
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
File: 46932859C0D86F27F517A125185AE45763AEA7D7.mft (raw, json)
Hash identifier: eqVI4R8xU/Es9xJFK5IypGew1ZK7qR7CZYa471ovvRw=
Subject key identifier: 2F:1A:50:F5:28:6C:A1:A8:76:EE:C6:FA:54:80:5E:0C:9D:F3:72:32
Authority key identifier: 46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
Certificate issuer: /CN=46932859C0D86F27F517A125185AE45763AEA7D7
Certificate serial: 09DDEEF8A64A67881FA2BDF50568B90AF93AA608
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 20:45:11 +0000
Manifest this update: Tue 02 Jun 2026 20:40:11 +0000
Manifest next update: Wed 03 Jun 2026 22:48:11 +0000
Files and hashes: 1: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: JlLJ7++ECgOuHqdNFhp6s2bGWg+2iwYDZNhy26Z53Oo=)
2: 46932859C0D86F27F517A125185AE45763AEA7D7.crl (hash: 7vBzqHyUyXIx+lvaxta/IHpeFA+FTqITbL7OE7V2F8U=)
3: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: 26c5fhilGEyh6ibLUJuFc5ukaLSiZO65uEMgb+eN6Nk=)
4: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: Trw+y/sXFJtkefRvcCLMU2FAEepNpbCrLf/kUCXfHQE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl
rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 22:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:dd:ee:f8:a6:4a:67:88:1f:a2:bd:f5:05:68:b9:0a:f9:3a:a6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46932859C0D86F27F517A125185AE45763AEA7D7
Validity
Not Before: Jun 2 20:40:11 2026 GMT
Not After : Jun 3 22:48:11 2026 GMT
Subject: CN=2F1A50F5286CA1A876EEC6FA54805E0C9DF37232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:e4:4b:fa:4f:f9:77:c3:49:3a:1d:61:1c:
f1:9a:a5:d9:a3:2b:58:b6:6d:52:c1:01:2d:fc:94:
7a:a7:4a:cb:07:0d:17:12:d1:64:33:94:fb:0b:8f:
dd:37:40:3e:7b:d7:2b:9b:da:90:cc:7b:24:37:08:
ad:cb:ea:8b:b7:d8:e2:f6:d0:ae:6a:42:d4:2e:cf:
17:02:2d:08:35:ac:2a:57:04:7d:15:65:d9:00:bb:
96:3c:1b:a6:7b:d5:9a:f4:9d:a0:ca:4a:98:c9:f4:
55:d4:1f:c8:fb:ef:6d:c6:5d:cb:00:0b:93:2e:f5:
c6:12:45:59:f7:7e:f9:f2:f3:99:46:0e:8e:ac:31:
e8:03:f0:10:b3:78:3f:7e:ba:5d:ac:d5:05:29:9e:
14:01:99:49:66:4a:a0:03:91:fa:ab:59:f4:49:87:
45:9a:0d:20:58:7b:df:e8:f1:3c:15:a2:e4:ad:98:
a1:95:85:68:65:b6:5c:5f:a5:bb:cb:84:32:21:8e:
20:d3:4a:3f:8c:7e:35:5f:b0:a6:4d:2d:ce:79:84:
2d:d5:3d:c7:74:04:bc:bd:13:33:d0:ed:99:c2:ea:
05:96:0e:e8:a1:f4:83:fa:24:e1:f2:40:ec:88:8d:
17:e8:08:12:d5:fe:86:f9:f7:82:33:4b:4d:ad:a8:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:50:F5:28:6C:A1:A8:76:EE:C6:FA:54:80:5E:0C:9D:F3:72:32
X509v3 Authority Key Identifier:
keyid:46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f4:58:48:36:51:86:32:7c:31:2e:9b:4c:3c:86:d4:6d:e3:
1d:84:b7:f8:39:72:4a:a5:24:e2:e0:94:da:6e:cb:6e:b5:87:
3c:f5:8d:dd:b1:76:19:22:c3:b7:19:0d:97:b7:c2:01:ed:17:
e2:b5:17:bf:f5:da:1a:35:32:5a:33:48:89:fb:e4:06:c2:fd:
01:24:98:ce:86:e9:9a:e0:ec:47:44:10:de:2e:96:bd:50:98:
84:d9:b5:c8:69:71:e0:ab:19:9d:25:0d:16:f2:fb:6c:66:6a:
dd:1b:cb:89:1e:6c:d7:ee:49:88:46:b1:12:26:6e:8c:ca:90:
ab:85:c6:80:47:30:ea:2e:3c:d9:96:7c:85:60:fc:31:c3:6a:
a3:57:60:43:bb:4f:f6:23:c7:3d:32:e0:f7:a8:c4:e8:fa:a8:
c4:ae:c7:31:4a:15:c6:07:12:db:10:4d:09:17:8f:22:81:f4:
d8:b0:a8:e6:65:76:d4:14:c5:95:f2:c8:8a:0b:e0:11:da:f5:
50:f9:2c:9a:49:c8:eb:90:c6:da:d4:17:6e:37:5b:ad:86:23:
d5:53:53:4c:95:54:7c:01:5c:50:70:a7:8d:16:6f:f5:bc:b1:
b9:cc:65:00:c8:a6:02:cd:a9:96:a2:5c:99:63:81:2b:46:44:
c7:aa:41:61
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCd3u+KZKZ4gfor31BWi5Cvk6pggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY5MzI4NTlDMEQ4NkYyN0Y1MTdBMTI1MTg1QUU0NTc2
M0FFQTdENzAeFw0yNjA2MDIyMDQwMTFaFw0yNjA2MDMyMjQ4MTFaMDMxMTAvBgNV
BAMTKDJGMUE1MEY1Mjg2Q0ExQTg3NkVFQzZGQTU0ODA1RTBDOURGMzcyMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgeRL+k/5d8NJOh1hHPGapdmj
K1i2bVLBAS38lHqnSssHDRcS0WQzlPsLj903QD571yub2pDMeyQ3CK3L6ou32OL2
0K5qQtQuzxcCLQg1rCpXBH0VZdkAu5Y8G6Z71Zr0naDKSpjJ9FXUH8j7723GXcsA
C5Mu9cYSRVn3fvny85lGDo6sMegD8BCzeD9+ul2s1QUpnhQBmUlmSqADkfqrWfRJ
h0WaDSBYe9/o8TwVouStmKGVhWhltlxfpbvLhDIhjiDTSj+MfjVfsKZNLc55hC3V
Pcd0BLy9EzPQ7ZnC6gWWDuih9IP6JOHyQOyIjRfoCBLV/ob594IzS02tqMcTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULxpQ9Shsoah27sb6VIBeDJ3zcjIwHwYDVR0j
BBgwFoAURpMoWcDYbyf1F6ElGFrkV2Oup9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGVkYzllNGYtODE4MC00MWQ2LWIwOGQtOGVlNWE4YTcwYTA1LzAvNDY5MzI4NTlD
MEQ4NkYyN0Y1MTdBMTI1MTg1QUU0NTc2M0FFQTdENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NjkzMjg1OUMwRDg2RjI3RjUxN0ExMjUxODVBRTQ1NzYzQUVB
N0Q3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw
OGQtOGVlNWE4YTcwYTA1LzAvNDY5MzI4NTlDMEQ4NkYyN0Y1MTdBMTI1MTg1QUU0
NTc2M0FFQTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFj0WEg2UYYyfDEum0w8htRt4x2Et/g5ckql
JOLglNpuy261hzz1jd2xdhkiw7cZDZe3wgHtF+K1F7/12ho1MlozSIn75AbC/QEk
mM6G6Zrg7EdEEN4ulr1QmITZtchpceCrGZ0lDRby+2xmat0by4kebNfuSYhGsRIm
bozKkKuFxoBHMOouPNmWfIVg/DHDaqNXYEO7T/Yjxz0y4PeoxOj6qMSuxzFKFcYH
EtsQTQkXjyKB9NiwqOZldtQUxZXyyIoL4BHa9VD5LJpJyOuQxtrUF243W62GI9VT
U0yVVHwBXFBwp40Wb/W8sbnMZQDIpgLNqZaiXJljgStGRMeqQWE=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:41:15 2026 by rpki-client