$ rpki-client -vvvf rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft File: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft (raw, json) Hash identifier: 2bisJJd5hVJDB4X1AiP5OxpJWv7OoeCBaCmZ/BWdwzI= Subject key identifier: FF:42:E2:EA:16:D8:22:49:B8:8F:CE:13:94:8D:9E:C8:8F:78:10:D9 Authority key identifier: 14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E Certificate issuer: /CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Certificate serial: 60F4AF121FE50DB361B3CA7DBA0A83D006E00104 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft Manifest number: BD Signing time: Sun 20 Sep 2026 12:47:57 +0000 Manifest this update: Sun 20 Sep 2026 12:42:57 +0000 Manifest next update: Mon 21 Sep 2026 15:34:57 +0000 Files and hashes: 1: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: 4x7d4CbAIzm/F6oW0bYK3R10sGQPrNbSrYyem2DdQNw=) 2: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 6N1mNk7kMJutxDC4iwMyVS1ZwmLt1n7dTUB5ei+yYU8=) 3: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: b0p+aEnGITPNe6S1A1lEh2z0FMf0b3zvYLaeJ0qOUoQ=) 4: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl (hash: vS/chH7C/x9WxRJ9LVJbNO/BJ7sorjY16NEcLBoSoS8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f4:af:12:1f:e5:0d:b3:61:b3:ca:7d:ba:0a:83:d0:06:e0:01:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Validity Not Before: Sep 20 12:42:57 2026 GMT Not After : Sep 21 15:34:57 2026 GMT Subject: CN=FF42E2EA16D82249B88FCE13948D9EC88F7810D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:f7:7c:3e:0a:de:61:f6:f2:31:e8:61:d4: 0a:71:6c:b4:31:97:16:e2:7c:56:12:ba:13:19:40: ad:5b:6a:10:1a:d0:74:67:38:3b:50:06:0c:07:fa: 11:3d:5f:b8:99:9e:fd:6c:5a:f2:c6:49:d4:96:87: 20:d9:93:be:23:6e:8e:2b:2e:8c:6b:81:96:0b:70: 33:3d:b5:c6:10:5e:6a:c5:31:83:24:f7:62:da:24: f9:36:ac:ae:eb:70:1d:f3:64:00:0a:66:9b:5c:03: af:93:48:ad:05:9f:a0:21:8f:05:f5:ab:31:53:20: a2:22:4c:59:44:b2:21:cb:ce:79:6b:32:e7:26:7d: 2b:7a:85:9d:ab:51:b9:66:83:3f:41:05:54:fa:b7: fd:5b:30:2d:23:1c:79:54:56:63:6a:29:54:fd:b4: 78:35:68:ab:f9:31:e1:ca:2d:99:55:7d:b6:e6:1d: 7b:d6:68:b9:8c:d3:40:be:01:00:9e:79:ec:f2:83: 23:a7:a8:83:a5:5f:5a:b3:8e:d5:48:80:d3:d0:51: a8:52:a8:79:3d:2b:5e:f5:f2:35:9a:22:8d:c9:d0: b6:63:8d:37:6b:22:69:32:1d:0f:18:b8:16:19:80: af:41:81:df:62:02:bd:82:78:f4:df:19:51:a1:91: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:42:E2:EA:16:D8:22:49:B8:8F:CE:13:94:8D:9E:C8:8F:78:10:D9 X509v3 Authority Key Identifier: keyid:14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5b:42:da:6c:bb:70:e9:9b:ca:43:ee:ba:e2:a0:42:8f:f5: 49:37:84:1a:36:57:98:8e:20:1f:0d:61:66:09:3c:f4:89:09: fb:e3:75:3a:7b:4b:f5:ce:a0:46:ea:b0:76:0f:1f:bd:e0:0f: 43:84:09:f8:48:53:b0:01:2c:28:2c:23:28:ce:77:6a:4e:6f: 12:58:fb:8a:6c:08:87:23:6e:d4:3c:ab:df:ae:68:14:6b:ea: 3f:5a:de:4c:9d:c2:3e:2c:c9:97:04:59:ac:80:2d:43:d8:d3: a5:53:b6:ce:2a:01:ee:c1:62:c0:16:10:f5:df:86:ba:c3:cb: ea:40:31:5f:e3:1e:1e:d7:6f:25:72:49:7e:0d:3a:8f:50:18: 5b:57:00:f3:7c:9f:d9:d0:92:8f:96:03:68:0b:6b:28:1e:51: 69:45:46:a8:53:e7:a1:03:06:47:8a:a9:09:9c:76:c6:5c:52: 14:58:66:62:a2:11:14:89:5f:17:36:af:a7:66:19:4f:de:c5: 0c:21:74:f3:79:ef:f3:5d:d2:cf:6b:83:c1:f9:2d:ce:5c:a9: a0:b6:a5:cd:1f:41:5b:8e:51:6e:ac:e1:98:4d:59:07:e1:22: 44:7f:91:8c:53:cc:f9:a6:6a:a6:fb:0b:07:2b:82:1d:58:8c: be:01:1e:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPSvEh/lDbNhs8p9ugqD0AbgAQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAw QkNGNkI2RTAeFw0yNjA5MjAxMjQyNTdaFw0yNjA5MjExNTM0NTdaMDMxMTAvBgNV BAMTKEZGNDJFMkVBMTZEODIyNDlCODhGQ0UxMzk0OEQ5RUM4OEY3ODEwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3Pd8PgreYfbyMehh1ApxbLQx lxbifFYSuhMZQK1bahAa0HRnODtQBgwH+hE9X7iZnv1sWvLGSdSWhyDZk74jbo4r LoxrgZYLcDM9tcYQXmrFMYMk92LaJPk2rK7rcB3zZAAKZptcA6+TSK0Fn6AhjwX1 qzFTIKIiTFlEsiHLznlrMucmfSt6hZ2rUblmgz9BBVT6t/1bMC0jHHlUVmNqKVT9 tHg1aKv5MeHKLZlVfbbmHXvWaLmM00C+AQCeeezygyOnqIOlX1qzjtVIgNPQUahS qHk9K1718jWaIo3J0LZjjTdrImkyHQ8YuBYZgK9Bgd9iAr2CePTfGVGhkYidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/0Li6hbYIkm4j84TlI2eyI94ENkwHwYDVR0j BBgwFoAUFIw6hyDFzYq3+857g1udIAvPa24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg4ZTNhMTctMWM5MS00NzkzLTgzYzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcy MEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAwQkNGNkI2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDhDM0E4NzIwQzVDRDhBQjdGQkNFN0I4MzVCOUQyMDBCQ0Y2 QjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlE MjAwQkNGNkI2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJbQtpsu3Dpm8pD7rrioEKP9Uk3hBo2V5iO IB8NYWYJPPSJCfvjdTp7S/XOoEbqsHYPH73gD0OECfhIU7ABLCgsIyjOd2pObxJY +4psCIcjbtQ8q9+uaBRr6j9a3kydwj4syZcEWayALUPY06VTts4qAe7BYsAWEPXf hrrDy+pAMV/jHh7XbyVySX4NOo9QGFtXAPN8n9nQko+WA2gLaygeUWlFRqhT56ED BkeKqQmcdsZcUhRYZmKiERSJXxc2r6dmGU/exQwhdPN57/Nd0s9rg8H5Lc5cqaC2 pc0fQVuOUW6s4ZhNWQfhIkR/kYxTzPmmaqb7Cwcrgh1YjL4BHgc= -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:36 2026 by rpki-client