$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft File: 149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json) Hash identifier: FOCgYYTVHY9NwaGozu4zcsMCFYfwIUSbWtAMGkHh8kI= Subject key identifier: 92:84:06:99:95:A2:22:30:69:48:E9:03:1E:7F:0D:00:89:25:C2:D6 Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5 Certificate issuer: /CN=149E265C01ED66DA98905D22913EE8E5950357C5 Certificate serial: 58535C309DAD7690CA92500B182C407488BD0D3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:28:26 +0000 Manifest this update: Mon 21 Sep 2026 05:23:26 +0000 Manifest next update: Tue 22 Sep 2026 06:16:26 +0000 Files and hashes: 1: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=) 2: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: QePMdbT9P7vPgQgWo7VjzEMXBo8JnAaiKm6NIKLA2fU=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:53:5c:30:9d:ad:76:90:ca:92:50:0b:18:2c:40:74:88:bd:0d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5 Validity Not Before: Sep 21 05:23:26 2026 GMT Not After : Sep 22 06:16:26 2026 GMT Subject: CN=9284069995A222306948E9031E7F0D008925C2D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:dd:f6:2a:62:95:70:cb:f1:74:57:11:5a: ff:b0:d0:89:2f:2e:05:c6:be:b5:36:3f:96:a7:e4: 24:42:6b:8c:c4:33:24:a7:89:d6:42:79:6d:62:59: 2d:69:a3:0a:78:85:3a:67:35:d2:e5:8b:14:d2:da: c5:3a:9e:c6:2b:49:b1:53:f2:97:88:63:73:68:60: 08:96:ea:29:c1:b5:be:a4:ca:de:cb:bd:5e:36:10: 8e:55:32:f6:fe:9f:19:05:00:4d:5c:68:7f:eb:d4: 98:59:dc:f1:e1:33:da:3d:44:4f:cc:49:9a:f9:b2: 0d:4f:53:28:b4:57:3d:f7:01:e5:03:3d:7d:d8:e3: 82:a7:7b:fb:eb:65:3c:78:ad:dc:b6:4b:1c:3c:f9: 3b:c8:53:a0:c3:7b:7e:fc:92:68:e0:a2:d8:33:ab: 18:ed:26:87:45:2b:c9:f0:13:b7:4a:0a:0d:13:0a: cc:b2:f1:f4:7a:cb:e6:7d:c6:15:f6:bb:7e:2a:c2: 63:13:22:20:09:d8:a3:a9:59:6a:f3:0c:3d:a1:33: 81:31:a9:92:1f:19:21:e5:70:3e:e9:4d:26:b4:1c: d8:26:ca:0f:65:d6:70:27:12:5e:8a:10:41:45:b9: 28:3a:a3:ec:fd:cb:63:36:ea:9c:da:e3:6c:10:4e: 59:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:84:06:99:95:A2:22:30:69:48:E9:03:1E:7F:0D:00:89:25:C2:D6 X509v3 Authority Key Identifier: keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:59:7b:76:20:02:b3:7c:ba:ab:1c:d3:5f:21:b4:08:c7:a6: 7c:14:fb:76:9a:53:32:ff:f5:8e:4d:80:f0:23:8e:f6:79:d0: 90:b9:12:49:f9:36:06:a9:ee:29:4b:d6:72:58:a0:f3:d4:43: ed:ce:a4:3f:4c:e0:8a:77:8d:df:11:28:b7:0b:2f:7e:c2:bd: fa:dc:b3:82:3f:4d:9f:4c:26:34:87:2f:44:07:77:96:f2:b5: 20:a1:d7:04:22:ab:e3:0d:b0:d6:50:07:5d:8d:26:23:02:7f: 88:3f:d5:25:18:a9:c6:31:a3:d5:3e:ef:95:65:22:f2:ee:fd: e1:28:8f:d1:51:fe:ef:86:f8:a4:ae:1c:9e:3d:75:a6:85:e1: c8:96:b6:7e:0c:01:39:ee:19:d1:09:e1:e9:28:68:d3:53:fe: 48:1d:62:8e:8d:88:92:56:63:22:d7:21:ef:66:20:f2:dd:38: 35:fc:b1:5b:e1:d9:9c:c8:8f:00:f0:6f:70:65:74:45:6c:63: b2:b3:21:37:aa:56:63:e0:fe:d9:da:04:90:f0:2c:ca:02:0b: 6e:e5:8c:72:8f:d5:4f:dd:db:1d:81:f4:5e:6d:b4:3c:ec:ec: c4:d1:71:3b:b2:97:b2:97:c7:d1:6a:70:3b:bd:fe:22:6d:46: 8d:a8:f6:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFNcMJ2tdpDKklALGCxAdIi9DTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5 NTAzNTdDNTAeFw0yNjA5MjEwNTIzMjZaFw0yNjA5MjIwNjE2MjZaMDMxMTAvBgNV BAMTKDkyODQwNjk5OTVBMjIyMzA2OTQ4RTkwMzFFN0YwRDAwODkyNUMyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeB932KmKVcMvxdFcRWv+w0Ikv LgXGvrU2P5an5CRCa4zEMySnidZCeW1iWS1powp4hTpnNdLlixTS2sU6nsYrSbFT 8peIY3NoYAiW6inBtb6kyt7LvV42EI5VMvb+nxkFAE1caH/r1JhZ3PHhM9o9RE/M SZr5sg1PUyi0Vz33AeUDPX3Y44Kne/vrZTx4rdy2Sxw8+TvIU6DDe378kmjgotgz qxjtJodFK8nwE7dKCg0TCsyy8fR6y+Z9xhX2u34qwmMTIiAJ2KOpWWrzDD2hM4Ex qZIfGSHlcD7pTSa0HNgmyg9l1nAnEl6KEEFFuSg6o+z9y2M26pza42wQTllXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkoQGmZWiIjBpSOkDHn8NAIklwtYwHwYDVR0j BBgwFoAUFJ4mXAHtZtqYkF0ikT7o5ZUDV8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZjZlOGQtMWFiMC00MWM0LWIzYWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMw MUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5NTAzNTdDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDlFMjY1QzAxRUQ2NkRBOTg5MDVEMjI5MTNFRThFNTk1MDM1 N0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4 RTU5NTAzNTdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxZe3YgArN8uqsc018htAjHpnwU+3aaUzL/ 9Y5NgPAjjvZ50JC5Ekn5Ngap7ilL1nJYoPPUQ+3OpD9M4Ip3jd8RKLcLL37Cvfrc s4I/TZ9MJjSHL0QHd5bytSCh1wQiq+MNsNZQB12NJiMCf4g/1SUYqcYxo9U+75Vl IvLu/eEoj9FR/u+G+KSuHJ49daaF4ciWtn4MATnuGdEJ4ekoaNNT/kgdYo6NiJJW YyLXIe9mIPLdODX8sVvh2ZzIjwDwb3BldEVsY7KzITeqVmPg/tnaBJDwLMoCC27l jHKP1U/d2x2B9F5ttDzs7MTRcTuyl7KXx9FqcDu9/iJtRo2o9to= -----END CERTIFICATE-----Generated at Mon Sep 21 10:26:13 2026 by rpki-client