$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft File: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json) Hash identifier: Xm6r/Kgkzrpf4Jn9Q2fibvXFVnW8VOsvA5duVbwQ7Bk= Subject key identifier: D9:45:EC:A6:D5:78:AA:12:E1:FE:21:01:07:B0:3B:4C:7E:3D:DC:09 Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 5E58C9CDC0ECF4FC98AF22527B516236C9402E27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft Manifest number: 0152 Signing time: Mon 20 Apr 2026 11:32:13 +0000 Manifest this update: Mon 20 Apr 2026 11:27:13 +0000 Manifest next update: Thu 23 Apr 2026 13:14:13 +0000 Files and hashes: 1: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: SBcL2FxAleHsZdLrmNaBAPAMFnGrBe39VRRA8KyX6lw=) 2: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: vB79AQ7LVU9msWJ/4Zg3oCzBcGrchuHrWRYyI1kBoZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 13:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:58:c9:cd:c0:ec:f4:fc:98:af:22:52:7b:51:62:36:c9:40:2e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Apr 20 11:27:13 2026 GMT Not After : Apr 23 13:14:13 2026 GMT Subject: CN=D945ECA6D578AA12E1FE210107B03B4C7E3DDC09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:79:ec:9e:f4:4c:45:93:fe:be:7b:0d:1f: b4:6e:e3:a2:ff:de:e7:55:5b:4f:91:89:63:09:ff: 29:29:b5:61:5d:5e:bb:0c:71:49:c5:70:71:ae:de: 4a:d4:89:e2:94:80:eb:a8:6c:23:7b:89:86:b2:5e: 75:11:df:9e:e1:99:93:3c:52:9a:cd:33:32:b1:22: 1a:84:c1:9f:3e:c0:a4:86:6b:60:74:8b:0d:4f:74: 25:2f:9a:5e:1c:8d:87:ee:ae:82:f5:30:9c:8c:32: 9d:cb:12:ee:c3:2d:6b:86:02:e5:57:53:4c:0b:b4: c6:fe:72:ea:e4:fd:80:6b:fe:c7:41:bb:fb:1f:80: fa:2c:16:ca:58:58:67:58:5e:05:01:e4:f3:de:e0: 3f:ff:f7:ac:f6:e0:3b:ad:b3:6f:1a:b5:58:3d:32: af:c4:88:52:98:da:1a:d1:b4:51:18:92:04:a3:14: a8:d9:9c:fb:7c:98:32:89:7d:e8:8c:88:65:98:7e: 7a:2c:f2:57:a0:cf:7e:7f:56:31:ab:30:5d:1c:57: 09:ec:d4:be:00:54:e9:f2:1d:ca:2f:b7:f9:f5:86: a4:21:40:05:34:30:d9:59:69:0e:2c:d5:f8:36:8d: 0b:54:07:2b:a3:6f:00:45:ab:9b:1c:d0:11:1a:4c: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:45:EC:A6:D5:78:AA:12:E1:FE:21:01:07:B0:3B:4C:7E:3D:DC:09 X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d3:bc:3e:20:4c:d7:5e:43:1f:36:15:64:4c:93:9a:85:46: 63:3d:c7:cd:38:02:54:0e:08:3f:98:f5:5a:da:6f:d2:46:16: 83:c2:d6:6f:6b:06:78:da:6a:36:50:f7:7e:54:64:42:a1:0b: 2d:b9:49:51:b2:b5:da:82:8a:53:84:f1:8d:58:4d:f3:98:06: 44:dd:0e:26:60:5d:44:63:5a:e1:45:8c:1f:bd:95:06:a8:bc: 91:f7:b4:15:f5:bd:45:0a:81:b0:48:73:df:e1:f6:cd:18:f5: 1a:16:5d:92:f4:db:86:8d:72:05:7d:c3:e1:2d:72:87:30:be: e7:f9:74:7b:8c:01:d9:18:bf:e9:29:dd:cc:1f:e7:70:4b:8b: ec:a3:f2:49:86:75:7c:c7:37:20:1a:bd:54:86:c8:aa:a6:4f: 7b:a3:be:96:2b:cd:97:84:da:a1:36:27:4c:59:2f:72:ce:43: 2e:b9:67:16:99:ff:a3:41:96:e2:3b:2b:09:ff:e2:36:a7:71: 1a:ce:68:c5:be:c2:ae:ec:8b:46:52:02:26:43:8e:69:02:3c: 32:0b:ab:26:f5:16:b8:c3:19:f2:9d:60:61:4b:7a:3a:ee:a1: b0:94:cf:cc:da:4d:c0:29:90:26:a9:8b:c5:bd:0d:2b:73:bc: 67:b2:a9:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXljJzcDs9PyYryJSe1FiNslALicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlB QUVCNUQwMzAeFw0yNjA0MjAxMTI3MTNaFw0yNjA0MjMxMzE0MTNaMDMxMTAvBgNV BAMTKEQ5NDVFQ0E2RDU3OEFBMTJFMUZFMjEwMTA3QjAzQjRDN0UzRERDMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FXnsnvRMRZP+vnsNH7Ru46L/ 3udVW0+RiWMJ/ykptWFdXrsMcUnFcHGu3krUieKUgOuobCN7iYayXnUR357hmZM8 UprNMzKxIhqEwZ8+wKSGa2B0iw1PdCUvml4cjYfuroL1MJyMMp3LEu7DLWuGAuVX U0wLtMb+curk/YBr/sdBu/sfgPosFspYWGdYXgUB5PPe4D//96z24Duts28atVg9 Mq/EiFKY2hrRtFEYkgSjFKjZnPt8mDKJfeiMiGWYfnos8legz35/VjGrMF0cVwns 1L4AVOnyHcovt/n1hqQhQAU0MNlZaQ4s1fg2jQtUByujbwBFq5sc0BEaTAnxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UXsptV4qhLh/iEBB7A7TH493AkwHwYDVR0j BBgwFoAURqLmNP/0CuVF7H22eoiBiarrXQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjg4MGRkYi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC80NkEyRTYzNEZG RjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1RDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlBQUVC NUQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgx ODlBQUVCNUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7TvD4gTNdeQx82FWRMk5qFRmM9x804AlQO CD+Y9Vrab9JGFoPC1m9rBnjaajZQ935UZEKhCy25SVGytdqCilOE8Y1YTfOYBkTd DiZgXURjWuFFjB+9lQaovJH3tBX1vUUKgbBIc9/h9s0Y9RoWXZL024aNcgV9w+Et cocwvuf5dHuMAdkYv+kp3cwf53BLi+yj8kmGdXzHNyAavVSGyKqmT3ujvpYrzZeE 2qE2J0xZL3LOQy65ZxaZ/6NBluI7Kwn/4jancRrOaMW+wq7si0ZSAiZDjmkCPDIL qyb1FrjDGfKdYGFLejruobCUz8zaTcApkCapi8W9DStzvGeyqRY= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:38 2026 by rpki-client