$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: 3vCAjCmrhfygaYv+LjBhLcO+/1hyUjzBBpC/i85Wl9Q= Subject key identifier: 18:32:9F:09:33:93:9F:5D:4F:14:27:B9:4B:D2:A4:C0:D9:E1:CD:CB Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 303CF8E25FF0DD6D8972BEDA8BEB4C7AE3E89898 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 01BE Signing time: Sun 20 Jul 2025 07:30:37 +0000 Manifest this update: Sun 20 Jul 2025 07:25:37 +0000 Manifest next update: Wed 23 Jul 2025 16:10:37 +0000 Files and hashes: 1: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: +aTbg4Bqow3tKrEemUQDnquYnyKdUDg1fr/FMfpUH2g=) 2: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: 5+zXGETugAPi3HrPmviCFDgLbg2lDQPrtwA1t0d5+aI=) 3: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: ryVD+uLM2+hWCQR2RXn05JojMA5tPhxCKWiWED/1+98=) 4: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:3c:f8:e2:5f:f0:dd:6d:89:72:be:da:8b:eb:4c:7a:e3:e8:98:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Jul 20 07:25:37 2025 GMT Not After : Jul 23 16:10:37 2025 GMT Subject: CN=18329F0933939F5D4F1427B94BD2A4C0D9E1CDCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:0e:40:be:ab:d9:5f:16:86:a1:a8:6c:47: 39:7f:ea:67:f5:41:17:be:b7:a2:02:fb:a3:41:e0: c5:c8:99:e9:68:72:34:77:6e:3e:f8:bf:6f:06:a1: 4f:28:f6:4c:ec:eb:d0:06:d9:aa:f9:dc:24:f6:54: e1:69:93:6a:25:ba:49:c8:ed:24:29:61:35:ee:0e: 58:1c:fe:b8:72:f0:16:2e:5c:2b:c6:ba:01:31:df: 4c:97:d6:2f:e7:99:53:10:7f:74:89:39:05:6b:78: ed:cc:21:38:32:c7:f0:9e:a3:d6:1b:55:cc:2d:42: 98:37:00:d4:9e:f2:17:34:8d:5b:e4:83:66:3b:4f: d0:b9:94:7f:36:59:bd:3c:62:e1:1d:21:d3:fc:ec: 90:0b:6c:14:c4:ce:86:6d:14:46:42:7c:5b:b7:9b: 9e:3a:c0:4f:41:c4:0d:94:82:f9:d0:f3:15:8d:96: c9:eb:22:ed:e7:e7:59:4f:e3:f5:f0:f9:2e:65:31: af:d7:36:6c:43:af:cf:3f:56:b4:12:9a:c5:f9:72: 71:2b:c9:e2:dd:88:19:9c:41:a1:13:a8:f8:8a:ad: c6:81:23:07:b6:94:30:f6:cf:7c:4e:33:83:87:86: d9:48:72:e7:a9:e9:c2:ae:9d:68:96:d0:5e:d8:fc: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:32:9F:09:33:93:9F:5D:4F:14:27:B9:4B:D2:A4:C0:D9:E1:CD:CB X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:56:5b:c5:5e:ba:a9:73:be:d0:e6:9e:0f:45:ba:c4:64:41: 99:a0:8e:5a:b7:78:79:58:69:25:a3:52:43:18:d5:7b:07:44: 38:58:84:81:67:fc:68:17:08:a9:75:90:46:a3:10:82:e5:bf: 64:07:3a:ca:f5:17:b1:27:b0:16:97:7f:46:b0:de:94:2d:0f: 59:4b:c4:34:0b:f5:6a:0a:0a:08:ff:c8:12:ae:3a:f3:69:19: 78:de:46:51:73:8e:ec:7d:ca:7f:b6:82:a7:fb:01:08:08:71: 7b:95:53:ca:f9:2c:5c:df:45:22:9b:06:66:01:15:c1:4a:d0: a8:3c:5d:c9:67:8c:26:99:4d:18:ae:d1:9f:e8:70:13:37:89: 39:d0:6a:d0:ae:52:28:3f:3e:47:3b:c0:ce:7a:b5:7c:24:c9: 91:85:5d:3c:66:99:41:be:85:57:2f:f3:0e:1a:f2:fc:fa:6e: 66:48:26:f3:b7:b7:57:45:4b:4b:df:b4:d6:60:a3:01:5d:7a: c1:c9:05:0d:04:c8:56:8c:98:d5:be:f6:52:f7:7f:b7:76:be: 22:2f:d2:80:01:5a:f6:a1:0c:f6:b1:0c:a5:34:fe:83:1f:6a: 1f:be:69:74:5e:9e:5a:d5:ee:a3:26:f8:99:35:5a:1e:ba:b9: 45:76:45:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDz44l/w3W2Jcr7ai+tMeuPomJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTA3MjAwNzI1MzdaFw0yNTA3MjMxNjEwMzdaMDMxMTAvBgNV BAMTKDE4MzI5RjA5MzM5MzlGNUQ0RjE0MjdCOTRCRDJBNEMwRDlFMUNEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8eQ5AvqvZXxaGoahsRzl/6mf1 QRe+t6IC+6NB4MXImelocjR3bj74v28GoU8o9kzs69AG2ar53CT2VOFpk2oluknI 7SQpYTXuDlgc/rhy8BYuXCvGugEx30yX1i/nmVMQf3SJOQVreO3MITgyx/Ceo9Yb VcwtQpg3ANSe8hc0jVvkg2Y7T9C5lH82Wb08YuEdIdP87JALbBTEzoZtFEZCfFu3 m546wE9BxA2UgvnQ8xWNlsnrIu3n51lP4/Xw+S5lMa/XNmxDr88/VrQSmsX5cnEr yeLdiBmcQaETqPiKrcaBIwe2lDD2z3xOM4OHhtlIcuep6cKunWiW0F7Y/AMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGDKfCTOTn11PFCe5S9KkwNnhzcswHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNWW8VeuqlzvtDmng9FusRkQZmgjlq3eHlY aSWjUkMY1XsHRDhYhIFn/GgXCKl1kEajEILlv2QHOsr1F7EnsBaXf0aw3pQtD1lL xDQL9WoKCgj/yBKuOvNpGXjeRlFzjux9yn+2gqf7AQgIcXuVU8r5LFzfRSKbBmYB FcFK0Kg8XclnjCaZTRiu0Z/ocBM3iTnQatCuUig/Pkc7wM56tXwkyZGFXTxmmUG+ hVcv8w4a8vz6bmZIJvO3t1dFS0vftNZgowFdesHJBQ0EyFaMmNW+9lL3f7d2viIv 0oABWvahDPaxDKU0/oMfah++aXRenlrV7qMm+Jk1Wh66uUV2RX8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:16 2025 by rpki-client