$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft File: 46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft (raw, json) Hash identifier: tgRpBJ/4BJ4y5GTlFrkxOsGwJKIt4v9ZmkoJWlkDT4g= Subject key identifier: E4:9D:8F:4D:B5:2C:FB:BD:31:99:1F:6C:5A:D7:A6:2D:87:86:64:B7 Authority key identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F Certificate issuer: /CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F Certificate serial: 0D6904F682F17A86308745C9AECD710BBD329132 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 09:12:08 +0000 Manifest this update: Thu 24 Sep 2026 09:07:08 +0000 Manifest next update: Fri 25 Sep 2026 11:14:08 +0000 Files and hashes: 1: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: eUuw3yw55g0fngkB7tsUSkh/znzGsN9FtMfeP3wJOV4=) 2: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: 3BwispZxvie5HA8ZPKSlj+DmXQJa2RqkjXaOSsS1x1Y=) 3: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: /LgC9mtYgR6oGEgu/CxTVNw9E4BQBfj6BuM/4svSIN4=) 4: 46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl (hash: R2tpKfMgHvRTTmFcukCYROMWxWyFhB4dBB1UmECzWac=) 5: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: fti8KMcK7Su1rf6h/nPpwfsRIDldzix1ecJxj65TBmc=) 6: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (hash: mOIy6jqUeVMspfreDn1PT5EUDCXF4LQ8aTefz/4cLLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:69:04:f6:82:f1:7a:86:30:87:45:c9:ae:cd:71:0b:bd:32:91:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F Validity Not Before: Sep 24 09:07:08 2026 GMT Not After : Sep 25 11:14:08 2026 GMT Subject: CN=E49D8F4DB52CFBBD31991F6C5AD7A62D878664B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:67:e9:21:e8:ce:11:89:99:ec:a6:79:e6: 9f:bc:95:cc:97:a3:74:ca:04:fd:57:6c:79:1c:e1: 43:4a:9d:52:25:c0:58:4d:32:91:a7:b8:e1:9e:d5: 7a:61:11:e3:ff:63:3b:cb:16:d3:8d:a2:6b:ee:7f: 36:a4:47:dd:5d:11:f0:cc:c4:e0:ca:e0:60:16:e4: 6e:c6:13:01:ca:cd:ab:57:b1:e7:04:1a:9e:1f:0e: e0:c2:68:f5:28:36:9b:e4:1d:0f:72:ce:f8:2c:df: 76:65:c3:f1:a6:4d:aa:c6:14:40:e9:15:9f:8b:f7: 90:27:99:e1:9e:e3:27:24:b2:a4:83:e8:3f:63:00: b9:ba:10:1d:bd:f6:2d:01:f4:54:58:20:42:08:89: 3a:5c:44:d5:30:23:40:e1:3a:71:24:be:68:d8:31: fb:19:f4:b6:1f:15:cb:bc:fe:c1:22:e1:a3:8b:2b: b2:40:ad:17:4e:70:aa:47:ee:27:80:f8:a7:42:b7: ee:c7:ed:de:08:9e:f5:25:1e:c2:90:23:55:d6:3e: 3a:16:cf:12:f5:51:72:58:ad:40:40:aa:cc:e2:52: 89:1d:ac:43:23:39:30:67:f1:63:fd:ac:bc:f9:c8: 38:5d:39:ab:38:92:45:96:db:d0:28:be:64:14:2d: 2f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9D:8F:4D:B5:2C:FB:BD:31:99:1F:6C:5A:D7:A6:2D:87:86:64:B7 X509v3 Authority Key Identifier: keyid:46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:30:cd:2d:9f:cb:99:07:36:6e:98:3c:cc:f2:01:9d:2a:fc: 26:6b:72:88:58:7d:73:c9:06:ec:de:74:35:1d:99:4a:a9:14: 92:05:f2:b4:9c:97:28:14:9f:7a:ae:94:fa:b4:ae:0d:9d:e2: 20:03:bd:f2:00:e8:98:58:62:11:fb:7e:28:d2:7e:02:fe:10: e6:90:d6:ca:a2:1a:17:c2:dd:9b:b4:4a:a7:4b:cf:3b:9c:a6: b9:3f:d1:f2:cf:71:e5:46:ac:be:07:24:88:ff:53:9e:57:a1: bc:38:f5:0b:ba:a0:b0:b1:51:bf:ee:9f:4c:14:48:9f:47:d1: e5:db:c1:99:4c:75:80:83:64:8a:a5:e2:71:f0:16:9f:73:3c: 59:f2:1c:93:e6:cb:75:17:b9:a8:d0:9b:0e:66:43:74:ee:f9: af:3d:b3:4f:b6:5d:69:56:e7:0c:3f:a5:79:d6:5f:4c:b1:8c: b4:aa:3d:41:06:ad:05:1e:db:48:35:0e:f5:43:ca:64:bb:7f: a0:be:58:2e:ed:81:b4:c9:76:39:8e:58:b3:d8:81:f1:27:a2: 56:f9:38:b1:af:05:d7:d2:24:a7:99:2c:e8:0b:70:2a:20:ed: e0:f1:2a:8b:9e:1e:dc:6c:84:5d:12:a3:79:f2:ec:eb:02:75: 41:d2:ca:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWkE9oLxeoYwh0XJrs1xC70ykTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFMzE0ODEyRkIzMERFMDEzNkNDODdGMDBFRjk4QkE0 QThGN0Y0RjAeFw0yNjA5MjQwOTA3MDhaFw0yNjA5MjUxMTE0MDhaMDMxMTAvBgNV BAMTKEU0OUQ4RjREQjUyQ0ZCQkQzMTk5MUY2QzVBRDdBNjJEODc4NjY0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5GfpIejOEYmZ7KZ55p+8lcyX o3TKBP1XbHkc4UNKnVIlwFhNMpGnuOGe1XphEeP/YzvLFtONomvufzakR91dEfDM xODK4GAW5G7GEwHKzatXsecEGp4fDuDCaPUoNpvkHQ9yzvgs33Zlw/GmTarGFEDp FZ+L95AnmeGe4ycksqSD6D9jALm6EB299i0B9FRYIEIIiTpcRNUwI0DhOnEkvmjY MfsZ9LYfFcu8/sEi4aOLK7JArRdOcKpH7ieA+KdCt+7H7d4InvUlHsKQI1XWPjoW zxL1UXJYrUBAqsziUokdrEMjOTBn8WP9rLz5yDhdOas4kkWW29AovmQULS+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5J2PTbUs+70xmR9sWtemLYeGZLcwHwYDVR0j BBgwFoAURuMUgS+zDeATbMh/AO+YukqPf08wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVmMmM2NmMtMWY4Ny00ZDk4LWE0NjctMzIxOGI2NDViM2FjLzAvNDZFMzE0ODEy RkIzMERFMDEzNkNDODdGMDBFRjk4QkE0QThGN0Y0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NkUzMTQ4MTJGQjMwREUwMTM2Q0M4N0YwMEVGOThCQTRBOEY3 RjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVmMmM2NmMtMWY4Ny00ZDk4LWE0 NjctMzIxOGI2NDViM2FjLzAvNDZFMzE0ODEyRkIzMERFMDEzNkNDODdGMDBFRjk4 QkE0QThGN0Y0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkwzS2fy5kHNm6YPMzyAZ0q/CZrcohYfXPJ BuzedDUdmUqpFJIF8rSclygUn3qulPq0rg2d4iADvfIA6JhYYhH7fijSfgL+EOaQ 1sqiGhfC3Zu0SqdLzzucprk/0fLPceVGrL4HJIj/U55Xobw49Qu6oLCxUb/un0wU SJ9H0eXbwZlMdYCDZIql4nHwFp9zPFnyHJPmy3UXuajQmw5mQ3Tu+a89s0+2XWlW 5ww/pXnWX0yxjLSqPUEGrQUe20g1DvVDymS7f6C+WC7tgbTJdjmOWLPYgfEnolb5 OLGvBdfSJKeZLOgLcCog7eDxKoueHtxshF0So3ny7OsCdUHSygM= -----END CERTIFICATE-----Generated at Thu Sep 24 17:33:08 2026 by rpki-client