$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft File: 46932859C0D86F27F517A125185AE45763AEA7D7.mft (raw, json) Hash identifier: X/RcfDC7w+fyLGcwaCNdZqVV5Go1KgvgkJF6VVtRldY= Subject key identifier: BC:51:03:66:7C:A1:0E:8E:41:1F:10:19:79:E1:A7:69:96:97:7B:1E Authority key identifier: 46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7 Certificate issuer: /CN=46932859C0D86F27F517A125185AE45763AEA7D7 Certificate serial: 3C81C45E49553646B569A55F669AD5A60742FCB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 07:09:35 +0000 Manifest this update: Fri 25 Sep 2026 07:04:35 +0000 Manifest next update: Sat 26 Sep 2026 08:05:35 +0000 Files and hashes: 1: 46932859C0D86F27F517A125185AE45763AEA7D7.crl (hash: TT4f15Lsu+yGJF9OsjKzvIvmCNcVT/3xvcTeaLKwx94=) 2: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: JlLJ7++ECgOuHqdNFhp6s2bGWg+2iwYDZNhy26Z53Oo=) 3: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: 26c5fhilGEyh6ibLUJuFc5ukaLSiZO65uEMgb+eN6Nk=) 4: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: Trw+y/sXFJtkefRvcCLMU2FAEepNpbCrLf/kUCXfHQE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:81:c4:5e:49:55:36:46:b5:69:a5:5f:66:9a:d5:a6:07:42:fc:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46932859C0D86F27F517A125185AE45763AEA7D7 Validity Not Before: Sep 25 07:04:35 2026 GMT Not After : Sep 26 08:05:35 2026 GMT Subject: CN=BC5103667CA10E8E411F101979E1A76996977B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:c5:39:70:fa:cf:5f:ad:d9:6a:ed:ec:c2: 8d:6e:72:a7:94:83:7a:8b:f3:82:83:9d:fb:e9:33: 3a:a3:ae:df:81:3f:a8:a8:b1:70:f5:4c:38:d7:25: cb:d2:70:6a:ce:0a:c6:48:8a:57:6f:1a:ff:dd:86: c6:2f:a2:87:69:06:16:5b:c0:4a:f2:ed:02:b8:66: a6:d3:8e:d1:8e:fe:99:f6:b0:f6:32:cb:91:87:16: f1:86:f3:4d:45:5e:e9:19:6a:02:bf:af:1c:fe:5d: 9e:a0:8c:b6:ca:fa:cd:60:bc:6e:87:89:2f:bb:dc: 10:ed:13:b7:f8:82:df:57:4b:89:c6:3c:41:25:41: ca:71:6a:ad:eb:86:94:2f:05:39:ec:01:2d:ac:48: cd:5d:81:27:d2:b8:3e:23:76:59:24:9c:09:54:aa: f9:00:cc:b6:24:3c:34:f3:94:b3:a5:24:c1:dd:ce: b4:6b:50:e5:fe:e6:81:d1:e2:be:bf:94:a8:c3:d1: 57:93:0d:78:f9:79:e9:b9:52:0f:6d:3f:c4:80:20: 7b:0d:9b:69:59:74:42:95:37:83:d5:1e:c1:e2:e8: 96:06:69:b6:54:db:f7:18:1e:38:a2:16:f9:67:3a: f0:0c:10:85:b2:f0:80:96:fa:cb:40:86:59:45:4b: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:51:03:66:7C:A1:0E:8E:41:1F:10:19:79:E1:A7:69:96:97:7B:1E X509v3 Authority Key Identifier: keyid:46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:10:93:8e:f8:10:a3:0d:23:f7:93:62:e6:50:65:3c:6d:a9: 52:a9:01:f3:db:03:40:76:f1:c7:eb:c5:09:c2:2e:6c:fa:97: 62:d5:e6:c2:86:c1:bf:3a:2b:26:41:15:31:0a:31:b9:07:cd: b9:34:8a:46:04:53:c5:f1:6f:29:7a:9b:78:b4:51:37:93:3c: 22:05:60:a9:6f:f2:8a:e3:f2:54:ca:6c:f5:8d:7c:66:59:3a: 4a:42:ea:b2:2e:fd:71:91:42:f0:df:db:2f:37:d2:55:91:1a: 11:e0:f8:cd:a3:17:21:c0:84:ce:1c:ab:65:96:c4:0c:88:b2: 01:51:80:2b:1a:a0:57:f4:82:a7:83:72:5c:43:53:39:68:82: 37:de:a8:b6:38:94:69:42:d5:3d:2e:a4:46:47:e4:7f:f9:c2: 48:1a:53:db:e5:29:50:0b:fe:cf:aa:42:7e:54:86:e2:42:96: 91:65:33:79:c3:84:e6:f4:7a:39:f1:dc:63:a2:54:6c:96:a7: 14:1a:d9:c2:03:59:68:0f:f3:a0:6b:c1:5a:24:95:10:10:ef: 11:99:45:7c:40:97:9c:53:fc:88:4a:53:a2:26:26:9f:03:db: 84:61:df:c9:a8:7c:f9:7b:9b:e5:a2:c9:d9:ab:b3:43:19:0a: f8:e6:0e:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIHEXklVNka1aaVfZprVpgdC/LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5MzI4NTlDMEQ4NkYyN0Y1MTdBMTI1MTg1QUU0NTc2 M0FFQTdENzAeFw0yNjA5MjUwNzA0MzVaFw0yNjA5MjYwODA1MzVaMDMxMTAvBgNV BAMTKEJDNTEwMzY2N0NBMTBFOEU0MTFGMTAxOTc5RTFBNzY5OTY5NzdCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRsU5cPrPX63Zau3swo1ucqeU g3qL84KDnfvpMzqjrt+BP6iosXD1TDjXJcvScGrOCsZIildvGv/dhsYvoodpBhZb wEry7QK4ZqbTjtGO/pn2sPYyy5GHFvGG801FXukZagK/rxz+XZ6gjLbK+s1gvG6H iS+73BDtE7f4gt9XS4nGPEElQcpxaq3rhpQvBTnsAS2sSM1dgSfSuD4jdlkknAlU qvkAzLYkPDTzlLOlJMHdzrRrUOX+5oHR4r6/lKjD0VeTDXj5eem5Ug9tP8SAIHsN m2lZdEKVN4PVHsHi6JYGabZU2/cYHjiiFvlnOvAMEIWy8ICW+stAhllFS7rzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvFEDZnyhDo5BHxAZeeGnaZaXex4wHwYDVR0j BBgwFoAURpMoWcDYbyf1F6ElGFrkV2Oup9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGVkYzllNGYtODE4MC00MWQ2LWIwOGQtOGVlNWE4YTcwYTA1LzAvNDY5MzI4NTlD MEQ4NkYyN0Y1MTdBMTI1MTg1QUU0NTc2M0FFQTdENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NjkzMjg1OUMwRDg2RjI3RjUxN0ExMjUxODVBRTQ1NzYzQUVB N0Q3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvNDY5MzI4NTlDMEQ4NkYyN0Y1MTdBMTI1MTg1QUU0 NTc2M0FFQTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYQk474EKMNI/eTYuZQZTxtqVKpAfPbA0B2 8cfrxQnCLmz6l2LV5sKGwb86KyZBFTEKMbkHzbk0ikYEU8Xxbyl6m3i0UTeTPCIF YKlv8orj8lTKbPWNfGZZOkpC6rIu/XGRQvDf2y830lWRGhHg+M2jFyHAhM4cq2WW xAyIsgFRgCsaoFf0gqeDclxDUzlogjfeqLY4lGlC1T0upEZH5H/5wkgaU9vlKVAL /s+qQn5UhuJClpFlM3nDhOb0ejnx3GOiVGyWpxQa2cIDWWgP86BrwVoklRAQ7xGZ RXxAl5xT/IhKU6ImJp8D24Rh38mofPl7m+Wiydmrs0MZCvjmDqM= -----END CERTIFICATE-----Generated at Fri Sep 25 23:36:37 2026 by rpki-client