$ rpki-client -vvf rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft File: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft (raw, json) Hash identifier: V948h4k2WeckPAZE+eQB1er2pnjfz3Nkg1V5VjzgV34= Subject key identifier: 1C:D4:1D:89:A3:94:3F:CF:CA:76:97:72:4C:26:4F:5B:A5:46:0B:C6 Authority key identifier: 14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E Certificate issuer: /CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Certificate serial: 4FD418F54A1B2051F34804B94B660B96701C622A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:22:11 +0000 Manifest this update: Tue 02 Jun 2026 18:17:11 +0000 Manifest next update: Wed 03 Jun 2026 19:25:11 +0000 Files and hashes: 1: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl (hash: C4aOoHfxufaFXSS69Sxe34F7vTWA5cFoBbYXS9KrS3g=) 2: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: 4x7d4CbAIzm/F6oW0bYK3R10sGQPrNbSrYyem2DdQNw=) 3: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 6N1mNk7kMJutxDC4iwMyVS1ZwmLt1n7dTUB5ei+yYU8=) 4: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: b0p+aEnGITPNe6S1A1lEh2z0FMf0b3zvYLaeJ0qOUoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d4:18:f5:4a:1b:20:51:f3:48:04:b9:4b:66:0b:96:70:1c:62:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Validity Not Before: Jun 2 18:17:11 2026 GMT Not After : Jun 3 19:25:11 2026 GMT Subject: CN=1CD41D89A3943FCFCA7697724C264F5BA5460BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:df:a1:a2:66:bc:85:24:ef:2e:eb:a5:b7:e8: 92:22:1a:f3:8b:91:16:c9:c3:cb:10:b9:78:65:c8: 46:ca:97:96:36:c2:f9:38:d2:17:80:10:dc:40:79: b8:7d:84:40:08:39:bd:be:32:57:50:51:62:e3:1e: a0:bd:78:d2:51:58:a8:28:87:1e:7c:1e:5e:b1:c4: 91:cb:0c:25:e9:1a:96:59:ef:23:57:ce:52:3b:88: b9:d0:71:aa:89:9d:08:33:cc:1a:f9:2f:98:c1:66: 96:0d:a0:fc:b7:f4:7c:28:70:9a:ea:47:41:95:14: f9:88:7f:d3:95:b4:cd:35:79:f9:4f:26:ae:29:98: e5:fa:4e:cf:f4:4c:9e:db:23:2a:6b:4b:2d:c1:9e: eb:4e:fa:17:85:88:9b:f3:da:b8:b8:9f:8b:3c:49: 8a:99:8d:1a:71:94:13:59:18:30:5e:75:90:47:5c: 1c:d0:d0:58:82:a4:8f:94:d4:fd:47:b2:15:dd:48: b6:97:4c:b9:2a:18:29:d5:0d:a8:e6:70:18:85:b5: 3d:5f:28:61:6b:af:80:99:a8:2d:93:93:02:00:55: 40:5d:8a:aa:f6:df:13:3f:2f:04:19:6b:72:01:dd: b8:f8:79:a2:71:41:89:07:54:fd:2b:26:72:6c:5a: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D4:1D:89:A3:94:3F:CF:CA:76:97:72:4C:26:4F:5B:A5:46:0B:C6 X509v3 Authority Key Identifier: keyid:14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1c:d6:4f:cf:c2:3c:7b:1e:31:ea:2d:1b:9f:3d:f7:17:37: 77:b4:bc:b2:86:29:62:d9:e7:48:49:d0:51:e7:7e:0c:8a:23: b9:70:4e:d5:52:f8:89:0c:f4:10:f9:95:6f:86:48:4c:63:3b: b8:05:b7:7a:f6:be:8b:40:a6:7e:e1:9f:0c:aa:0e:d9:11:5a: f7:78:86:67:ef:b6:32:50:b8:80:6d:32:2e:69:7c:37:a3:34: 6e:e0:17:a2:59:f9:62:1b:59:d1:61:a2:22:c5:92:77:9e:6e: f8:28:0c:52:c5:0f:4c:42:9d:b7:b0:66:2f:c4:12:6d:2f:09: ac:94:20:cf:28:5f:40:6c:32:c5:a9:32:69:d0:a0:9c:a0:5b: 21:03:04:6d:8b:53:a1:24:ae:b5:00:b3:2f:5e:68:99:7b:8f: e2:11:56:38:3b:b0:40:84:0d:96:8c:9e:40:c6:43:24:2b:e8: 7a:90:90:61:4a:f3:f6:77:4f:ed:e1:80:27:2d:5c:08:27:91: d5:80:bf:86:1a:85:a8:a5:99:18:05:c6:db:23:90:fe:bd:d9: 72:03:a8:8b:12:29:ae:fb:f3:c2:7e:f5:aa:da:af:1c:fc:2c: 56:43:1c:d5:83:c8:5f:f9:af:4d:ed:0d:28:14:00:08:59:f4: 7c:6b:23:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9QY9UobIFHzSAS5S2YLlnAcYiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAw QkNGNkI2RTAeFw0yNjA2MDIxODE3MTFaFw0yNjA2MDMxOTI1MTFaMDMxMTAvBgNV BAMTKDFDRDQxRDg5QTM5NDNGQ0ZDQTc2OTc3MjRDMjY0RjVCQTU0NjBCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe36GiZryFJO8u66W36JIiGvOL kRbJw8sQuXhlyEbKl5Y2wvk40heAENxAebh9hEAIOb2+MldQUWLjHqC9eNJRWKgo hx58Hl6xxJHLDCXpGpZZ7yNXzlI7iLnQcaqJnQgzzBr5L5jBZpYNoPy39HwocJrq R0GVFPmIf9OVtM01eflPJq4pmOX6Ts/0TJ7bIyprSy3BnutO+heFiJvz2ri4n4s8 SYqZjRpxlBNZGDBedZBHXBzQ0FiCpI+U1P1HshXdSLaXTLkqGCnVDajmcBiFtT1f KGFrr4CZqC2TkwIAVUBdiqr23xM/LwQZa3IB3bj4eaJxQYkHVP0rJnJsWh/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHNQdiaOUP8/KdpdyTCZPW6VGC8YwHwYDVR0j BBgwFoAUFIw6hyDFzYq3+857g1udIAvPa24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg4ZTNhMTctMWM5MS00NzkzLTgzYzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcy MEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAwQkNGNkI2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDhDM0E4NzIwQzVDRDhBQjdGQkNFN0I4MzVCOUQyMDBCQ0Y2 QjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlE MjAwQkNGNkI2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYc1k/Pwjx7HjHqLRufPfcXN3e0vLKGKWLZ 50hJ0FHnfgyKI7lwTtVS+IkM9BD5lW+GSExjO7gFt3r2votApn7hnwyqDtkRWvd4 hmfvtjJQuIBtMi5pfDejNG7gF6JZ+WIbWdFhoiLFkneebvgoDFLFD0xCnbewZi/E Em0vCayUIM8oX0BsMsWpMmnQoJygWyEDBG2LU6EkrrUAsy9eaJl7j+IRVjg7sECE DZaMnkDGQyQr6HqQkGFK8/Z3T+3hgCctXAgnkdWAv4YahailmRgFxtsjkP692XID qIsSKa7788J+9ararxz8LFZDHNWDyF/5r03tDSgUAAhZ9HxrI6E= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:26 2026 by rpki-client