$ rpki-client -vvvf rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft File: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft (raw, json) Hash identifier: mbJYuck11LVnBFbwWl0TwVtpjOmn+15TzwBTHP+6nIU= Subject key identifier: 63:1C:EB:7D:B9:F0:21:1A:40:AB:E5:94:DA:C1:B5:EE:FC:3E:8C:59 Authority key identifier: 14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E Certificate issuer: /CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Certificate serial: 25E4EFEF6E4DCFFF08A9DDF3F4AC21F4CB610507 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 00:00:14 +0000 Manifest this update: Fri 25 Sep 2026 23:55:14 +0000 Manifest next update: Sun 27 Sep 2026 00:03:14 +0000 Files and hashes: 1: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 6N1mNk7kMJutxDC4iwMyVS1ZwmLt1n7dTUB5ei+yYU8=) 2: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: 4x7d4CbAIzm/F6oW0bYK3R10sGQPrNbSrYyem2DdQNw=) 3: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl (hash: s9bzbIq1uHiiAX+w10FXeqF1QR6/0v0YwEbNByirJ6Q=) 4: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: b0p+aEnGITPNe6S1A1lEh2z0FMf0b3zvYLaeJ0qOUoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e4:ef:ef:6e:4d:cf:ff:08:a9:dd:f3:f4:ac:21:f4:cb:61:05:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Validity Not Before: Sep 25 23:55:14 2026 GMT Not After : Sep 27 00:03:14 2026 GMT Subject: CN=631CEB7DB9F0211A40ABE594DAC1B5EEFC3E8C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:ab:e0:c0:e0:6f:b5:95:d3:99:82:68:b8: d3:f1:71:e8:71:89:44:38:08:6e:d5:79:7b:34:eb: 89:66:d8:d3:14:e9:57:6b:ca:8d:d1:3b:ef:3d:c9: 94:9f:77:d6:b8:16:16:f8:52:d6:73:fc:ae:5b:e7: 9e:bf:ae:fd:3c:03:12:fb:77:53:72:2f:4b:ac:2f: fd:1e:a1:90:2d:ac:7e:44:b2:b1:67:6e:1e:c2:86: f6:d2:0c:75:5a:c6:77:dd:9a:86:38:6a:50:82:cb: 4c:d3:fb:13:3a:a1:9c:d5:52:be:e5:6f:bb:1d:39: e6:25:eb:a9:cd:8b:f4:5d:1c:bc:bc:93:33:40:7f: 98:56:d2:fe:eb:7c:28:40:27:71:47:36:7e:12:65: 5b:f6:f0:ea:4d:af:b4:46:9b:68:4c:ad:cc:7f:48: 13:7a:01:8d:2a:1a:fb:67:81:c1:67:65:4b:fe:04: a6:df:5f:f3:dd:20:10:eb:6d:d0:c3:97:a1:df:09: 3e:21:00:e6:2a:df:fa:67:20:a1:98:4f:9f:94:a0: f0:58:28:39:8d:3e:ec:61:78:b3:23:27:49:4b:7d: 53:15:69:af:82:cc:ba:bc:a7:8d:2a:b3:dc:5f:11: 50:b8:b6:af:7b:08:fe:5f:36:c4:35:01:6b:95:9f: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1C:EB:7D:B9:F0:21:1A:40:AB:E5:94:DA:C1:B5:EE:FC:3E:8C:59 X509v3 Authority Key Identifier: keyid:14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:f2:a3:e7:1e:7b:cc:c6:e5:68:ed:f2:7c:b3:6d:e9:a1:d5: b6:ed:50:8a:2f:60:ed:64:ad:dd:4b:cf:0e:4e:3f:08:ac:a5: bb:16:97:77:d5:a3:ba:85:cb:8b:b1:27:99:3b:c9:f5:16:73: e5:44:75:18:c2:9c:73:21:ea:6b:81:09:39:e7:cf:46:0b:86: 46:62:44:9e:db:5c:56:48:22:c5:74:6d:9a:f4:6e:ba:32:02: 7b:48:95:b4:b7:d6:9c:88:d5:2c:e2:d1:a1:bd:c3:c8:f8:27: 74:9e:43:a3:fc:a8:44:73:e4:fc:97:e5:cf:cb:83:db:3f:2e: f7:8b:65:ea:24:7e:ab:3e:0a:bf:18:10:e7:67:b3:2d:36:b7: 5f:b4:c2:67:bc:0b:86:81:f7:cb:13:bc:06:b4:06:88:0f:39: 70:e7:96:89:4b:9c:83:71:eb:c3:32:b2:19:2f:57:30:e2:25: 96:e0:2f:2c:d6:07:38:d7:56:41:e3:98:86:63:df:38:bc:2b: 3a:ac:03:84:27:51:0c:70:74:f3:61:6d:76:1a:d5:12:9e:a3: 26:b3:ee:31:09:ec:dc:01:7b:47:65:0a:e3:07:97:04:ed:d7: 70:31:a8:a9:35:60:0e:8a:64:64:e0:d6:7b:d0:56:38:e5:bf: da:2b:f5:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJeTv725Nz/8Iqd3z9Kwh9MthBQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAw QkNGNkI2RTAeFw0yNjA5MjUyMzU1MTRaFw0yNjA5MjcwMDAzMTRaMDMxMTAvBgNV BAMTKDYzMUNFQjdEQjlGMDIxMUE0MEFCRTU5NERBQzFCNUVFRkMzRThDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXKvgwOBvtZXTmYJouNPxcehx iUQ4CG7VeXs064lm2NMU6Vdryo3RO+89yZSfd9a4Fhb4UtZz/K5b556/rv08AxL7 d1NyL0usL/0eoZAtrH5EsrFnbh7ChvbSDHVaxnfdmoY4alCCy0zT+xM6oZzVUr7l b7sdOeYl66nNi/RdHLy8kzNAf5hW0v7rfChAJ3FHNn4SZVv28OpNr7RGm2hMrcx/ SBN6AY0qGvtngcFnZUv+BKbfX/PdIBDrbdDDl6HfCT4hAOYq3/pnIKGYT5+UoPBY KDmNPuxheLMjJ0lLfVMVaa+CzLq8p40qs9xfEVC4tq97CP5fNsQ1AWuVn4j1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYxzrfbnwIRpAq+WU2sG17vw+jFkwHwYDVR0j BBgwFoAUFIw6hyDFzYq3+857g1udIAvPa24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg4ZTNhMTctMWM5MS00NzkzLTgzYzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcy MEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAwQkNGNkI2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDhDM0E4NzIwQzVDRDhBQjdGQkNFN0I4MzVCOUQyMDBCQ0Y2 QjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlE MjAwQkNGNkI2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPyo+cee8zG5Wjt8nyzbemh1bbtUIovYO1k rd1Lzw5OPwispbsWl3fVo7qFy4uxJ5k7yfUWc+VEdRjCnHMh6muBCTnnz0YLhkZi RJ7bXFZIIsV0bZr0broyAntIlbS31pyI1Szi0aG9w8j4J3SeQ6P8qERz5PyX5c/L g9s/LveLZeokfqs+Cr8YEOdnsy02t1+0wme8C4aB98sTvAa0BogPOXDnlolLnINx 68MyshkvVzDiJZbgLyzWBzjXVkHjmIZj3zi8KzqsA4QnUQxwdPNhbXYa1RKeoyaz 7jEJ7NwBe0dlCuMHlwTt13AxqKk1YA6KZGTg1nvQVjjlv9or9TE= -----END CERTIFICATE-----Generated at Sat Sep 26 04:20:19 2026 by rpki-client