$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft File: 149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json) Hash identifier: mPleGHV2pS6nvrU+DxxQHEpJSVOWCTKbzHL5Dv6pijg= Subject key identifier: AD:3C:8D:AC:79:72:A5:0A:80:AA:4E:68:23:84:AC:D1:E0:4F:82:DE Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5 Certificate issuer: /CN=149E265C01ED66DA98905D22913EE8E5950357C5 Certificate serial: 140DC474F184819B7688F9AAB512A02A99C65C3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft Manifest number: A6 Signing time: Fri 04 Sep 2026 00:01:58 +0000 Manifest this update: Thu 03 Sep 2026 23:56:58 +0000 Manifest next update: Sat 05 Sep 2026 03:32:58 +0000 Files and hashes: 1: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=) 2: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: grpPGR6nazZsQSJb2gyh7L3k/m4sMm5vZbi9iJtGJw8=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 03:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0d:c4:74:f1:84:81:9b:76:88:f9:aa:b5:12:a0:2a:99:c6:5c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5 Validity Not Before: Sep 3 23:56:58 2026 GMT Not After : Sep 5 03:32:58 2026 GMT Subject: CN=AD3C8DAC7972A50A80AA4E682384ACD1E04F82DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:06:7c:7c:f3:de:f6:aa:d7:56:5c:43:aa: ec:d8:4f:d3:05:75:3f:a9:87:01:d4:de:91:a9:3f: 28:79:3d:a4:7f:41:f3:f8:da:e3:c0:b2:ac:0c:04: d4:52:34:86:fe:99:7b:4c:f1:dd:37:74:be:ed:c4: 47:4d:ee:d0:dc:1b:26:ae:1d:1a:85:3c:43:64:e2: 63:00:be:dc:fa:13:03:58:79:b4:b6:20:9e:16:da: 67:5a:3a:da:5c:61:79:29:75:af:0b:d2:f3:8d:a2: 40:f3:ca:0b:45:f2:04:26:37:28:01:f5:e4:6f:59: 67:c5:78:c6:68:1f:12:9a:89:cd:fb:c6:f1:dd:7f: 60:55:14:05:12:d7:92:4e:56:f6:23:d3:fa:63:60: 73:53:0a:60:d3:65:65:36:d3:39:e2:32:15:ae:53: df:26:56:07:15:95:4d:05:62:f7:d9:b4:0a:da:29: 6b:51:94:7a:35:85:77:e1:76:88:14:33:f5:5e:1d: 70:8b:7a:47:3c:cd:18:3c:e3:f3:14:65:1e:59:84: 7d:61:a7:ca:bf:88:f6:35:e0:77:76:88:69:b7:74: 1d:66:19:25:88:ad:a1:21:46:34:7b:4c:98:6a:4d: e3:ba:96:9a:ae:62:39:f9:eb:09:8d:0f:3f:97:d1: c8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3C:8D:AC:79:72:A5:0A:80:AA:4E:68:23:84:AC:D1:E0:4F:82:DE X509v3 Authority Key Identifier: keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:44:92:b6:a0:83:a5:58:91:d1:35:fd:3a:dc:83:81:54:3f: f4:79:1f:c5:fb:e5:a4:c6:ac:95:09:b6:56:df:93:5c:c2:75: eb:96:30:bb:94:54:b8:8c:48:65:72:17:f7:64:00:bb:46:b8: 89:d4:1f:5f:50:eb:69:2e:6c:8b:ed:15:b1:4f:c8:8c:58:f3: ee:1a:1e:c3:b0:9a:9a:a3:c1:7a:6d:54:95:cb:11:a1:3f:96: 92:86:7b:c1:8f:42:96:7e:ad:bf:b0:78:06:db:a7:59:e0:37: 69:75:bf:79:0e:33:e7:48:5c:14:d5:0e:0c:37:94:ab:de:82: ed:84:8b:21:73:d2:d1:91:da:5e:e6:4a:68:1f:59:b0:29:2f: 3d:96:10:9e:f7:e1:a8:04:0a:2c:fd:c1:4f:28:e4:c4:3f:18: 66:8d:13:c7:86:f4:4d:9a:ee:b4:04:37:71:37:39:73:3b:c4: c9:3d:3f:10:0e:fd:e9:58:20:d8:80:ee:30:79:23:ec:a7:98: cc:88:8f:4a:d6:e3:19:01:96:3e:3f:99:25:6c:27:75:58:83: b7:6b:26:cf:b0:f2:6c:c6:df:14:c5:d6:cb:a5:f9:98:02:5b: 9c:91:28:4f:92:c0:04:92:03:d9:32:dd:6d:96:23:8b:84:6b: fe:12:bc:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFA3EdPGEgZt2iPmqtRKgKpnGXDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5 NTAzNTdDNTAeFw0yNjA5MDMyMzU2NThaFw0yNjA5MDUwMzMyNThaMDMxMTAvBgNV BAMTKEFEM0M4REFDNzk3MkE1MEE4MEFBNEU2ODIzODRBQ0QxRTA0RjgyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHgZ8fPPe9qrXVlxDquzYT9MF dT+phwHU3pGpPyh5PaR/QfP42uPAsqwMBNRSNIb+mXtM8d03dL7txEdN7tDcGyau HRqFPENk4mMAvtz6EwNYebS2IJ4W2mdaOtpcYXkpda8L0vONokDzygtF8gQmNygB 9eRvWWfFeMZoHxKaic37xvHdf2BVFAUS15JOVvYj0/pjYHNTCmDTZWU20zniMhWu U98mVgcVlU0FYvfZtAraKWtRlHo1hXfhdogUM/VeHXCLekc8zRg84/MUZR5ZhH1h p8q/iPY14Hd2iGm3dB1mGSWIraEhRjR7TJhqTeO6lpquYjn56wmNDz+X0cgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrTyNrHlypQqAqk5oI4Ss0eBPgt4wHwYDVR0j BBgwFoAUFJ4mXAHtZtqYkF0ikT7o5ZUDV8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZjZlOGQtMWFiMC00MWM0LWIzYWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMw MUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5NTAzNTdDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDlFMjY1QzAxRUQ2NkRBOTg5MDVEMjI5MTNFRThFNTk1MDM1 N0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4 RTU5NTAzNTdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1Ekragg6VYkdE1/Trcg4FUP/R5H8X75aTG rJUJtlbfk1zCdeuWMLuUVLiMSGVyF/dkALtGuInUH19Q62kubIvtFbFPyIxY8+4a HsOwmpqjwXptVJXLEaE/lpKGe8GPQpZ+rb+weAbbp1ngN2l1v3kOM+dIXBTVDgw3 lKvegu2EiyFz0tGR2l7mSmgfWbApLz2WEJ734agECiz9wU8o5MQ/GGaNE8eG9E2a 7rQEN3E3OXM7xMk9PxAO/elYINiA7jB5I+ynmMyIj0rW4xkBlj4/mSVsJ3VYg7dr Js+w8mzG3xTF1sul+ZgCW5yRKE+SwASSA9ky3W2WI4uEa/4SvIc= -----END CERTIFICATE-----Generated at Fri Sep 4 21:09:58 2026 by rpki-client