$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft File: B46886DF13C95D5C834BD72CDC1742C463272A72.mft (raw, json) Hash identifier: rNVghze3zLCokiU0D75ZZn22BzZquRm1tiWz/orRDAo= Subject key identifier: 1B:F6:F3:B1:32:BB:33:C5:71:11:5C:8F:53:D7:2D:13:6E:2C:B4:6B Authority key identifier: B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72 Certificate issuer: /CN=B46886DF13C95D5C834BD72CDC1742C463272A72 Certificate serial: 37B9422960AF1C1BAD44BDC22E91BD0E809D0108 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:23:51 +0000 Manifest this update: Thu 23 Jul 2026 19:18:51 +0000 Manifest next update: Fri 24 Jul 2026 21:11:51 +0000 Files and hashes: 1: B46886DF13C95D5C834BD72CDC1742C463272A72.crl (hash: SJJpeBUXZZPL9rpWTvyHY6hyu0sL8gPbkSYfkzc7WT0=) 2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: q5l3eOYPeemq7qIazHMV6kibSs/1KaEDRsni+YgaV1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b9:42:29:60:af:1c:1b:ad:44:bd:c2:2e:91:bd:0e:80:9d:01:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B46886DF13C95D5C834BD72CDC1742C463272A72 Validity Not Before: Jul 23 19:18:51 2026 GMT Not After : Jul 24 21:11:51 2026 GMT Subject: CN=1BF6F3B132BB33C571115C8F53D72D136E2CB46B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:aa:ce:c0:b8:f0:a6:e8:59:0a:ae:33:e4: ca:6b:8d:4d:2c:35:a8:12:da:6e:92:59:bc:4e:f3: 2a:ff:44:fe:1e:af:15:7e:d5:3d:26:1d:02:8f:3d: 30:ce:12:a1:a7:71:48:a1:f3:a1:49:fe:fc:29:98: a5:a3:1e:34:7f:a8:4a:a4:c3:6b:6d:33:dd:e8:30: c6:8e:7a:4b:b5:5f:10:5a:8b:f0:16:7f:28:b7:99: f8:8d:04:85:0d:0b:4d:81:46:8b:2b:31:a3:b4:78: 92:64:ba:25:0d:e3:d4:40:fe:8f:19:9c:4d:4b:8e: a2:f0:96:c8:7b:da:7b:e4:68:27:83:a9:aa:8d:52: c8:48:6f:36:80:17:01:ac:62:78:dc:14:fa:ff:6b: 51:00:66:dd:ae:4f:83:55:fc:7e:41:2c:5b:21:03: 85:07:ac:5a:70:d9:c9:9a:d5:82:4c:10:bd:4b:38: d9:4f:6b:aa:9c:fe:40:fc:4d:eb:a3:aa:cf:72:20: 8a:92:f5:8e:ce:69:3a:d5:c9:c2:90:1b:9e:f5:fb: 5d:92:6a:57:1d:02:7c:b8:37:0e:08:5c:04:b2:14: d0:df:59:46:2a:c3:d7:11:3b:51:38:12:b7:62:6f: 1d:08:c4:22:f3:b9:36:fc:05:e3:b2:8f:be:7c:5c: cf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F6:F3:B1:32:BB:33:C5:71:11:5C:8F:53:D7:2D:13:6E:2C:B4:6B X509v3 Authority Key Identifier: keyid:B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:08:7a:17:9a:20:f6:e6:28:ad:c9:2b:ac:fa:37:4a:9f:16: f2:72:ed:36:73:f3:8d:cb:6b:03:8f:7e:ab:f9:cf:d7:4b:81: 2f:8b:d0:83:d5:65:09:e1:b7:38:26:a9:9f:cd:51:b9:15:fd: ec:82:39:5e:0d:a8:2b:b4:0e:07:69:b6:49:e1:33:23:90:71: 24:3e:88:f7:e3:a4:df:18:2b:dc:13:45:f3:2b:d3:80:73:94: 3d:7c:c5:11:8c:71:c6:2e:79:ed:27:85:78:3a:9f:1a:29:3d: 6a:4c:cc:65:e3:78:e0:56:1f:7a:a2:3b:d9:66:19:fd:fc:49: 53:1c:cb:9a:0a:61:42:ff:c6:5f:2e:69:cc:62:3e:2a:24:32: 2c:8d:5e:31:48:98:a8:d7:1e:be:34:46:86:83:ae:37:8c:b0: 88:9d:2c:2e:1e:59:8f:87:b2:5c:04:25:dc:08:8d:7f:f0:26: 66:7a:7d:4c:02:0a:4d:61:f6:cc:37:e2:dc:c8:e1:2b:03:9e: b9:69:17:19:7b:72:59:25:c0:89:64:9c:0c:0b:38:47:90:34: ac:ac:42:1e:40:b4:76:cc:e1:4b:22:4f:19:6e:79:b0:cc:34: e1:73:ac:44:f0:3a:b3:61:55:1a:71:a7:92:2e:40:58:eb:d6: ff:49:d6:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7lCKWCvHButRL3CLpG9DoCdAQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2ODg2REYxM0M5NUQ1QzgzNEJENzJDREMxNzQyQzQ2 MzI3MkE3MjAeFw0yNjA3MjMxOTE4NTFaFw0yNjA3MjQyMTExNTFaMDMxMTAvBgNV BAMTKDFCRjZGM0IxMzJCQjMzQzU3MTExNUM4RjUzRDcyRDEzNkUyQ0I0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupKrOwLjwpuhZCq4z5MprjU0s NagS2m6SWbxO8yr/RP4erxV+1T0mHQKPPTDOEqGncUih86FJ/vwpmKWjHjR/qEqk w2ttM93oMMaOeku1XxBai/AWfyi3mfiNBIUNC02BRosrMaO0eJJkuiUN49RA/o8Z nE1LjqLwlsh72nvkaCeDqaqNUshIbzaAFwGsYnjcFPr/a1EAZt2uT4NV/H5BLFsh A4UHrFpw2cma1YJMEL1LONlPa6qc/kD8Teujqs9yIIqS9Y7OaTrVycKQG571+12S alcdAny4Nw4IXASyFNDfWUYqw9cRO1E4Erdibx0IxCLzuTb8BeOyj758XM9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG/bzsTK7M8VxEVyPU9ctE24stGswHwYDVR0j BBgwFoAUtGiG3xPJXVyDS9cs3BdCxGMnKnIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBiYTg1YTAtMzUzNC00OWE0LWE4MjYtMTNhNzM1Zjk0MzY5LzAvQjQ2ODg2REYx M0M5NUQ1QzgzNEJENzJDREMxNzQyQzQ2MzI3MkE3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNDY4ODZERjEzQzk1RDVDODM0QkQ3MkNEQzE3NDJDNDYzMjcy QTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvQjQ2ODg2REYxM0M5NUQ1QzgzNEJENzJDREMxNzQy QzQ2MzI3MkE3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoIeheaIPbmKK3JK6z6N0qfFvJy7TZz843L awOPfqv5z9dLgS+L0IPVZQnhtzgmqZ/NUbkV/eyCOV4NqCu0DgdptknhMyOQcSQ+ iPfjpN8YK9wTRfMr04BzlD18xRGMccYuee0nhXg6nxopPWpMzGXjeOBWH3qiO9lm Gf38SVMcy5oKYUL/xl8uacxiPiokMiyNXjFImKjXHr40RoaDrjeMsIidLC4eWY+H slwEJdwIjX/wJmZ6fUwCCk1h9sw34tzI4SsDnrlpFxl7clklwIlknAwLOEeQNKys Qh5AtHbM4UsiTxluebDMNOFzrETwOrNhVRpxp5IuQFjr1v9J1nI= -----END CERTIFICATE-----Generated at Fri Jul 24 10:23:42 2026 by rpki-client