$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft File: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft (raw, json) Hash identifier: dn6aybB/aloNFoxUh1QWWFlPdmBIzj1iypQd+COcppE= Subject key identifier: 62:32:DB:13:DC:FA:99:F1:DD:AD:F9:32:42:CD:BA:AB:68:4D:FF:1A Authority key identifier: 04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 Certificate issuer: /CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Certificate serial: 750EB450366A1FB3A8373F4B76E54269D5007BC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:00:30 +0000 Manifest this update: Thu 24 Sep 2026 07:55:30 +0000 Manifest next update: Fri 25 Sep 2026 11:49:30 +0000 Files and hashes: 1: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: oxa0EP+y+hdJofNCCgpYexC5+mjVA3iUnOOBPz/fXeM=) 2: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl (hash: kU1osAPqqgKhsumQ0s6GoBujBSd5E97RXvBz6CBaUYQ=) 3: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: nnMaKehS3/1AXaDrstWHeSvF12XPdKSaOxHeLpG5OPc=) 4: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: SaxfvfB1C+pa8JqacbPuSe8u4XyvvbZQ+27IK/agWXM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0e:b4:50:36:6a:1f:b3:a8:37:3f:4b:76:e5:42:69:d5:00:7b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Validity Not Before: Sep 24 07:55:30 2026 GMT Not After : Sep 25 11:49:30 2026 GMT Subject: CN=6232DB13DCFA99F1DDADF93242CDBAAB684DFF1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:18:22:85:76:7d:cd:6d:04:81:1c:c2:7b:4d: 46:67:7d:50:67:16:06:0f:85:50:a2:df:0f:b1:ad: 43:45:f1:1f:a6:ea:76:72:a9:33:99:73:1a:b9:2d: 52:ad:ae:78:30:39:70:16:a7:c2:19:9a:79:11:86: e2:39:5b:60:ed:d8:f6:ba:ee:82:79:df:47:17:a4: 17:2a:ab:52:2d:25:67:eb:42:3a:e6:f8:16:81:8d: 43:d6:d1:e0:e2:5d:07:93:2d:85:ab:95:2b:b4:23: fc:a8:60:8e:a0:c4:ef:f3:61:8b:9d:01:d9:14:84: ea:96:da:61:de:98:11:6f:69:e1:59:3f:c9:45:58: 08:17:dc:00:b0:b4:00:0d:08:98:7e:73:80:a2:de: 9b:2a:bb:a9:b5:a5:46:47:8e:c4:61:01:9b:3f:8e: 01:48:00:64:cc:0d:01:c3:df:5e:49:3b:e9:cc:98: dc:7d:af:88:f2:84:72:24:35:a4:37:2f:a6:32:5d: 45:12:c8:f9:5a:97:ea:5e:b9:9e:33:a5:88:0d:6d: 7a:e1:fc:5c:d4:fd:54:9e:5e:c6:cb:cd:70:59:b5: b0:94:0a:d5:8d:b6:9c:8b:3a:de:35:55:54:d4:ab: 81:87:97:43:2f:f9:95:f8:fe:69:de:b5:20:ea:4b: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:32:DB:13:DC:FA:99:F1:DD:AD:F9:32:42:CD:BA:AB:68:4D:FF:1A X509v3 Authority Key Identifier: keyid:04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:47:90:03:fe:aa:4a:76:53:91:84:fb:62:68:49:9d:93:8e: 19:ee:6a:ff:04:25:c7:82:d9:9b:c5:d4:f0:da:ab:7b:8f:9e: f7:06:bf:fb:79:04:17:9e:dc:07:87:79:fb:0b:4e:a3:8d:c2: a6:05:ab:c4:14:b2:cf:e8:3c:b8:8d:7f:85:1d:30:6e:75:59: 6b:d9:c4:64:b2:38:8e:82:60:25:44:39:39:d3:fb:09:8d:2c: ad:4b:31:2f:83:71:3f:e5:81:5c:09:7f:3f:20:4a:b3:d6:6a: ae:ad:c8:84:76:3e:1d:37:ff:8a:3e:63:9d:c8:f8:ec:05:44: 50:24:2a:16:8f:81:25:6e:ea:13:a2:8b:a4:ff:b7:65:a0:74: 09:1e:5a:a9:cc:42:33:11:69:b4:35:2b:96:26:0c:ea:bd:2c: 5b:fe:93:b8:71:af:73:65:25:bd:2d:74:f4:52:ec:7e:c6:6d: 3a:80:f0:30:45:a4:25:58:7e:8e:77:b9:4d:06:4c:34:13:dc: 9b:6c:da:df:7e:2e:ab:4a:8b:cf:5a:c0:12:d5:fb:71:f4:39: cc:b6:cf:74:6e:ed:71:5e:3d:fe:1f:19:bd:ca:b3:3b:c3:16: 35:cb:25:58:e7:8c:65:f9:89:23:7f:db:2a:5f:e7:39:41:d9: 04:43:e6:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQ60UDZqH7OoNz9LduVCadUAe8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4 NjRFOUZEMjAeFw0yNjA5MjQwNzU1MzBaFw0yNjA5MjUxMTQ5MzBaMDMxMTAvBgNV BAMTKDYyMzJEQjEzRENGQTk5RjFEREFERjkzMjQyQ0RCQUFCNjg0REZGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtGCKFdn3NbQSBHMJ7TUZnfVBn FgYPhVCi3w+xrUNF8R+m6nZyqTOZcxq5LVKtrngwOXAWp8IZmnkRhuI5W2Dt2Pa6 7oJ530cXpBcqq1ItJWfrQjrm+BaBjUPW0eDiXQeTLYWrlSu0I/yoYI6gxO/zYYud AdkUhOqW2mHemBFvaeFZP8lFWAgX3ACwtAANCJh+c4Ci3psqu6m1pUZHjsRhAZs/ jgFIAGTMDQHD315JO+nMmNx9r4jyhHIkNaQ3L6YyXUUSyPlal+peuZ4zpYgNbXrh /FzU/VSeXsbLzXBZtbCUCtWNtpyLOt41VVTUq4GHl0Mv+ZX4/mnetSDqS2HbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYjLbE9z6mfHdrfkyQs26q2hN/xowHwYDVR0j BBgwFoAUBGpLjEeLOMt++58Gpa2cdIZOn9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNiOGFlOTctNjgxOC00OGE5LWFiZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0 NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4NjRFOUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDZBNEI4QzQ3OEIzOENCN0VGQjlGMDZBNUFEOUM3NDg2NEU5 RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlD NzQ4NjRFOUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZHkAP+qkp2U5GE+2JoSZ2Tjhnuav8EJceC 2ZvF1PDaq3uPnvcGv/t5BBee3AeHefsLTqONwqYFq8QUss/oPLiNf4UdMG51WWvZ xGSyOI6CYCVEOTnT+wmNLK1LMS+DcT/lgVwJfz8gSrPWaq6tyIR2Ph03/4o+Y53I +OwFRFAkKhaPgSVu6hOii6T/t2WgdAkeWqnMQjMRabQ1K5YmDOq9LFv+k7hxr3Nl Jb0tdPRS7H7GbTqA8DBFpCVYfo53uU0GTDQT3Jts2t9+LqtKi89awBLV+3H0Ocy2 z3Ru7XFePf4fGb3KszvDFjXLJVjnjGX5iSN/2ypf5zlB2QRD5p0= -----END CERTIFICATE-----Generated at Thu Sep 24 17:19:12 2026 by rpki-client