$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft File: 149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json) Hash identifier: GE/UqUYHFCAEvPfyR3qCFBpTpZ2PIeFVUcAfAX09rF4= Subject key identifier: 05:97:A2:F3:99:5F:D8:CD:DF:2A:5C:FF:A6:50:08:AA:BA:2E:78:FD Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5 Certificate issuer: /CN=149E265C01ED66DA98905D22913EE8E5950357C5 Certificate serial: 03FF1CCD341FF768131B60FF3CC7A637DE461166 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:11:08 +0000 Manifest this update: Tue 16 Jun 2026 22:06:08 +0000 Manifest next update: Thu 18 Jun 2026 00:27:08 +0000 Files and hashes: 1: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=) 2: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: h6DQ7gzAlXdAV3UuXI2wHKzv4qJOdvoC4r0NWICzzO4=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ff:1c:cd:34:1f:f7:68:13:1b:60:ff:3c:c7:a6:37:de:46:11:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5 Validity Not Before: Jun 16 22:06:08 2026 GMT Not After : Jun 18 00:27:08 2026 GMT Subject: CN=0597A2F3995FD8CDDF2A5CFFA65008AABA2E78FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:bb:74:62:74:9d:51:d2:c6:47:ad:47:a2: b5:94:44:3f:10:5c:73:73:94:f9:9e:66:6d:21:f4: 1b:e8:91:01:bc:09:de:bc:bc:76:36:57:cb:04:4e: 68:38:7b:ad:be:58:5e:ce:27:67:49:a0:72:4e:43: 74:40:08:0f:48:07:f3:46:7b:ea:47:70:ec:6f:66: dc:27:e7:b8:65:54:63:97:1b:89:7a:72:3c:03:6b: 68:37:da:4e:1b:ac:5c:e9:f4:a0:6f:1d:7b:ed:3b: 35:e0:fd:15:eb:b3:49:4f:4d:8b:f2:c1:4b:af:e0: 4e:6e:c0:05:5d:51:69:66:6f:b1:e8:54:65:cc:de: 50:20:90:83:59:1c:37:57:64:75:fe:5f:8d:bf:53: b0:79:39:7a:d7:7a:b1:c3:40:62:dc:26:cc:e7:cc: 8f:b8:06:bd:19:1e:bf:6e:25:1f:53:ce:dc:5f:4a: 2b:31:6d:12:42:67:4d:4e:1f:47:23:4b:46:c3:a5: d7:84:22:65:4a:ed:f7:9e:2a:ef:7f:f7:ab:cd:4c: 7f:86:f2:37:6b:a2:e3:75:89:fd:cb:17:62:77:ef: 2e:3c:c0:2e:a9:6b:31:c9:87:44:d6:88:d1:b7:11: c4:43:0c:95:84:01:e7:26:14:15:94:00:a6:f1:50: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:97:A2:F3:99:5F:D8:CD:DF:2A:5C:FF:A6:50:08:AA:BA:2E:78:FD X509v3 Authority Key Identifier: keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:52:6e:ab:d6:f9:26:14:e0:1f:ff:db:c8:ce:4c:1a:3c:c9: 11:37:81:45:df:5b:8e:f5:ea:63:6b:de:87:d1:ce:ae:84:04: 4c:ac:13:54:48:4f:f5:7d:7e:aa:a6:2e:2e:40:a0:f8:8b:b2: a6:97:8f:c8:45:ab:3b:5f:80:41:83:cb:4d:91:ab:aa:ea:a0: 16:5c:d9:cd:11:9c:6e:1a:28:ed:a4:1b:7c:0a:6c:35:cb:3f: b3:67:2b:49:eb:a0:a7:d9:d8:4c:fb:23:92:88:c2:0d:9e:ff: 0a:0b:35:78:81:4d:cf:f9:82:86:a8:3d:d5:5c:b1:21:c8:36: c3:33:85:41:b1:75:89:6d:14:8a:20:56:37:38:5f:a4:95:cf: 54:bb:fe:f5:bb:18:35:14:4c:82:e2:ab:0a:e5:ee:c6:29:af: 8c:1b:09:ff:4b:89:7f:d8:33:43:9f:1e:1f:62:40:8d:1d:73: fb:38:27:dd:7d:0c:db:ae:ca:dd:d0:9e:ec:47:12:08:59:74: bf:67:0f:21:b1:ae:f8:9e:5c:69:75:9d:2a:c6:06:a8:41:db: d6:6b:e5:a4:7d:db:b1:24:d5:c2:ca:53:80:af:0b:fe:57:e7: 15:b4:f6:b9:40:ae:34:6f:30:9c:4c:78:33:8e:df:58:a6:50: 4b:8d:e5:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/8czTQf92gTG2D/PMemN95GEWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5 NTAzNTdDNTAeFw0yNjA2MTYyMjA2MDhaFw0yNjA2MTgwMDI3MDhaMDMxMTAvBgNV BAMTKDA1OTdBMkYzOTk1RkQ4Q0RERjJBNUNGRkE2NTAwOEFBQkEyRTc4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp77t0YnSdUdLGR61HorWURD8Q XHNzlPmeZm0h9BvokQG8Cd68vHY2V8sETmg4e62+WF7OJ2dJoHJOQ3RACA9IB/NG e+pHcOxvZtwn57hlVGOXG4l6cjwDa2g32k4brFzp9KBvHXvtOzXg/RXrs0lPTYvy wUuv4E5uwAVdUWlmb7HoVGXM3lAgkINZHDdXZHX+X42/U7B5OXrXerHDQGLcJszn zI+4Br0ZHr9uJR9TztxfSisxbRJCZ01OH0cjS0bDpdeEImVK7feeKu9/96vNTH+G 8jdrouN1if3LF2J37y48wC6pazHJh0TWiNG3EcRDDJWEAecmFBWUAKbxUNflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBZei85lf2M3fKlz/plAIqroueP0wHwYDVR0j BBgwFoAUFJ4mXAHtZtqYkF0ikT7o5ZUDV8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZjZlOGQtMWFiMC00MWM0LWIzYWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMw MUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5NTAzNTdDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDlFMjY1QzAxRUQ2NkRBOTg5MDVEMjI5MTNFRThFNTk1MDM1 N0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4 RTU5NTAzNTdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApSbqvW+SYU4B//28jOTBo8yRE3gUXfW471 6mNr3ofRzq6EBEysE1RIT/V9fqqmLi5AoPiLsqaXj8hFqztfgEGDy02Rq6rqoBZc 2c0RnG4aKO2kG3wKbDXLP7NnK0nroKfZ2Ez7I5KIwg2e/woLNXiBTc/5goaoPdVc sSHINsMzhUGxdYltFIogVjc4X6SVz1S7/vW7GDUUTILiqwrl7sYpr4wbCf9LiX/Y M0OfHh9iQI0dc/s4J919DNuuyt3QnuxHEghZdL9nDyGxrvieXGl1nSrGBqhB29Zr 5aR927Ek1cLKU4CvC/5X5xW09rlArjRvMJxMeDOO31imUEuN5bo= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:18 2026 by rpki-client