$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft File: 46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft (raw, json) Hash identifier: YdF5cX4H/TXzomFNfvZVfdszjWCm1gW/Zn/Z5RpvrXc= Subject key identifier: 36:8A:C2:90:2D:D4:87:49:3A:C6:79:3A:EF:CC:2E:AE:A4:E3:58:6B Authority key identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F Certificate issuer: /CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F Certificate serial: 100890A0AD1BDFE4973C804C3633EB21A243D4F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft Manifest number: F3 Signing time: Sun 01 Nov 2026 00:28:13 +0000 Manifest this update: Sun 01 Nov 2026 00:23:13 +0000 Manifest next update: Mon 02 Nov 2026 00:30:13 +0000 Files and hashes: 1: 46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl (hash: gEyXIULNzMmtuTihm3K+EcMwgUwWcJmV/yW99GTWAWg=) 2: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: /LgC9mtYgR6oGEgu/CxTVNw9E4BQBfj6BuM/4svSIN4=) 3: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: fti8KMcK7Su1rf6h/nPpwfsRIDldzix1ecJxj65TBmc=) 4: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: 3BwispZxvie5HA8ZPKSlj+DmXQJa2RqkjXaOSsS1x1Y=) 5: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: eUuw3yw55g0fngkB7tsUSkh/znzGsN9FtMfeP3wJOV4=) 6: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (hash: mOIy6jqUeVMspfreDn1PT5EUDCXF4LQ8aTefz/4cLLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 00:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:08:90:a0:ad:1b:df:e4:97:3c:80:4c:36:33:eb:21:a2:43:d4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F Validity Not Before: Nov 1 00:23:13 2026 GMT Not After : Nov 2 00:30:13 2026 GMT Subject: CN=368AC2902DD487493AC6793AEFCC2EAEA4E3586B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:52:3a:eb:84:2a:6f:6d:06:3e:bb:dc:10:2e: 51:73:aa:f6:6d:35:68:f8:95:7f:2f:06:f1:04:e1: 97:8a:14:78:08:3e:98:81:f5:d2:bc:35:eb:e2:6a: d0:2f:ae:a8:d6:72:2e:ff:f9:4d:0b:59:53:de:a2: fc:ec:8f:4a:16:8f:0b:a0:c3:ab:1c:18:fe:fa:7d: a5:83:6c:71:8f:2a:a5:1a:24:98:4f:3c:53:5c:6b: 22:23:e6:7e:8a:af:eb:c2:2b:2d:c0:f5:29:0d:fe: 8e:21:d4:03:c3:4d:db:ef:0b:f5:25:c6:b5:a4:d3: 1c:5c:7d:e7:5f:a8:20:d7:81:ee:ce:8c:8a:60:35: 98:ce:94:4f:6c:b6:27:f7:e4:96:1d:9a:97:d2:b6: 1d:e2:53:83:1e:3e:80:5a:e6:ad:bc:0b:e6:5c:dc: 0d:67:3c:7a:df:84:5e:f6:4a:43:ce:14:5f:83:67: 7e:41:71:d9:76:1b:6a:27:00:16:11:97:e6:02:ef: 73:48:01:a4:bb:33:60:3f:7e:aa:3b:94:d8:0c:d4: a4:58:4e:ad:a1:89:d0:48:fc:bb:a5:8c:28:ce:96: 2d:c7:c7:cc:2b:70:7d:8f:6c:27:53:12:c3:41:f6: 47:bb:d9:2d:58:b0:16:6f:76:d9:61:a8:fa:23:ce: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8A:C2:90:2D:D4:87:49:3A:C6:79:3A:EF:CC:2E:AE:A4:E3:58:6B X509v3 Authority Key Identifier: keyid:46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:a5:9d:83:79:79:61:76:b7:06:e3:f0:93:f7:a2:e3:f9:db: 81:ee:ec:36:8e:16:57:3b:a9:c4:6c:10:06:67:23:22:88:b6: 03:2c:c3:0a:a8:d3:3e:52:ff:e4:27:a1:81:fc:9c:02:df:23: 60:18:93:cb:dd:f0:29:4a:d9:c7:8f:c1:c1:f5:10:bf:65:55: ea:29:8c:34:17:65:be:25:0b:b3:a6:b2:58:a9:49:91:d6:0e: c6:7b:ff:73:c1:8e:9e:95:29:e7:de:35:3d:d4:83:b2:65:57: 9f:02:cf:df:08:a9:ee:f6:3a:fa:da:f9:c8:30:04:b7:89:85: 75:5c:e3:b2:03:35:e7:ae:dd:8e:e8:52:2d:1f:83:d5:f5:df: aa:44:be:7f:67:fc:e1:20:ff:bd:f0:53:8e:7a:4f:fa:01:28: 4f:9d:6a:34:cf:34:0f:26:d3:b3:17:94:c9:81:3f:6b:b8:c6: ee:2f:76:9a:df:09:1a:00:6a:4f:70:f1:06:a8:ba:31:c2:d2: 66:39:fe:8e:c0:37:4e:d9:6e:9b:67:06:c0:dd:f4:f6:da:a6: 1b:59:e5:56:f0:f9:5f:81:31:3d:a6:fc:22:35:d5:03:79:e4: 12:f1:0e:fe:ff:ab:e8:b0:83:27:a2:83:99:9c:b3:11:21:b2: b6:e9:9b:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAiQoK0b3+SXPIBMNjPrIaJD1PYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFMzE0ODEyRkIzMERFMDEzNkNDODdGMDBFRjk4QkE0 QThGN0Y0RjAeFw0yNjExMDEwMDIzMTNaFw0yNjExMDIwMDMwMTNaMDMxMTAvBgNV BAMTKDM2OEFDMjkwMkRENDg3NDkzQUM2NzkzQUVGQ0MyRUFFQTRFMzU4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUjrrhCpvbQY+u9wQLlFzqvZt NWj4lX8vBvEE4ZeKFHgIPpiB9dK8NeviatAvrqjWci7/+U0LWVPeovzsj0oWjwug w6scGP76faWDbHGPKqUaJJhPPFNcayIj5n6Kr+vCKy3A9SkN/o4h1APDTdvvC/Ul xrWk0xxcfedfqCDXge7OjIpgNZjOlE9stif35JYdmpfSth3iU4MePoBa5q28C+Zc 3A1nPHrfhF72SkPOFF+DZ35Bcdl2G2onABYRl+YC73NIAaS7M2A/fqo7lNgM1KRY Tq2hidBI/LuljCjOli3Hx8wrcH2PbCdTEsNB9ke72S1YsBZvdtlhqPojzvGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNorCkC3Uh0k6xnk678wurqTjWGswHwYDVR0j BBgwFoAURuMUgS+zDeATbMh/AO+YukqPf08wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVmMmM2NmMtMWY4Ny00ZDk4LWE0NjctMzIxOGI2NDViM2FjLzAvNDZFMzE0ODEy RkIzMERFMDEzNkNDODdGMDBFRjk4QkE0QThGN0Y0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NkUzMTQ4MTJGQjMwREUwMTM2Q0M4N0YwMEVGOThCQTRBOEY3 RjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVmMmM2NmMtMWY4Ny00ZDk4LWE0 NjctMzIxOGI2NDViM2FjLzAvNDZFMzE0ODEyRkIzMERFMDEzNkNDODdGMDBFRjk4 QkE0QThGN0Y0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2lnYN5eWF2twbj8JP3ouP524Hu7DaOFlc7 qcRsEAZnIyKItgMswwqo0z5S/+QnoYH8nALfI2AYk8vd8ClK2cePwcH1EL9lVeop jDQXZb4lC7OmslipSZHWDsZ7/3PBjp6VKefeNT3Ug7JlV58Cz98Iqe72Ovra+cgw BLeJhXVc47IDNeeu3Y7oUi0fg9X136pEvn9n/OEg/73wU456T/oBKE+dajTPNA8m 07MXlMmBP2u4xu4vdprfCRoAak9w8QaoujHC0mY5/o7AN07ZbptnBsDd9PbaphtZ 5Vbw+V+BMT2m/CI11QN55BLxDv7/q+iwgyeig5mcsxEhsrbpm1M= -----END CERTIFICATE-----Generated at Sun Nov 1 18:46:23 2026 by rpki-client