$ rpki-client -vvf rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft File: 143B0FF235C900164875105AD0C37F3C7DB28151.mft (raw, json) Hash identifier: /421w4KAbMn7j+WEXWS5l0A6V2jqeAsJOIPSwvvfRww= Subject key identifier: 1D:A3:59:BE:FD:60:DD:B2:1D:83:AB:7F:79:BB:56:E1:61:4C:00:11 Authority key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 Certificate issuer: /CN=143B0FF235C900164875105AD0C37F3C7DB28151 Certificate serial: 56422834EDEB6A56908D002D44B22B7D71326AB5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:23:56 +0000 Manifest this update: Tue 12 May 2026 21:18:56 +0000 Manifest next update: Wed 13 May 2026 23:23:56 +0000 Files and hashes: 1: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: kEo9J9YDEfycsSJU6o/UUiHq399l3gpS8mmcj4dD7Es=) 2: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: hD2c2fRRpw85nnii8gI6DgDgE1ceI1WBb5qAu0bq2pA=) 3: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: nNVKvZ0ilopUJmLIwR3JaCCbYQBiWauo32pM1hDB2qM=) 4: 143B0FF235C900164875105AD0C37F3C7DB28151.crl (hash: lf5pym1fxV/oUX0iP15T9sPXSx2AodmmH9BkA64rxGc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:42:28:34:ed:eb:6a:56:90:8d:00:2d:44:b2:2b:7d:71:32:6a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143B0FF235C900164875105AD0C37F3C7DB28151 Validity Not Before: May 12 21:18:56 2026 GMT Not After : May 13 23:23:56 2026 GMT Subject: CN=1DA359BEFD60DDB21D83AB7F79BB56E1614C0011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:3d:34:da:f3:fa:97:79:52:fa:eb:32:28: 86:aa:1d:8c:8f:a4:bd:f0:b1:97:4e:ce:c8:a5:dd: ce:d2:db:7e:5b:73:45:f7:7b:c2:3c:52:56:63:e4: 0e:cc:27:f1:fc:ba:fb:65:89:be:b1:76:8c:7b:d2: 20:23:7c:77:e2:db:ef:7e:22:88:67:91:ff:47:e2: 1f:a0:ee:47:f9:ac:cd:55:96:47:87:db:25:83:cc: 88:77:dd:82:fa:6e:59:cd:9f:88:a3:23:39:82:60: f5:ed:ad:5c:24:89:33:34:94:1d:a7:3e:e1:49:09: ee:32:b9:2d:19:a0:0e:d4:20:36:a5:62:d0:ab:56: 70:b6:37:dd:7e:9d:00:84:0a:05:4c:78:93:0b:2c: 64:af:41:7e:d4:7a:cd:a0:a4:48:34:d8:4d:1e:59: 98:d1:b1:54:9b:c2:d5:a6:2e:ef:24:f9:ea:c2:42: 7d:88:c6:0f:a7:32:82:6f:06:37:d2:34:6f:46:53: b1:50:86:e0:d9:9e:66:95:ba:62:10:a0:c7:c4:40: aa:28:8f:bf:1c:42:c3:c4:f2:9d:96:6c:e8:6f:0d: de:e6:c2:9e:0a:5b:5f:25:81:e2:5f:e6:ec:9c:6b: 98:3e:e5:ca:cf:4f:56:20:36:1d:53:68:d0:5b:99: a4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A3:59:BE:FD:60:DD:B2:1D:83:AB:7F:79:BB:56:E1:61:4C:00:11 X509v3 Authority Key Identifier: keyid:14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b8:b2:1f:77:4b:07:f2:41:78:57:5b:d6:d6:fb:80:42:ce: 2c:f1:bd:b7:dd:8f:59:2b:0a:c6:b9:1b:75:c6:ca:53:6b:11: 97:07:c2:0e:e6:c7:96:ef:4e:66:71:e8:42:1e:81:9d:ac:02: eb:cc:7b:71:1d:d1:78:40:40:bc:43:5b:9b:f4:01:dd:19:a8: 42:e5:ab:c4:27:65:3d:0a:32:65:74:f5:77:b8:0a:f8:e6:72: 43:0f:21:2d:e1:ec:f7:80:54:a5:d1:03:00:2e:be:7c:d2:84: dc:ab:93:dc:2a:b9:83:d9:24:bc:98:01:af:ff:a7:0c:be:4b: be:06:d5:38:61:5e:ee:d2:ff:a3:9d:d1:58:d4:c6:b6:54:f7: 6f:5d:a1:c7:46:2f:e1:5a:7b:2a:61:5b:bc:c3:cf:68:8e:ab: 48:5f:0a:b4:ae:17:39:69:68:0c:60:8c:2b:88:74:e6:52:41: 2b:4f:04:4d:34:c7:a8:49:b7:d4:a3:b5:7d:ee:48:94:93:94: 81:d8:c4:9e:af:04:74:39:98:da:ba:ee:d5:1e:74:7a:dc:78: 3f:52:99:f1:c6:e4:9c:0a:48:66:a4:b7:5e:91:40:25:f7:a2: 87:67:2f:7b:67:c1:1a:94:4f:2a:14:6c:ed:61:96:03:9c:d5: fd:6d:4a:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkIoNO3ralaQjQAtRLIrfXEyarUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQzQjBGRjIzNUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3 REIyODE1MTAeFw0yNjA1MTIyMTE4NTZaFw0yNjA1MTMyMzIzNTZaMDMxMTAvBgNV BAMTKDFEQTM1OUJFRkQ2MEREQjIxRDgzQUI3Rjc5QkI1NkUxNjE0QzAwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fj002vP6l3lS+usyKIaqHYyP pL3wsZdOzsil3c7S235bc0X3e8I8UlZj5A7MJ/H8uvtlib6xdox70iAjfHfi2+9+ Iohnkf9H4h+g7kf5rM1VlkeH2yWDzIh33YL6blnNn4ijIzmCYPXtrVwkiTM0lB2n PuFJCe4yuS0ZoA7UIDalYtCrVnC2N91+nQCECgVMeJMLLGSvQX7Ues2gpEg02E0e WZjRsVSbwtWmLu8k+erCQn2Ixg+nMoJvBjfSNG9GU7FQhuDZnmaVumIQoMfEQKoo j78cQsPE8p2WbOhvDd7mwp4KW18lgeJf5uyca5g+5crPT1YgNh1TaNBbmaTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHaNZvv1g3bIdg6t/ebtW4WFMABEwHwYDVR0j BBgwFoAUFDsP8jXJABZIdRBa0MN/PH2ygVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTFjMWQ1NmUtMTVjNi00YjY1LWE5YTgtZjkwYWQ2ZmJhMDkwLzAvMTQzQjBGRjIz NUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3REIyODE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDNCMEZGMjM1QzkwMDE2NDg3NTEwNUFEMEMzN0YzQzdEQjI4 MTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTFjMWQ1NmUtMTVjNi00YjY1LWE5 YTgtZjkwYWQ2ZmJhMDkwLzAvMTQzQjBGRjIzNUM5MDAxNjQ4NzUxMDVBRDBDMzdG M0M3REIyODE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJa4sh93SwfyQXhXW9bW+4BCzizxvbfdj1kr Csa5G3XGylNrEZcHwg7mx5bvTmZx6EIegZ2sAuvMe3Ed0XhAQLxDW5v0Ad0ZqELl q8QnZT0KMmV09Xe4CvjmckMPIS3h7PeAVKXRAwAuvnzShNyrk9wquYPZJLyYAa// pwy+S74G1ThhXu7S/6Od0VjUxrZU929docdGL+FaeyphW7zDz2iOq0hfCrSuFzlp aAxgjCuIdOZSQStPBE00x6hJt9SjtX3uSJSTlIHYxJ6vBHQ5mNq67tUedHrceD9S mfHG5JwKSGakt16RQCX3oodnL3tnwRqUTyoUbO1hlgOc1f1tSuo= -----END CERTIFICATE-----Generated at Wed May 13 02:49:59 2026 by rpki-client