$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft File: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft (raw, json) Hash identifier: 9eHBrxqaIfPpe+YCowqMopOrdqZb3LS0q4j6dc7TtT8= Subject key identifier: 33:A7:AE:DA:5A:FD:11:5F:11:0D:F0:DC:85:4D:97:BD:3E:C9:37:3C Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 1C22B9162E9F13C90433868A475F01C004EC7E85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft Manifest number: 4B Signing time: Tue 17 Mar 2026 22:42:41 +0000 Manifest this update: Tue 17 Mar 2026 22:37:41 +0000 Manifest next update: Sat 21 Mar 2026 03:41:41 +0000 Files and hashes: 1: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl (hash: xCFMEL6FrCIkizHZafctWPIp8AYD8/f77mwAUYPfHZU=) 2: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 03:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:22:b9:16:2e:9f:13:c9:04:33:86:8a:47:5f:01:c0:04:ec:7e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Mar 17 22:37:41 2026 GMT Not After : Mar 21 03:41:41 2026 GMT Subject: CN=33A7AEDA5AFD115F110DF0DC854D97BD3EC9373C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b9:7a:2c:1c:2c:98:ac:15:28:4c:75:ac:b8: 85:c7:68:b4:90:1e:d4:74:c1:f9:f4:10:1f:e6:db: ea:29:17:2d:0f:7b:87:70:66:30:ab:f8:06:47:ab: 79:30:88:e5:52:4d:98:98:05:04:9a:71:52:88:ac: f5:d2:4a:71:39:62:ea:a2:f7:3a:7d:91:94:02:d8: 88:c2:cb:38:92:f7:85:18:68:51:5a:6d:b0:61:34: 57:01:b2:52:18:82:f7:46:e0:d2:d8:f6:fc:2a:76: 45:61:75:e0:a9:32:97:96:34:1b:26:f5:c9:8c:d1: 00:d4:3f:25:51:b6:f8:8e:44:a0:20:4f:77:79:a6: fb:5d:09:5a:39:bb:f3:38:84:7d:b4:cb:39:27:46: 2f:42:c6:0e:93:63:5d:e0:20:5b:81:67:e6:49:f4: 71:1e:c9:7a:9a:81:d8:98:9d:7f:1a:70:72:ce:51: 07:31:ef:9a:e3:52:9d:5f:78:4f:9b:e2:b2:42:d2: 55:6f:62:8a:b5:13:11:78:c8:c9:9a:af:03:b3:3d: a0:93:b1:20:19:8d:60:c9:6d:dd:09:78:4b:06:6c: 5b:0b:d1:67:a9:60:6b:21:49:67:21:33:e8:96:f2: 44:0c:c3:30:07:77:62:d4:c9:b4:ab:64:ff:27:48: 3c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A7:AE:DA:5A:FD:11:5F:11:0D:F0:DC:85:4D:97:BD:3E:C9:37:3C X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:0a:a4:77:b8:3e:51:99:0a:96:83:e0:88:6b:c4:35:45:a2: 4e:d7:d3:04:70:ab:1e:5a:45:71:4d:1b:a2:a3:58:e3:b6:71: ac:2d:1d:2d:e4:a1:39:21:cf:9e:15:f0:04:56:50:d1:ac:c1: b3:30:2f:ee:12:09:50:65:ce:a2:dd:72:92:44:79:6f:f6:56: 23:ce:99:15:87:95:45:62:9e:58:bc:eb:6f:b3:03:13:b9:c6: e3:61:02:9b:c7:8c:c6:02:02:c4:0f:d2:3d:bc:bc:29:f5:c7: 37:e0:41:e1:e5:99:91:e2:7e:66:29:91:ed:06:c9:c5:96:72: 48:bb:2f:e9:31:27:23:07:c7:26:63:e5:0b:cb:11:b5:c3:c1: 59:80:84:1e:05:af:6f:aa:6a:9b:fa:d8:8f:d3:40:e7:46:e1: 58:d5:8e:af:3c:62:01:2d:1c:42:1e:fa:77:7e:56:49:98:95: f2:7e:29:77:bc:ad:ca:8c:b6:23:a5:42:24:60:d7:75:45:64: db:fe:6d:1a:89:5d:c3:31:3a:62:67:21:05:69:83:1e:f6:83: 6c:fc:4c:f3:fc:ca:b6:08:ef:cc:a9:0d:07:f4:fa:5d:86:ea: f8:6d:c4:99:61:7d:14:43:94:78:82:e5:58:a8:8f:21:5f:a7: df:c2:02:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCK5Fi6fE8kEM4aKR18BwATsfoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNjAzMTcyMjM3NDFaFw0yNjAzMjEwMzQxNDFaMDMxMTAvBgNV BAMTKDMzQTdBRURBNUFGRDExNUYxMTBERjBEQzg1NEQ5N0JEM0VDOTM3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXuXosHCyYrBUoTHWsuIXHaLSQ HtR0wfn0EB/m2+opFy0Pe4dwZjCr+AZHq3kwiOVSTZiYBQSacVKIrPXSSnE5Yuqi 9zp9kZQC2IjCyziS94UYaFFabbBhNFcBslIYgvdG4NLY9vwqdkVhdeCpMpeWNBsm 9cmM0QDUPyVRtviORKAgT3d5pvtdCVo5u/M4hH20yzknRi9Cxg6TY13gIFuBZ+ZJ 9HEeyXqagdiYnX8acHLOUQcx75rjUp1feE+b4rJC0lVvYoq1ExF4yMmarwOzPaCT sSAZjWDJbd0JeEsGbFsL0WepYGshSWchM+iW8kQMwzAHd2LUybSrZP8nSDyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM6eu2lr9EV8RDfDchU2XvT7JNzwwHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0Yz RjYwMDczRDE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYKpHe4PlGZCpaD4IhrxDVFok7X0wRwqx5a RXFNG6KjWOO2cawtHS3koTkhz54V8ARWUNGswbMwL+4SCVBlzqLdcpJEeW/2ViPO mRWHlUVinli862+zAxO5xuNhApvHjMYCAsQP0j28vCn1xzfgQeHlmZHifmYpke0G ycWWcki7L+kxJyMHxyZj5QvLEbXDwVmAhB4Fr2+qapv62I/TQOdG4VjVjq88YgEt HEIe+nd+VkmYlfJ+KXe8rcqMtiOlQiRg13VFZNv+bRqJXcMxOmJnIQVpgx72g2z8 TPP8yrYI78ypDQf0+l2G6vhtxJlhfRRDlHiC5ViojyFfp9/CAps= -----END CERTIFICATE-----Generated at Thu Mar 19 09:56:36 2026 by rpki-client