$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft File: 46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft (raw, json) Hash identifier: sHouLD+t2jbCy6+4nY1kky0Z5Xd56qvl34/D5aXTjos= Subject key identifier: 9D:6E:6C:96:4D:14:C2:E3:8A:9F:E7:8A:1D:14:C2:E6:7E:45:8C:E5 Authority key identifier: 46:F8:F0:A6:E7:4A:50:56:E6:3C:04:1A:EC:C5:51:72:3D:E9:FC:1F Certificate issuer: /CN=46F8F0A6E74A5056E63C041AECC551723DE9FC1F Certificate serial: 21F7C419953BD5D113396837D46272CE9FE267AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 20:59:00 +0000 Manifest this update: Mon 02 Nov 2026 20:54:00 +0000 Manifest next update: Tue 03 Nov 2026 23:26:00 +0000 Files and hashes: 1: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: cmFTYv98kn/mEZWP5EcJYaksJif2GXeXwCVgddmTNmI=) 2: 46F8F0A6E74A5056E63C041AECC551723DE9FC1F.crl (hash: xM2f9qfofRlW17kpXwYF+6wfWWkBNnEfagYGIs/pQmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.crl rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 23:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f7:c4:19:95:3b:d5:d1:13:39:68:37:d4:62:72:ce:9f:e2:67:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46F8F0A6E74A5056E63C041AECC551723DE9FC1F Validity Not Before: Nov 2 20:54:00 2026 GMT Not After : Nov 3 23:26:00 2026 GMT Subject: CN=9D6E6C964D14C2E38A9FE78A1D14C2E67E458CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:da:e4:8c:6a:18:5b:bf:1e:89:f3:a2:46: 99:0e:04:5f:2d:8c:7b:71:74:b1:4a:b1:32:2a:0b: eb:97:fa:cb:4b:5b:ae:10:09:bc:34:60:b1:c4:3d: a2:e7:23:de:ca:d5:2f:8e:09:0d:35:af:79:c5:04: e6:1a:15:1b:92:51:cf:e5:fb:a7:3f:12:4e:db:95: 59:f4:aa:5f:b9:34:72:9b:ba:2f:90:f8:98:3a:e5: 2c:c2:10:27:9c:52:3d:8c:0d:bf:35:8d:63:dc:a9: 81:6c:ef:a4:99:10:63:e6:18:70:49:a5:0d:5e:65: fc:38:cf:67:0f:a3:ad:92:73:5d:38:fa:53:bb:ce: b8:24:af:4a:88:db:f5:91:53:d7:6c:69:88:90:ec: 4f:8a:a0:0e:90:55:04:c9:f5:77:d1:06:2b:09:e9: 89:38:12:7f:8c:7c:55:63:f5:ca:5e:03:86:6e:16: 80:e0:08:47:cc:17:da:56:c8:65:f6:27:93:ba:f7: ec:03:89:a7:5b:25:a8:06:e8:c4:35:bf:3d:e8:98: a0:56:a6:9c:9a:4c:64:b6:cf:e5:f7:4f:16:f2:57: ec:2b:cb:29:a8:c7:86:37:b3:63:b3:76:fc:99:a1: 97:e1:74:e4:b1:9d:39:da:28:03:ff:7e:b0:19:92: b7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6E:6C:96:4D:14:C2:E3:8A:9F:E7:8A:1D:14:C2:E6:7E:45:8C:E5 X509v3 Authority Key Identifier: keyid:46:F8:F0:A6:E7:4A:50:56:E6:3C:04:1A:EC:C5:51:72:3D:E9:FC:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6e:ba:d3:f0:88:a9:82:cd:bc:dd:04:08:58:c6:d8:1a:95: 61:fb:7c:26:0a:a4:c9:5a:c0:bc:44:27:4a:9d:e4:15:80:68: 37:24:c3:51:07:33:34:c8:e4:69:8c:09:ba:e5:01:c2:ee:e7: 0c:75:b5:3b:44:28:da:ba:ab:e2:46:33:29:df:55:d3:69:0b: 24:ae:59:36:38:83:b0:ee:3b:b7:88:c5:74:e7:7c:bc:a4:8b: 10:05:8a:52:5a:62:67:71:57:c6:40:31:2d:f4:25:b7:2d:5a: 1c:ca:90:cc:f7:93:c9:52:56:a6:ec:ab:28:40:15:10:04:14: 53:b8:8b:90:e1:54:b7:51:1f:99:c5:1b:f1:d2:e5:55:4a:d5: f0:3a:e0:16:f3:58:6b:85:d7:7d:45:89:99:7e:58:96:bc:18: 1e:98:1b:78:77:4c:fc:28:c2:8f:7d:87:5e:01:89:ac:75:29: cb:e8:7f:7d:b5:e2:28:64:60:ec:ba:9f:55:29:59:08:88:e2: f4:a3:8b:9b:57:c7:b1:ac:71:31:d6:63:42:3d:96:d5:b7:9d: 59:1c:91:aa:d2:cf:51:36:4a:ad:0d:4c:0d:0b:4a:0c:da:2a: 48:d4:fe:cb:17:40:dc:52:4f:4a:10:6d:0c:de:f9:5f:e6:8b: f1:8c:2c:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIffEGZU71dETOWg31GJyzp/iZ60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZGOEYwQTZFNzRBNTA1NkU2M0MwNDFBRUNDNTUxNzIz REU5RkMxRjAeFw0yNjExMDIyMDU0MDBaFw0yNjExMDMyMzI2MDBaMDMxMTAvBgNV BAMTKDlENkU2Qzk2NEQxNEMyRTM4QTlGRTc4QTFEMTRDMkU2N0U0NThDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmNrkjGoYW78eifOiRpkOBF8t jHtxdLFKsTIqC+uX+stLW64QCbw0YLHEPaLnI97K1S+OCQ01r3nFBOYaFRuSUc/l +6c/Ek7blVn0ql+5NHKbui+Q+Jg65SzCECecUj2MDb81jWPcqYFs76SZEGPmGHBJ pQ1eZfw4z2cPo62Sc104+lO7zrgkr0qI2/WRU9dsaYiQ7E+KoA6QVQTJ9XfRBisJ 6Yk4En+MfFVj9cpeA4ZuFoDgCEfMF9pWyGX2J5O69+wDiadbJagG6MQ1vz3omKBW ppyaTGS2z+X3TxbyV+wryymox4Y3s2OzdvyZoZfhdOSxnTnaKAP/frAZkrevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnW5slk0UwuOKn+eKHRTC5n5FjOUwHwYDVR0j BBgwFoAURvjwpudKUFbmPAQa7MVRcj3p/B8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY4ZDgyNGQtZDZhMS00NTQzLTljZjAtZDk5MjY4MzJmMjlmLzAvNDZGOEYwQTZF NzRBNTA1NkU2M0MwNDFBRUNDNTUxNzIzREU5RkMxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80NkY4RjBBNkU3NEE1MDU2RTYzQzA0MUFFQ0M1NTE3MjNERTlG QzFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvNDZGOEYwQTZFNzRBNTA1NkU2M0MwNDFBRUNDNTUx NzIzREU5RkMxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtuutPwiKmCzbzdBAhYxtgalWH7fCYKpMla wLxEJ0qd5BWAaDckw1EHMzTI5GmMCbrlAcLu5wx1tTtEKNq6q+JGMynfVdNpCySu WTY4g7DuO7eIxXTnfLykixAFilJaYmdxV8ZAMS30JbctWhzKkMz3k8lSVqbsqyhA FRAEFFO4i5DhVLdRH5nFG/HS5VVK1fA64BbzWGuF131FiZl+WJa8GB6YG3h3TPwo wo99h14Biax1Kcvof3214ihkYOy6n1UpWQiI4vSji5tXx7GscTHWY0I9ltW3nVkc karSz1E2Sq0NTA0LSgzaKkjU/ssXQNxST0oQbQze+V/mi/GMLAw= -----END CERTIFICATE-----Generated at Tue Nov 3 13:19:33 2026 by rpki-client