$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft File: 46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft (raw, json) Hash identifier: XkEXgh7VukugHmFP13MVWkWVQP2pAvFxSaGvLsJOKLs= Subject key identifier: BD:4D:1C:F3:5F:CD:C6:16:6E:45:5B:50:A1:87:AB:15:1C:A7:AA:55 Authority key identifier: 46:F8:F0:A6:E7:4A:50:56:E6:3C:04:1A:EC:C5:51:72:3D:E9:FC:1F Certificate issuer: /CN=46F8F0A6E74A5056E63C041AECC551723DE9FC1F Certificate serial: 53737FD23AD3A40E4C3C6F571ACDF4ECC4A04A74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:17:18 +0000 Manifest this update: Thu 24 Sep 2026 09:12:18 +0000 Manifest next update: Fri 25 Sep 2026 09:37:18 +0000 Files and hashes: 1: 46F8F0A6E74A5056E63C041AECC551723DE9FC1F.crl (hash: 3aPGb/gkWxeg4E97Jm/pLzvgcQ/0cS1NsHsd6eMKxsM=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: cmFTYv98kn/mEZWP5EcJYaksJif2GXeXwCVgddmTNmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.crl rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:73:7f:d2:3a:d3:a4:0e:4c:3c:6f:57:1a:cd:f4:ec:c4:a0:4a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46F8F0A6E74A5056E63C041AECC551723DE9FC1F Validity Not Before: Sep 24 09:12:18 2026 GMT Not After : Sep 25 09:37:18 2026 GMT Subject: CN=BD4D1CF35FCDC6166E455B50A187AB151CA7AA55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1a:53:26:76:e8:a0:f5:5c:c7:b6:60:29:11: 10:e8:f4:29:c2:7d:97:7c:e3:5a:d5:ab:66:69:d4: c8:b2:cb:0c:ba:3d:00:60:fc:2f:2e:0d:e4:02:14: bd:09:90:f2:a0:c5:9f:4d:33:7d:ea:28:3e:19:3e: b7:0c:96:79:74:85:1b:c7:42:b2:49:39:85:ce:e9: 41:2c:d6:88:0e:0b:e2:e8:70:ff:1f:16:09:3a:b9: b8:60:b9:40:a8:98:2e:4b:66:90:e4:7d:70:0c:88: 7a:e4:32:9a:bd:7c:f8:80:cb:0c:51:49:8f:7c:61: ee:69:ea:ef:2f:e9:a2:f8:e7:04:2b:85:ce:f9:45: d8:b0:5c:92:31:48:4e:5e:b9:b5:90:df:5e:31:28: 11:62:6a:36:58:db:dd:e7:2d:88:4c:de:e2:66:8f: c0:89:a8:ca:c2:1c:73:dd:2a:61:fb:c1:01:6b:43: 1f:ca:6a:95:c6:0d:71:42:18:39:24:de:c2:12:a3: a3:18:d1:e8:aa:7a:05:68:c0:38:31:a2:54:10:ad: 0c:b9:1b:7a:0c:63:58:34:8b:b4:c2:06:d8:08:e6: 3f:8f:ad:b0:5f:46:dc:bc:15:16:2c:f9:7f:52:f0: 11:cb:51:ee:61:f8:df:02:72:99:0e:e8:34:3a:72: 19:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4D:1C:F3:5F:CD:C6:16:6E:45:5B:50:A1:87:AB:15:1C:A7:AA:55 X509v3 Authority Key Identifier: keyid:46:F8:F0:A6:E7:4A:50:56:E6:3C:04:1A:EC:C5:51:72:3D:E9:FC:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b5:20:3a:b2:ee:05:92:4b:22:45:5b:12:8b:f6:2f:84:94: c3:27:16:6d:03:60:d7:1e:9e:f5:d7:29:9d:ee:07:8c:85:2e: fd:d3:5b:0b:f9:29:fe:04:06:f2:a1:37:8f:23:04:ce:7d:7d: f4:cf:b2:68:f5:7c:b2:87:ec:c7:f0:7d:20:af:eb:48:bf:f0: c9:14:ea:da:54:16:20:88:b7:6e:e5:7d:75:d6:32:4b:36:0f: 0b:42:f5:49:4e:ee:09:dd:b0:dc:24:fc:d6:b3:78:19:17:a7: 53:9a:5a:75:16:5b:66:59:80:03:b8:eb:7d:49:13:94:5c:ad: 73:0c:96:27:f2:c1:07:8c:8b:5b:df:3b:ae:70:06:e3:c9:f3: b4:09:c8:a2:65:aa:fe:9f:fd:8b:60:ad:54:89:5a:bf:a1:64: 1e:22:35:17:d2:45:cb:6f:cd:b0:04:e5:56:11:bb:c5:c7:54: b7:4e:01:a5:5a:88:6b:52:45:6d:b6:68:06:3c:1a:c5:41:7e: 4c:98:84:91:b3:6b:a4:1a:7e:91:f2:74:43:61:bd:c6:b0:9a: d0:62:3e:63:d2:96:4e:d2:ca:47:bf:75:8f:d4:ba:71:2a:59: 57:84:72:c2:cf:31:0e:d5:a0:60:ee:5a:cd:2e:3a:07:62:d5: 4c:9b:ca:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3N/0jrTpA5MPG9XGs307MSgSnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZGOEYwQTZFNzRBNTA1NkU2M0MwNDFBRUNDNTUxNzIz REU5RkMxRjAeFw0yNjA5MjQwOTEyMThaFw0yNjA5MjUwOTM3MThaMDMxMTAvBgNV BAMTKEJENEQxQ0YzNUZDREM2MTY2RTQ1NUI1MEExODdBQjE1MUNBN0FBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrGlMmduig9VzHtmApERDo9CnC fZd841rVq2Zp1Miyywy6PQBg/C8uDeQCFL0JkPKgxZ9NM33qKD4ZPrcMlnl0hRvH QrJJOYXO6UEs1ogOC+LocP8fFgk6ubhguUComC5LZpDkfXAMiHrkMpq9fPiAywxR SY98Ye5p6u8v6aL45wQrhc75RdiwXJIxSE5eubWQ314xKBFiajZY293nLYhM3uJm j8CJqMrCHHPdKmH7wQFrQx/KapXGDXFCGDkk3sISo6MY0eiqegVowDgxolQQrQy5 G3oMY1g0i7TCBtgI5j+PrbBfRty8FRYs+X9S8BHLUe5h+N8CcpkO6DQ6chk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvU0c81/NxhZuRVtQoYerFRynqlUwHwYDVR0j BBgwFoAURvjwpudKUFbmPAQa7MVRcj3p/B8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY4ZDgyNGQtZDZhMS00NTQzLTljZjAtZDk5MjY4MzJmMjlmLzAvNDZGOEYwQTZF NzRBNTA1NkU2M0MwNDFBRUNDNTUxNzIzREU5RkMxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80NkY4RjBBNkU3NEE1MDU2RTYzQzA0MUFFQ0M1NTE3MjNERTlG QzFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvNDZGOEYwQTZFNzRBNTA1NkU2M0MwNDFBRUNDNTUx NzIzREU5RkMxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK1IDqy7gWSSyJFWxKL9i+ElMMnFm0DYNce nvXXKZ3uB4yFLv3TWwv5Kf4EBvKhN48jBM59ffTPsmj1fLKH7MfwfSCv60i/8MkU 6tpUFiCIt27lfXXWMks2DwtC9UlO7gndsNwk/NazeBkXp1OaWnUWW2ZZgAO4631J E5RcrXMMlifywQeMi1vfO65wBuPJ87QJyKJlqv6f/YtgrVSJWr+hZB4iNRfSRctv zbAE5VYRu8XHVLdOAaVaiGtSRW22aAY8GsVBfkyYhJGza6QafpHydENhvcawmtBi PmPSlk7Syke/dY/UunEqWVeEcsLPMQ7VoGDuWs0uOgdi1Uybyno= -----END CERTIFICATE-----Generated at Thu Sep 24 15:34:42 2026 by rpki-client