$ rpki-client -vvvf rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft File: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft (raw, json) Hash identifier: +vlEEuEj5J43+8FYOVspBykKtwgik6moQxjhdCzpRHQ= Subject key identifier: 13:49:70:76:06:07:D2:0D:54:ED:78:DB:C1:5B:73:6C:48:AC:36:EB Authority key identifier: 14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E Certificate issuer: /CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Certificate serial: 7FD65407EB41A70CF3BC23EFD7183148FE59A078 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:02:42 +0000 Manifest this update: Wed 16 Sep 2026 18:57:42 +0000 Manifest next update: Thu 17 Sep 2026 20:27:42 +0000 Files and hashes: 1: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: 4x7d4CbAIzm/F6oW0bYK3R10sGQPrNbSrYyem2DdQNw=) 2: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: b0p+aEnGITPNe6S1A1lEh2z0FMf0b3zvYLaeJ0qOUoQ=) 3: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 6N1mNk7kMJutxDC4iwMyVS1ZwmLt1n7dTUB5ei+yYU8=) 4: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl (hash: YeQXTtn0eRqL7XDFVjhtLwTRhBJeGOlkEhkTrUf6oYU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d6:54:07:eb:41:a7:0c:f3:bc:23:ef:d7:18:31:48:fe:59:a0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E Validity Not Before: Sep 16 18:57:42 2026 GMT Not After : Sep 17 20:27:42 2026 GMT Subject: CN=134970760607D20D54ED78DBC15B736C48AC36EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:d1:e2:87:93:f6:6a:a9:1b:96:f0:03:5a: 84:f2:60:0b:d7:b5:8e:45:ce:0b:42:61:1f:93:1d: 2c:e9:63:27:5d:b3:93:4e:7d:df:f7:2f:bd:af:ac: b6:6e:e2:d1:f8:06:00:f6:bc:00:0a:88:66:1e:9a: de:6c:9b:fc:cd:e9:cb:50:7f:52:bc:70:44:3e:79: 4f:e0:0d:d1:95:2d:57:5f:bd:64:22:74:53:b7:e3: 32:90:f7:c9:06:df:0a:6e:31:53:d5:88:b5:68:f5: ab:5a:db:d0:fa:db:19:18:0f:ec:bd:3a:19:55:f1: 3b:e0:33:30:2b:79:c2:ec:1d:ea:d4:64:6b:a0:c6: af:4b:80:e1:e6:c3:f2:dc:a6:bc:00:f6:7c:64:3f: 73:ad:76:6c:73:61:6a:a6:95:de:35:89:92:30:d4: 54:7d:b6:ae:40:f5:b5:82:c9:19:77:e5:a2:d1:8d: 14:5f:12:ab:7f:fc:fc:e7:45:6e:a2:80:fd:29:5f: 14:95:a1:87:a8:1d:b8:68:1a:12:a4:c3:a0:47:2a: 90:2d:70:f7:95:fd:da:0c:a2:80:df:f7:ef:b0:f3: fd:a4:cf:86:13:7a:48:eb:36:e1:42:f6:21:b0:35: e9:88:c2:65:68:4d:17:da:5e:a8:ab:9b:29:e0:bb: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:49:70:76:06:07:D2:0D:54:ED:78:DB:C1:5B:73:6C:48:AC:36:EB X509v3 Authority Key Identifier: keyid:14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3b:26:e7:c0:b6:fc:77:b0:59:7c:a7:d9:dd:48:d7:a3:39: 1e:5c:12:fb:39:1f:f8:48:fe:c0:21:e9:48:c9:a5:f4:2c:1d: 11:30:d6:54:0f:07:ee:0d:1b:7b:80:a9:a0:82:ec:2e:4c:ed: 33:99:55:a8:e1:38:23:bf:89:1c:01:88:17:a7:9e:74:e5:21: b4:31:6a:1a:17:ba:4e:2b:1e:39:ce:78:23:34:3a:c9:41:41: 86:14:4f:ac:7b:e5:4e:5e:ae:02:f4:32:4f:94:96:8c:8a:c0: e3:4d:31:bc:47:9c:a3:a4:1f:22:1a:4e:62:45:86:1a:b4:d3: 07:89:d0:5c:36:d6:c8:22:c6:0b:ca:00:78:f7:70:b7:16:60: 9b:1b:dc:69:df:57:d6:0b:7b:12:77:d2:04:57:e6:e7:98:cd: 29:94:18:ef:db:44:bf:d3:73:a9:26:f0:32:99:57:b1:e4:af: d4:67:1c:7e:5d:15:23:33:83:0b:c9:93:da:2a:d1:5e:fd:da: fe:76:53:0b:05:7c:7b:b1:3b:5e:73:51:85:10:dc:18:6f:07: ce:29:0a:52:f8:ae:dd:97:b1:b1:32:cd:fc:46:cc:3d:4c:b8: 43:64:ea:68:3c:ce:34:23:3e:0c:b5:6e:f4:5b:99:88:9b:dc: 5b:0f:fb:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9ZUB+tBpwzzvCPv1xgxSP5ZoHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAw QkNGNkI2RTAeFw0yNjA5MTYxODU3NDJaFw0yNjA5MTcyMDI3NDJaMDMxMTAvBgNV BAMTKDEzNDk3MDc2MDYwN0QyMEQ1NEVENzhEQkMxNUI3MzZDNDhBQzM2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTNHih5P2aqkblvADWoTyYAvX tY5FzgtCYR+THSzpYydds5NOfd/3L72vrLZu4tH4BgD2vAAKiGYemt5sm/zN6ctQ f1K8cEQ+eU/gDdGVLVdfvWQidFO34zKQ98kG3wpuMVPViLVo9ata29D62xkYD+y9 OhlV8TvgMzArecLsHerUZGugxq9LgOHmw/LcprwA9nxkP3OtdmxzYWqmld41iZIw 1FR9tq5A9bWCyRl35aLRjRRfEqt//PznRW6igP0pXxSVoYeoHbhoGhKkw6BHKpAt cPeV/doMooDf9++w8/2kz4YTekjrNuFC9iGwNemIwmVoTRfaXqirmyngu9ovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE0lwdgYH0g1U7XjbwVtzbEisNuswHwYDVR0j BBgwFoAUFIw6hyDFzYq3+857g1udIAvPa24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg4ZTNhMTctMWM5MS00NzkzLTgzYzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcy MEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAwQkNGNkI2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDhDM0E4NzIwQzVDRDhBQjdGQkNFN0I4MzVCOUQyMDBCQ0Y2 QjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlE MjAwQkNGNkI2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw7JufAtvx3sFl8p9ndSNejOR5cEvs5H/hI /sAh6UjJpfQsHREw1lQPB+4NG3uAqaCC7C5M7TOZVajhOCO/iRwBiBennnTlIbQx ahoXuk4rHjnOeCM0OslBQYYUT6x75U5ergL0Mk+UloyKwONNMbxHnKOkHyIaTmJF hhq00weJ0Fw21sgixgvKAHj3cLcWYJsb3GnfV9YLexJ30gRX5ueYzSmUGO/bRL/T c6km8DKZV7Hkr9RnHH5dFSMzgwvJk9oq0V792v52UwsFfHuxO15zUYUQ3BhvB84p ClL4rt2XsbEyzfxGzD1MuENk6mg8zjQjPgy1bvRbmYib3FsP+04= -----END CERTIFICATE-----Generated at Thu Sep 17 07:34:33 2026 by rpki-client