$ rpki-client -vvf rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft File: 46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft (raw, json) Hash identifier: YzQDLM7MAKmdm+UnIIRF14pAvzazxKIn4EDKgcm5fB8= Subject key identifier: 4A:06:05:B6:99:A5:31:FA:30:F5:C8:E8:EC:11:F9:6D:9A:0D:16:D6 Authority key identifier: 46:B8:B5:78:5C:3D:7A:54:38:1E:62:5D:95:A2:F6:58:CC:E0:1E:26 Certificate issuer: /CN=46B8B5785C3D7A54381E625D95A2F658CCE01E26 Certificate serial: 03527BBAC7D054043DCEA1DDEBD8BE976C4EACBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:19:15 +0000 Manifest this update: Fri 19 Jun 2026 19:14:15 +0000 Manifest next update: Sat 20 Jun 2026 23:17:15 +0000 Files and hashes: 1: 46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl (hash: kobce/hSJQvfdsU1yurYXaoF49zdWazY0S5CXNF+YL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:52:7b:ba:c7:d0:54:04:3d:ce:a1:dd:eb:d8:be:97:6c:4e:ac:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46B8B5785C3D7A54381E625D95A2F658CCE01E26 Validity Not Before: Jun 19 19:14:15 2026 GMT Not After : Jun 20 23:17:15 2026 GMT Subject: CN=4A0605B699A531FA30F5C8E8EC11F96D9A0D16D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:61:70:15:a1:9c:73:64:0d:91:dc:1f:cc: da:0e:ef:51:dc:b3:48:4e:ff:e7:e6:87:19:ca:d6: 4c:68:33:61:c5:e2:4f:88:1e:b7:24:cc:bf:e9:8a: 75:dc:1b:fd:bb:7c:9b:1c:a9:41:3e:f3:42:30:01: 1e:6a:53:80:d0:d5:fb:69:20:a9:f0:b7:2d:6e:c7: 7a:29:b3:33:38:11:9f:e8:68:ee:d3:62:0f:51:90: 57:28:de:10:d3:8e:a3:08:04:ba:08:47:b8:07:7e: 82:11:c9:ac:1c:71:25:da:ad:fa:0c:08:52:26:64: 10:31:f2:da:d0:38:fb:ed:78:75:87:d9:ce:45:d4: 58:bc:fb:8f:0e:39:c1:ff:90:c2:85:72:01:97:bc: 52:d8:71:5f:73:8c:a8:91:6f:cc:2b:2c:91:18:0e: c9:ad:db:8f:31:2e:d9:b0:3a:0d:af:93:0c:bc:c1: ea:cf:41:92:6e:a3:ee:da:17:3d:1a:40:db:b1:45: 1e:60:a0:47:9f:67:96:df:42:89:25:24:2d:57:8a: 3f:88:4a:40:ab:7f:19:17:9a:76:63:cb:a3:0c:d7: de:de:fa:fa:da:e3:17:e6:cb:ad:90:f8:9e:6f:af: 59:db:91:60:ea:9f:1c:9e:b5:2e:af:d3:ee:49:98: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:06:05:B6:99:A5:31:FA:30:F5:C8:E8:EC:11:F9:6D:9A:0D:16:D6 X509v3 Authority Key Identifier: keyid:46:B8:B5:78:5C:3D:7A:54:38:1E:62:5D:95:A2:F6:58:CC:E0:1E:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:72:19:67:b0:f8:b9:f8:f7:0f:78:f4:e3:e7:bc:8a:d4:07: 4a:0e:f4:e6:25:5c:cc:3d:ce:d9:2f:7a:05:03:e2:a8:c6:6a: ca:d6:22:02:06:cd:86:bc:9a:9e:90:8b:fb:96:4d:e6:bd:9e: 71:74:be:d7:fe:f7:e4:ce:df:00:49:ed:b7:7c:64:0a:ae:d6: c0:31:84:6a:22:e6:f7:2f:dc:19:e0:c1:d0:23:66:a9:f0:b0: ef:cb:28:67:c0:1e:ee:5b:7b:48:59:83:e3:ea:57:28:db:27: 0e:cc:51:92:42:c9:e5:41:21:0a:0f:57:5a:60:33:a1:f2:9e: 3e:7c:70:8a:a4:fc:e2:ff:95:09:64:95:30:b0:41:b5:17:84: b6:0c:8c:c0:50:5d:8c:b2:f0:37:a3:1b:8b:82:df:6b:50:dd: ab:48:d5:9c:ee:79:3b:40:43:60:e9:fa:a3:32:17:9d:15:7a: 24:db:1a:2a:8b:57:77:2f:20:70:33:b7:05:e4:78:89:48:91: d3:2a:65:d1:1c:44:e3:c6:b2:9d:cf:55:55:46:dd:79:d5:a0: 97:33:44:01:b0:cf:a8:3f:ee:c0:d9:b6:a0:dc:46:b6:9e:15: da:ac:38:08:43:26:6d:13:d6:49:b5:a6:ca:4c:07:be:3e:2e: 57:33:81:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA1J7usfQVAQ9zqHd69i+l2xOrLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCOEI1Nzg1QzNEN0E1NDM4MUU2MjVEOTVBMkY2NThD Q0UwMUUyNjAeFw0yNjA2MTkxOTE0MTVaFw0yNjA2MjAyMzE3MTVaMDMxMTAvBgNV BAMTKDRBMDYwNUI2OTlBNTMxRkEzMEY1QzhFOEVDMTFGOTZEOUEwRDE2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6mFwFaGcc2QNkdwfzNoO71Hc s0hO/+fmhxnK1kxoM2HF4k+IHrckzL/pinXcG/27fJscqUE+80IwAR5qU4DQ1ftp IKnwty1ux3opszM4EZ/oaO7TYg9RkFco3hDTjqMIBLoIR7gHfoIRyawccSXarfoM CFImZBAx8trQOPvteHWH2c5F1Fi8+48OOcH/kMKFcgGXvFLYcV9zjKiRb8wrLJEY Dsmt248xLtmwOg2vkwy8werPQZJuo+7aFz0aQNuxRR5goEefZ5bfQoklJC1Xij+I SkCrfxkXmnZjy6MM197e+vra4xfmy62Q+J5vr1nbkWDqnxyetS6v0+5JmPtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSgYFtpmlMfow9cjo7BH5bZoNFtYwHwYDVR0j BBgwFoAURri1eFw9elQ4HmJdlaL2WMzgHiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVhM2IxMDYtOGVmMC00NWJmLWIyNzctYTI3OTQ3ZTQ1OTFiLzAvNDZCOEI1Nzg1 QzNEN0E1NDM4MUU2MjVEOTVBMkY2NThDQ0UwMUUyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NkI4QjU3ODVDM0Q3QTU0MzgxRTYyNUQ5NUEyRjY1OENDRTAx RTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvNDZCOEI1Nzg1QzNEN0E1NDM4MUU2MjVEOTVBMkY2 NThDQ0UwMUUyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtyGWew+Ln49w949OPnvIrUB0oO9OYlXMw9 ztkvegUD4qjGasrWIgIGzYa8mp6Qi/uWTea9nnF0vtf+9+TO3wBJ7bd8ZAqu1sAx hGoi5vcv3BngwdAjZqnwsO/LKGfAHu5be0hZg+PqVyjbJw7MUZJCyeVBIQoPV1pg M6Hynj58cIqk/OL/lQlklTCwQbUXhLYMjMBQXYyy8DejG4uC32tQ3atI1ZzueTtA Q2Dp+qMyF50VeiTbGiqLV3cvIHAztwXkeIlIkdMqZdEcROPGsp3PVVVG3XnVoJcz RAGwz6g/7sDZtqDcRraeFdqsOAhDJm0T1km1pspMB74+LlczgdQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:38 2026 by rpki-client