$ rpki-client -vvf rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft File: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft (raw, json) Hash identifier: 9yK+qfAcEMaabRI6wpy0en0iOzE8/lSlXCHJKAeBAR4= Subject key identifier: 43:12:49:3E:95:15:EF:9F:9A:DA:C1:07:1B:35:43:FF:39:D3:FF:C6 Authority key identifier: 14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E Certificate issuer: /CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Certificate serial: 56567F964291FB59CCDE96E2A265529DA78E72EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:29:06 +0000 Manifest this update: Wed 13 May 2026 00:24:06 +0000 Manifest next update: Thu 14 May 2026 01:17:06 +0000 Files and hashes: 1: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl (hash: kunjU7xAnFDk55TAwtp/tFBKbEbInJMv/tZ1T5Rwfk0=) 2: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: 4x7d4CbAIzm/F6oW0bYK3R10sGQPrNbSrYyem2DdQNw=) 3: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: b0p+aEnGITPNe6S1A1lEh2z0FMf0b3zvYLaeJ0qOUoQ=) 4: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 6N1mNk7kMJutxDC4iwMyVS1ZwmLt1n7dTUB5ei+yYU8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:56:7f:96:42:91:fb:59:cc:de:96:e2:a2:65:52:9d:a7:8e:72:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Validity Not Before: May 13 00:24:06 2026 GMT Not After : May 14 01:17:06 2026 GMT Subject: CN=4312493E9515EF9F9ADAC1071B3543FF39D3FFC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:fd:89:25:2d:f4:98:e7:36:be:a8:a3:25: 99:69:f3:10:d4:9b:1b:b7:d3:ae:05:0c:6c:02:f8: f8:c9:46:4a:1e:8c:fd:5d:38:b7:80:13:fb:01:f5: 6a:73:1e:d5:10:32:b7:39:7d:0c:95:c1:1e:44:91: 96:2c:73:53:c3:ed:22:73:d5:37:2d:43:50:4d:0d: e5:99:47:ea:62:e7:95:c1:2b:ef:58:49:9d:cc:a4: c1:10:15:bd:ba:25:42:1f:28:02:22:a7:7d:cb:73: 3f:a0:ba:d8:d0:88:25:e0:cf:ca:00:b2:bf:bc:51: 81:2c:0b:79:79:12:17:bd:e4:da:b2:2e:b9:90:da: 06:2e:1c:43:bc:8c:08:2b:39:06:3b:1b:62:17:df: 88:86:7f:0d:b4:c2:4a:44:c8:52:4d:d2:a6:0a:da: e8:33:72:d3:00:7e:78:83:6c:17:06:ff:0c:52:4c: f6:cd:9e:58:21:56:07:51:f2:f7:7f:d8:65:6f:98: bd:10:15:61:09:c5:4c:3f:87:7e:a1:fd:b6:09:44: 4b:97:39:24:2e:65:27:ce:45:67:18:a1:40:cb:b6: 98:66:c8:a0:87:4b:bb:da:d6:05:a8:d8:26:d9:7e: 8d:47:77:cf:41:50:a3:da:c5:1f:14:0c:62:2c:16: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:12:49:3E:95:15:EF:9F:9A:DA:C1:07:1B:35:43:FF:39:D3:FF:C6 X509v3 Authority Key Identifier: keyid:14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b0:a6:58:18:da:3f:c0:21:03:67:bb:64:43:a4:16:7e:07: eb:57:f6:70:c2:f6:72:ae:6a:f4:9d:5a:f8:08:9d:e6:91:3e: d4:87:b6:6e:82:a9:56:42:9c:00:bf:86:3c:a7:37:14:a7:27: 17:cc:18:a4:d6:40:51:2f:90:12:9a:8d:35:99:55:2d:97:53: 74:78:b4:92:4b:04:18:9e:f4:40:8b:a9:23:ee:2d:5d:df:89: 11:b0:ac:83:2c:1b:46:b8:db:a8:6b:45:90:f1:2f:68:b7:ba: ff:e9:31:be:c8:bf:ae:81:56:f9:ab:ab:2a:5c:64:b0:06:6c: 62:0f:db:ce:ea:38:02:28:09:00:74:fa:ab:33:13:db:21:cf: 75:d1:10:da:e3:4d:9e:c9:af:2e:18:13:a6:81:22:f8:0e:a6: 77:79:5a:9e:19:15:43:64:70:16:85:04:59:12:7c:67:66:e1: 19:12:d9:cb:90:9b:06:ee:ff:2a:14:a6:57:1c:d1:5b:21:61: 82:f4:4a:88:e0:ab:bb:03:64:4b:a2:b5:7a:a5:73:15:1b:ce: 0e:3b:09:08:29:fd:04:77:78:fa:51:a5:67:ea:80:3f:13:3d: e5:db:fe:99:04:ae:f6:e3:f5:76:8a:c5:22:98:f2:e5:46:6d: 33:59:fa:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlZ/lkKR+1nM3pbiomVSnaeOcu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAw QkNGNkI2RTAeFw0yNjA1MTMwMDI0MDZaFw0yNjA1MTQwMTE3MDZaMDMxMTAvBgNV BAMTKDQzMTI0OTNFOTUxNUVGOUY5QURBQzEwNzFCMzU0M0ZGMzlEM0ZGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Rv2JJS30mOc2vqijJZlp8xDU mxu3064FDGwC+PjJRkoejP1dOLeAE/sB9WpzHtUQMrc5fQyVwR5EkZYsc1PD7SJz 1TctQ1BNDeWZR+pi55XBK+9YSZ3MpMEQFb26JUIfKAIip33Lcz+gutjQiCXgz8oA sr+8UYEsC3l5Ehe95NqyLrmQ2gYuHEO8jAgrOQY7G2IX34iGfw20wkpEyFJN0qYK 2ugzctMAfniDbBcG/wxSTPbNnlghVgdR8vd/2GVvmL0QFWEJxUw/h36h/bYJREuX OSQuZSfORWcYoUDLtphmyKCHS7va1gWo2CbZfo1Hd89BUKPaxR8UDGIsFhcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxJJPpUV75+a2sEHGzVD/znT/8YwHwYDVR0j BBgwFoAUFIw6hyDFzYq3+857g1udIAvPa24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg4ZTNhMTctMWM5MS00NzkzLTgzYzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcy MEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAwQkNGNkI2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDhDM0E4NzIwQzVDRDhBQjdGQkNFN0I4MzVCOUQyMDBCQ0Y2 QjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlE MjAwQkNGNkI2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKwplgY2j/AIQNnu2RDpBZ+B+tX9nDC9nKu avSdWvgIneaRPtSHtm6CqVZCnAC/hjynNxSnJxfMGKTWQFEvkBKajTWZVS2XU3R4 tJJLBBie9ECLqSPuLV3fiRGwrIMsG0a426hrRZDxL2i3uv/pMb7Iv66BVvmrqypc ZLAGbGIP287qOAIoCQB0+qszE9shz3XRENrjTZ7Jry4YE6aBIvgOpnd5Wp4ZFUNk cBaFBFkSfGdm4RkS2cuQmwbu/yoUplcc0VshYYL0Sojgq7sDZEuitXqlcxUbzg47 CQgp/QR3ePpRpWfqgD8TPeXb/pkErvbj9XaKxSKY8uVGbTNZ+p0= -----END CERTIFICATE-----Generated at Wed May 13 06:58:26 2026 by rpki-client