$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft File: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft (raw, json) Hash identifier: Ku6yM4+IKqoPkWPeagXf3lZb/cBkWspHi4tcuvAL8sY= Subject key identifier: 03:B6:80:9D:62:EE:CE:7D:7E:43:16:01:AF:81:E0:2B:A4:86:21:93 Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0 Certificate issuer: /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0 Certificate serial: 5759BCA143395C0322287A473A89A791C4D8A333 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:09:46 +0000 Manifest this update: Wed 23 Sep 2026 23:04:46 +0000 Manifest next update: Fri 25 Sep 2026 00:39:46 +0000 Files and hashes: 1: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: oJrAXv58oZDMk40W9JRPwNDx1VF9IQdEUdgQPzLFkmg=) 2: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl (hash: I5DY8p9yEwQ7UkXNaWwssNnO4+aU2FrBolcHph/qytg=) 3: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: 1okkgqoiBVDWBMw8B8fUz+WUWSrHUDprl2WG1iMqp8w=) 4: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: P3rNCMyzAiokg7rVA737lP8Lovb0gWKaIdt9sIaalEY=) 5: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 8IXeZT2nMIplDuKAy9sTdwidwLtl6QHRFLk7GQI0XlE=) 6: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: WTtSNSnNo9oz9/i7rHt1jxuFUkS6d/teW8M9wk46Nik=) 7: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: uXr8DnKi8QtOAVEEstmImQaN4M7bPiEAwEuGTottsCo=) 8: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: jcwrytSrVr9iAZjPRv58Wx2zSE/xYS0utsjnTbXZlh8=) 9: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:59:bc:a1:43:39:5c:03:22:28:7a:47:3a:89:a7:91:c4:d8:a3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0 Validity Not Before: Sep 23 23:04:46 2026 GMT Not After : Sep 25 00:39:46 2026 GMT Subject: CN=03B6809D62EECE7D7E431601AF81E02BA4862193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:3e:b6:a9:48:23:7a:49:05:03:73:58:89: 1b:a0:42:1b:f3:5c:e8:9e:46:3d:b9:2d:6c:e7:87: d5:7d:53:54:63:60:dd:b7:bf:21:90:a1:e5:f3:b7: 13:a4:91:6a:75:ee:4c:4d:1b:ab:b4:06:5e:23:76: 4c:ff:cf:38:36:d2:73:de:d9:1e:64:a7:3c:a6:71: 29:43:2d:95:c2:6c:ce:71:56:34:2d:85:aa:b0:46: 74:12:f1:de:7e:b7:79:9b:8f:f2:b9:2d:23:ec:1d: 9e:9b:29:fb:c1:c3:b6:a3:c8:fd:4c:fc:d7:58:65: e7:8a:db:26:2d:43:e8:97:9e:17:f7:20:0b:3d:4b: fa:fb:8f:39:ef:8a:a8:e7:9a:c7:4d:82:85:b2:fe: 07:d6:b3:27:99:66:69:70:48:6b:59:a6:ac:c9:47: 61:f7:42:6c:c6:c3:2b:94:2a:7f:08:5d:c7:ac:4e: 48:f7:de:cf:e9:bc:32:ec:2e:c8:98:7c:28:8d:e7: 55:c3:02:a2:cf:a8:29:ec:bf:c2:54:f0:39:64:b7: e3:83:31:33:ce:fa:8e:70:de:1e:bf:68:5c:ea:8f: c3:93:e0:9b:2e:09:a9:f1:8f:90:10:5e:b3:f6:55: 90:55:9e:97:15:6d:d5:a4:c3:d9:b7:cd:5e:56:a6: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B6:80:9D:62:EE:CE:7D:7E:43:16:01:AF:81:E0:2B:A4:86:21:93 X509v3 Authority Key Identifier: keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:06:be:ad:c3:95:90:99:75:96:21:d2:3b:88:e0:d5:2b:a0: c2:a8:c2:c5:00:c9:9a:bf:e5:8f:69:31:0d:cf:95:89:14:5f: b9:0b:0f:b8:3f:36:78:89:48:c7:22:45:77:91:a7:48:7d:5d: e7:8b:c5:fb:ae:fd:c9:db:3d:ad:d0:63:aa:49:c8:94:6c:9a: bf:7b:b3:7b:b9:2b:f5:1c:0b:16:43:6c:a5:2a:ae:fe:60:51: 9f:3b:6e:e6:31:28:ee:d8:7d:43:b9:c8:a5:f5:7b:be:f6:40: 84:ce:e6:4f:7b:ca:6d:2a:9c:8c:55:a0:54:19:10:e7:d3:f8: 84:5d:6c:40:2a:61:fc:a1:40:ff:84:de:cc:66:22:8c:24:34: b2:95:f4:d0:96:43:55:a0:12:67:ac:34:dc:f7:06:28:4a:0b: 05:7b:28:bd:66:01:db:64:7c:f6:d3:99:54:b6:e8:21:5d:a2: 9d:23:9a:4f:35:c0:91:6b:10:32:ea:fe:1a:12:76:a5:35:80: f4:42:6e:3a:32:43:a6:6a:39:25:6e:ba:94:88:ad:57:b1:4d: 09:07:a3:b8:e9:53:c7:6e:46:cb:e7:84:e8:24:f8:34:19:a9: 9a:f5:8f:5b:bc:6e:13:5e:3c:12:c5:84:94:54:8f:61:1c:a5: 77:64:b5:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1m8oUM5XAMiKHpHOomnkcTYozMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2NjkzNTVFQkIwRkUzQUU2QzA2QzhERjdBOTE3QkVC NDg4NDlBMDAeFw0yNjA5MjMyMzA0NDZaFw0yNjA5MjUwMDM5NDZaMDMxMTAvBgNV BAMTKDAzQjY4MDlENjJFRUNFN0Q3RTQzMTYwMUFGODFFMDJCQTQ4NjIxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjD62qUgjekkFA3NYiRugQhvz XOieRj25LWznh9V9U1RjYN23vyGQoeXztxOkkWp17kxNG6u0Bl4jdkz/zzg20nPe 2R5kpzymcSlDLZXCbM5xVjQthaqwRnQS8d5+t3mbj/K5LSPsHZ6bKfvBw7ajyP1M /NdYZeeK2yYtQ+iXnhf3IAs9S/r7jznviqjnmsdNgoWy/gfWsyeZZmlwSGtZpqzJ R2H3QmzGwyuUKn8IXcesTkj33s/pvDLsLsiYfCiN51XDAqLPqCnsv8JU8Dlkt+OD MTPO+o5w3h6/aFzqj8OT4JsuCanxj5AQXrP2VZBVnpcVbdWkw9m3zV5Wpoc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA7aAnWLuzn1+QxYBr4HgK6SGIZMwHwYDVR0j BBgwFoAURmaTVeuw/jrmwGyN96kXvrSISaAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRkYzFkZDgtNmQyNS00N2M3LWFhYTQtYmRkZjFiOWQ2NzdlLzAvNDY2NjkzNTVF QkIwRkUzQUU2QzA2QzhERjdBOTE3QkVCNDg4NDlBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NjY2OTM1NUVCQjBGRTNBRTZDMDZDOERGN0E5MTdCRUI0ODg0 OUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvNDY2NjkzNTVFQkIwRkUzQUU2QzA2QzhERjdBOTE3 QkVCNDg4NDlBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsGvq3DlZCZdZYh0juI4NUroMKowsUAyZq/ 5Y9pMQ3PlYkUX7kLD7g/NniJSMciRXeRp0h9XeeLxfuu/cnbPa3QY6pJyJRsmr97 s3u5K/UcCxZDbKUqrv5gUZ87buYxKO7YfUO5yKX1e772QITO5k97ym0qnIxVoFQZ EOfT+IRdbEAqYfyhQP+E3sxmIowkNLKV9NCWQ1WgEmesNNz3BihKCwV7KL1mAdtk fPbTmVS26CFdop0jmk81wJFrEDLq/hoSdqU1gPRCbjoyQ6ZqOSVuupSIrVexTQkH o7jpU8duRsvnhOgk+DQZqZr1j1u8bhNePBLFhJRUj2EcpXdktUA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:18:56 2026 by rpki-client