$ rpki-client -vvf rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft File: 46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft (raw, json) Hash identifier: hdMkk/mf8pcYoUpjtkwBIjvmqPJFjGcJFi4zhUSd4C0= Subject key identifier: A7:E3:0E:8A:A8:6C:3E:95:23:A0:A3:19:E1:51:B2:72:50:F5:33:93 Authority key identifier: 46:B8:B5:78:5C:3D:7A:54:38:1E:62:5D:95:A2:F6:58:CC:E0:1E:26 Certificate issuer: /CN=46B8B5785C3D7A54381E625D95A2F658CCE01E26 Certificate serial: 5DAC20E324FCF52262598422F8F91E3DF4716FDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:13:36 +0000 Manifest this update: Thu 23 Jul 2026 19:08:36 +0000 Manifest next update: Fri 24 Jul 2026 22:38:36 +0000 Files and hashes: 1: 46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl (hash: UU3QCbJ7tRbAE4+nIAFoWn4PtU8VRniETacyBdd17lc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ac:20:e3:24:fc:f5:22:62:59:84:22:f8:f9:1e:3d:f4:71:6f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46B8B5785C3D7A54381E625D95A2F658CCE01E26 Validity Not Before: Jul 23 19:08:36 2026 GMT Not After : Jul 24 22:38:36 2026 GMT Subject: CN=A7E30E8AA86C3E9523A0A319E151B27250F53393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:3e:17:ea:b6:68:4e:b0:71:2e:56:a2:15: c2:81:7c:87:fc:1b:88:ad:d2:6d:97:60:4e:4e:f1: 33:8f:94:64:0a:d9:f3:14:54:20:eb:92:0a:05:ec: 3f:67:36:9d:cf:73:2e:2b:08:e6:f1:d8:39:c3:ff: d3:d3:60:cb:d0:67:72:07:4c:6f:d0:00:01:a5:2d: 9a:5d:62:80:16:31:64:d6:c8:93:3b:dc:f6:82:aa: 9c:df:16:ac:5d:44:c1:5b:7f:4f:07:b5:12:8d:65: 9d:51:98:95:75:b7:db:e0:2b:8b:05:a2:23:0a:4a: 5e:7e:96:35:6a:33:0a:c6:6f:2e:6f:a0:14:2e:55: 6d:7f:55:a2:35:3c:41:1f:ce:99:13:bd:15:3d:14: 17:1b:c0:3c:b6:09:a3:ff:47:1f:50:9b:42:6d:cf: 7e:9d:8a:81:c4:bd:90:5d:e3:aa:48:29:a9:c7:1f: 82:fb:6c:52:b0:d7:e9:9d:dc:c6:ab:49:73:23:47: 6a:d0:ab:15:03:7c:76:4b:a5:e1:e8:63:6d:18:2b: ca:fd:0c:d1:db:98:ce:fa:f1:2c:95:70:1f:fe:d1: 56:0d:03:0c:b7:67:1d:4a:ca:ca:cf:56:3f:22:8e: bf:de:f9:dc:74:ab:e8:c7:38:e5:77:17:6d:9b:0a: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E3:0E:8A:A8:6C:3E:95:23:A0:A3:19:E1:51:B2:72:50:F5:33:93 X509v3 Authority Key Identifier: keyid:46:B8:B5:78:5C:3D:7A:54:38:1E:62:5D:95:A2:F6:58:CC:E0:1E:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:62:5c:29:b1:5f:79:91:be:a4:94:64:15:15:07:e6:fe:b0: 1e:d4:48:36:a9:c0:e5:3f:99:97:f5:ad:4f:21:6c:70:bd:17: 6c:b2:22:e6:56:49:8a:ef:d6:d3:24:37:25:1a:7a:7b:c8:71: 91:f0:9c:63:3d:3e:c3:c5:36:09:ca:f4:51:f7:14:1a:e2:04: 09:be:c3:59:5c:2a:6b:93:59:3e:16:8e:d4:29:4c:fd:07:3e: bc:26:db:c0:9e:54:e4:ae:ae:81:8f:1b:70:6e:ce:50:84:ac: 96:07:85:e8:20:22:96:e1:a8:ba:35:65:d6:3f:56:b1:50:27: b7:71:77:ba:b4:25:4b:91:fa:fc:09:1c:85:ae:0c:7b:9c:72: 1e:34:93:84:2f:26:c9:8b:b6:79:57:1e:3e:dd:5e:a6:72:99: 55:a3:6e:f3:19:0e:a2:8d:d9:cb:94:59:dd:9b:de:ed:e9:b9: 90:a2:8b:53:89:f3:7d:3e:d6:e5:af:2d:07:31:86:22:ba:e7: 98:7c:41:10:ab:90:5e:8a:0c:1b:e6:81:86:b3:67:a4:72:e9: 74:a6:dd:f6:da:b9:65:eb:8c:43:bd:df:60:ba:b2:a9:2e:2e: c0:8f:1c:7a:bf:eb:2f:ee:14:d6:bb:02:5e:d1:53:ab:17:1f: f2:bd:bf:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXawg4yT89SJiWYQi+PkePfRxb94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCOEI1Nzg1QzNEN0E1NDM4MUU2MjVEOTVBMkY2NThD Q0UwMUUyNjAeFw0yNjA3MjMxOTA4MzZaFw0yNjA3MjQyMjM4MzZaMDMxMTAvBgNV BAMTKEE3RTMwRThBQTg2QzNFOTUyM0EwQTMxOUUxNTFCMjcyNTBGNTMzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLgD4X6rZoTrBxLlaiFcKBfIf8 G4it0m2XYE5O8TOPlGQK2fMUVCDrkgoF7D9nNp3Pcy4rCObx2DnD/9PTYMvQZ3IH TG/QAAGlLZpdYoAWMWTWyJM73PaCqpzfFqxdRMFbf08HtRKNZZ1RmJV1t9vgK4sF oiMKSl5+ljVqMwrGby5voBQuVW1/VaI1PEEfzpkTvRU9FBcbwDy2CaP/Rx9Qm0Jt z36dioHEvZBd46pIKanHH4L7bFKw1+md3MarSXMjR2rQqxUDfHZLpeHoY20YK8r9 DNHbmM768SyVcB/+0VYNAwy3Zx1KysrPVj8ijr/e+dx0q+jHOOV3F22bCnxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+MOiqhsPpUjoKMZ4VGyclD1M5MwHwYDVR0j BBgwFoAURri1eFw9elQ4HmJdlaL2WMzgHiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVhM2IxMDYtOGVmMC00NWJmLWIyNzctYTI3OTQ3ZTQ1OTFiLzAvNDZCOEI1Nzg1 QzNEN0E1NDM4MUU2MjVEOTVBMkY2NThDQ0UwMUUyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NkI4QjU3ODVDM0Q3QTU0MzgxRTYyNUQ5NUEyRjY1OENDRTAx RTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvNDZCOEI1Nzg1QzNEN0E1NDM4MUU2MjVEOTVBMkY2 NThDQ0UwMUUyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtiXCmxX3mRvqSUZBUVB+b+sB7USDapwOU/ mZf1rU8hbHC9F2yyIuZWSYrv1tMkNyUaenvIcZHwnGM9PsPFNgnK9FH3FBriBAm+ w1lcKmuTWT4WjtQpTP0HPrwm28CeVOSuroGPG3BuzlCErJYHheggIpbhqLo1ZdY/ VrFQJ7dxd7q0JUuR+vwJHIWuDHucch40k4QvJsmLtnlXHj7dXqZymVWjbvMZDqKN 2cuUWd2b3u3puZCii1OJ830+1uWvLQcxhiK655h8QRCrkF6KDBvmgYazZ6Ry6XSm 3fbauWXrjEO932C6sqkuLsCPHHq/6y/uFNa7Al7RU6sXH/K9v+8= -----END CERTIFICATE-----Generated at Fri Jul 24 10:49:09 2026 by rpki-client