$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft File: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft (raw, json) Hash identifier: g2VsCxXQJ3ysS5hoTw91Vwb5H+yDayZhThyHfelxz6I= Subject key identifier: B2:89:4D:30:04:6C:AE:AE:E1:54:AF:F7:26:12:0D:F5:FC:AA:36:EA Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 30F99C6F95544AC70C22960B05EEAB0022516195 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft Manifest number: 59 Signing time: Sat 18 Apr 2026 18:22:43 +0000 Manifest this update: Sat 18 Apr 2026 18:17:43 +0000 Manifest next update: Tue 21 Apr 2026 23:07:43 +0000 Files and hashes: 1: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl (hash: dQb3RB93lAjUac8KXpEWe3iUDoqAGmYYYWGr3vkhK+4=) 2: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f9:9c:6f:95:54:4a:c7:0c:22:96:0b:05:ee:ab:00:22:51:61:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Apr 18 18:17:43 2026 GMT Not After : Apr 21 23:07:43 2026 GMT Subject: CN=B2894D30046CAEAEE154AFF726120DF5FCAA36EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:1a:e9:7a:9d:15:71:5c:b8:b4:bb:91:ce: da:cb:2e:d7:1a:e9:1f:6c:73:80:67:aa:31:29:ba: b3:89:17:7f:77:57:ec:97:4c:2a:b6:70:ea:f6:0f: 59:c3:b3:cf:f3:3f:97:26:37:9e:f2:8b:b0:8a:99: 17:c2:91:9c:6b:20:6f:55:97:c2:33:fc:c6:ed:96: 15:45:57:44:90:f0:9e:98:dd:54:6f:fe:d1:ae:83: 9c:ee:6d:d2:c9:20:5c:95:53:2c:49:ac:0d:dc:34: 2b:4c:8d:8e:6f:6b:f0:ec:db:30:ea:93:a8:41:b9: 58:9e:50:53:9b:7e:ca:01:07:44:62:4c:15:ff:b1: 3b:50:be:9a:18:0d:1f:aa:b9:34:77:5c:61:b8:64: 80:59:00:e8:94:29:34:28:83:36:51:cf:9d:15:fd: 37:78:aa:6e:fd:65:4c:9d:c2:99:01:e6:db:69:3c: ab:57:dc:e1:76:d2:14:7a:af:7e:05:f7:88:a0:a9: b7:3e:88:c7:48:a5:d4:ea:7d:95:93:83:5e:ee:0a: 5d:93:b1:87:ff:a2:e0:d9:46:82:1d:cb:d8:93:60: 58:80:06:02:8d:60:0e:15:ab:84:47:62:77:ef:05: 30:17:12:d5:3e:9e:af:c4:ed:d1:ec:e0:bb:5c:ee: 71:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:89:4D:30:04:6C:AE:AE:E1:54:AF:F7:26:12:0D:F5:FC:AA:36:EA X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:88:16:c1:b4:37:3b:ce:cf:b1:5a:dd:fa:75:49:d5:cb:16: 6f:76:9c:34:81:ef:49:a1:68:21:f0:97:f9:9b:b8:15:37:7a: 9c:9a:58:1a:fd:95:80:27:1b:3e:cb:ab:08:4f:1f:e7:01:da: 00:5d:35:32:93:40:3e:55:c9:30:0a:05:7a:11:cc:e0:75:0d: 8d:d6:8a:92:48:cc:87:c5:cd:0d:d9:f3:de:b4:7c:a5:12:4b: e4:23:e9:bc:d0:ee:f8:71:60:4e:76:32:14:26:5c:57:6b:f4: 60:2d:8c:b7:13:0b:d6:1d:1a:72:f8:92:bb:56:5b:45:0d:94: 85:bc:03:a3:f4:76:fe:29:66:06:cc:3a:2d:4e:c6:8a:84:ec: 0d:e3:d3:c6:03:2c:a2:1e:62:88:e0:24:e7:97:3f:19:6f:03: a8:fc:64:68:cc:6f:12:13:b7:6c:36:7f:31:4b:3b:94:bb:aa: bc:f4:f4:45:6e:d6:cb:08:91:88:66:25:b6:a4:7f:eb:d2:7d: 36:0a:a5:e4:eb:ac:c4:c0:f9:ee:1b:d0:f7:20:27:b7:cc:82: 07:96:d4:53:df:f8:36:e2:1e:a0:0b:69:cd:7f:a6:22:15:3b: cd:f2:77:1a:c5:ec:eb:97:90:71:a7:5a:09:fb:dc:14:8a:05: 4f:cf:75:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPmcb5VUSscMIpYLBe6rACJRYZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNjA0MTgxODE3NDNaFw0yNjA0MjEyMzA3NDNaMDMxMTAvBgNV BAMTKEIyODk0RDMwMDQ2Q0FFQUVFMTU0QUZGNzI2MTIwREY1RkNBQTM2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPORrpep0VcVy4tLuRztrLLtca 6R9sc4BnqjEpurOJF393V+yXTCq2cOr2D1nDs8/zP5cmN57yi7CKmRfCkZxrIG9V l8Iz/MbtlhVFV0SQ8J6Y3VRv/tGug5zubdLJIFyVUyxJrA3cNCtMjY5va/Ds2zDq k6hBuVieUFObfsoBB0RiTBX/sTtQvpoYDR+quTR3XGG4ZIBZAOiUKTQogzZRz50V /Td4qm79ZUydwpkB5ttpPKtX3OF20hR6r34F94igqbc+iMdIpdTqfZWTg17uCl2T sYf/ouDZRoIdy9iTYFiABgKNYA4Vq4RHYnfvBTAXEtU+nq/E7dHs4Ltc7nFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsolNMARsrq7hVK/3JhIN9fyqNuowHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0Yz RjYwMDczRDE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaIFsG0NzvOz7Fa3fp1SdXLFm92nDSB70mh aCHwl/mbuBU3epyaWBr9lYAnGz7LqwhPH+cB2gBdNTKTQD5VyTAKBXoRzOB1DY3W ipJIzIfFzQ3Z8960fKUSS+Qj6bzQ7vhxYE52MhQmXFdr9GAtjLcTC9YdGnL4krtW W0UNlIW8A6P0dv4pZgbMOi1OxoqE7A3j08YDLKIeYojgJOeXPxlvA6j8ZGjMbxIT t2w2fzFLO5S7qrz09EVu1ssIkYhmJbakf+vSfTYKpeTrrMTA+e4b0PcgJ7fMggeW 1FPf+DbiHqALac1/piIVO83ydxrF7OuXkHGnWgn73BSKBU/PdWg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:01 2026 by rpki-client