$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft File: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft (raw, json) Hash identifier: rtnIVdggSFj6jda8c90XzfTkSaa/O71qF4N7nfS4LVE= Subject key identifier: 21:63:B5:98:BD:54:9D:CE:C9:2E:D2:0F:57:B7:98:7F:8A:93:CD:DE Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0 Certificate issuer: /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0 Certificate serial: 0ECEDB0ED2EE2A4A3558E640961E75877DFFFA40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft Manifest number: EA Signing time: Sat 24 Oct 2026 07:02:41 +0000 Manifest this update: Sat 24 Oct 2026 06:57:41 +0000 Manifest next update: Sun 25 Oct 2026 10:45:41 +0000 Files and hashes: 1: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 8IXeZT2nMIplDuKAy9sTdwidwLtl6QHRFLk7GQI0XlE=) 2: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: oJrAXv58oZDMk40W9JRPwNDx1VF9IQdEUdgQPzLFkmg=) 3: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=) 4: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: P3rNCMyzAiokg7rVA737lP8Lovb0gWKaIdt9sIaalEY=) 5: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: jcwrytSrVr9iAZjPRv58Wx2zSE/xYS0utsjnTbXZlh8=) 6: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: 1okkgqoiBVDWBMw8B8fUz+WUWSrHUDprl2WG1iMqp8w=) 7: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: uXr8DnKi8QtOAVEEstmImQaN4M7bPiEAwEuGTottsCo=) 8: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl (hash: GTiDM5RYPWcS9nufn5QqNAIBYIPL6RsTAK76f5eR87w=) 9: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: WTtSNSnNo9oz9/i7rHt1jxuFUkS6d/teW8M9wk46Nik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ce:db:0e:d2:ee:2a:4a:35:58:e6:40:96:1e:75:87:7d:ff:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0 Validity Not Before: Oct 24 06:57:41 2026 GMT Not After : Oct 25 10:45:41 2026 GMT Subject: CN=2163B598BD549DCEC92ED20F57B7987F8A93CDDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:d4:29:7a:2b:33:93:1f:9b:43:75:a0:e9: 1f:25:1a:5f:de:30:32:1e:c4:a3:44:a2:5b:4a:63: 06:05:bc:3d:61:f8:9e:eb:bb:f6:12:45:5e:f1:8c: 92:99:10:bb:03:92:4c:3d:b5:d8:e1:c8:61:f6:8d: f2:2d:4f:2d:1c:61:f2:a0:9e:3f:71:df:c2:46:97: 3a:92:35:3f:ea:83:db:3d:b2:f4:60:19:4c:66:8f: 0f:ee:45:70:a7:c2:ce:b2:e2:8f:be:a6:2c:79:2b: 50:9e:14:6a:85:c2:bd:84:0c:6f:a1:7e:72:2d:ed: 03:01:4f:cd:49:b9:c4:12:60:4c:96:49:55:8b:cf: 3a:71:89:bb:f5:f8:49:da:bc:6a:9f:c1:a6:07:6e: 68:d0:70:45:ca:96:96:f6:2d:7a:09:a3:b2:45:e8: 86:f6:33:10:ac:c2:67:d7:4c:d5:7b:20:03:55:8a: 20:b7:de:bd:d9:d6:c8:e5:b7:ca:48:3c:af:ed:a4: 89:f0:41:ae:a8:ff:ec:a5:45:06:57:b6:61:4f:72: 18:c0:0d:12:a2:40:b0:6a:5e:ce:23:94:9c:b5:c5: 5e:02:f7:f2:de:c8:cc:9b:95:00:12:c8:c4:41:d6: b0:3b:71:13:ac:c6:6d:ad:31:9e:65:a1:f7:ee:de: 7f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:63:B5:98:BD:54:9D:CE:C9:2E:D2:0F:57:B7:98:7F:8A:93:CD:DE X509v3 Authority Key Identifier: keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:eb:b2:74:c0:17:b6:b3:f0:6f:da:e4:1d:1e:83:1e:54:7c: 46:9c:81:46:56:58:ed:28:de:de:a4:f2:21:ef:2b:a2:9c:4c: 77:33:7e:18:a0:37:c3:ae:ee:85:30:32:30:e2:fb:bc:1d:76: 34:66:30:35:dd:22:6c:63:d0:c1:25:de:f2:e2:fd:a0:10:cb: 01:7d:56:cb:26:20:fa:b3:09:c9:41:eb:f8:4f:ed:33:ff:72: 80:55:33:b5:6e:81:8e:9c:01:77:fb:06:ce:bf:62:87:78:a6: 95:0d:82:82:fc:d7:05:62:56:20:7e:c4:60:7f:a6:f8:9a:1a: 6c:ba:ba:eb:8c:09:4e:9c:99:fa:25:c0:41:a7:fd:a0:8d:c7: cd:a6:c8:b9:cc:11:91:6e:1c:8b:aa:14:15:3b:3b:fb:c1:04: 09:f8:bb:de:21:6e:5d:2f:25:20:7d:c6:e5:9d:fc:53:a4:b7: 77:ff:8a:ea:d2:63:25:5e:98:50:10:0d:30:f0:2a:8b:cf:7d: 93:7e:8d:4b:06:f3:6e:3d:ec:bc:d3:0b:af:2b:cd:e1:f4:ee: db:e6:2f:aa:03:80:60:1c:3d:af:f9:55:72:84:92:72:c8:0f: 42:6d:20:b2:32:88:49:8d:f4:18:4c:f4:a1:03:22:57:dd:4b: 95:27:f4:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDs7bDtLuKko1WOZAlh51h33/+kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2NjkzNTVFQkIwRkUzQUU2QzA2QzhERjdBOTE3QkVC NDg4NDlBMDAeFw0yNjEwMjQwNjU3NDFaFw0yNjEwMjUxMDQ1NDFaMDMxMTAvBgNV BAMTKDIxNjNCNTk4QkQ1NDlEQ0VDOTJFRDIwRjU3Qjc5ODdGOEE5M0NEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JNQpeiszkx+bQ3Wg6R8lGl/e MDIexKNEoltKYwYFvD1h+J7ru/YSRV7xjJKZELsDkkw9tdjhyGH2jfItTy0cYfKg nj9x38JGlzqSNT/qg9s9svRgGUxmjw/uRXCnws6y4o++pix5K1CeFGqFwr2EDG+h fnIt7QMBT81JucQSYEyWSVWLzzpxibv1+EnavGqfwaYHbmjQcEXKlpb2LXoJo7JF 6Ib2MxCswmfXTNV7IANViiC33r3Z1sjlt8pIPK/tpInwQa6o/+ylRQZXtmFPchjA DRKiQLBqXs4jlJy1xV4C9/LeyMyblQASyMRB1rA7cROsxm2tMZ5loffu3n/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIWO1mL1Unc7JLtIPV7eYf4qTzd4wHwYDVR0j BBgwFoAURmaTVeuw/jrmwGyN96kXvrSISaAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRkYzFkZDgtNmQyNS00N2M3LWFhYTQtYmRkZjFiOWQ2NzdlLzAvNDY2NjkzNTVF QkIwRkUzQUU2QzA2QzhERjdBOTE3QkVCNDg4NDlBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NjY2OTM1NUVCQjBGRTNBRTZDMDZDOERGN0E5MTdCRUI0ODg0 OUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvNDY2NjkzNTVFQkIwRkUzQUU2QzA2QzhERjdBOTE3 QkVCNDg4NDlBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHrsnTAF7az8G/a5B0egx5UfEacgUZWWO0o 3t6k8iHvK6KcTHczfhigN8Ou7oUwMjDi+7wddjRmMDXdImxj0MEl3vLi/aAQywF9 VssmIPqzCclB6/hP7TP/coBVM7VugY6cAXf7Bs6/Yod4ppUNgoL81wViViB+xGB/ pviaGmy6uuuMCU6cmfolwEGn/aCNx82myLnMEZFuHIuqFBU7O/vBBAn4u94hbl0v JSB9xuWd/FOkt3f/iurSYyVemFAQDTDwKovPfZN+jUsG82497LzTC68rzeH07tvm L6oDgGAcPa/5VXKEknLID0JtILIyiEmN9BhM9KEDIlfdS5Un9N0= -----END CERTIFICATE-----Generated at Sat Oct 24 10:13:01 2026 by rpki-client