$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft File: 645C9D445B2796662EE98A03E50C124F3E962CAB.mft (raw, json) Hash identifier: QyBO3Cv8O4NmCXgYOQGWMVh6//gBomUuxgXXcwm2b0M= Subject key identifier: 1D:45:CD:A4:CC:0C:87:B3:9C:C4:E6:BF:79:1E:B7:BA:DE:01:61:A5 Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 2D2B51E3B948EC57FDFE2E443344BFBFE0EE5631 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft Manifest number: 03FD Signing time: Thu 12 Mar 2026 23:51:14 +0000 Manifest this update: Thu 12 Mar 2026 23:46:14 +0000 Manifest next update: Mon 16 Mar 2026 08:22:14 +0000 Files and hashes: 1: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: e9MuQpUdmZSWJyLwqKXY1nxQlgwTqEZ4CpPjIrRXOr8=) 2: 645C9D445B2796662EE98A03E50C124F3E962CAB.crl (hash: JX/gJeJbvIotRD+2V3wgOqml3qaC/N+FSo32SWWZGlA=) 3: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: SMPg/3qiOryd428jAGKTXmMedIlqTpx2BfnFfzgQnCk=) 4: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: IX4uPd9N3SkfP7LEqX7tm7Aw2XVAAH51yq8xtLADMD0=) 5: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: +SeGBM9CdtDOWXU9iixLlEgCajKedvFQm/V7StxkJlo=) 6: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: bgUQl2KKDVdxSEkmrD5bo1yuFXhp8F+vNio9ZlmO2Lc=) 7: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: 8QSbauO9NNotVx0xsCiC0xHQEL8XE+fwtGOjSQB5tIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Mar 2026 07:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2b:51:e3:b9:48:ec:57:fd:fe:2e:44:33:44:bf:bf:e0:ee:56:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Mar 12 23:46:14 2026 GMT Not After : Mar 16 08:22:14 2026 GMT Subject: CN=1D45CDA4CC0C87B39CC4E6BF791EB7BADE0161A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:45:63:27:c8:57:4d:3a:9e:6a:14:b6:45: cb:ab:b8:44:d5:95:66:e3:b5:7b:3b:07:5a:cc:fa: 38:4f:19:ae:47:60:48:d3:79:dd:24:13:63:da:1b: f7:52:22:74:ca:c4:4d:34:6b:21:a4:82:9e:c8:62: 76:26:87:96:7c:10:8a:2c:26:d7:e8:4e:0a:e0:fd: fd:15:31:5f:0d:cd:d4:b5:df:7c:78:80:d0:dd:8b: 61:b0:68:82:86:68:ed:c7:b9:c2:15:3b:67:fa:0e: 18:74:e9:8f:ea:ef:2e:f9:99:80:e0:b1:bd:5c:c9: 2a:98:22:84:38:da:7c:9e:11:47:e9:b2:b5:3b:74: 15:4b:40:d5:6e:76:ab:43:9f:e2:87:0d:97:71:5d: da:15:48:d4:4d:ef:57:5e:67:0b:e1:e5:5a:db:7d: ad:e2:62:a4:dd:a1:00:0b:56:b3:ae:e5:2e:38:bf: 25:f2:66:ad:e3:d1:eb:63:18:4c:13:75:e6:d5:2e: a0:39:22:9e:f6:61:5c:d2:2a:13:9f:1e:34:2f:e8: 28:79:24:c2:7d:96:4e:a1:5c:f5:e1:5c:64:5d:ce: 6e:b4:10:f8:ed:dc:45:48:b5:08:83:d5:0d:8e:6d: 03:26:a8:21:af:67:af:c2:c9:46:73:51:2f:80:de: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:45:CD:A4:CC:0C:87:B3:9C:C4:E6:BF:79:1E:B7:BA:DE:01:61:A5 X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c2:6f:cf:a9:30:8e:36:58:d0:a6:09:08:f1:54:3d:b4:85: bf:13:53:43:30:42:19:4a:c3:09:5a:f5:02:65:a1:43:0b:0c: d7:5d:cf:31:1c:88:9d:22:b4:23:d2:24:a4:15:17:d3:17:cb: ba:b1:9a:1b:bc:4e:23:b5:00:c5:38:91:c1:40:89:f8:19:f6: 48:b2:e5:94:d9:1b:27:2a:35:6a:90:54:8f:c3:e6:e0:c9:77: 87:73:a6:42:b4:89:bd:67:e6:d4:82:c7:c0:62:2b:1f:19:7a: d3:04:0a:27:6b:28:a4:c1:05:93:b6:ac:7e:0c:07:13:da:7f: 78:51:14:bb:3d:7c:06:7d:00:43:c7:f7:c4:c1:d8:ab:85:fc: 14:0e:8a:70:02:24:8b:b8:95:4a:de:a7:1f:e9:dd:2f:88:39: d6:18:22:e4:b1:f7:de:e9:0a:48:56:a3:e9:93:e5:6e:fe:ae: 65:a4:c7:d9:77:38:ac:70:4d:b6:f0:47:c9:b8:54:9c:49:82: 79:cf:81:cf:f1:2c:eb:77:78:46:46:c2:c4:98:49:40:58:ee: ae:e4:55:94:41:e0:30:e0:1b:64:42:c2:f7:44:b2:c7:03:98: ef:22:2d:04:51:1b:73:da:2f:6d:f0:4e:d3:13:b1:58:7b:42: 84:10:1d:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULStR47lI7Ff9/i5EM0S/v+DuVjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNjAzMTIyMzQ2MTRaFw0yNjAzMTYwODIyMTRaMDMxMTAvBgNV BAMTKDFENDVDREE0Q0MwQzg3QjM5Q0M0RTZCRjc5MUVCN0JBREUwMTYxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DUVjJ8hXTTqeahS2RcuruETV lWbjtXs7B1rM+jhPGa5HYEjTed0kE2PaG/dSInTKxE00ayGkgp7IYnYmh5Z8EIos JtfoTgrg/f0VMV8NzdS133x4gNDdi2GwaIKGaO3HucIVO2f6Dhh06Y/q7y75mYDg sb1cySqYIoQ42nyeEUfpsrU7dBVLQNVudqtDn+KHDZdxXdoVSNRN71deZwvh5Vrb fa3iYqTdoQALVrOu5S44vyXyZq3j0etjGEwTdebVLqA5Ip72YVzSKhOfHjQv6Ch5 JMJ9lk6hXPXhXGRdzm60EPjt3EVItQiD1Q2ObQMmqCGvZ6/CyUZzUS+A3sU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHUXNpMwMh7OcxOa/eR63ut4BYaUwHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEy NEYzRTk2MkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPCb8+pMI42WNCmCQjxVD20hb8TU0MwQhlK wwla9QJloUMLDNddzzEciJ0itCPSJKQVF9MXy7qxmhu8TiO1AMU4kcFAifgZ9kiy 5ZTZGycqNWqQVI/D5uDJd4dzpkK0ib1n5tSCx8BiKx8ZetMECidrKKTBBZO2rH4M BxPaf3hRFLs9fAZ9AEPH98TB2KuF/BQOinACJIu4lUrepx/p3S+IOdYYIuSx997p CkhWo+mT5W7+rmWkx9l3OKxwTbbwR8m4VJxJgnnPgc/xLOt3eEZGwsSYSUBY7q7k VZRB4DDgG2RCwvdEsscDmO8iLQRRG3PaL23wTtMTsVh7QoQQHdQ= -----END CERTIFICATE-----Generated at Fri Mar 13 10:40:01 2026 by rpki-client