$ rpki-client -vvf rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft File: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft (raw, json) Hash identifier: 3jjA9mHK5c8loS98I/7dT+VKkukMfTqoXLw61RIXLOw= Subject key identifier: 25:2A:B1:C4:EC:4D:14:3A:E5:11:74:0D:D7:E9:4A:EC:A4:7D:53:96 Authority key identifier: 14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E Certificate issuer: /CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Certificate serial: 53F1C1797952BB26E46C77A3B7232C759476ABA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:22:43 +0000 Manifest this update: Thu 23 Jul 2026 10:17:43 +0000 Manifest next update: Fri 24 Jul 2026 12:41:43 +0000 Files and hashes: 1: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: b0p+aEnGITPNe6S1A1lEh2z0FMf0b3zvYLaeJ0qOUoQ=) 2: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: 4x7d4CbAIzm/F6oW0bYK3R10sGQPrNbSrYyem2DdQNw=) 3: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 6N1mNk7kMJutxDC4iwMyVS1ZwmLt1n7dTUB5ei+yYU8=) 4: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl (hash: /717OeAq/u5KeHQEOIt8i2NzFHiLdnzAInWiTqkT+Bg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f1:c1:79:79:52:bb:26:e4:6c:77:a3:b7:23:2c:75:94:76:ab:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Validity Not Before: Jul 23 10:17:43 2026 GMT Not After : Jul 24 12:41:43 2026 GMT Subject: CN=252AB1C4EC4D143AE511740DD7E94AECA47D5396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:ae:b7:22:c8:4b:de:aa:37:29:5e:0b:4e: 37:cf:e6:cf:ed:b5:1b:09:a0:ce:dc:f4:7b:d3:29: 02:8d:f6:91:2c:9d:57:ec:8d:44:df:5f:70:83:be: 0f:47:28:4a:71:17:6a:1c:49:56:7e:01:b7:d2:6d: f8:eb:84:20:e1:6c:29:c4:55:35:dc:66:a2:ad:ef: 3a:17:96:c5:b5:18:40:f0:31:aa:c7:ae:a5:44:8f: e4:69:05:44:30:11:d0:c6:f3:fe:4a:72:67:78:9f: d4:7f:38:4b:0c:ab:c7:fc:95:9e:03:ea:55:cb:4f: fd:4e:83:bb:5b:be:43:8d:4d:3e:7c:01:0a:27:b0: 29:40:ff:5d:e0:2b:78:45:a6:f3:f3:ac:f4:1f:29: 69:88:b2:d9:e5:5b:8c:bc:08:0b:67:a9:d8:6a:80: 88:3e:f2:58:39:9f:bc:3c:87:05:f3:75:47:70:9a: c5:7c:de:fa:ed:30:50:34:e7:d2:23:69:df:a3:95: 44:63:4e:1c:48:46:01:ee:65:a6:99:6c:03:3c:1d: bb:f8:82:31:5c:3e:15:e1:8c:08:09:a7:83:df:fa: c1:2c:84:f8:e3:f9:94:6d:5e:55:71:f1:61:50:b8: 6f:2f:c7:14:32:56:01:98:68:eb:ee:01:19:99:d2: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2A:B1:C4:EC:4D:14:3A:E5:11:74:0D:D7:E9:4A:EC:A4:7D:53:96 X509v3 Authority Key Identifier: keyid:14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:68:b4:d6:bc:7b:f4:02:76:b0:8a:73:ae:67:50:c1:8a:04: d6:9f:e6:fb:6f:e8:62:3b:5b:79:7f:c9:1a:bc:06:fe:94:8c: 8f:dd:6a:14:a2:31:e2:60:b1:ba:ee:ac:06:32:47:b7:b2:e5: 42:9e:23:f6:a5:dc:54:70:58:64:49:be:05:ba:eb:5b:31:9f: 5a:c4:8b:66:05:8b:98:4a:93:ab:aa:9a:92:79:4d:a1:6c:3e: 4e:ed:e5:94:9c:0b:a0:a3:b1:60:c5:d3:f4:c0:a9:db:46:26: 7c:60:5f:84:56:87:e6:29:e1:5a:bf:cc:d2:6e:30:cf:17:6c: e8:75:8b:61:bb:ce:6c:85:f6:cf:c0:1b:44:3a:5c:25:50:4f: fc:a3:d0:19:5c:85:41:89:11:65:be:cc:23:81:29:c5:73:17: 3a:cd:5b:bd:2b:cb:b7:29:44:35:6d:37:c1:c1:f8:f2:6f:77: ae:fa:c2:9f:bf:c1:56:1c:80:2a:ce:ba:2e:4f:6c:c6:5b:af: db:bd:fe:92:b3:fb:8c:f0:73:cf:0b:9a:01:36:26:49:47:fd: b9:7b:e8:80:f3:f5:53:50:6d:85:80:07:fe:df:cf:f5:e9:53: fa:3c:07:21:bf:81:a9:37:69:b9:be:59:1a:6b:0d:32:08:eb: d1:cf:15:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/HBeXlSuybkbHejtyMsdZR2q6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAw QkNGNkI2RTAeFw0yNjA3MjMxMDE3NDNaFw0yNjA3MjQxMjQxNDNaMDMxMTAvBgNV BAMTKDI1MkFCMUM0RUM0RDE0M0FFNTExNzQwREQ3RTk0QUVDQTQ3RDUzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65663IshL3qo3KV4LTjfP5s/t tRsJoM7c9HvTKQKN9pEsnVfsjUTfX3CDvg9HKEpxF2ocSVZ+AbfSbfjrhCDhbCnE VTXcZqKt7zoXlsW1GEDwMarHrqVEj+RpBUQwEdDG8/5Kcmd4n9R/OEsMq8f8lZ4D 6lXLT/1Og7tbvkONTT58AQonsClA/13gK3hFpvPzrPQfKWmIstnlW4y8CAtnqdhq gIg+8lg5n7w8hwXzdUdwmsV83vrtMFA059Ijad+jlURjThxIRgHuZaaZbAM8Hbv4 gjFcPhXhjAgJp4Pf+sEshPjj+ZRtXlVx8WFQuG8vxxQyVgGYaOvuARmZ0iODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJSqxxOxNFDrlEXQN1+lK7KR9U5YwHwYDVR0j BBgwFoAUFIw6hyDFzYq3+857g1udIAvPa24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg4ZTNhMTctMWM5MS00NzkzLTgzYzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcy MEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAwQkNGNkI2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDhDM0E4NzIwQzVDRDhBQjdGQkNFN0I4MzVCOUQyMDBCQ0Y2 QjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlE MjAwQkNGNkI2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5otNa8e/QCdrCKc65nUMGKBNaf5vtv6GI7 W3l/yRq8Bv6UjI/dahSiMeJgsbrurAYyR7ey5UKeI/al3FRwWGRJvgW661sxn1rE i2YFi5hKk6uqmpJ5TaFsPk7t5ZScC6CjsWDF0/TAqdtGJnxgX4RWh+Yp4Vq/zNJu MM8XbOh1i2G7zmyF9s/AG0Q6XCVQT/yj0BlchUGJEWW+zCOBKcVzFzrNW70ry7cp RDVtN8HB+PJvd676wp+/wVYcgCrOui5PbMZbr9u9/pKz+4zwc88LmgE2JklH/bl7 6IDz9VNQbYWAB/7fz/XpU/o8ByG/gak3abm+WRprDTII69HPFXw= -----END CERTIFICATE-----Generated at Fri Jul 24 03:54:55 2026 by rpki-client