMg=) 4: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: KhIaiPcjWv7aKSlHmjk0jk/GmZyLW5p+ewjbZDKYFRM=) 5: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: 150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a7:2b:2d:94:9b:b4:37:e7:12:d2:0a:e8:ff:b0:5d:06:d6:8b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399 Validity Not Before: Sep 17 02:57:15 2026 GMT Not After : Sep 18 05:38:15 2026 GMT Subject: CN=8BD1A2F1E256C90EF935EDAC8DE77E492C0F0F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0e:87:fd:05:d0:7d:9b:97:4d:cd:c3:d8:29: f8:e0:a8:b4:e4:ff:eb:84:c7:cc:57:de:d3:6b:ef: 48:28:42:62:ad:5d:c1:c9:fe:d7:f5:f9:43:93:a5: 0f:0b:89:15:fc:76:d4:84:9d:af:99:a8:87:73:e8: c5:9c:81:b8:62:92:f4:3d:d9:0f:66:80:7c:40:af: 2a:8e:af:36:68:88:95:a4:58:3e:34:18:e9:e1:ed: 18:6a:c5:06:f9:b2:42:72:2e:0b:b5:40:f3:23:4a: 4c:47:63:98:43:18:2f:d7:31:f4:9b:e9:55:1f:6d: 6f:45:39:70:50:20:f2:f5:c5:8d:ad:e4:e5:91:ad: dc:6a:99:ba:59:6e:a6:f5:11:9d:81:13:cc:e4:5c: a9:b5:0a:30:83:da:62:9e:e5:1d:ab:01:d4:6f:f5: b1:8a:8f:f8:06:a8:b1:cc:c8:4d:c8:c7:db:1e:c9: e1:53:de:98:a6:c2:75:14:32:92:e6:c8:5e:63:7a: 81:0c:9c:f0:56:15:ac:3e:88:e0:9d:60:d6:af:aa: 9e:7f:80:f5:35:d2:d5:c0:8e:ff:84:27:7e:32:00: d4:73:57:4d:86:67:3a:5c:be:c8:d6:45:ce:f4:67: 77:6e:0c:91:89:16:96:fa:21:80:5e:9f:27:b7:5f: d3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D1:A2:F1:E2:56:C9:0E:F9:35:ED:AC:8D:E7:7E:49:2C:0F:0F:8F X509v3 Authority Key Identifier: keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:28:b5:5e:c4:54:8b:c4:0d:aa:6f:ce:96:8b:e0:69:d3:42: 65:9d:47:5e:08:e8:43:00:2b:17:b4:a1:13:d9:22:e8:a4:5a: 07:29:38:d0:17:fb:c6:b8:70:9a:99:1b:07:a8:92:7c:ec:27: ea:17:ba:e7:1e:5b:c4:5e:0e:1f:bf:7d:9c:24:3e:f4:c6:89: c4:d0:3f:36:46:94:d3:61:b3:77:c1:6a:6c:35:f5:e2:a9:80: 93:31:ec:59:e5:11:0d:ec:e5:3d:9b:a4:0b:fb:f5:37:7a:82: f0:33:c4:2a:0d:a0:c8:3a:f3:d4:ef:37:11:4c:15:00:35:14: e3:f9:e1:c0:6f:f6:36:05:92:8e:54:44:ca:2d:4f:8f:fc:68: 2d:fb:b4:86:70:f1:9e:25:5b:f5:8e:15:72:98:60:96:c4:5f: 91:ef:3e:54:f4:50:0e:f5:69:3f:c0:bb:a7:77:de:4d:0f:24: 56:9d:6d:e9:2d:c7:a7:64:c9:4d:12:3c:c5:74:cc:7c:f0:48: 20:9a:72:c4:2d:4d:3f:50:b4:ca:39:3a:4f:88:fe:17:cb:77: 6c:43:45:eb:ae:59:f0:8c:2a:91:49:43:a7:ff:21:80:72:13: 34:95:6f:32:0f:ab:24:7f:3a:8b:3f:7f:72:fb:4f:22:fa:8a: 64:2b:d6:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJacrLZSbtDfnEtIK6P+wXQbWi1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJE RDBCOTM5OTAeFw0yNjA5MTcwMjU3MTVaFw0yNjA5MTgwNTM4MTVaMDMxMTAvBgNV BAMTKDhCRDFBMkYxRTI1NkM5MEVGOTM1RURBQzhERTc3RTQ5MkMwRjBGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDof9BdB9m5dNzcPYKfjgqLTk /+uEx8xX3tNr70goQmKtXcHJ/tf1+UOTpQ8LiRX8dtSEna+ZqIdz6MWcgbhikvQ9 2Q9mgHxAryqOrzZoiJWkWD40GOnh7RhqxQb5skJyLgu1QPMjSkxHY5hDGC/XMfSb 6VUfbW9FOXBQIPL1xY2t5OWRrdxqmbpZbqb1EZ2BE8zkXKm1CjCD2mKe5R2rAdRv 9bGKj/gGqLHMyE3Ix9seyeFT3pimwnUUMpLmyF5jeoEMnPBWFaw+iOCdYNavqp5/ gPU10tXAjv+EJ34yANRzV02GZzpcvsjWRc70Z3duDJGJFpb6IYBenye3X9NlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9Gi8eJWyQ75Ne2sjed+SSwPD48wHwYDVR0j BBgwFoAUReWJV1M5alk4DosVphM2K90Lk5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZiODdmZWItMGZlMi00MThhLWEzN2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1 MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJERDBCOTM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUU1ODk1NzUzMzk2QTU5MzgwRThCMTVBNjEzMzYyQkREMEI5 Mzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2 MkJERDBCOTM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMotV7EVIvEDapvzpaL4GnTQmWdR14I6EMA Kxe0oRPZIuikWgcpONAX+8a4cJqZGweoknzsJ+oXuuceW8ReDh+/fZwkPvTGicTQ PzZGlNNhs3fBamw19eKpgJMx7FnlEQ3s5T2bpAv79Td6gvAzxCoNoMg689TvNxFM FQA1FOP54cBv9jYFko5URMotT4/8aC37tIZw8Z4lW/WOFXKYYJbEX5HvPlT0UA71 aT/Au6d33k0PJFadbektx6dkyU0SPMV0zHzwSCCacsQtTT9QtMo5Ok+I/hfLd2xD ReuuWfCMKpFJQ6f/IYByEzSVbzIPqyR/Oos/f3L7TyL6imQr1tI= -----END CERTIFICATE-----Generated at Thu Sep 17 18:25:22 2026 by rpki-client