$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: qwePpdhzPu9/hv99H58nr5UUPOF4YLb3xQ9hEIwpl0A= Subject key identifier: 7F:BD:65:84:51:EB:B5:99:CC:ED:50:1B:6A:C3:FF:14:34:07:CB:0C Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 3322EDDD09DC59DCCAD20E3F2351EBC3577A5041 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 01E8 Signing time: Mon 20 Oct 2025 02:40:39 +0000 Manifest this update: Mon 20 Oct 2025 02:35:39 +0000 Manifest next update: Thu 23 Oct 2025 14:07:39 +0000 Files and hashes: 1: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: cTu1vWCecfXjdymv7sSidwoOIFR4D33sEpI8Ju/wKtA=) 2: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 6p5qEvuAFNeoYDRPFKQKTOGL6GjveSFUo5E7i4B+rcc=) 3: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: SlnYn1Xsxz6QRJgIfCp87Ss/ufwey8RAQnlq8kkPrh4=) 4: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:22:ed:dd:09:dc:59:dc:ca:d2:0e:3f:23:51:eb:c3:57:7a:50:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Oct 20 02:35:39 2025 GMT Not After : Oct 23 14:07:39 2025 GMT Subject: CN=7FBD658451EBB599CCED501B6AC3FF143407CB0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:d6:11:9a:36:98:09:f5:c3:a4:ae:d6:f7: e3:38:15:4c:b0:1b:cf:02:8e:34:8b:96:e2:c4:db: e6:31:dc:17:a5:73:91:58:27:48:ae:27:f6:55:e2: 70:fc:02:db:97:e8:da:18:2e:85:02:06:2c:d3:cd: aa:c5:51:73:0b:17:5d:d1:e1:55:e0:a4:4f:14:d9: 2b:c6:18:ba:bc:cf:09:ca:47:b0:35:9b:6a:51:aa: 26:0d:a9:b2:97:ef:1a:ee:7d:7d:33:65:34:e9:30: c8:ca:d9:05:db:6a:c6:c7:b8:07:44:c0:6c:72:eb: 74:39:18:f0:45:95:9d:af:a3:9e:de:e9:01:d5:93: 8c:25:93:6c:db:09:5d:9d:f0:cf:a5:8c:da:d3:be: b2:69:e5:d9:50:df:e3:3c:ca:11:bb:83:77:a3:a0: aa:83:f4:61:73:40:08:68:5b:61:63:df:e0:a9:31: f1:5a:a4:b5:7d:fa:7d:8c:a9:6a:38:c0:f1:52:96: f8:0e:df:59:78:81:cd:e7:09:0c:e7:0c:4f:a9:e8: 21:2a:a6:8d:65:5d:d1:78:ad:4c:a5:db:e8:53:f6: 91:6c:67:b2:38:a6:33:60:86:5e:b6:5a:0f:cd:f6: 5c:9a:0e:ac:b1:2c:3c:33:70:16:5c:aa:46:0d:e9: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BD:65:84:51:EB:B5:99:CC:ED:50:1B:6A:C3:FF:14:34:07:CB:0C X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f1:43:50:23:e0:8d:84:7d:2a:44:47:e8:ae:82:8d:12:8b: 49:a5:34:79:69:ec:e8:42:29:57:50:6b:be:ad:d4:ea:cf:54: 00:8a:5f:aa:a6:e8:a5:c7:b3:1b:34:28:fe:f4:47:f1:5c:3e: 8d:07:bb:ec:8d:2e:9f:b1:0d:3d:0c:45:2f:3b:9c:2e:d5:c7: c0:2a:55:2e:33:d4:05:fe:a3:72:3f:46:ee:e2:07:b0:bd:c5: a6:4a:9b:6d:e2:b5:71:ee:3b:ac:03:dc:8c:25:3b:fd:66:c2: da:f3:90:28:f7:72:15:cc:6d:98:3e:be:ca:f1:0d:a2:0a:95: 36:c9:ae:0d:9d:8a:7a:3d:29:48:54:6b:0c:8a:67:35:e0:6d: 47:ce:2e:49:1d:bf:76:32:5a:99:99:35:82:29:95:51:07:d1: cf:81:4b:65:0e:d2:05:1c:28:e9:0b:d4:12:d2:3d:98:cb:8e: 0c:5b:92:e7:13:15:5c:22:ec:d2:85:45:1e:34:d9:d6:a2:4f: 90:38:81:e7:d9:fa:a0:02:f2:dd:68:47:02:ea:7c:9c:70:30: ae:3e:2e:b7:d3:94:16:4f:5a:ae:93:8a:8f:1a:a7:a1:cf:58: 35:59:4a:b5:c9:32:20:0f:d8:55:7e:15:73:4a:d6:15:c1:f2: 7a:8c:a5:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyLt3QncWdzK0g4/I1Hrw1d6UEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTEwMjAwMjM1MzlaFw0yNTEwMjMxNDA3MzlaMDMxMTAvBgNV BAMTKDdGQkQ2NTg0NTFFQkI1OTlDQ0VENTAxQjZBQzNGRjE0MzQwN0NCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy1dYRmjaYCfXDpK7W9+M4FUyw G88CjjSLluLE2+Yx3Belc5FYJ0iuJ/ZV4nD8AtuX6NoYLoUCBizTzarFUXMLF13R 4VXgpE8U2SvGGLq8zwnKR7A1m2pRqiYNqbKX7xrufX0zZTTpMMjK2QXbasbHuAdE wGxy63Q5GPBFlZ2vo57e6QHVk4wlk2zbCV2d8M+ljNrTvrJp5dlQ3+M8yhG7g3ej oKqD9GFzQAhoW2Fj3+CpMfFapLV9+n2MqWo4wPFSlvgO31l4gc3nCQznDE+p6CEq po1lXdF4rUyl2+hT9pFsZ7I4pjNghl62Wg/N9lyaDqyxLDwzcBZcqkYN6ZKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf71lhFHrtZnM7VAbasP/FDQHywwwHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzxQ1Aj4I2EfSpER+iugo0Si0mlNHlp7OhC KVdQa76t1OrPVACKX6qm6KXHsxs0KP70R/FcPo0Hu+yNLp+xDT0MRS87nC7Vx8Aq VS4z1AX+o3I/Ru7iB7C9xaZKm23itXHuO6wD3IwlO/1mwtrzkCj3chXMbZg+vsrx DaIKlTbJrg2dino9KUhUawyKZzXgbUfOLkkdv3YyWpmZNYIplVEH0c+BS2UO0gUc KOkL1BLSPZjLjgxbkucTFVwi7NKFRR402daiT5A4gefZ+qAC8t1oRwLqfJxwMK4+ LrfTlBZPWq6Tio8ap6HPWDVZSrXJMiAP2FV+FXNK1hXB8nqMpQQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:26 2025 by rpki-client