$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft File: 46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft (raw, json) Hash identifier: g8WL90YA9EA5BI8qVAg8988Tjow+vhJMSIK/YHhVjA8= Subject key identifier: F9:A3:2B:CB:79:E3:BE:1C:8A:4C:BD:71:19:CF:C0:BC:5A:65:48:E6 Authority key identifier: 46:B8:B5:78:5C:3D:7A:54:38:1E:62:5D:95:A2:F6:58:CC:E0:1E:26 Certificate issuer: /CN=46B8B5785C3D7A54381E625D95A2F658CCE01E26 Certificate serial: 0EB05B66390222751C1E9842AC41EA7B0B236BDD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 01:35:25 +0000 Manifest this update: Thu 17 Sep 2026 01:30:25 +0000 Manifest next update: Fri 18 Sep 2026 03:04:25 +0000 Files and hashes: 1: 46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl (hash: viC+gRitQ01/4Q848r1TfsqVJx4vELpbD44RjMQ3XJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b0:5b:66:39:02:22:75:1c:1e:98:42:ac:41:ea:7b:0b:23:6b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46B8B5785C3D7A54381E625D95A2F658CCE01E26 Validity Not Before: Sep 17 01:30:25 2026 GMT Not After : Sep 18 03:04:25 2026 GMT Subject: CN=F9A32BCB79E3BE1C8A4CBD7119CFC0BC5A6548E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:85:79:4f:81:56:23:50:3e:61:06:b0:d2: 6f:c0:52:70:38:99:66:05:5a:5b:cd:83:08:1d:6a: 8e:b7:94:19:01:0e:4a:de:6f:e3:52:3e:3c:3e:72: e6:98:bd:a9:1e:23:a9:3e:f2:39:33:64:05:4c:94: 29:17:5d:e9:15:c7:2f:bc:79:57:24:78:32:dd:cd: ee:bb:44:29:ac:11:69:4b:13:92:54:2e:0b:75:05: 2a:bc:a8:7f:42:ce:df:29:db:51:16:e9:54:b2:74: 80:02:a6:aa:4e:ff:cf:24:cd:43:df:11:2b:c3:f0: 11:99:9f:a5:89:fb:fa:32:47:0a:2e:8a:cb:a5:61: 43:fe:d7:85:10:3d:88:2a:da:fe:97:22:a5:74:31: 78:22:c9:aa:f1:fd:24:2e:6b:a9:56:b1:5e:d3:89: f7:79:99:c2:c4:96:bb:04:fc:72:fe:6a:55:f1:37: 3d:36:50:34:86:4b:f9:f0:b9:d1:53:3e:d0:48:b6: d2:c7:d1:52:a2:48:e5:d6:a4:cd:eb:9e:bb:6b:8e: 4a:ea:ac:c8:00:f7:91:fa:fe:02:d9:f7:6e:c5:c3: 07:8d:fa:f1:10:4f:3a:8f:5e:bc:00:c0:18:b9:75: 77:31:89:11:80:ae:3c:49:ca:84:9e:c3:ba:e2:82: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A3:2B:CB:79:E3:BE:1C:8A:4C:BD:71:19:CF:C0:BC:5A:65:48:E6 X509v3 Authority Key Identifier: keyid:46:B8:B5:78:5C:3D:7A:54:38:1E:62:5D:95:A2:F6:58:CC:E0:1E:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:98:23:6e:2e:74:26:f4:9d:89:52:59:d2:c9:56:22:3d:76: fe:25:5f:a0:97:ed:7f:9b:96:67:db:d0:f8:2b:bb:1b:f7:0e: 27:47:d0:53:d7:55:3c:64:f4:8f:2f:6d:b0:cb:dc:45:70:69: 0a:7c:45:4d:b8:40:66:8c:e6:6d:ca:a3:ef:70:d6:90:6e:16: db:18:84:94:e8:3a:9a:8a:c5:46:4b:80:c7:ab:31:4e:48:c6: 52:99:9d:fa:69:2e:04:75:e6:24:ed:0e:1a:7c:31:d2:62:02: d0:d4:4e:1e:d3:02:49:99:31:eb:fd:fe:e3:cc:28:b9:35:00: c9:c6:c1:30:95:a4:0d:f8:c6:89:35:aa:76:e0:52:c1:37:a4: 9a:df:46:a0:15:1b:81:60:be:2f:8f:ef:8c:9c:fa:e2:de:bb: 27:c4:4f:7b:e4:dc:42:e5:d7:8b:2c:ae:f7:72:31:16:fe:27: ad:41:4e:ff:7a:22:ee:76:91:bd:08:5b:b2:3b:d5:5b:b8:fb: 7e:96:a8:16:54:ad:9f:8c:98:a6:74:9c:a0:e5:12:d9:bf:ad: 4e:13:6f:12:ea:56:e0:62:d9:01:7e:a7:75:a3:7e:df:3f:ed: f4:53:ae:f3:6f:da:98:73:28:0d:b7:e0:a0:66:9e:e8:41:2b: 0f:bd:b2:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrBbZjkCInUcHphCrEHqewsja90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCOEI1Nzg1QzNEN0E1NDM4MUU2MjVEOTVBMkY2NThD Q0UwMUUyNjAeFw0yNjA5MTcwMTMwMjVaFw0yNjA5MTgwMzA0MjVaMDMxMTAvBgNV BAMTKEY5QTMyQkNCNzlFM0JFMUM4QTRDQkQ3MTE5Q0ZDMEJDNUE2NTQ4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27oV5T4FWI1A+YQaw0m/AUnA4 mWYFWlvNgwgdao63lBkBDkreb+NSPjw+cuaYvakeI6k+8jkzZAVMlCkXXekVxy+8 eVckeDLdze67RCmsEWlLE5JULgt1BSq8qH9Czt8p21EW6VSydIACpqpO/88kzUPf ESvD8BGZn6WJ+/oyRwouisulYUP+14UQPYgq2v6XIqV0MXgiyarx/SQua6lWsV7T ifd5mcLElrsE/HL+alXxNz02UDSGS/nwudFTPtBIttLH0VKiSOXWpM3rnrtrjkrq rMgA95H6/gLZ927FwweN+vEQTzqPXrwAwBi5dXcxiRGArjxJyoSew7rigiyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+aMry3njvhyKTL1xGc/AvFplSOYwHwYDVR0j BBgwFoAURri1eFw9elQ4HmJdlaL2WMzgHiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVhM2IxMDYtOGVmMC00NWJmLWIyNzctYTI3OTQ3ZTQ1OTFiLzAvNDZCOEI1Nzg1 QzNEN0E1NDM4MUU2MjVEOTVBMkY2NThDQ0UwMUUyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NkI4QjU3ODVDM0Q3QTU0MzgxRTYyNUQ5NUEyRjY1OENDRTAx RTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvNDZCOEI1Nzg1QzNEN0E1NDM4MUU2MjVEOTVBMkY2 NThDQ0UwMUUyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOaYI24udCb0nYlSWdLJViI9dv4lX6CX7X+b lmfb0Pgruxv3DidH0FPXVTxk9I8vbbDL3EVwaQp8RU24QGaM5m3Ko+9w1pBuFtsY hJToOpqKxUZLgMerMU5IxlKZnfppLgR15iTtDhp8MdJiAtDUTh7TAkmZMev9/uPM KLk1AMnGwTCVpA34xok1qnbgUsE3pJrfRqAVG4Fgvi+P74yc+uLeuyfET3vk3ELl 14ssrvdyMRb+J61BTv96Iu52kb0IW7I71Vu4+36WqBZUrZ+MmKZ0nKDlEtm/rU4T bxLqVuBi2QF+p3Wjft8/7fRTrvNv2phzKA234KBmnuhBKw+9slk= -----END CERTIFICATE-----Generated at Thu Sep 17 14:03:34 2026 by rpki-client