
$ rpki-client -vvf rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft
File: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft (raw, json)
Hash identifier: i6QgfBlJacGyvMzp3rfsmeKSiVGqPb3McDRQ18PqnD8=
Subject key identifier: D1:8E:E7:4F:6F:7F:07:3D:48:5E:D4:35:D5:7F:36:3F:87:EC:B0:F9
Authority key identifier: 14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E
Certificate issuer: /CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E
Certificate serial: 72CD28F22A6DEA4D8445EEAE7268360000790336
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 03:21:50 +0000
Manifest this update: Wed 17 Jun 2026 03:16:50 +0000
Manifest next update: Thu 18 Jun 2026 07:11:50 +0000
Files and hashes: 1: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: b0p+aEnGITPNe6S1A1lEh2z0FMf0b3zvYLaeJ0qOUoQ=)
2: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl (hash: 98lZkGgz3Ym/DmU4joTzT4ESlaKonZr6xuBELe2sYMA=)
3: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: 4x7d4CbAIzm/F6oW0bYK3R10sGQPrNbSrYyem2DdQNw=)
4: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 6N1mNk7kMJutxDC4iwMyVS1ZwmLt1n7dTUB5ei+yYU8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl
rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cd:28:f2:2a:6d:ea:4d:84:45:ee:ae:72:68:36:00:00:79:03:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E
Validity
Not Before: Jun 17 03:16:50 2026 GMT
Not After : Jun 18 07:11:50 2026 GMT
Subject: CN=D18EE74F6F7F073D485ED435D57F363F87ECB0F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:2b:67:eb:91:86:a4:71:9d:34:64:6a:2a:
d5:3a:14:13:e4:b4:7a:97:a6:9a:64:2d:c7:24:9d:
e8:8a:6a:ba:8a:5c:2f:24:35:be:bf:16:a0:0f:23:
42:99:dc:5b:8e:e2:f1:2b:08:e0:f0:ba:e6:df:b7:
6a:fd:33:81:8d:0a:35:cf:bd:f6:2c:33:09:c4:ee:
56:6c:2e:b0:50:ae:4d:37:a7:a4:82:2c:71:e0:70:
71:21:51:d5:be:71:24:7f:4a:ac:ca:03:75:11:46:
b0:f6:38:27:a2:3b:dd:e5:fd:0f:cf:16:49:38:29:
6d:8b:b7:07:dd:52:ac:c3:88:f4:ac:d6:14:fb:5e:
35:f0:c8:cb:c0:c8:e7:26:d5:6c:cf:c1:cd:6a:ae:
ae:e4:14:c3:11:75:8e:60:f3:de:47:5d:33:a4:92:
a0:ae:ea:b5:70:3b:1a:56:e3:5a:98:5a:97:b9:af:
49:e0:1f:c4:b5:c9:c4:cd:90:de:09:5d:20:eb:24:
93:bd:47:d1:1c:45:1d:f8:15:f7:fd:e1:8d:17:ad:
e9:d6:04:88:d7:26:eb:b3:51:d4:f3:33:e3:8a:44:
d9:90:51:c0:e6:0c:b4:d5:6b:f1:00:78:8d:7f:db:
e0:6c:02:fa:30:3a:33:bf:6e:d0:b2:7b:6b:a0:36:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8E:E7:4F:6F:7F:07:3D:48:5E:D4:35:D5:7F:36:3F:87:EC:B0:F9
X509v3 Authority Key Identifier:
keyid:14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ff:38:2c:85:0e:29:e0:3c:92:d2:1e:b3:38:27:e4:ac:ac:
af:7e:b8:ae:2d:21:c8:2b:a3:94:75:bd:56:12:f2:6d:b9:b2:
97:29:80:15:e1:58:70:a7:a6:71:54:06:0b:0f:63:15:c1:0f:
d4:c9:0c:7d:36:27:ff:4e:60:5c:3d:bc:9e:36:8b:87:97:3e:
24:5e:4f:88:ca:3d:c1:d8:f3:68:07:fe:9b:53:27:57:8b:9b:
c9:75:24:fe:f9:6b:31:be:6e:54:88:f8:da:af:7f:76:c2:1b:
41:b7:ea:93:9b:21:21:78:b3:53:68:58:e6:57:de:69:6b:2b:
30:cf:c7:8b:d0:94:15:22:29:44:da:e2:87:c8:e3:04:e3:f2:
b1:37:8b:a0:f3:30:d0:4c:7e:e4:1f:04:7c:51:75:e7:66:db:
74:62:62:d9:97:0c:97:38:71:88:e1:15:20:f2:bd:c4:c8:07:
87:48:e5:f1:71:85:ec:ec:02:85:3f:1f:7f:2d:55:68:3e:94:
56:97:cd:d2:1f:97:d4:0b:ff:de:33:d3:e5:78:d6:03:69:6e:
23:bb:7d:38:84:08:55:f2:41:81:e4:56:f8:92:3f:24:49:38:
d9:ae:bc:9f:a6:98:14:a3:85:5b:f8:f4:37:72:4d:68:77:50:
54:e8:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:14:58 2026 by rpki-client