
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft
File: 46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft (raw, json)
Hash identifier: /+a8JGN6pctxgBxr1tE2JaFE0xF67az20S54Iwnjttc=
Subject key identifier: CA:3E:87:76:5C:BB:D1:3C:80:CE:59:C4:28:19:3E:66:73:FA:A3:51
Authority key identifier: 46:F8:F0:A6:E7:4A:50:56:E6:3C:04:1A:EC:C5:51:72:3D:E9:FC:1F
Certificate issuer: /CN=46F8F0A6E74A5056E63C041AECC551723DE9FC1F
Certificate serial: 43F10BB3068259452652C65AB10B77FEFFFD7203
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft
Manifest number: 0108
Signing time: Sun 15 Nov 2026 13:51:27 +0000
Manifest this update: Sun 15 Nov 2026 13:46:27 +0000
Manifest next update: Mon 16 Nov 2026 17:36:27 +0000
Files and hashes: 1: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: cmFTYv98kn/mEZWP5EcJYaksJif2GXeXwCVgddmTNmI=)
2: 46F8F0A6E74A5056E63C041AECC551723DE9FC1F.crl (hash: dQa3o7lM6g+Z2Y3FMUzUAQTuXcOvAE56Nfw/h0UNOZk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.crl
rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 10:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f1:0b:b3:06:82:59:45:26:52:c6:5a:b1:0b:77:fe:ff:fd:72:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46F8F0A6E74A5056E63C041AECC551723DE9FC1F
Validity
Not Before: Nov 15 13:46:27 2026 GMT
Not After : Nov 16 17:36:27 2026 GMT
Subject: CN=CA3E87765CBBD13C80CE59C428193E6673FAA351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:7d:04:4d:c3:af:b7:b8:44:37:97:4d:5d:
bb:35:26:cf:e3:2f:27:d0:74:22:e4:66:60:ef:c8:
ea:46:5a:65:4b:ee:cc:b9:44:6e:d1:e4:96:4a:c6:
ae:89:13:10:bc:be:81:fe:5e:c3:56:8e:c2:d1:67:
ac:98:d9:36:93:0e:4f:7f:b9:97:1b:5e:ee:da:fc:
18:c2:f0:30:f8:01:33:8a:50:22:80:eb:25:c2:1c:
18:0a:41:97:d8:29:96:3e:85:64:80:fb:ae:ec:38:
bc:9d:af:73:9d:05:55:f1:69:3f:dd:60:8f:ca:49:
85:a6:f4:12:c8:d6:32:71:2d:9f:96:ea:5b:3e:9f:
6d:a6:6c:88:f1:2b:3f:27:16:9a:04:1c:17:18:5b:
3a:a5:34:b6:74:a6:a6:4d:d3:3c:fc:b2:76:fa:58:
e2:41:fc:5f:e1:e9:76:cf:71:31:10:4e:d2:e3:f0:
c7:e6:4e:6f:6c:98:08:da:98:f9:35:29:28:6f:4f:
00:09:aa:af:c3:7f:1b:41:dc:76:bb:de:8e:24:0f:
2e:57:9d:40:51:ac:b3:ba:56:07:ff:86:35:3f:c0:
04:a4:c2:31:e6:ec:06:a1:34:d6:c8:f6:65:44:35:
ee:da:b7:3f:cf:b7:6b:d9:9a:4a:8e:d8:f0:d8:aa:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3E:87:76:5C:BB:D1:3C:80:CE:59:C4:28:19:3E:66:73:FA:A3:51
X509v3 Authority Key Identifier:
keyid:46:F8:F0:A6:E7:4A:50:56:E6:3C:04:1A:EC:C5:51:72:3D:E9:FC:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b7:ee:0d:be:07:d3:e9:de:99:81:c2:62:46:6f:65:14:c0:
51:ac:55:6e:e9:35:40:cf:aa:ab:6b:72:18:30:f0:5a:0b:4c:
8c:9a:2a:ed:d9:77:e1:aa:d2:24:0a:ae:70:06:10:26:15:de:
5b:57:a1:ae:d3:f2:2c:7c:a2:6e:ab:16:62:06:b2:9b:35:94:
74:70:ab:d7:fc:53:7a:35:d8:9a:d6:78:4b:30:c6:2d:0f:ed:
cb:53:6e:ad:9d:ee:84:fd:2c:b6:be:37:5b:d8:c1:8d:87:53:
83:0e:c8:b0:e2:e5:4c:8e:52:89:09:e9:73:e5:72:8b:db:0d:
3d:88:67:8b:c7:f4:a9:8c:24:26:c1:ae:33:fd:63:02:53:12:
21:57:07:70:2d:7a:83:ab:49:dc:b9:d8:4f:d4:6f:03:f0:a0:
2d:12:57:75:7e:0d:0a:d2:3d:d7:44:de:1a:fe:4b:78:ba:df:
1f:35:01:a7:b4:7b:d2:1f:d1:e0:e0:c3:57:15:2f:e7:a2:6b:
17:4c:e8:fb:46:19:a4:6f:85:c8:4d:59:eb:8f:b6:cf:fd:aa:
69:28:02:e2:c8:e8:f7:2c:13:7d:ac:93:61:65:00:44:a8:3e:
44:eb:b2:ca:2c:8b:ed:1a:f8:b1:cd:11:97:7c:d7:de:0a:28:
0a:b8:53:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:31:51 2026 by rpki-client