$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft File: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft (raw, json) Hash identifier: UxsNdAYTe8ScjHC1GUQPZoA/0zo0arvkle0HhvnqTwQ= Subject key identifier: 59:FA:96:49:67:97:4C:14:04:D7:68:5F:7B:57:F5:AC:2D:60:FF:9B Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 18C48B3E783679FC99B4560A1E212B133819D9CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft Manifest number: 4E Signing time: Wed 25 Mar 2026 00:32:37 +0000 Manifest this update: Wed 25 Mar 2026 00:27:37 +0000 Manifest next update: Sat 28 Mar 2026 10:14:37 +0000 Files and hashes: 1: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl (hash: 8f6IKFd0qV+zrZTKfghdpbqY2rsAy9Mir8c554qDVEw=) 2: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c4:8b:3e:78:36:79:fc:99:b4:56:0a:1e:21:2b:13:38:19:d9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Mar 25 00:27:37 2026 GMT Not After : Mar 28 10:14:37 2026 GMT Subject: CN=59FA964967974C1404D7685F7B57F5AC2D60FF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:33:6b:89:e1:57:c5:e4:b1:8d:a4:31:44:25: 64:35:61:22:d6:2c:84:b8:66:51:57:ef:02:40:cf: 5c:12:2c:eb:b3:b0:7a:8c:e3:3e:89:cf:19:40:b6: ba:16:a7:b8:59:f7:30:98:7d:35:a9:c5:4d:9e:6c: c0:2e:77:0b:d2:ea:04:2a:e6:61:99:08:7d:59:42: ce:f0:6e:72:cc:7e:37:20:b2:e2:91:b2:7a:5c:42: 85:e8:b0:c2:82:7d:6f:2a:c0:ef:0e:3b:79:f3:bf: 92:18:59:ef:7d:79:d1:48:59:2c:2e:fe:68:9f:e8: a5:6f:54:2c:71:89:7e:63:8d:c2:09:f5:96:21:3b: f5:2f:f2:cc:96:b4:56:f2:5c:6b:b6:ce:24:03:f7: a8:8e:cf:de:56:4c:0b:b2:2f:56:cd:bf:77:76:ce: a2:7b:bf:17:a8:1e:cb:75:b3:1a:9b:8b:a6:cc:90: 4b:b5:28:95:82:64:08:6d:54:7a:a3:47:95:23:9f: af:c4:ce:24:f4:a0:a9:d6:a2:93:76:12:9a:29:13: c8:a6:8a:fa:a8:49:65:55:da:d1:06:69:b2:19:14: fc:b0:79:aa:40:47:50:86:ca:d0:dd:6b:54:d5:d4: ca:fa:63:40:7d:07:94:8b:8b:a7:8f:62:3d:8f:da: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FA:96:49:67:97:4C:14:04:D7:68:5F:7B:57:F5:AC:2D:60:FF:9B X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:16:1f:d2:f9:d8:2a:4a:f5:9e:77:c9:71:a4:73:e9:92:89: 68:fb:4e:5a:88:1c:3e:6f:df:81:37:b5:bd:4a:22:45:17:f0: 37:a3:c2:4d:89:1c:60:5a:de:95:c1:8b:1d:23:24:8e:ad:fc: d3:4e:96:fe:df:fd:82:07:4f:7c:09:03:48:3c:35:35:04:74: 74:67:4b:eb:6a:dc:d5:57:27:90:a8:c5:7c:7e:94:1d:ef:35: 49:57:2e:6c:70:19:eb:56:7e:ae:77:aa:2f:e4:98:d8:8e:28: 92:1e:6b:e0:5e:84:96:1b:77:40:9a:44:aa:18:65:8e:3d:2d: 9d:2d:9d:e8:77:ab:ad:de:eb:33:28:3d:23:53:d2:54:cd:d3: e2:99:a1:0d:68:32:e7:75:b4:d3:0a:0d:3a:c8:f0:0b:d3:4d: 1f:59:aa:bb:99:ba:ee:0c:c3:6a:8c:d5:60:98:3f:93:0c:4d: 19:3a:57:b6:35:f6:41:24:35:ee:3c:0e:60:e1:a6:4e:c0:94: e6:12:55:2a:b9:9d:67:04:8a:50:3b:6b:07:2a:69:3c:fb:ee: 0a:7f:4b:dc:59:fa:81:ab:6c:89:7d:a6:7a:cd:d1:a6:ed:29: 9d:1d:9d:7d:69:0e:52:07:36:62:24:39:d6:46:21:1b:54:ab: a7:d9:17:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMSLPng2efyZtFYKHiErEzgZ2cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNjAzMjUwMDI3MzdaFw0yNjAzMjgxMDE0MzdaMDMxMTAvBgNV BAMTKDU5RkE5NjQ5Njc5NzRDMTQwNEQ3Njg1RjdCNTdGNUFDMkQ2MEZGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhM2uJ4VfF5LGNpDFEJWQ1YSLW LIS4ZlFX7wJAz1wSLOuzsHqM4z6JzxlAtroWp7hZ9zCYfTWpxU2ebMAudwvS6gQq 5mGZCH1ZQs7wbnLMfjcgsuKRsnpcQoXosMKCfW8qwO8OO3nzv5IYWe99edFIWSwu /mif6KVvVCxxiX5jjcIJ9ZYhO/Uv8syWtFbyXGu2ziQD96iOz95WTAuyL1bNv3d2 zqJ7vxeoHst1sxqbi6bMkEu1KJWCZAhtVHqjR5Ujn6/EziT0oKnWopN2EpopE8im ivqoSWVV2tEGabIZFPyweapAR1CGytDda1TV1Mr6Y0B9B5SLi6ePYj2P2scFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWfqWSWeXTBQE12hfe1f1rC1g/5swHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0Yz RjYwMDczRDE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcWH9L52CpK9Z53yXGkc+mSiWj7TlqIHD5v 34E3tb1KIkUX8Dejwk2JHGBa3pXBix0jJI6t/NNOlv7f/YIHT3wJA0g8NTUEdHRn S+tq3NVXJ5CoxXx+lB3vNUlXLmxwGetWfq53qi/kmNiOKJIea+BehJYbd0CaRKoY ZY49LZ0tneh3q63e6zMoPSNT0lTN0+KZoQ1oMud1tNMKDTrI8AvTTR9ZqruZuu4M w2qM1WCYP5MMTRk6V7Y19kEkNe48DmDhpk7AlOYSVSq5nWcEilA7awcqaTz77gp/ S9xZ+oGrbIl9pnrN0abtKZ0dnX1pDlIHNmIkOdZGIRtUq6fZF80= -----END CERTIFICATE-----Generated at Thu Mar 26 16:38:55 2026 by rpki-client