$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft File: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft (raw, json) Hash identifier: mcfInxXwfhR4t6fTyQKax94hap+aQpT4OxlVDE1sEXc= Subject key identifier: 51:E6:62:E7:70:C1:9C:BF:3B:59:B0:CB:0E:34:7D:E5:C4:B1:9A:74 Authority key identifier: 04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 Certificate issuer: /CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Certificate serial: 4262454F79D247560789174AEC1F9B9CB9820E7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 10:59:58 +0000 Manifest this update: Mon 20 Jul 2026 10:54:58 +0000 Manifest next update: Tue 21 Jul 2026 14:51:58 +0000 Files and hashes: 1: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: oxa0EP+y+hdJofNCCgpYexC5+mjVA3iUnOOBPz/fXeM=) 2: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl (hash: /RJpABmxtNSLNFEStszo4dgng8SvZ9YLVrP5iTlfQXY=) 3: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: SaxfvfB1C+pa8JqacbPuSe8u4XyvvbZQ+27IK/agWXM=) 4: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: nnMaKehS3/1AXaDrstWHeSvF12XPdKSaOxHeLpG5OPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:62:45:4f:79:d2:47:56:07:89:17:4a:ec:1f:9b:9c:b9:82:0e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Validity Not Before: Jul 20 10:54:58 2026 GMT Not After : Jul 21 14:51:58 2026 GMT Subject: CN=51E662E770C19CBF3B59B0CB0E347DE5C4B19A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:b7:f4:7c:ac:b5:4c:be:42:54:59:85:9a: 67:d8:09:d6:1b:1b:e3:0f:a5:85:bb:47:c9:2c:a9: 1d:d5:60:86:6e:df:98:92:38:c0:e3:d0:c5:85:59: e8:bf:5c:a7:43:91:a1:56:b4:2a:be:86:4a:c2:9f: a1:0b:14:2c:1c:d1:0a:04:7c:c8:50:d1:39:af:72: 51:90:29:6f:f9:53:6f:fe:c8:82:d2:a3:ec:71:b6: a6:26:71:52:a3:ea:40:c9:0b:fb:d0:10:67:c1:7f: 59:d1:6e:eb:de:ce:64:c4:70:f6:ec:83:9a:c7:19: a7:3a:d1:be:c1:0f:1e:f7:00:49:6e:ac:15:f9:6b: fe:78:19:f3:50:f7:f3:a4:79:52:3b:9c:34:89:86: 80:67:b5:bd:74:df:88:0a:d8:a9:98:88:f3:36:7b: 39:ac:92:05:dc:77:12:f3:e6:48:64:60:ac:9f:dc: 6d:94:a7:9a:97:94:11:e0:f6:90:e7:96:9e:ba:04: 7b:74:44:fe:68:cf:22:13:10:7b:88:76:9f:c0:84: 90:b8:4f:4b:46:23:a2:a4:9c:02:6c:89:1d:9d:61: cc:a4:f2:24:d9:76:99:94:7c:b4:90:bc:13:1c:e7: af:64:35:3b:73:11:78:36:6b:bb:4b:17:1e:79:16: 5a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E6:62:E7:70:C1:9C:BF:3B:59:B0:CB:0E:34:7D:E5:C4:B1:9A:74 X509v3 Authority Key Identifier: keyid:04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:57:05:6a:38:7a:b1:37:8b:7c:58:b8:89:08:92:1a:d3:5d: dd:89:94:1a:da:ad:52:bc:4f:d4:a3:49:5c:9a:c5:d8:29:67: 72:e8:9c:82:6f:e5:a1:41:ec:6c:5a:80:c0:01:18:ae:0c:83: 17:1b:b9:ba:27:ef:5c:81:d3:b5:54:b6:26:22:dd:7f:71:f3: f1:0e:a6:07:e7:21:2d:2a:db:cf:3f:bc:ef:77:7e:0f:9a:b4: 21:2d:eb:67:69:65:c2:cd:82:31:c1:ee:f1:ba:53:5e:b4:1a: 87:e6:ff:e0:64:7a:50:78:b3:db:3f:cd:58:18:dc:21:fa:4a: 83:40:0f:d6:81:fa:90:02:a7:43:12:1d:64:53:9f:5b:2f:83: 76:45:35:1b:d5:54:85:11:96:e2:91:3e:5e:85:ab:8b:b9:75: 3f:fa:45:18:7d:d5:a9:49:be:09:3a:dc:c9:25:e1:7f:ef:bf: 2a:a7:6b:25:b2:33:f0:b6:2d:03:7b:a7:61:45:75:38:4d:36: 0b:d5:80:45:ee:f2:60:d8:9a:2f:6a:bd:73:f0:82:cc:5a:30: 37:75:26:e4:ac:80:88:e0:e6:4e:b9:4d:33:68:ce:2e:41:4b: 8c:db:82:c7:a9:a4:95:9a:be:af:c3:7a:29:64:97:6d:5b:77: 49:cf:d1:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmJFT3nSR1YHiRdK7B+bnLmCDnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4 NjRFOUZEMjAeFw0yNjA3MjAxMDU0NThaFw0yNjA3MjExNDUxNThaMDMxMTAvBgNV BAMTKDUxRTY2MkU3NzBDMTlDQkYzQjU5QjBDQjBFMzQ3REU1QzRCMTlBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Zbf0fKy1TL5CVFmFmmfYCdYb G+MPpYW7R8ksqR3VYIZu35iSOMDj0MWFWei/XKdDkaFWtCq+hkrCn6ELFCwc0QoE fMhQ0TmvclGQKW/5U2/+yILSo+xxtqYmcVKj6kDJC/vQEGfBf1nRbuvezmTEcPbs g5rHGac60b7BDx73AElurBX5a/54GfNQ9/OkeVI7nDSJhoBntb1034gK2KmYiPM2 ezmskgXcdxLz5khkYKyf3G2Up5qXlBHg9pDnlp66BHt0RP5ozyITEHuIdp/AhJC4 T0tGI6KknAJsiR2dYcyk8iTZdpmUfLSQvBMc569kNTtzEXg2a7tLFx55FlpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUeZi53DBnL87WbDLDjR95cSxmnQwHwYDVR0j BBgwFoAUBGpLjEeLOMt++58Gpa2cdIZOn9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNiOGFlOTctNjgxOC00OGE5LWFiZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0 NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4NjRFOUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDZBNEI4QzQ3OEIzOENCN0VGQjlGMDZBNUFEOUM3NDg2NEU5 RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlD NzQ4NjRFOUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVXBWo4erE3i3xYuIkIkhrTXd2JlBrarVK8 T9SjSVyaxdgpZ3LonIJv5aFB7GxagMABGK4Mgxcbubon71yB07VUtiYi3X9x8/EO pgfnIS0q288/vO93fg+atCEt62dpZcLNgjHB7vG6U160Gofm/+BkelB4s9s/zVgY 3CH6SoNAD9aB+pACp0MSHWRTn1svg3ZFNRvVVIURluKRPl6Fq4u5dT/6RRh91alJ vgk63Mkl4X/vvyqnayWyM/C2LQN7p2FFdThNNgvVgEXu8mDYmi9qvXPwgsxaMDd1 JuSsgIjg5k65TTNozi5BS4zbgseppJWavq/Deilkl21bd0nP0YI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:30 2026 by rpki-client