$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft File: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft (raw, json) Hash identifier: yuZLo4UhFm1Lt9WRrIL8EflL24MpGh6dljW7qyU7c8Y= Subject key identifier: B3:24:AD:8F:36:29:7E:28:E6:1D:AB:29:31:07:40:33:D6:13:F3:CC Authority key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B Certificate issuer: /CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Certificate serial: 4FB2B4D76FF5D79EC835CEE1D85AB7442F1006CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 10:36:42 +0000 Manifest this update: Thu 17 Sep 2026 10:31:42 +0000 Manifest next update: Fri 18 Sep 2026 12:18:42 +0000 Files and hashes: 1: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gn2qTVHIkC7GBmvI9sm3mViU/5rk6Ham6sDiRDMn4HI=) 2: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: 90yPyuCjRCD5lGn6lVhrYkuTOFFoJv0X9oFwGz4Y7ak=) 3: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: hd3heGYgnRZ+Tk6ekukJ3PqnB2LNr3afpBjr80SK/bw=) 4: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl (hash: vevtLGfoCfSVKAfnGfkn8s00qQCisyVdxRelacWRHOE=) 5: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: fCLagHzLZSaa2cnRaKpFh16Ous6QosiWWcEmtC91g9A=) 6: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: CMIcy7X5aCAauqTlERIV8khM7hpSoP3FOk5Ar2k00es=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b2:b4:d7:6f:f5:d7:9e:c8:35:ce:e1:d8:5a:b7:44:2f:10:06:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Validity Not Before: Sep 17 10:31:42 2026 GMT Not After : Sep 18 12:18:42 2026 GMT Subject: CN=B324AD8F36297E28E61DAB2931074033D613F3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:f2:94:4e:e7:7f:7f:4d:c3:f2:39:43:9b: b6:0d:fa:46:d6:c8:3b:85:aa:3c:18:bb:c6:7a:65: 1a:e1:6d:9b:ad:07:48:56:f8:c7:b9:ad:a8:49:f1: 2c:a8:cf:c7:3d:91:64:f3:86:b8:a2:ef:07:ca:81: f4:b0:fa:b2:2f:1f:c0:e5:45:cd:d7:c5:b3:31:fd: da:53:4e:bd:30:bc:de:37:c3:e7:48:d0:2a:6d:31: 9d:2f:87:50:65:41:8b:be:f5:e8:38:8b:24:85:a6: 2b:1d:a2:a9:8b:1c:61:b8:5e:88:4f:4e:fb:7c:6c: 2d:e4:cc:30:76:8b:ed:ef:c5:d4:bb:bf:9e:3e:6a: 79:c9:d1:e5:0c:a3:06:0c:b2:c8:98:ba:89:33:3b: 4d:dc:49:7d:1c:cd:5a:d7:a7:de:43:fc:65:63:05: ba:6d:81:49:23:62:21:58:69:24:1f:52:cf:f9:f1: 5d:97:9e:a1:70:58:72:01:34:ff:d0:4c:85:bd:06: e5:a5:1b:a4:06:42:f0:8e:64:a8:8d:cc:d2:02:ad: 63:03:b7:0e:13:b1:36:92:c2:7a:49:b4:17:eb:a4: de:37:0a:c5:82:04:4b:d2:66:f5:43:a4:45:88:48: f0:0b:79:d8:72:29:82:70:80:ff:58:05:1f:80:6e: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:24:AD:8F:36:29:7E:28:E6:1D:AB:29:31:07:40:33:D6:13:F3:CC X509v3 Authority Key Identifier: keyid:45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c6:6d:62:d9:3f:1a:74:98:6b:f7:be:5e:5a:e8:ac:d4:96: 74:2b:4b:0e:8f:39:97:dc:d8:92:e0:f1:db:40:92:1e:ec:af: 0f:c4:0e:2d:a9:36:0c:92:48:6e:3c:46:7a:88:05:a9:91:b0: ea:d2:9f:11:08:40:80:84:00:b0:54:87:2d:60:ee:85:46:a2: a4:5e:67:1f:c7:a4:26:da:f5:8c:09:65:4e:8b:a9:eb:07:06: 94:29:e3:3e:b4:f0:46:b2:4e:6b:5a:23:8d:7a:b8:fd:fe:1f: b9:b3:db:47:88:0d:8f:9b:2f:d4:86:40:44:75:b3:5f:5e:06: f9:53:ac:56:76:e0:12:06:6f:7c:36:31:62:de:48:b4:ab:fd: cc:85:bb:ed:83:f7:26:f7:60:6b:a0:27:8f:b5:06:9e:e9:e5: 55:e8:1c:19:5e:c0:3c:44:27:df:7c:2a:03:1e:27:36:ee:a2: 5b:1c:9f:b6:42:98:bc:cb:97:f4:95:92:f8:4a:e5:2b:95:1f: e7:c3:e8:01:1d:d5:10:83:fe:d2:78:89:ed:27:f7:cb:9a:22: f0:c1:46:d6:9c:3e:69:57:07:b0:6f:b5:53:d6:76:f1:bf:88: 42:6d:c6:80:d5:5d:53:18:aa:8e:43:41:45:f2:b5:fc:6e:db: a6:9f:cc:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7K012/1157INc7h2Fq3RC8QBs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1 MDJCMzI3QjAeFw0yNjA5MTcxMDMxNDJaFw0yNjA5MTgxMjE4NDJaMDMxMTAvBgNV BAMTKEIzMjRBRDhGMzYyOTdFMjhFNjFEQUIyOTMxMDc0MDMzRDYxM0YzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dfKUTud/f03D8jlDm7YN+kbW yDuFqjwYu8Z6ZRrhbZutB0hW+Me5rahJ8Syoz8c9kWTzhrii7wfKgfSw+rIvH8Dl Rc3XxbMx/dpTTr0wvN43w+dI0CptMZ0vh1BlQYu+9eg4iySFpisdoqmLHGG4XohP Tvt8bC3kzDB2i+3vxdS7v54+annJ0eUMowYMssiYuokzO03cSX0czVrXp95D/GVj BbptgUkjYiFYaSQfUs/58V2XnqFwWHIBNP/QTIW9BuWlG6QGQvCOZKiNzNICrWMD tw4TsTaSwnpJtBfrpN43CsWCBEvSZvVDpEWISPALedhyKYJwgP9YBR+AbhkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsyStjzYpfijmHaspMQdAM9YT88wwHwYDVR0j BBgwFoAURfTrN6oXiiQrjY3XI7XptVArMnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEyNGFhOGMtZGVkYy00Mzc2LTkzODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdB QTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1MDJCMzI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUY0RUIzN0FBMTc4QTI0MkI4RDhERDcyM0I1RTlCNTUwMkIz MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5 QjU1MDJCMzI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnGbWLZPxp0mGv3vl5a6KzUlnQrSw6POZfc 2JLg8dtAkh7srw/EDi2pNgySSG48RnqIBamRsOrSnxEIQICEALBUhy1g7oVGoqRe Zx/HpCba9YwJZU6LqesHBpQp4z608EayTmtaI416uP3+H7mz20eIDY+bL9SGQER1 s19eBvlTrFZ24BIGb3w2MWLeSLSr/cyFu+2D9yb3YGugJ4+1Bp7p5VXoHBlewDxE J998KgMeJzbuolscn7ZCmLzLl/SVkvhK5SuVH+fD6AEd1RCD/tJ4ie0n98uaIvDB RtacPmlXB7BvtVPWdvG/iEJtxoDVXVMYqo5DQUXytfxu26afzEQ= -----END CERTIFICATE-----Generated at Thu Sep 17 15:26:15 2026 by rpki-client