$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft File: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft (raw, json) Hash identifier: 6dYWeccmtofh98cI5khQUsrM6bzHuhTv1Np1NSTYBVc= Subject key identifier: 93:CC:F9:75:4A:59:C3:27:F3:03:B9:EC:3C:11:D7:D5:35:00:A7:28 Authority key identifier: 04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 Certificate issuer: /CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Certificate serial: 185A8F9D07D6304C7F06CC62D7E7516FC9293C5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:44:35 +0000 Manifest this update: Tue 02 Jun 2026 11:39:35 +0000 Manifest next update: Wed 03 Jun 2026 14:41:35 +0000 Files and hashes: 1: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: nnMaKehS3/1AXaDrstWHeSvF12XPdKSaOxHeLpG5OPc=) 2: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: oxa0EP+y+hdJofNCCgpYexC5+mjVA3iUnOOBPz/fXeM=) 3: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl (hash: 4L1mYtfGSBWaonZqirj5VXUAu8PzZl6G2Pn+95gVVyM=) 4: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: SaxfvfB1C+pa8JqacbPuSe8u4XyvvbZQ+27IK/agWXM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5a:8f:9d:07:d6:30:4c:7f:06:cc:62:d7:e7:51:6f:c9:29:3c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Validity Not Before: Jun 2 11:39:35 2026 GMT Not After : Jun 3 14:41:35 2026 GMT Subject: CN=93CCF9754A59C327F303B9EC3C11D7D53500A728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:da:39:b5:55:3f:d3:7b:4a:2b:c3:49:c6:3d: 0f:3b:1f:04:b2:a5:23:29:68:04:9a:f5:d7:30:6b: dd:80:52:e3:e3:cf:fc:f1:0c:8b:c4:78:53:17:73: 61:4a:3a:6b:55:f6:f8:2d:97:28:0e:2f:0e:4c:93: a6:5b:78:f6:91:59:ea:86:68:89:21:47:12:b2:79: 8c:02:80:7b:08:3e:d1:39:61:ca:bf:fe:da:aa:6e: 45:4b:e2:47:c1:47:92:96:15:8a:92:5a:05:34:d4: 10:bb:b8:5c:eb:c0:28:ec:cf:25:c1:0e:3c:fd:53: 75:c3:2d:1d:df:2f:3a:92:30:1a:1f:1a:a3:2d:08: 89:2d:91:03:45:7a:4d:be:ad:c9:a4:5e:a0:2b:a6: 95:6c:6c:4e:5e:d7:39:82:5e:85:8e:df:6a:39:4b: f0:21:94:32:dc:a5:1c:fe:20:35:f6:aa:04:ae:63: a7:6c:a9:76:2d:7f:21:69:fa:9e:f3:e9:f7:b1:15: be:fe:db:21:af:dc:48:4b:8e:9f:3e:7f:d7:77:86: 7c:73:3a:11:cd:51:d7:73:51:5e:69:42:4d:7c:0d: 2a:ba:39:5c:f2:67:dd:4d:2d:0d:82:a0:b5:4c:69: 4b:37:01:9d:46:e8:89:5b:a9:99:b7:28:9b:5d:54: 00:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CC:F9:75:4A:59:C3:27:F3:03:B9:EC:3C:11:D7:D5:35:00:A7:28 X509v3 Authority Key Identifier: keyid:04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:94:11:d9:0a:2c:b0:84:f0:f5:af:f3:c3:cd:52:44:fa:35: 5f:38:da:7e:d5:6c:7c:12:1b:9f:e7:e7:2b:ea:17:85:cd:6f: 9e:04:2f:6b:78:d3:9e:c8:fe:f7:17:72:95:42:6c:d5:c9:f9: 45:97:bd:b5:2d:0c:5d:30:7b:fd:4a:ab:82:71:7c:bd:2a:57: 90:08:8f:19:d8:68:e1:21:a6:01:78:96:7b:d9:80:1f:27:5b: f6:3b:8d:b1:0d:77:b0:62:78:8c:f9:e1:fe:4c:57:78:1b:da: b5:64:ce:5b:96:9a:c9:62:7c:44:b6:ee:2f:92:c3:c2:03:aa: 7c:3b:f1:f7:ef:7f:9f:a9:c3:60:d0:c8:43:78:c4:82:54:09: 3e:b2:23:bb:f7:ca:73:62:5e:ae:7a:97:a2:ce:91:c3:d1:8e: 88:0d:10:00:f4:13:e1:d9:7d:89:98:92:e1:b8:af:80:92:a9: 3c:94:f4:34:5e:50:26:12:fc:38:db:ea:19:aa:a9:d8:14:8c: 30:92:fa:5e:c5:63:72:31:07:4d:27:ef:d5:8b:2e:7c:68:4f: f6:e3:53:8e:42:f2:a0:dc:dc:40:11:c2:d4:b5:8c:49:0b:da: 51:64:91:6c:4e:5e:de:d3:9d:60:3f:b2:d5:70:ac:92:1e:29: 7b:70:f8:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFqPnQfWMEx/Bsxi1+dRb8kpPF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4 NjRFOUZEMjAeFw0yNjA2MDIxMTM5MzVaFw0yNjA2MDMxNDQxMzVaMDMxMTAvBgNV BAMTKDkzQ0NGOTc1NEE1OUMzMjdGMzAzQjlFQzNDMTFEN0Q1MzUwMEE3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc2jm1VT/Te0orw0nGPQ87HwSy pSMpaASa9dcwa92AUuPjz/zxDIvEeFMXc2FKOmtV9vgtlygOLw5Mk6ZbePaRWeqG aIkhRxKyeYwCgHsIPtE5Ycq//tqqbkVL4kfBR5KWFYqSWgU01BC7uFzrwCjszyXB Djz9U3XDLR3fLzqSMBofGqMtCIktkQNFek2+rcmkXqArppVsbE5e1zmCXoWO32o5 S/AhlDLcpRz+IDX2qgSuY6dsqXYtfyFp+p7z6fexFb7+2yGv3EhLjp8+f9d3hnxz OhHNUddzUV5pQk18DSq6OVzyZ91NLQ2CoLVMaUs3AZ1G6IlbqZm3KJtdVABZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk8z5dUpZwyfzA7nsPBHX1TUApygwHwYDVR0j BBgwFoAUBGpLjEeLOMt++58Gpa2cdIZOn9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNiOGFlOTctNjgxOC00OGE5LWFiZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0 NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4NjRFOUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDZBNEI4QzQ3OEIzOENCN0VGQjlGMDZBNUFEOUM3NDg2NEU5 RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlD NzQ4NjRFOUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmUEdkKLLCE8PWv88PNUkT6NV842n7VbHwS G5/n5yvqF4XNb54EL2t4057I/vcXcpVCbNXJ+UWXvbUtDF0we/1Kq4JxfL0qV5AI jxnYaOEhpgF4lnvZgB8nW/Y7jbENd7BieIz54f5MV3gb2rVkzluWmslifES27i+S w8IDqnw78ffvf5+pw2DQyEN4xIJUCT6yI7v3ynNiXq56l6LOkcPRjogNEAD0E+HZ fYmYkuG4r4CSqTyU9DReUCYS/Djb6hmqqdgUjDCS+l7FY3IxB00n79WLLnxoT/bj U45C8qDc3EARwtS1jEkL2lFkkWxOXt7TnWA/stVwrJIeKXtw+PE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:55 2026 by rpki-client