$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft File: 46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft (raw, json) Hash identifier: Sw4Wv1cBz0rqQsgQQ6FtACsI0tFVndEJdG/DJ1CdvwY= Subject key identifier: 04:88:32:3B:77:9C:D1:66:65:05:92:20:E2:BE:FF:62:75:B9:FE:0C Authority key identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F Certificate issuer: /CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F Certificate serial: 05F6683DD4991C530B29B8FB828B38AA6CC2D943 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 19:33:18 +0000 Manifest this update: Wed 16 Sep 2026 19:28:18 +0000 Manifest next update: Thu 17 Sep 2026 20:38:18 +0000 Files and hashes: 1: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: eUuw3yw55g0fngkB7tsUSkh/znzGsN9FtMfeP3wJOV4=) 2: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: /LgC9mtYgR6oGEgu/CxTVNw9E4BQBfj6BuM/4svSIN4=) 3: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (hash: mOIy6jqUeVMspfreDn1PT5EUDCXF4LQ8aTefz/4cLLc=) 4: 46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl (hash: dMZY2ladd599g2xjc/L0A4MWgFY2Fi5G1FIPpMMzRKg=) 5: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: 3BwispZxvie5HA8ZPKSlj+DmXQJa2RqkjXaOSsS1x1Y=) 6: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: fti8KMcK7Su1rf6h/nPpwfsRIDldzix1ecJxj65TBmc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f6:68:3d:d4:99:1c:53:0b:29:b8:fb:82:8b:38:aa:6c:c2:d9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F Validity Not Before: Sep 16 19:28:18 2026 GMT Not After : Sep 17 20:38:18 2026 GMT Subject: CN=0488323B779CD16665059220E2BEFF6275B9FE0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:91:af:85:0f:14:d0:35:e0:55:e2:e8:d9: 14:be:c7:19:fd:fb:ef:36:68:6e:e4:fc:63:3b:cc: e8:18:02:61:4f:df:cf:57:9f:2b:4d:fd:0a:5a:23: 22:cc:f6:fe:4c:c4:6b:6b:b9:fa:da:48:da:e6:2a: cf:2d:d6:bc:7b:3c:a6:88:7b:6a:b1:b8:5c:b7:d9: f2:1f:bf:cc:70:ba:9b:93:70:1c:47:53:eb:08:50: dd:ba:e2:fa:e3:ae:55:a2:e2:a0:5c:fb:54:24:31: 0f:1d:96:92:7f:34:6d:84:66:e8:6d:20:4a:08:00: 19:5f:f2:43:64:58:61:6d:0c:05:52:17:18:ba:28: 4a:c1:dc:6d:e6:13:71:5e:e7:c3:55:2f:d0:ad:f7: 55:31:d1:85:83:16:82:6a:51:72:6e:51:e6:f7:f7: e5:9a:f3:7d:cc:8a:1a:aa:16:5a:b1:4e:55:11:35: ca:dc:df:9e:22:30:bb:d3:2b:d5:df:0d:d5:e6:c1: 9e:d4:fd:f5:52:68:2a:16:6a:00:80:52:90:b0:4e: 68:9a:d7:69:24:15:29:e2:fa:04:6d:0a:b5:4f:12: ae:73:9a:96:f6:4f:5c:dd:3a:cc:fa:57:5b:3b:af: ca:90:f3:cb:d6:b0:6b:3a:ef:c2:04:ba:76:f2:07: 95:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:88:32:3B:77:9C:D1:66:65:05:92:20:E2:BE:FF:62:75:B9:FE:0C X509v3 Authority Key Identifier: keyid:46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c7:94:1f:7d:73:b4:04:cf:b0:a8:69:e1:2f:bc:7c:7a:9f: 36:35:ea:9e:db:c7:4d:d3:09:31:7f:e4:7f:48:7d:86:da:62: c7:4f:d2:93:77:24:6f:2d:98:88:eb:65:35:bb:5d:75:3c:71: 52:49:2d:46:b5:2f:1a:31:73:cb:91:a4:68:20:b4:47:51:2e: bd:ec:1e:84:a2:dc:9f:59:68:7c:8b:cb:f7:5a:af:68:9b:1b: 53:67:1b:c5:b4:cd:fd:e3:19:23:99:6d:6d:f6:97:41:79:c9: db:01:2c:eb:19:96:92:04:8d:c8:55:37:6d:3e:6f:a0:a5:5d: a9:3b:7f:47:48:20:1a:22:39:08:69:c9:7b:d4:6c:0c:3a:de: 78:47:f1:a2:23:02:7c:3b:6a:88:4c:0e:8a:db:e1:b9:38:fb: da:4b:30:70:a7:6e:64:73:a3:10:89:0d:5d:e8:36:1b:43:ae: 3e:e5:c0:39:9c:5b:61:27:25:62:9d:1a:cd:89:81:87:64:d3: dd:99:42:2b:a9:60:6c:96:f5:32:c2:df:3c:37:0e:92:25:a1: 9c:0d:ae:43:53:0c:a6:9f:2c:65:c0:23:0d:d7:0c:cd:87:cc: 3d:74:4c:c4:9c:1b:1d:4f:e8:27:df:d6:3b:95:c0:5d:3f:e5: 28:b3:a2:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfZoPdSZHFMLKbj7gos4qmzC2UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFMzE0ODEyRkIzMERFMDEzNkNDODdGMDBFRjk4QkE0 QThGN0Y0RjAeFw0yNjA5MTYxOTI4MThaFw0yNjA5MTcyMDM4MThaMDMxMTAvBgNV BAMTKDA0ODgzMjNCNzc5Q0QxNjY2NTA1OTIyMEUyQkVGRjYyNzVCOUZFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCh5GvhQ8U0DXgVeLo2RS+xxn9 ++82aG7k/GM7zOgYAmFP389XnytN/QpaIyLM9v5MxGtrufraSNrmKs8t1rx7PKaI e2qxuFy32fIfv8xwupuTcBxHU+sIUN264vrjrlWi4qBc+1QkMQ8dlpJ/NG2EZuht IEoIABlf8kNkWGFtDAVSFxi6KErB3G3mE3Fe58NVL9Ct91Ux0YWDFoJqUXJuUeb3 9+Wa833MihqqFlqxTlURNcrc354iMLvTK9XfDdXmwZ7U/fVSaCoWagCAUpCwTmia 12kkFSni+gRtCrVPEq5zmpb2T1zdOsz6V1s7r8qQ88vWsGs678IEunbyB5VpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBIgyO3ec0WZlBZIg4r7/YnW5/gwwHwYDVR0j BBgwFoAURuMUgS+zDeATbMh/AO+YukqPf08wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVmMmM2NmMtMWY4Ny00ZDk4LWE0NjctMzIxOGI2NDViM2FjLzAvNDZFMzE0ODEy RkIzMERFMDEzNkNDODdGMDBFRjk4QkE0QThGN0Y0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NkUzMTQ4MTJGQjMwREUwMTM2Q0M4N0YwMEVGOThCQTRBOEY3 RjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVmMmM2NmMtMWY4Ny00ZDk4LWE0 NjctMzIxOGI2NDViM2FjLzAvNDZFMzE0ODEyRkIzMERFMDEzNkNDODdGMDBFRjk4 QkE0QThGN0Y0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjHlB99c7QEz7CoaeEvvHx6nzY16p7bx03T CTF/5H9IfYbaYsdP0pN3JG8tmIjrZTW7XXU8cVJJLUa1Lxoxc8uRpGggtEdRLr3s HoSi3J9ZaHyLy/dar2ibG1NnG8W0zf3jGSOZbW32l0F5ydsBLOsZlpIEjchVN20+ b6ClXak7f0dIIBoiOQhpyXvUbAw63nhH8aIjAnw7aohMDorb4bk4+9pLMHCnbmRz oxCJDV3oNhtDrj7lwDmcW2EnJWKdGs2JgYdk092ZQiupYGyW9TLC3zw3DpIloZwN rkNTDKafLGXAIw3XDM2HzD10TMScGx1P6Cff1juVwF0/5SizomE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:04:57 2026 by rpki-client