$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: ItOQNGbuGyd2EkNhkKCotdL4SX3QrFqYxRJrN5T2MHI= Subject key identifier: 52:83:32:6B:74:CB:FF:E3:8E:9E:D6:DE:00:28:E6:0A:73:00:A9:CC Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 7CAA4286A422A95BD55C7505DCA20C4A989BEAC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 0313 Signing time: Wed 25 Mar 2026 02:52:16 +0000 Manifest this update: Wed 25 Mar 2026 02:47:16 +0000 Manifest next update: Sat 28 Mar 2026 03:04:16 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: ctP7iZh6Pi4bGkXsiPVFEzH3C3SbuLNPCJCcVp3ePus=) 2: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY=) 3: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: iNptTDDWyH+lFPRrBBjcIIoGY7z6UMPQ6SuEsfgZhEI=) 4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: uAyx0ZgKo2lMKIycgmtqallZpoJhZxNdFY86j3bZrVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:aa:42:86:a4:22:a9:5b:d5:5c:75:05:dc:a2:0c:4a:98:9b:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Mar 25 02:47:16 2026 GMT Not After : Mar 28 03:04:16 2026 GMT Subject: CN=5283326B74CBFFE38E9ED6DE0028E60A7300A9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:35:53:58:f4:5d:48:48:db:d4:35:34:63:ef: 6b:2a:cc:4c:74:e6:02:4f:2b:b5:f1:f5:97:4e:2d: 30:57:b8:e7:75:15:a0:68:0a:f4:06:e1:43:53:07: 88:fd:25:b3:25:a3:f6:60:96:a7:68:af:3e:b9:f9: 58:0e:b5:6a:da:57:af:19:db:3b:b6:58:9c:d9:c2: 11:9a:3b:e8:23:e9:a3:96:20:4b:a6:cf:fe:f2:67: 36:ad:0b:d9:38:89:de:64:21:4a:d5:46:be:49:b7: 34:d0:42:16:90:84:c1:7a:e6:24:9e:5a:66:95:4c: 9d:bc:25:4d:9c:cf:c2:08:e0:3e:8e:62:50:e4:f4: 66:dc:c2:de:d5:de:32:21:40:bd:0e:d6:a0:ba:2a: 8e:67:e1:8f:ba:ee:b3:89:a1:a0:2f:21:56:5c:d8: 21:5d:c3:d3:f6:cb:dc:73:83:9d:c6:7b:16:bd:10: 53:a1:8a:f2:18:36:ee:b6:13:d3:e2:f1:a9:2d:71: 12:91:f1:8a:3a:95:84:b5:e3:ba:1d:a0:08:10:64: ff:58:5b:3c:9d:11:99:96:16:ab:a6:43:52:ad:e9: 97:33:28:04:75:44:d9:db:b5:fa:af:b7:f0:8e:4d: f1:e3:b9:06:af:c4:9b:11:e2:cd:04:8c:30:93:8b: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:83:32:6B:74:CB:FF:E3:8E:9E:D6:DE:00:28:E6:0A:73:00:A9:CC X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:70:e8:d4:c8:17:ea:8d:03:ce:5a:70:9f:ca:84:e7:1c:52: 03:13:17:a2:53:07:ca:70:57:c0:78:d1:0b:75:5d:a8:88:e2: e4:26:79:97:6a:c9:86:e0:40:19:f8:35:23:a7:44:26:a1:c5: 03:8d:8a:7f:e9:6e:ac:2a:93:43:25:f6:06:e6:01:76:39:18: 00:4c:1c:f2:ae:fd:7c:31:26:cf:4d:06:b4:ef:0e:f3:81:77: ff:df:d8:1b:32:16:f3:4c:f9:56:e9:65:c3:79:5d:66:ec:8b: 66:bb:28:f1:d6:e5:df:ec:54:82:a8:45:67:d3:92:89:f5:b7: 4b:ff:55:0e:82:e0:8b:18:e6:1b:6d:28:a9:81:1d:0b:eb:6d: f7:5a:97:0c:41:b3:e1:d1:cf:f0:c2:92:4f:5f:46:38:a8:76: df:0f:42:cb:e2:84:ca:24:f4:3f:12:35:92:f8:a8:98:2d:fb: 3f:dc:55:f7:d0:ac:ce:3b:f3:a6:a0:0d:ae:ef:20:07:b9:ee: 7d:48:9b:81:d2:63:d7:e0:bb:61:0e:63:24:53:86:c3:b8:b2: 8a:40:34:14:2b:8c:f4:84:37:73:09:00:9d:3e:a6:29:3a:b2: 58:96:d8:86:b0:18:0b:a5:02:b2:eb:04:48:21:5a:13:fd:56: 6a:44:5b:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKpChqQiqVvVXHUF3KIMSpib6sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNjAzMjUwMjQ3MTZaFw0yNjAzMjgwMzA0MTZaMDMxMTAvBgNV BAMTKDUyODMzMjZCNzRDQkZGRTM4RTlFRDZERTAwMjhFNjBBNzMwMEE5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNVNY9F1ISNvUNTRj72sqzEx0 5gJPK7Xx9ZdOLTBXuOd1FaBoCvQG4UNTB4j9JbMlo/Zglqdorz65+VgOtWraV68Z 2zu2WJzZwhGaO+gj6aOWIEumz/7yZzatC9k4id5kIUrVRr5JtzTQQhaQhMF65iSe WmaVTJ28JU2cz8II4D6OYlDk9Gbcwt7V3jIhQL0O1qC6Ko5n4Y+67rOJoaAvIVZc 2CFdw9P2y9xzg53Gexa9EFOhivIYNu62E9Pi8aktcRKR8Yo6lYS147odoAgQZP9Y WzydEZmWFqumQ1Kt6ZczKAR1RNnbtfqvt/COTfHjuQavxJsR4s0EjDCTi/IzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUoMya3TL/+OOntbeACjmCnMAqcwwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdw6NTIF+qNA85acJ/KhOccUgMTF6JTB8pw V8B40Qt1XaiI4uQmeZdqyYbgQBn4NSOnRCahxQONin/pbqwqk0Ml9gbmAXY5GABM HPKu/XwxJs9NBrTvDvOBd//f2BsyFvNM+VbpZcN5XWbsi2a7KPHW5d/sVIKoRWfT kon1t0v/VQ6C4IsY5httKKmBHQvrbfdalwxBs+HRz/DCkk9fRjiodt8PQsvihMok 9D8SNZL4qJgt+z/cVffQrM4786agDa7vIAe57n1Im4HSY9fgu2EOYyRThsO4sopA NBQrjPSEN3MJAJ0+pik6sliW2IawGAulArLrBEghWhP9VmpEW18= -----END CERTIFICATE-----Generated at Thu Mar 26 21:44:53 2026 by rpki-client