$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft File: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft (raw, json) Hash identifier: TeZCVK7icwqenarauPBTkXLgObC/6lgNyjjA5RzyfWg= Subject key identifier: CA:30:4C:C8:B9:62:03:94:68:AF:08:26:AA:31:47:43:21:CF:18:C8 Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 458F9AE7BB653FB0D48B1F7711299B92D43D05BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft Manifest number: 44 Signing time: Mon 02 Mar 2026 03:02:37 +0000 Manifest this update: Mon 02 Mar 2026 02:57:37 +0000 Manifest next update: Thu 05 Mar 2026 13:56:37 +0000 Files and hashes: 1: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl (hash: +QqZ3sO+hVjT+NCEYVD6PTGaJZ6febM+Cc01xgSM+0s=) 2: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8f:9a:e7:bb:65:3f:b0:d4:8b:1f:77:11:29:9b:92:d4:3d:05:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Mar 2 02:57:37 2026 GMT Not After : Mar 5 13:56:37 2026 GMT Subject: CN=CA304CC8B962039468AF0826AA31474321CF18C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:bd:7b:e6:a6:50:fa:84:96:18:53:9e:e9: a8:85:57:e1:fd:54:af:43:83:97:b7:b4:99:74:6e: 22:33:23:09:f2:33:7f:f1:33:8e:06:11:cf:04:b9: 8d:6e:7f:92:43:17:a2:41:fa:4b:c2:3d:07:ac:94: 8f:ed:b5:47:f9:1a:a0:42:18:9c:b4:4d:a0:04:27: 3d:76:e0:2f:ff:00:db:43:41:2e:cc:9a:01:0c:f1: 25:3a:7a:a3:98:32:72:43:8f:75:3c:2b:7a:64:c7: 6c:3c:04:7a:61:3f:e0:5d:98:0b:a6:c0:e3:c7:52: 93:7a:d9:4f:e9:60:29:a6:cb:33:3d:60:8f:16:d7: 43:d5:f7:4a:05:a3:9a:de:5f:40:e1:d9:13:7d:f7: 94:30:8e:f5:03:df:e6:d1:6a:e2:bc:94:a2:1a:dc: 7e:f2:ef:2f:55:6c:0f:2a:bd:b6:ed:27:0c:db:e3: 45:b0:84:57:14:4d:ff:de:cd:b5:6f:63:82:80:76: 29:f4:f2:e3:86:11:ac:d5:3a:20:b5:5e:05:c2:83: f9:83:e0:35:92:eb:c3:c9:f7:bd:31:c9:c3:9a:f8: 53:db:8c:bf:21:4e:be:ac:1d:0a:82:7c:20:00:68: fc:a7:d3:b9:31:a9:99:40:a0:43:d2:56:eb:7a:ef: f4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:30:4C:C8:B9:62:03:94:68:AF:08:26:AA:31:47:43:21:CF:18:C8 X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4b:fb:f4:c5:a3:c6:db:dd:11:e8:7c:2c:3d:94:33:87:1d: 38:ef:7c:01:37:7c:8d:04:3f:74:88:e4:51:06:b6:62:1b:8b: dc:38:ce:f1:d4:1f:9e:37:19:cb:84:9b:a5:90:c4:4e:ff:c0: 24:6c:ad:30:da:f2:aa:e9:ee:00:69:89:39:b5:a6:72:28:5f: b1:41:17:6d:67:91:a3:60:55:6c:53:c2:d1:78:87:e0:90:3a: 7a:b1:ae:b4:15:0f:e7:d3:39:26:7c:a2:df:e3:68:41:df:a5: 51:63:52:0c:b3:a1:08:8b:50:c8:9c:9c:09:88:83:16:0b:1b: b9:22:81:df:4b:95:f8:06:24:10:e3:3b:ff:5c:49:78:c2:d6: 04:69:5f:07:0d:e4:ad:31:1f:82:78:5f:76:02:55:c7:3f:12: df:68:38:07:98:b5:d1:d0:9f:0d:21:a6:95:58:c4:c7:af:73: 63:28:b6:13:25:a0:99:26:3b:05:fe:81:3b:ef:5c:fd:44:7f: fe:77:70:5b:7f:c5:3b:83:50:31:ea:e0:c7:21:c8:41:5b:83: 45:f8:68:ac:98:33:4d:98:74:ee:c6:2f:32:ed:bb:8a:67:30: ef:4e:dc:01:27:63:c2:29:b6:96:16:08:1f:6f:4b:32:71:2e: 2a:28:8a:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURY+a57tlP7DUix93ESmbktQ9BbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNjAzMDIwMjU3MzdaFw0yNjAzMDUxMzU2MzdaMDMxMTAvBgNV BAMTKENBMzA0Q0M4Qjk2MjAzOTQ2OEFGMDgyNkFBMzE0NzQzMjFDRjE4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtL175qZQ+oSWGFOe6aiFV+H9 VK9Dg5e3tJl0biIzIwnyM3/xM44GEc8EuY1uf5JDF6JB+kvCPQeslI/ttUf5GqBC GJy0TaAEJz124C//ANtDQS7MmgEM8SU6eqOYMnJDj3U8K3pkx2w8BHphP+BdmAum wOPHUpN62U/pYCmmyzM9YI8W10PV90oFo5reX0Dh2RN995QwjvUD3+bRauK8lKIa 3H7y7y9VbA8qvbbtJwzb40WwhFcUTf/ezbVvY4KAdin08uOGEazVOiC1XgXCg/mD 4DWS68PJ970xycOa+FPbjL8hTr6sHQqCfCAAaPyn07kxqZlAoEPSVut67/TXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyjBMyLliA5RorwgmqjFHQyHPGMgwHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0Yz RjYwMDczRDE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFL+/TFo8bb3RHofCw9lDOHHTjvfAE3fI0E P3SI5FEGtmIbi9w4zvHUH543GcuEm6WQxE7/wCRsrTDa8qrp7gBpiTm1pnIoX7FB F21nkaNgVWxTwtF4h+CQOnqxrrQVD+fTOSZ8ot/jaEHfpVFjUgyzoQiLUMicnAmI gxYLG7kigd9LlfgGJBDjO/9cSXjC1gRpXwcN5K0xH4J4X3YCVcc/Et9oOAeYtdHQ nw0hppVYxMevc2MothMloJkmOwX+gTvvXP1Ef/53cFt/xTuDUDHq4MchyEFbg0X4 aKyYM02YdO7GLzLtu4pnMO9O3AEnY8IptpYWCB9vSzJxLiooim4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:14 2026 by rpki-client