$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: wOrXNKVihQM9s7eGOfHlpGT+NUWMqmDbCJMNGs1oiJ8= Subject key identifier: 61:1F:1C:0F:99:8C:38:91:AB:0C:B0:38:DC:AD:A7:16:3E:D7:76:02 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 65ABAC24728DCFEE9F6273331A452EFA00B6ED7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 017C Signing time: Wed 25 Mar 2026 13:32:32 +0000 Manifest this update: Wed 25 Mar 2026 13:27:32 +0000 Manifest next update: Sat 28 Mar 2026 23:34:32 +0000 Files and hashes: 1: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: cLToJ49OKqVQRgjYGYNvWnWnJYTEY5LWx4h5YZdNEfg=) 2: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: 3pQq6s6KFHICHtYefV295CsHX6UMAJH1L/EahaL653Y=) 3: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: TTBU1STvQaNI1wpqoaj9bG2m/T27T+WPjYQLtuioWoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ab:ac:24:72:8d:cf:ee:9f:62:73:33:1a:45:2e:fa:00:b6:ed:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Mar 25 13:27:32 2026 GMT Not After : Mar 28 23:34:32 2026 GMT Subject: CN=611F1C0F998C3891AB0CB038DCADA7163ED77602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:1b:c6:d2:bd:e6:50:3a:f4:f7:82:ba:ee: 08:89:08:64:3c:04:c0:27:c5:25:ee:0b:84:29:ed: f9:b6:8b:d5:cb:2d:d8:94:50:95:b6:ce:c2:5e:7a: b9:f0:03:11:ac:ca:1b:90:25:77:92:3e:b4:80:70: e1:80:9f:f7:71:fa:51:9c:02:85:0d:43:e9:df:67: 5b:2d:1f:89:6f:73:e8:fb:70:3a:89:ac:a4:23:c4: 70:b8:bb:11:ca:3d:a4:4d:14:33:dc:d7:25:30:e9: f0:11:9a:ac:4a:b6:cc:b2:aa:9d:34:4c:f2:55:f7: ee:d9:23:cd:29:d0:00:b2:48:79:ba:52:5a:b5:7a: 67:ae:6b:df:23:94:95:52:6d:f2:17:3e:24:2f:c3: 5a:ef:d7:fe:32:87:65:db:3f:6f:34:81:0d:6c:e8: 2c:ab:a2:2d:6a:77:eb:0f:3f:fe:6a:f0:b8:6d:95: 5d:96:42:13:5e:33:58:88:17:89:2e:1e:3b:fd:33: f1:f9:fe:51:78:37:90:78:2b:a6:1a:41:af:d8:3a: 28:4e:5e:40:40:1a:8c:01:8f:9c:03:fb:46:29:a3: 6e:0f:e4:63:c9:55:05:63:39:2b:74:83:8c:55:e2: 49:7b:0f:44:2c:03:30:a7:71:a7:92:c4:11:a0:fa: 10:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1F:1C:0F:99:8C:38:91:AB:0C:B0:38:DC:AD:A7:16:3E:D7:76:02 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:07:fd:86:ab:b3:c2:04:21:ff:37:1e:b3:1b:be:02:f4:52: 7d:c6:04:9c:a0:dc:08:33:30:da:d0:c2:26:e4:46:cb:f1:12: 2e:22:1f:40:4c:47:6e:55:bd:b7:31:95:65:e7:a3:21:68:a1: 77:f7:ac:e2:e1:fe:f2:81:d1:ff:41:b5:2d:98:c2:2b:bb:e4: 21:9a:b7:23:4f:8c:d2:20:ed:f0:62:be:b2:b8:73:49:88:c1: 44:2c:a0:8e:d5:07:1e:ef:c0:4c:45:ce:5b:e4:14:df:f4:22: 7b:68:50:fc:42:e9:3a:b0:32:b7:92:8f:42:8b:75:86:dd:38: b4:91:d2:87:d1:3a:fb:29:86:c4:ef:65:40:26:a5:0e:df:25: 6f:69:da:88:fc:56:a9:fc:5e:ec:7e:39:7d:c3:72:94:8d:90: 4e:9d:7c:f2:ec:fb:63:55:bb:cc:60:90:e8:d5:d6:92:dd:7e: 7e:b4:a4:08:ee:53:0f:c8:c5:5b:e8:64:30:f9:fc:6a:95:73: df:ce:f1:37:49:d5:af:b0:74:f9:8e:12:96:cd:87:e5:aa:f7: d9:7e:34:24:b7:14:95:f0:32:6b:f0:18:27:37:54:93:91:0d: 8f:d8:45:47:e6:29:8e:5e:b9:1e:38:b4:51:d6:d6:45:9a:02: 65:69:86:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZausJHKNz+6fYnMzGkUu+gC27XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNjAzMjUxMzI3MzJaFw0yNjAzMjgyMzM0MzJaMDMxMTAvBgNV BAMTKDYxMUYxQzBGOTk4QzM4OTFBQjBDQjAzOERDQURBNzE2M0VENzc2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDuRvG0r3mUDr094K67giJCGQ8 BMAnxSXuC4Qp7fm2i9XLLdiUUJW2zsJeernwAxGsyhuQJXeSPrSAcOGAn/dx+lGc AoUNQ+nfZ1stH4lvc+j7cDqJrKQjxHC4uxHKPaRNFDPc1yUw6fARmqxKtsyyqp00 TPJV9+7ZI80p0ACySHm6Ulq1emeua98jlJVSbfIXPiQvw1rv1/4yh2XbP280gQ1s 6Cyroi1qd+sPP/5q8LhtlV2WQhNeM1iIF4kuHjv9M/H5/lF4N5B4K6YaQa/YOihO XkBAGowBj5wD+0Ypo24P5GPJVQVjOSt0g4xV4kl7D0QsAzCncaeSxBGg+hBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYR8cD5mMOJGrDLA43K2nFj7XdgIwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgH/Yars8IEIf83HrMbvgL0Un3GBJyg3Agz MNrQwibkRsvxEi4iH0BMR25VvbcxlWXnoyFooXf3rOLh/vKB0f9BtS2Ywiu75CGa tyNPjNIg7fBivrK4c0mIwUQsoI7VBx7vwExFzlvkFN/0IntoUPxC6TqwMreSj0KL dYbdOLSR0ofROvsphsTvZUAmpQ7fJW9p2oj8Vqn8Xux+OX3DcpSNkE6dfPLs+2NV u8xgkOjV1pLdfn60pAjuUw/IxVvoZDD5/GqVc9/O8TdJ1a+wdPmOEpbNh+Wq99l+ NCS3FJXwMmvwGCc3VJORDY/YRUfmKY5euR44tFHW1kWaAmVphjE= -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:11 2026 by rpki-client