$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft File: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft (raw, json) Hash identifier: j7JZFerPr8yVNrM3f/3vros3l2RgIXAsBmywgm2vDIk= Subject key identifier: 64:94:74:48:76:F6:AA:40:7F:97:80:C1:FC:BC:EF:42:63:CD:C5:85 Authority key identifier: 04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 Certificate issuer: /CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Certificate serial: 3CFD02DDAC04D55DBC93C1B6176F92E8AB3E3CC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:08:15 +0000 Manifest this update: Tue 12 May 2026 18:03:15 +0000 Manifest next update: Wed 13 May 2026 18:44:15 +0000 Files and hashes: 1: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: nnMaKehS3/1AXaDrstWHeSvF12XPdKSaOxHeLpG5OPc=) 2: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: SaxfvfB1C+pa8JqacbPuSe8u4XyvvbZQ+27IK/agWXM=) 3: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl (hash: eqoNa7nwR+uRyx2z1VP6VRN6PbyUM77MIzIGO44To8w=) 4: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: oxa0EP+y+hdJofNCCgpYexC5+mjVA3iUnOOBPz/fXeM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fd:02:dd:ac:04:d5:5d:bc:93:c1:b6:17:6f:92:e8:ab:3e:3c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Validity Not Before: May 12 18:03:15 2026 GMT Not After : May 13 18:44:15 2026 GMT Subject: CN=6494744876F6AA407F9780C1FCBCEF4263CDC585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:ff:03:42:e2:23:a4:41:1a:a5:1b:68:87: be:0b:2b:a1:0f:5a:8f:76:b6:4c:1c:a2:71:f0:81: c7:67:35:6b:82:92:98:3d:b8:2c:1c:66:4a:42:81: 22:8c:20:89:1d:12:06:2b:7a:10:17:a4:17:8c:7a: f3:80:d4:f5:66:02:3d:9a:3c:3e:4c:2f:e2:f5:15: 36:7d:c5:05:d0:e9:a4:dc:2f:75:10:87:09:67:fd: b0:cb:ee:f5:d2:47:fc:9e:92:af:67:f5:52:1c:85: bd:10:52:2e:f5:27:72:11:37:fb:68:df:32:2a:75: 92:c9:20:13:c8:2d:3a:e4:1c:e8:18:c4:26:68:91: 9a:94:12:4b:d4:f9:1f:2b:e2:1e:e2:65:a6:9f:50: 40:46:43:2d:ea:8f:4d:43:2b:05:4a:04:e9:b5:9e: e6:ca:fd:9e:fc:ff:93:5a:07:10:7c:bc:f6:5a:00: d0:50:c3:4f:e0:86:2e:ed:f3:a2:a0:93:d8:ba:1c: 6e:c6:d8:ae:5c:aa:4b:45:c3:dc:37:b2:63:ba:f8: 1a:a4:ce:23:59:0f:38:02:10:2d:0f:01:93:12:a8: bc:e4:0d:b8:c2:4c:7c:73:87:b3:85:6a:fa:57:a4: 53:86:13:e5:36:71:0d:53:77:2b:07:2a:89:ca:77: 75:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:94:74:48:76:F6:AA:40:7F:97:80:C1:FC:BC:EF:42:63:CD:C5:85 X509v3 Authority Key Identifier: keyid:04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ec:09:49:1a:9c:91:25:e1:70:a7:6e:ad:4e:91:35:f7:96: 69:0e:43:dd:b5:36:76:af:11:b1:0f:ce:27:2e:df:91:ab:e9: b4:2b:a3:b5:96:64:76:78:4b:4a:5a:2c:74:87:9e:0f:62:e9: 34:de:90:b4:66:08:8a:af:6d:67:9a:05:db:ec:cc:9d:fd:0b: 05:ce:73:71:05:ef:c4:c1:fd:78:66:b9:e4:f5:fb:39:29:64: 29:3b:9f:f7:78:19:69:07:c7:29:f1:e1:11:f7:87:23:2d:9b: 61:32:6d:cf:c3:80:b8:0d:b2:2b:69:51:9a:22:2e:5d:76:b0: 4b:a8:3d:ab:7c:e9:c0:57:f0:64:3c:1a:af:2a:34:56:bf:db: a9:19:9f:34:e4:65:3d:54:89:a8:f2:5b:de:0a:47:85:93:d7: ae:2f:47:07:d0:f6:69:7d:94:54:2c:93:19:77:bd:83:e2:c3: 64:ea:4e:35:13:84:f1:56:e7:58:3a:b3:f6:23:b9:d4:f7:fb: fd:f6:0a:2e:41:38:f6:e6:c0:bb:60:0b:c2:9d:64:1e:66:ba: b7:87:2c:47:f2:96:a8:8b:cd:86:c7:59:c8:56:98:3b:6c:9e: 17:2b:a1:06:6f:49:3a:0c:d1:45:22:2e:6b:f5:6e:68:c5:f2: 26:63:4f:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPP0C3awE1V28k8G2F2+S6Ks+PMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4 NjRFOUZEMjAeFw0yNjA1MTIxODAzMTVaFw0yNjA1MTMxODQ0MTVaMDMxMTAvBgNV BAMTKDY0OTQ3NDQ4NzZGNkFBNDA3Rjk3ODBDMUZDQkNFRjQyNjNDREM1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/O/8DQuIjpEEapRtoh74LK6EP Wo92tkwconHwgcdnNWuCkpg9uCwcZkpCgSKMIIkdEgYrehAXpBeMevOA1PVmAj2a PD5ML+L1FTZ9xQXQ6aTcL3UQhwln/bDL7vXSR/yekq9n9VIchb0QUi71J3IRN/to 3zIqdZLJIBPILTrkHOgYxCZokZqUEkvU+R8r4h7iZaafUEBGQy3qj01DKwVKBOm1 nubK/Z78/5NaBxB8vPZaANBQw0/ghi7t86Kgk9i6HG7G2K5cqktFw9w3smO6+Bqk ziNZDzgCEC0PAZMSqLzkDbjCTHxzh7OFavpXpFOGE+U2cQ1TdysHKonKd3V1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJR0SHb2qkB/l4DB/LzvQmPNxYUwHwYDVR0j BBgwFoAUBGpLjEeLOMt++58Gpa2cdIZOn9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNiOGFlOTctNjgxOC00OGE5LWFiZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0 NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4NjRFOUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDZBNEI4QzQ3OEIzOENCN0VGQjlGMDZBNUFEOUM3NDg2NEU5 RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlD NzQ4NjRFOUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/sCUkanJEl4XCnbq1OkTX3lmkOQ921Nnav EbEPzicu35Gr6bQro7WWZHZ4S0paLHSHng9i6TTekLRmCIqvbWeaBdvszJ39CwXO c3EF78TB/XhmueT1+zkpZCk7n/d4GWkHxynx4RH3hyMtm2Eybc/DgLgNsitpUZoi Ll12sEuoPat86cBX8GQ8Gq8qNFa/26kZnzTkZT1UiajyW94KR4WT164vRwfQ9ml9 lFQskxl3vYPiw2TqTjUThPFW51g6s/YjudT3+/32Ci5BOPbmwLtgC8KdZB5mureH LEfylqiLzYbHWchWmDtsnhcroQZvSToM0UUiLmv1bmjF8iZjT3M= -----END CERTIFICATE-----Generated at Tue May 12 22:19:48 2026 by rpki-client