$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft File: 149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json) Hash identifier: RxZhvMv7RsH3fmkL2QxeD36uN6oTK4XIg9TbmQz+QE4= Subject key identifier: 09:EC:D0:7D:C4:9F:8B:EA:6C:6B:32:7A:86:AE:6D:30:27:78:47:FA Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5 Certificate issuer: /CN=149E265C01ED66DA98905D22913EE8E5950357C5 Certificate serial: 5ABE46D397D57DF320AAC363B039712EA2342E48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:29:58 +0000 Manifest this update: Tue 12 May 2026 08:24:58 +0000 Manifest next update: Wed 13 May 2026 10:28:58 +0000 Files and hashes: 1: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=) 2: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: wzbUgugVMWvVvBdakCnKm9uOFzNrkFPUNFDTwlh/rnQ=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:be:46:d3:97:d5:7d:f3:20:aa:c3:63:b0:39:71:2e:a2:34:2e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5 Validity Not Before: May 12 08:24:58 2026 GMT Not After : May 13 10:28:58 2026 GMT Subject: CN=09ECD07DC49F8BEA6C6B327A86AE6D30277847FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:79:ea:d4:21:af:63:a5:a4:9e:21:73:03: 05:cc:ca:dd:90:12:ef:2b:27:3b:6e:18:8b:08:b8: 87:6b:42:cd:19:3d:ca:1b:9b:03:ad:16:ea:45:cb: ad:e0:60:40:39:d5:32:09:1f:6d:3c:08:9d:4b:e2: 62:82:7d:23:44:5b:82:6a:c4:4c:89:a3:2d:51:c6: bd:24:a2:5a:17:e1:e2:15:10:39:e9:df:cf:27:44: 15:19:4c:06:5b:9c:33:d9:77:c2:7c:d6:a4:95:15: eb:e8:a1:09:2d:27:29:2d:f3:e5:23:10:63:b3:94: 6a:8a:41:94:7e:52:9d:93:76:39:1b:91:1a:78:17: 2d:0b:c1:f4:e7:0e:48:64:9a:4e:49:db:e2:c7:6c: 14:75:02:f9:3b:62:02:ae:b0:61:43:b0:56:12:a1: 5a:12:0b:f6:f7:65:60:dc:57:e5:cf:34:f5:c1:8d: ee:a4:9e:87:98:6b:fe:c5:6e:58:02:60:d0:92:fc: fb:c9:f4:b8:dd:0e:5b:88:7e:a1:cb:46:ac:04:10: 91:61:4a:2e:91:bb:68:3d:df:87:7d:91:18:43:a4: 98:91:47:7a:8d:16:9d:a9:3b:6f:f5:fd:d3:9f:44: 91:e5:53:20:2c:d9:db:79:07:64:7f:37:a6:6c:1e: 39:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EC:D0:7D:C4:9F:8B:EA:6C:6B:32:7A:86:AE:6D:30:27:78:47:FA X509v3 Authority Key Identifier: keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9f:1b:86:79:8b:40:e8:9a:04:4f:24:b8:e8:c1:dd:13:8a: 67:4d:37:cf:04:68:ce:39:f2:62:c5:8b:54:a8:0c:48:80:06: 9a:cb:54:66:b8:06:cb:cf:0c:fd:c4:72:18:b4:33:8c:0a:82: 52:97:c3:d6:9b:ab:8c:97:74:d1:4f:ed:eb:17:d0:b7:d0:7e: 99:36:ec:45:24:a4:95:b8:94:66:dd:bb:01:92:b2:3a:39:98: 0b:8b:0e:df:84:75:5d:10:32:a4:1f:fb:c2:4e:5d:8e:c5:e2: 60:8a:de:b7:81:61:ec:02:a8:28:2f:46:e9:21:28:23:b7:01: 7f:6f:cf:18:80:93:9f:07:ae:39:26:99:cf:74:ba:a5:d7:65: eb:f6:f8:01:10:5e:17:a7:ff:a9:db:cc:fe:19:dd:82:34:78: b8:da:f2:fc:13:b0:9d:ab:5d:db:80:46:88:31:a9:af:a8:40: 34:e6:93:9a:4b:bc:47:65:60:19:bb:e3:3a:27:3f:10:95:1f: cd:37:d7:b6:99:f1:8f:75:58:bc:07:3b:d1:e0:33:0b:10:99: f4:18:4f:cf:f1:56:cc:8c:0a:30:f1:b3:15:50:95:b3:5b:33: 1f:7b:13:0e:fc:d5:73:9d:6f:1a:d2:20:92:ab:cb:d1:c3:d6: fc:1e:4a:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWr5G05fVffMgqsNjsDlxLqI0LkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5 NTAzNTdDNTAeFw0yNjA1MTIwODI0NThaFw0yNjA1MTMxMDI4NThaMDMxMTAvBgNV BAMTKDA5RUNEMDdEQzQ5RjhCRUE2QzZCMzI3QTg2QUU2RDMwMjc3ODQ3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUiXnq1CGvY6WkniFzAwXMyt2Q Eu8rJztuGIsIuIdrQs0ZPcobmwOtFupFy63gYEA51TIJH208CJ1L4mKCfSNEW4Jq xEyJoy1Rxr0koloX4eIVEDnp388nRBUZTAZbnDPZd8J81qSVFevooQktJykt8+Uj EGOzlGqKQZR+Up2TdjkbkRp4Fy0LwfTnDkhkmk5J2+LHbBR1Avk7YgKusGFDsFYS oVoSC/b3ZWDcV+XPNPXBje6knoeYa/7FblgCYNCS/PvJ9LjdDluIfqHLRqwEEJFh Si6Ru2g934d9kRhDpJiRR3qNFp2pO2/1/dOfRJHlUyAs2dt5B2R/N6ZsHjlrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCezQfcSfi+psazJ6hq5tMCd4R/owHwYDVR0j BBgwFoAUFJ4mXAHtZtqYkF0ikT7o5ZUDV8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZjZlOGQtMWFiMC00MWM0LWIzYWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMw MUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5NTAzNTdDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDlFMjY1QzAxRUQ2NkRBOTg5MDVEMjI5MTNFRThFNTk1MDM1 N0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4 RTU5NTAzNTdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJafG4Z5i0DomgRPJLjowd0TimdNN88EaM45 8mLFi1SoDEiABprLVGa4BsvPDP3Echi0M4wKglKXw9abq4yXdNFP7esX0LfQfpk2 7EUkpJW4lGbduwGSsjo5mAuLDt+EdV0QMqQf+8JOXY7F4mCK3reBYewCqCgvRukh KCO3AX9vzxiAk58Hrjkmmc90uqXXZev2+AEQXhen/6nbzP4Z3YI0eLja8vwTsJ2r XduARogxqa+oQDTmk5pLvEdlYBm74zonPxCVH80317aZ8Y91WLwHO9HgMwsQmfQY T8/xVsyMCjDxsxVQlbNbMx97Ew781XOdbxrSIJKry9HD1vweSrA= -----END CERTIFICATE-----Generated at Wed May 13 02:51:16 2026 by rpki-client