$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: 3qO1R2+M0infsT8upniTWh5CbKxufKySlLou7Oqm44Y= Subject key identifier: 1B:C5:81:23:6F:76:E7:F6:B4:E1:0C:9F:60:C5:C8:18:C9:28:2A:71 Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 25D68DDDE08D971744067B525B7021767319B9B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 0223 Signing time: Sun 01 Mar 2026 12:20:44 +0000 Manifest this update: Sun 01 Mar 2026 12:15:44 +0000 Manifest next update: Wed 04 Mar 2026 14:42:44 +0000 Files and hashes: 1: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: UL/iKMJvVvQnD4C0ojNTBjhiXCu8iRAd7qZ9VA7PVpc=) 2: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: 2JoB7mbv9tAYmXcRzCwfmfmXedXdKD7pozAzOc8mk0g=) 3: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: SlnYn1Xsxz6QRJgIfCp87Ss/ufwey8RAQnlq8kkPrh4=) 4: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 6p5qEvuAFNeoYDRPFKQKTOGL6GjveSFUo5E7i4B+rcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d6:8d:dd:e0:8d:97:17:44:06:7b:52:5b:70:21:76:73:19:b9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Mar 1 12:15:44 2026 GMT Not After : Mar 4 14:42:44 2026 GMT Subject: CN=1BC581236F76E7F6B4E10C9F60C5C818C9282A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:42:de:f5:24:fc:62:4f:b7:bd:a9:cf:d1: 6e:e8:c9:09:cd:63:f3:a9:ab:ec:1e:53:93:c9:71: 8b:2f:50:1d:f9:4e:32:c4:80:c5:aa:31:eb:d4:9a: d7:5a:fd:9f:f8:21:36:ea:ce:9e:d0:78:d1:60:ea: 88:5b:e2:98:f9:4f:b8:16:5d:32:14:bf:c7:ea:d3: 95:5f:7e:93:ed:a7:97:73:2b:6d:91:b4:8d:75:10: 61:5d:35:55:0b:16:c0:8b:02:bb:43:1c:c8:04:ee: 24:7f:ec:a9:b1:91:73:a4:fb:1f:d8:1a:cb:97:fb: 08:7f:dc:85:7d:2b:29:27:fc:df:8f:e7:02:0d:0a: b2:e9:f7:e4:ce:d5:c8:88:17:10:1b:0a:93:e2:d0: 0c:18:1e:ff:0c:99:f8:e2:ad:43:e5:64:86:b2:03: 25:91:3d:a9:3e:b8:b6:52:4d:56:d9:82:8b:61:1e: 34:eb:4c:13:51:46:2d:ff:6a:18:ff:da:06:32:f1: bc:a0:46:c8:d2:b8:c1:e7:24:b8:90:5e:64:7c:3c: f2:78:f4:bf:64:eb:69:04:fe:9a:c4:8a:72:e0:ae: 50:da:6f:4c:01:7a:53:42:31:57:ba:f8:e7:bc:bd: 6e:5b:0a:eb:78:f0:8c:06:a5:e5:12:44:21:2d:b5: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C5:81:23:6F:76:E7:F6:B4:E1:0C:9F:60:C5:C8:18:C9:28:2A:71 X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:87:81:2a:92:b0:35:61:d5:56:eb:a5:1f:84:b0:15:ef:cc: ab:c6:60:b4:54:20:a4:64:e4:e7:e4:20:7d:1b:e6:a1:22:46: d3:c5:d4:ab:22:8d:3c:d2:5a:e6:b2:93:f1:b8:fb:18:a5:03: e5:11:05:b5:1c:58:e0:ac:e1:c7:25:49:74:31:99:e5:13:01: c4:84:86:51:d1:19:b3:77:6d:60:6b:0d:78:8d:a5:9a:7b:10: 76:b2:d4:9c:a0:01:93:ca:e9:4c:92:20:9d:9b:7e:48:e5:85: b4:e7:c7:0b:88:4f:c6:d6:37:3a:3e:a8:18:57:cf:f1:e2:c7: 46:c0:e6:26:cb:71:79:20:84:37:d1:22:d6:0b:a1:f0:3a:2d: 02:db:7d:02:37:95:56:39:68:e9:dc:d3:b3:5f:ba:8c:14:11: 99:ee:97:03:cd:55:e1:cd:0a:8a:78:b0:0c:3b:ab:62:06:57: 85:7e:a0:c7:6b:d0:0c:44:b7:e2:a8:59:34:ab:e5:ea:36:a8: fb:51:62:25:45:8c:56:9f:3e:e3:65:b1:e3:6d:6a:53:74:9d: 81:83:8d:3a:e1:93:bf:6d:79:26:db:9f:3d:23:5f:8d:ec:d6: 21:d1:e3:af:7f:a4:ca:21:2f:4c:29:72:08:d9:34:46:1c:d5: e8:5f:c0:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdaN3eCNlxdEBntSW3AhdnMZubEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNjAzMDExMjE1NDRaFw0yNjAzMDQxNDQyNDRaMDMxMTAvBgNV BAMTKDFCQzU4MTIzNkY3NkU3RjZCNEUxMEM5RjYwQzVDODE4QzkyODJBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHk0Le9ST8Yk+3vanP0W7oyQnN Y/Opq+weU5PJcYsvUB35TjLEgMWqMevUmtda/Z/4ITbqzp7QeNFg6ohb4pj5T7gW XTIUv8fq05VffpPtp5dzK22RtI11EGFdNVULFsCLArtDHMgE7iR/7KmxkXOk+x/Y GsuX+wh/3IV9Kykn/N+P5wINCrLp9+TO1ciIFxAbCpPi0AwYHv8MmfjirUPlZIay AyWRPak+uLZSTVbZgothHjTrTBNRRi3/ahj/2gYy8bygRsjSuMHnJLiQXmR8PPJ4 9L9k62kE/prEinLgrlDab0wBelNCMVe6+Oe8vW5bCut48IwGpeUSRCEttU2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG8WBI2925/a04QyfYMXIGMkoKnEwHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2HgSqSsDVh1VbrpR+EsBXvzKvGYLRUIKRk 5OfkIH0b5qEiRtPF1KsijTzSWuayk/G4+xilA+URBbUcWOCs4cclSXQxmeUTAcSE hlHRGbN3bWBrDXiNpZp7EHay1JygAZPK6UySIJ2bfkjlhbTnxwuIT8bWNzo+qBhX z/Hix0bA5ibLcXkghDfRItYLofA6LQLbfQI3lVY5aOnc07NfuowUEZnulwPNVeHN Cop4sAw7q2IGV4V+oMdr0AxEt+KoWTSr5eo2qPtRYiVFjFafPuNlseNtalN0nYGD jTrhk79teSbbnz0jX43s1iHR469/pMohL0wpcgjZNEYc1ehfwFU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:30 2026 by rpki-client