$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: TphS9GIcPaBbXc1uNjfnvYhllKWQOuO2tMbqHdq7ysY= Subject key identifier: 11:A1:9F:97:FD:88:FF:A6:34:23:99:77:4A:1B:06:58:65:A0:4F:E5 Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 6ED8F552464765C74CF09FE315618F7360027963 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 01D5 Signing time: Sat 06 Sep 2025 14:40:39 +0000 Manifest this update: Sat 06 Sep 2025 14:35:39 +0000 Manifest next update: Tue 09 Sep 2025 16:07:39 +0000 Files and hashes: 1: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: SlnYn1Xsxz6QRJgIfCp87Ss/ufwey8RAQnlq8kkPrh4=) 2: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: 8OHhzLk7qTEKF0a/Fyt04pjt/plfynFO3KO0zkgWBlE=) 3: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 6p5qEvuAFNeoYDRPFKQKTOGL6GjveSFUo5E7i4B+rcc=) 4: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d8:f5:52:46:47:65:c7:4c:f0:9f:e3:15:61:8f:73:60:02:79:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Sep 6 14:35:39 2025 GMT Not After : Sep 9 16:07:39 2025 GMT Subject: CN=11A19F97FD88FFA6342399774A1B065865A04FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:b0:2a:81:3b:c4:bd:f8:a7:5c:7d:5c:38: 16:83:6b:c9:e9:c5:48:67:e3:ec:5d:0a:cc:ba:f7: 5f:7b:eb:06:f7:f1:34:81:95:f7:46:a7:b2:02:ab: ed:f6:f6:69:66:92:b9:eb:23:0a:ea:47:58:9e:a7: 5a:c5:9f:10:4d:4d:e6:0b:1f:8e:3c:da:23:c5:17: 7a:8e:a7:80:2b:1e:44:d8:a8:2f:31:48:29:b9:51: 71:21:ad:dc:74:68:df:cc:f3:53:d9:03:f8:77:4b: c5:c5:3f:e7:79:50:b5:44:d2:ea:f7:01:55:c2:e2: 46:10:56:c2:b3:b5:80:d6:91:47:d8:38:8d:64:bb: 06:04:4d:52:3a:ff:c5:3e:da:d5:36:e8:e7:72:8b: 3b:ff:27:2f:9a:a4:fa:a7:d0:8b:ae:0e:da:b5:74: 49:32:02:b9:08:b5:56:79:db:cb:bb:e2:18:80:40: f3:84:d0:48:0c:01:ab:97:ef:18:90:4e:ca:33:00: 47:74:9e:b5:d1:e8:f3:f3:a9:ed:b6:5b:8b:42:b3: e9:5b:20:ed:53:2c:c6:2e:09:8d:11:1f:c5:04:e1: 7a:45:76:e0:de:e1:39:89:97:d4:c0:da:df:cc:41: 4e:80:54:5b:c7:61:51:63:38:d4:60:ff:59:37:d4: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A1:9F:97:FD:88:FF:A6:34:23:99:77:4A:1B:06:58:65:A0:4F:E5 X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4f:f0:74:5a:cf:f3:d0:72:d7:0f:4b:6f:ed:13:17:68:c9: 80:56:e3:10:55:36:7f:3c:a2:76:73:1c:da:d3:f3:61:b7:d7: 0d:4a:a9:62:51:03:d2:14:05:bd:ae:a2:ab:bf:f9:49:99:af: e9:f3:26:3d:37:81:bf:a3:73:45:33:de:95:b1:0a:e7:66:73: 68:cc:9d:55:7d:4e:00:28:02:ea:52:94:94:99:63:e2:96:d2: 38:15:65:cd:39:88:d5:69:c1:d3:53:7d:4b:de:a4:5c:3f:b4: 49:99:0c:6f:81:ce:50:56:cb:c2:e6:eb:98:d5:90:1c:ea:19: 69:77:2f:bb:f7:c7:74:62:3d:dc:3d:04:39:6b:7a:85:1a:ce: 9f:1b:2a:5c:b1:ad:3e:c8:ce:7b:e6:7b:b6:7e:04:70:bf:2c: 1c:d7:7e:8b:e3:c3:60:cb:4a:c4:22:dc:9b:0b:ed:a0:04:b8: 30:f8:7f:ec:88:84:ac:02:1c:65:67:b7:8a:79:ac:48:a4:9a: 3d:54:ba:4e:fc:94:37:0c:eb:c6:20:28:86:d4:84:33:a6:84: 61:7c:72:1a:c5:aa:e9:e4:da:d6:cc:b2:46:5d:8a:fe:d5:d0: 96:e4:eb:72:00:d3:6a:16:00:a5:bf:2f:81:38:30:04:f8:8b: 96:1c:82:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtj1UkZHZcdM8J/jFWGPc2ACeWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTA5MDYxNDM1MzlaFw0yNTA5MDkxNjA3MzlaMDMxMTAvBgNV BAMTKDExQTE5Rjk3RkQ4OEZGQTYzNDIzOTk3NzRBMUIwNjU4NjVBMDRGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5l7AqgTvEvfinXH1cOBaDa8np xUhn4+xdCsy691976wb38TSBlfdGp7ICq+329mlmkrnrIwrqR1iep1rFnxBNTeYL H4482iPFF3qOp4ArHkTYqC8xSCm5UXEhrdx0aN/M81PZA/h3S8XFP+d5ULVE0ur3 AVXC4kYQVsKztYDWkUfYOI1kuwYETVI6/8U+2tU26Odyizv/Jy+apPqn0IuuDtq1 dEkyArkItVZ528u74hiAQPOE0EgMAauX7xiQTsozAEd0nrXR6PPzqe22W4tCs+lb IO1TLMYuCY0RH8UE4XpFduDe4TmJl9TA2t/MQU6AVFvHYVFjONRg/1k31OynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEaGfl/2I/6Y0I5l3ShsGWGWgT+UwHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVP8HRaz/PQctcPS2/tExdoyYBW4xBVNn88 onZzHNrT82G31w1KqWJRA9IUBb2uoqu/+UmZr+nzJj03gb+jc0Uz3pWxCudmc2jM nVV9TgAoAupSlJSZY+KW0jgVZc05iNVpwdNTfUvepFw/tEmZDG+BzlBWy8Lm65jV kBzqGWl3L7v3x3RiPdw9BDlreoUazp8bKlyxrT7Iznvme7Z+BHC/LBzXfovjw2DL SsQi3JsL7aAEuDD4f+yIhKwCHGVnt4p5rEikmj1Uuk78lDcM68YgKIbUhDOmhGF8 chrFqunk2tbMskZdiv7V0Jbk63IA02oWAKW/L4E4MAT4i5Ycgvw= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:29 2025 by rpki-client