$ rpki-client -vvf rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft File: C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft (raw, json) Hash identifier: uIeBx77AF62NJyQraGCy9cr28wx2EjGGbxFIq2SU1EA= Subject key identifier: D2:92:2D:E1:54:30:E4:7C:D7:75:6D:64:47:49:36:BC:31:39:47:C6 Authority key identifier: C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E Certificate issuer: /CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E Certificate serial: 295FAF7C45C2C668DD98D036D0ECBCB64D7B5872 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:32:26 +0000 Manifest this update: Tue 12 May 2026 17:27:26 +0000 Manifest next update: Wed 13 May 2026 19:50:26 +0000 Files and hashes: 1: C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl (hash: 5lPeyVk1c0K1EMcM6hnqw9I5lGqdGx0hPJYe2X4EEt0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5f:af:7c:45:c2:c6:68:dd:98:d0:36:d0:ec:bc:b6:4d:7b:58:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E Validity Not Before: May 12 17:27:26 2026 GMT Not After : May 13 19:50:26 2026 GMT Subject: CN=D2922DE15430E47CD7756D64474936BC313947C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:f8:99:18:a1:d2:bd:bb:ec:34:13:4e:9d: 98:c1:32:78:11:08:ad:8f:44:2d:08:fe:3c:16:2b: 07:b6:fc:56:89:1e:ef:c7:0a:0c:8c:17:79:a4:53: 12:3f:a4:3c:1d:b9:d0:c3:46:9a:7e:b1:e8:82:57: f2:42:3e:6d:75:29:62:66:32:6a:33:d4:e9:99:b1: 54:bb:a0:36:18:e1:06:ba:ee:a4:18:91:58:24:f8: b3:39:26:c6:cd:05:fa:66:f8:2e:da:c7:47:38:c1: bc:d0:e8:4e:d2:c2:b3:e1:c1:08:75:c1:4c:86:fb: 16:75:7c:c0:99:1d:93:9c:a4:d7:d7:2b:c4:4d:5d: 2f:3c:34:bd:0c:7d:38:a7:5f:95:ff:d6:61:5c:0f: 83:01:0d:26:c8:9e:e7:cd:e2:de:0b:b3:69:bb:8e: 83:d5:58:5e:a2:96:8b:88:7b:af:3b:55:24:a1:ab: 11:ce:5d:71:50:a1:13:e6:4a:4d:0e:f3:00:7c:fd: 2b:b3:48:09:93:a1:a5:8e:90:a4:4e:c8:16:60:a3: 2e:14:4d:c0:9a:13:72:b5:7f:53:d4:80:dd:a6:b2: bf:6f:d0:5e:16:04:4c:60:61:b6:0b:31:30:22:32: 62:7c:03:66:c8:7e:37:a9:5d:7b:a2:0e:ca:b9:52: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:92:2D:E1:54:30:E4:7C:D7:75:6D:64:47:49:36:BC:31:39:47:C6 X509v3 Authority Key Identifier: keyid:C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6d:28:f1:f3:4f:cc:78:df:a4:40:49:a8:bb:99:6f:e7:46: e7:ae:71:ee:97:25:fb:3b:91:a2:63:27:d4:bd:e6:f8:f7:61: 7a:92:78:b9:09:4b:fa:0a:84:87:46:20:2a:79:75:f6:b9:5d: da:79:45:2b:e8:38:65:fe:b2:54:34:97:04:2a:11:a2:a9:6f: fc:14:22:6f:75:0f:6c:02:3b:45:6b:99:16:8f:31:fc:5d:04: e3:9b:3d:0f:a7:c7:6e:4e:00:24:4a:7f:ec:9f:43:68:df:9e: 93:f3:22:4c:63:be:bb:52:8c:a2:5d:39:53:e2:5a:01:3c:12: b8:5c:9b:bf:51:b1:ea:61:f6:2e:0d:91:a0:f8:f3:c1:db:c0: f0:9e:80:8f:e9:fb:c0:e3:7b:1c:17:47:35:b0:77:2e:44:0d: df:7a:99:03:d8:31:63:d9:8f:4b:4e:42:16:d4:cd:3b:ce:87: c8:08:77:be:c6:60:64:d4:08:cd:f0:2b:35:12:b7:08:b3:ea: eb:c3:be:5e:84:44:55:90:09:67:2c:6c:e0:99:a4:a2:41:28: 74:c5:c9:25:b6:a6:9c:88:77:1e:cc:97:e5:e4:8a:67:33:f4: bb:d7:c4:fa:ac:05:83:e2:db:ff:65:e5:eb:aa:b1:43:75:b2: 50:bd:72:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKV+vfEXCxmjdmNA20Oy8tk17WHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEy QTBDNDQ1RTAeFw0yNjA1MTIxNzI3MjZaFw0yNjA1MTMxOTUwMjZaMDMxMTAvBgNV BAMTKEQyOTIyREUxNTQzMEU0N0NENzc1NkQ2NDQ3NDkzNkJDMzEzOTQ3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUPiZGKHSvbvsNBNOnZjBMngR CK2PRC0I/jwWKwe2/FaJHu/HCgyMF3mkUxI/pDwdudDDRpp+seiCV/JCPm11KWJm Mmoz1OmZsVS7oDYY4Qa67qQYkVgk+LM5JsbNBfpm+C7ax0c4wbzQ6E7SwrPhwQh1 wUyG+xZ1fMCZHZOcpNfXK8RNXS88NL0MfTinX5X/1mFcD4MBDSbInufN4t4Ls2m7 joPVWF6ilouIe687VSShqxHOXXFQoRPmSk0O8wB8/SuzSAmToaWOkKROyBZgoy4U TcCaE3K1f1PUgN2msr9v0F4WBExgYbYLMTAiMmJ8A2bIfjepXXuiDsq5UqjBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0pIt4VQw5HzXdW1kR0k2vDE5R8YwHwYDVR0j BBgwFoAUxGUApC8QwuHIBPKnICM6uioMRF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjE3MmVlZjktZWM2YS00NTU4LTgxODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQy RjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEyQTBDNDQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDY1MDBBNDJGMTBDMkUxQzgwNEYyQTcyMDIzM0FCQTJBMEM0 NDVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNB QkEyQTBDNDQ1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5tKPHzT8x436RASai7mW/nRueuce6XJfs7 kaJjJ9S95vj3YXqSeLkJS/oKhIdGICp5dfa5Xdp5RSvoOGX+slQ0lwQqEaKpb/wU Im91D2wCO0VrmRaPMfxdBOObPQ+nx25OACRKf+yfQ2jfnpPzIkxjvrtSjKJdOVPi WgE8Erhcm79Rseph9i4NkaD488HbwPCegI/p+8DjexwXRzWwdy5EDd96mQPYMWPZ j0tOQhbUzTvOh8gId77GYGTUCM3wKzUStwiz6uvDvl6ERFWQCWcsbOCZpKJBKHTF ySW2ppyIdx7Ml+Xkimcz9LvXxPqsBYPi2/9l5euqsUN1slC9ciA= -----END CERTIFICATE-----Generated at Wed May 13 01:14:20 2026 by rpki-client