
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
File: 149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json)
Hash identifier: 13I885Q/TwiYsLsPP4j5GoRwvEs2KBxN9qUa4PxyMhY=
Subject key identifier: 49:3B:1C:09:01:C8:EB:0C:2D:89:09:93:6A:47:18:52:FE:23:76:5B
Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
Certificate issuer: /CN=149E265C01ED66DA98905D22913EE8E5950357C5
Certificate serial: 61DEC75705AF723C8F0CF670C22F916346148203
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 17:43:47 +0000
Manifest this update: Sun 25 Oct 2026 17:38:47 +0000
Manifest next update: Mon 26 Oct 2026 20:38:47 +0000
Files and hashes: 1: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: oo4YFspIW+XkN+JOIcgncN8uLWwNIuaNcKsJNfpI7gU=)
2: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=)
3: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:de:c7:57:05:af:72:3c:8f:0c:f6:70:c2:2f:91:63:46:14:82:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5
Validity
Not Before: Oct 25 17:38:47 2026 GMT
Not After : Oct 26 20:38:47 2026 GMT
Subject: CN=493B1C0901C8EB0C2D8909936A471852FE23765B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:41:30:66:69:b1:cb:28:9a:b7:3e:41:ab:
ff:f9:a7:e1:7e:00:4a:48:93:c7:00:68:41:22:0a:
14:55:8a:28:46:5a:94:c6:83:e6:c8:f0:cc:8a:9e:
8b:82:97:f4:97:74:de:33:06:63:a4:fc:e2:f3:9b:
b9:fb:b6:35:19:1a:2e:cd:a9:8a:df:ac:79:d9:ad:
7c:4f:f6:01:50:1c:60:7e:ba:27:d0:fa:b3:b6:fc:
72:b5:6f:62:c4:9a:1c:9a:a8:aa:1e:29:bd:df:2d:
f5:7f:cb:cb:0c:6e:a4:4d:0d:d2:24:5c:30:a2:7c:
a8:f5:63:6d:dc:eb:94:90:5b:40:88:9c:5d:e4:6e:
20:f8:90:33:04:d7:8a:65:c6:81:b2:f6:91:12:b3:
82:d1:ca:f0:6b:fa:d7:ec:79:ff:8d:ec:73:be:88:
1b:bf:bc:68:58:58:b8:89:ed:f1:6f:f8:ab:ad:03:
60:2f:d9:0f:a6:13:a7:3d:bb:47:bd:34:a9:d9:30:
6a:0c:2b:5e:ad:ae:d9:12:3a:56:5a:aa:88:71:e3:
10:f8:23:38:64:a2:97:be:41:7b:fe:bc:92:b4:32:
d8:70:11:ee:57:92:51:da:f1:34:e0:d4:08:5f:b2:
f4:9a:74:d7:3b:be:bb:4f:7f:14:8d:af:f6:61:99:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:1C:09:01:C8:EB:0C:2D:89:09:93:6A:47:18:52:FE:23:76:5B
X509v3 Authority Key Identifier:
keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5a:86:0d:0c:ae:f9:d6:a5:d1:3d:b8:e5:62:92:78:60:d4:
1c:73:d8:4a:de:25:c6:7a:44:0f:1e:f5:7f:c5:8f:ea:ff:2c:
69:56:29:1a:2e:69:8a:0f:f3:7e:26:ad:59:30:04:50:d9:02:
a4:b4:9e:bb:96:bb:77:ac:e3:cd:4a:d4:d6:66:75:42:19:07:
40:d5:8a:f5:69:4f:99:2e:54:31:03:74:ea:9f:e7:55:f9:b5:
4e:95:ed:47:dc:02:8d:ff:19:b0:f5:aa:4c:27:7d:8f:e1:91:
a3:a6:76:b0:ed:d6:03:b6:0c:19:0a:01:3e:a8:83:c8:05:e7:
a7:39:7f:5d:2c:88:f4:29:2d:bc:c6:68:08:97:99:a5:d8:4e:
22:d9:c2:f6:d7:47:d3:07:51:bc:21:55:0e:fd:3f:53:9d:95:
49:d4:5c:16:1e:ef:48:f9:70:36:5c:e2:8c:02:10:da:b8:42:
f5:99:9f:06:0f:e2:a6:0d:82:e0:59:4c:76:82:c9:a5:b4:3a:
b0:ae:f6:a1:88:a6:d6:80:d1:18:3a:57:8c:8f:d8:12:3a:f9:
13:70:83:49:f9:49:59:3f:e0:f9:23:07:3e:6c:40:cb:e5:e1:
47:38:aa:7a:3b:dd:e4:9a:e3:e9:a4:de:fd:e3:8a:51:5a:f0:
6e:bc:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:47:45 2026 by rpki-client