$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: 5JLZkCm9Dmy187iWkRVzvqn5c2G7RoSMAd9EnO7gwmM= Subject key identifier: D6:0B:8B:91:E0:5F:08:16:0E:90:3C:7B:59:C3:0C:29:7F:3F:B3:92 Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 03B8DDFDAE013D50BCA7E47B26679EB48FC1E0CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 01EE Signing time: Sun 02 Nov 2025 15:00:39 +0000 Manifest this update: Sun 02 Nov 2025 14:55:39 +0000 Manifest next update: Thu 06 Nov 2025 00:02:39 +0000 Files and hashes: 1: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: SlnYn1Xsxz6QRJgIfCp87Ss/ufwey8RAQnlq8kkPrh4=) 2: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: jtf7B/sERAHUmxkjsCla5hNcVuxILyfgKi4TmTI4UdY=) 3: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 6p5qEvuAFNeoYDRPFKQKTOGL6GjveSFUo5E7i4B+rcc=) 4: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b8:dd:fd:ae:01:3d:50:bc:a7:e4:7b:26:67:9e:b4:8f:c1:e0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Nov 2 14:55:39 2025 GMT Not After : Nov 6 00:02:39 2025 GMT Subject: CN=D60B8B91E05F08160E903C7B59C30C297F3FB392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:9a:1e:d7:9e:8e:32:48:5a:a2:58:9d:30: 53:92:5f:b5:3e:03:c5:25:bd:33:57:af:eb:83:6f: f7:f2:d5:4b:10:5f:49:ff:d7:8a:2b:4b:88:75:2d: 97:4e:66:73:8a:9d:73:ba:0a:55:02:a9:15:44:d8: 34:8b:8d:0b:d8:79:ca:46:82:42:8b:03:22:ca:fc: 1f:03:1d:6c:6c:68:d7:68:05:19:ed:31:ff:73:40: 78:26:b6:dd:d4:24:ba:60:38:6d:70:01:ec:33:db: f3:68:a1:e7:ac:e8:0c:be:0d:78:e2:40:cf:49:4e: 1a:f8:c0:76:da:ef:93:4a:ba:9a:9c:e4:31:df:ac: fb:8a:b9:56:2b:57:5d:c0:a7:66:dd:92:f4:1a:54: 5d:17:0d:81:cd:7d:64:7b:0b:bb:63:71:18:a2:c3: fd:13:47:76:51:41:ee:10:d9:db:97:57:63:4b:67: 7b:8d:b3:aa:c1:b5:8c:9a:e3:a5:96:7a:27:97:aa: d1:54:6f:6c:16:b0:6b:dc:df:f4:68:60:82:8b:9d: 91:99:23:bd:0b:04:bd:24:c7:bb:f6:a5:0b:f4:a8: b6:ec:4c:48:b6:b6:af:cb:b7:9f:fe:85:55:0a:21: 6f:81:5a:a5:df:d1:22:7a:6a:94:99:2e:f9:03:6d: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0B:8B:91:E0:5F:08:16:0E:90:3C:7B:59:C3:0C:29:7F:3F:B3:92 X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:68:bf:df:7a:f5:06:c6:5f:49:3b:44:1a:bb:00:81:bf:5d: e8:d5:83:cb:cf:cb:f7:1c:e5:03:4b:45:27:56:bc:83:ff:b3: 05:a0:75:57:1f:14:67:b1:10:7b:dc:c4:f2:99:2e:6a:64:fd: 3b:70:be:e7:b6:11:e0:0a:1d:d7:20:a2:e0:fb:61:0c:11:d4: 9d:a6:db:00:a5:c1:72:f6:7e:76:54:7b:a2:d6:94:57:61:74: 4a:9e:47:80:61:ad:55:a0:b1:87:3e:01:d4:fc:a8:20:d8:58: 26:6b:df:53:71:e3:78:8a:49:4a:88:48:2f:0e:29:39:e7:da: 37:ed:f5:55:15:a7:4a:2d:2d:55:bf:af:b2:17:81:cc:9b:e5: c4:eb:05:0b:fb:8e:84:4b:9a:f3:b3:5d:5b:0e:ba:df:54:84: 9f:28:21:39:cb:66:59:ac:34:81:f6:d8:27:7a:41:76:ae:95: 9b:4a:37:f2:0f:81:ea:fb:73:a9:a9:21:e5:30:88:50:6d:07: ba:11:3c:97:96:7f:64:1d:65:75:0f:8a:c3:64:be:92:bb:49: 04:49:90:0f:12:ee:f7:e7:ed:9b:71:4f:6c:84:c1:c6:a7:1e: 4f:e3:47:02:53:c4:f3:ca:0a:75:61:d5:33:93:42:02:38:ca: 90:d7:ad:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7jd/a4BPVC8p+R7JmeetI/B4MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTExMDIxNDU1MzlaFw0yNTExMDYwMDAyMzlaMDMxMTAvBgNV BAMTKEQ2MEI4QjkxRTA1RjA4MTYwRTkwM0M3QjU5QzMwQzI5N0YzRkIzOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC195oe156OMkhaolidMFOSX7U+ A8UlvTNXr+uDb/fy1UsQX0n/14orS4h1LZdOZnOKnXO6ClUCqRVE2DSLjQvYecpG gkKLAyLK/B8DHWxsaNdoBRntMf9zQHgmtt3UJLpgOG1wAewz2/Nooees6Ay+DXji QM9JThr4wHba75NKupqc5DHfrPuKuVYrV13Ap2bdkvQaVF0XDYHNfWR7C7tjcRii w/0TR3ZRQe4Q2duXV2NLZ3uNs6rBtYya46WWeieXqtFUb2wWsGvc3/RoYIKLnZGZ I70LBL0kx7v2pQv0qLbsTEi2tq/Lt5/+hVUKIW+BWqXf0SJ6apSZLvkDbR6ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1guLkeBfCBYOkDx7WcMMKX8/s5IwHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9ov9969QbGX0k7RBq7AIG/XejVg8vPy/cc 5QNLRSdWvIP/swWgdVcfFGexEHvcxPKZLmpk/Ttwvue2EeAKHdcgouD7YQwR1J2m 2wClwXL2fnZUe6LWlFdhdEqeR4BhrVWgsYc+AdT8qCDYWCZr31Nx43iKSUqISC8O KTnn2jft9VUVp0otLVW/r7IXgcyb5cTrBQv7joRLmvOzXVsOut9UhJ8oITnLZlms NIH22Cd6QXaulZtKN/IPger7c6mpIeUwiFBtB7oRPJeWf2QdZXUPisNkvpK7SQRJ kA8S7vfn7ZtxT2yEwcanHk/jRwJTxPPKCnVh1TOTQgI4ypDXrQU= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:48 2025 by rpki-client