$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft File: B46886DF13C95D5C834BD72CDC1742C463272A72.mft (raw, json) Hash identifier: 3qT6ObJMstCHKgFiwI6RbQ+rpH/CHo9NY3tZYb1rjk0= Subject key identifier: 29:A6:3E:B3:E8:1E:AF:7D:C0:41:3F:B3:87:4A:DD:FC:E6:A2:19:8D Authority key identifier: B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72 Certificate issuer: /CN=B46886DF13C95D5C834BD72CDC1742C463272A72 Certificate serial: 0B8AEA4DB57E3D2372B155935FB000DBF534C5B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:08:11 +0000 Manifest this update: Tue 12 May 2026 18:03:11 +0000 Manifest next update: Wed 13 May 2026 18:59:11 +0000 Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: q5l3eOYPeemq7qIazHMV6kibSs/1KaEDRsni+YgaV1w=) 2: B46886DF13C95D5C834BD72CDC1742C463272A72.crl (hash: XxjCABc12pMF4lBwQJj9sSjA32fUXrV0gR5z33CuWIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8a:ea:4d:b5:7e:3d:23:72:b1:55:93:5f:b0:00:db:f5:34:c5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B46886DF13C95D5C834BD72CDC1742C463272A72 Validity Not Before: May 12 18:03:11 2026 GMT Not After : May 13 18:59:11 2026 GMT Subject: CN=29A63EB3E81EAF7DC0413FB3874ADDFCE6A2198D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:5f:cb:cc:3d:9f:03:27:f6:7b:e9:f8:df: 3a:3f:67:ee:da:99:39:88:8d:8f:70:8b:e0:3f:7f: c7:bc:af:15:d1:b9:de:de:a2:e7:fe:c4:09:9e:33: dd:f7:7c:d6:a2:d8:f4:25:a2:e5:d4:3c:06:70:b6: 3f:3e:f6:0c:da:fe:f1:51:41:eb:c8:2a:c8:ed:98: cb:21:8e:c2:12:f6:16:6a:57:fc:64:c2:71:60:b0: 9b:b3:e0:b2:26:8d:52:1e:58:d1:c4:79:8a:af:d4: b6:51:8a:e6:6b:d3:3c:48:9b:91:f9:2a:70:c7:30: dd:6b:76:dd:62:32:e3:eb:c1:40:65:0b:90:a2:bc: 28:0a:24:67:52:38:29:2d:99:e3:c1:a3:3b:ce:88: c6:9a:38:33:87:7e:da:71:d1:9a:49:d4:c7:53:87: 95:3a:fa:12:88:18:60:bb:1d:0e:e8:58:86:a9:0b: 57:3e:76:4d:e1:f6:fd:ff:1b:c7:3a:b9:76:9c:c6: a1:ee:68:ff:75:b5:8f:1c:78:71:57:1c:fb:fe:9e: 6d:76:6a:18:51:b5:7c:71:90:55:97:ce:6a:0e:f6: 9d:a5:90:88:8a:6e:86:13:7e:60:0a:a2:b9:7d:a4: ea:8d:1d:67:e9:a1:4e:6e:2c:04:ce:2a:b3:33:79: 4e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A6:3E:B3:E8:1E:AF:7D:C0:41:3F:B3:87:4A:DD:FC:E6:A2:19:8D X509v3 Authority Key Identifier: keyid:B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7a:36:6f:3c:dc:f3:5a:8f:6f:85:15:8e:9e:84:93:95:9a: 24:e4:fc:65:f9:da:9a:1f:a4:61:67:6a:f5:df:39:71:d4:31: ce:09:e2:a3:ef:22:9c:08:42:50:8c:e0:0a:30:0e:59:6a:49: 41:b7:d3:22:f7:d0:40:8e:e8:71:f5:c9:af:ab:37:d1:27:ad: f0:99:05:65:44:1f:3e:07:e5:07:e3:bd:e0:40:e4:0e:40:77: ec:a8:eb:4c:ae:53:3b:bf:67:8d:7c:a9:bc:50:b3:6f:d2:d0: 3e:79:a4:5f:3c:0b:6d:a3:39:f1:66:64:34:b6:25:65:a1:60: 3d:31:b2:84:cc:94:72:68:c2:3a:d5:0d:52:7c:06:e3:a0:a2: b4:f6:2c:ac:ed:4e:93:82:fd:1b:5f:b5:ee:0f:73:ca:70:1d: 02:4f:ba:44:34:a1:33:d4:61:39:98:93:0d:0a:4e:de:e6:95: 6a:22:3e:a9:e1:17:ec:67:5a:37:d9:40:9c:2f:74:ba:08:a4: 6e:43:dd:86:ed:f0:d6:ff:1c:c1:36:57:14:99:84:ed:4f:de: 94:cf:41:c6:52:4a:b2:04:a9:25:1d:8f:05:91:b5:15:ed:e2: 07:43:f0:82:6a:f0:b5:1b:7c:a7:10:30:51:e9:56:d2:d0:8a: 0c:0e:b2:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4rqTbV+PSNysVWTX7AA2/U0xbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2ODg2REYxM0M5NUQ1QzgzNEJENzJDREMxNzQyQzQ2 MzI3MkE3MjAeFw0yNjA1MTIxODAzMTFaFw0yNjA1MTMxODU5MTFaMDMxMTAvBgNV BAMTKDI5QTYzRUIzRTgxRUFGN0RDMDQxM0ZCMzg3NEFEREZDRTZBMjE5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwV/LzD2fAyf2e+n43zo/Z+7a mTmIjY9wi+A/f8e8rxXRud7eouf+xAmeM933fNai2PQlouXUPAZwtj8+9gza/vFR QevIKsjtmMshjsIS9hZqV/xkwnFgsJuz4LImjVIeWNHEeYqv1LZRiuZr0zxIm5H5 KnDHMN1rdt1iMuPrwUBlC5CivCgKJGdSOCktmePBozvOiMaaODOHftpx0ZpJ1MdT h5U6+hKIGGC7HQ7oWIapC1c+dk3h9v3/G8c6uXacxqHuaP91tY8ceHFXHPv+nm12 ahhRtXxxkFWXzmoO9p2lkIiKboYTfmAKorl9pOqNHWfpoU5uLATOKrMzeU6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKaY+s+ger33AQT+zh0rd/OaiGY0wHwYDVR0j BBgwFoAUtGiG3xPJXVyDS9cs3BdCxGMnKnIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBiYTg1YTAtMzUzNC00OWE0LWE4MjYtMTNhNzM1Zjk0MzY5LzAvQjQ2ODg2REYx M0M5NUQ1QzgzNEJENzJDREMxNzQyQzQ2MzI3MkE3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNDY4ODZERjEzQzk1RDVDODM0QkQ3MkNEQzE3NDJDNDYzMjcy QTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvQjQ2ODg2REYxM0M5NUQ1QzgzNEJENzJDREMxNzQy QzQ2MzI3MkE3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF56Nm883PNaj2+FFY6ehJOVmiTk/GX52pof pGFnavXfOXHUMc4J4qPvIpwIQlCM4AowDllqSUG30yL30ECO6HH1ya+rN9EnrfCZ BWVEHz4H5QfjveBA5A5Ad+yo60yuUzu/Z418qbxQs2/S0D55pF88C22jOfFmZDS2 JWWhYD0xsoTMlHJowjrVDVJ8BuOgorT2LKztTpOC/Rtfte4Pc8pwHQJPukQ0oTPU YTmYkw0KTt7mlWoiPqnhF+xnWjfZQJwvdLoIpG5D3Ybt8Nb/HME2VxSZhO1P3pTP QcZSSrIEqSUdjwWRtRXt4gdD8IJq8LUbfKcQMFHpVtLQigwOsow= -----END CERTIFICATE-----Generated at Wed May 13 09:51:16 2026 by rpki-client