$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft File: B46886DF13C95D5C834BD72CDC1742C463272A72.mft (raw, json) Hash identifier: KsbiDRVk6cLBpg4r6ZYKbrYZsR5lqDCrnV4uAYUvKjM= Subject key identifier: B1:A7:C6:39:D5:4A:85:A4:92:E4:E3:D6:29:3D:03:67:12:25:A9:27 Authority key identifier: B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72 Certificate issuer: /CN=B46886DF13C95D5C834BD72CDC1742C463272A72 Certificate serial: 11D3FEAFC7BB082C452DB66ACBEE8BC0C5FB2E91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 18:19:32 +0000 Manifest this update: Sun 02 Aug 2026 18:14:32 +0000 Manifest next update: Mon 03 Aug 2026 20:29:32 +0000 Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: q5l3eOYPeemq7qIazHMV6kibSs/1KaEDRsni+YgaV1w=) 2: B46886DF13C95D5C834BD72CDC1742C463272A72.crl (hash: 9T7IUY+brIBnd4dWGNUTTytPTNCNHZTGNFU0NyuKYSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d3:fe:af:c7:bb:08:2c:45:2d:b6:6a:cb:ee:8b:c0:c5:fb:2e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B46886DF13C95D5C834BD72CDC1742C463272A72 Validity Not Before: Aug 2 18:14:32 2026 GMT Not After : Aug 3 20:29:32 2026 GMT Subject: CN=B1A7C639D54A85A492E4E3D6293D03671225A927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:60:60:fd:9b:c9:81:42:1e:5a:93:47:25: 40:8c:9a:6f:95:d9:9a:ab:7f:a4:dc:e2:7a:f1:ff: 44:16:91:7e:d4:f8:43:56:8b:0c:67:2c:95:33:d4: 6c:ae:12:b6:a1:6a:43:be:93:2b:f9:3c:5c:8e:fb: ed:c2:97:a1:bf:5f:0c:e4:29:2c:20:c4:a5:63:cd: f6:c0:68:29:b6:c2:1a:8e:df:fb:f2:a5:fd:b1:6d: ca:cf:ba:af:f7:68:91:52:ff:e6:78:ba:cf:42:3e: 42:eb:0a:5e:aa:c6:75:88:0b:b0:5b:2b:91:04:9b: b6:34:39:d6:12:44:59:b5:00:58:45:dd:ff:12:e3: ad:68:52:f4:bb:6e:57:af:53:0b:0c:fd:88:b4:80: 44:cd:2f:09:89:df:85:42:ca:88:72:74:2e:f0:bf: e5:62:66:a5:9e:66:c4:10:63:03:bb:15:4f:b8:68: 13:10:08:09:b7:d8:f1:e0:72:2f:ba:4a:a6:1d:72: f0:db:b5:38:63:6b:53:d9:df:d9:2d:55:76:5c:0e: 82:48:ff:4a:6a:21:61:4d:be:84:ce:94:d0:1b:c0: dd:68:6f:66:01:9d:4c:76:8d:83:46:93:00:e0:2f: 7c:dc:fa:46:4e:46:bd:84:a0:16:76:c7:d0:14:c3: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A7:C6:39:D5:4A:85:A4:92:E4:E3:D6:29:3D:03:67:12:25:A9:27 X509v3 Authority Key Identifier: keyid:B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:29:2f:4e:b7:c9:09:da:76:2f:76:37:f6:5c:a1:66:45:83: 32:ff:29:f0:7a:28:79:7f:f1:43:3f:6f:a9:4f:c7:c2:80:29: 89:70:05:33:88:97:06:f6:cc:2e:58:17:a0:b3:83:f3:a3:9e: b7:70:86:f8:1e:d0:63:6a:08:23:9f:e9:fb:ad:e6:6e:10:b7: a0:aa:b7:10:e0:7f:28:70:a8:db:57:d6:17:2e:d5:a7:86:7c: 15:91:ed:4e:bf:26:53:24:b5:48:98:19:aa:30:e3:e6:a0:9d: 7f:81:a2:d5:17:bf:3a:d4:34:51:64:d6:13:21:18:95:4f:3d: ba:e3:b4:f2:66:a1:94:1c:44:aa:02:7c:db:3f:3e:ce:e6:ab: 99:3d:cf:e5:70:4a:f8:e1:51:14:fa:37:8c:f7:6b:25:ff:f8: 03:1b:c9:fc:5f:92:f5:6f:b1:4b:e0:38:0c:20:7c:50:bc:8e: 5c:57:23:89:c0:64:9a:95:c3:4b:b5:99:20:17:85:58:12:30: 58:62:e1:2c:eb:f6:61:24:c5:37:f1:6f:c1:7f:b2:76:2d:fa: bd:f9:fa:f0:b0:4c:8d:f9:2c:78:04:5d:92:b4:4b:29:3a:72: 8e:76:c9:3f:aa:17:b4:03:23:54:87:dd:97:f1:51:16:55:8b: 6a:59:6e:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdP+r8e7CCxFLbZqy+6LwMX7LpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2ODg2REYxM0M5NUQ1QzgzNEJENzJDREMxNzQyQzQ2 MzI3MkE3MjAeFw0yNjA4MDIxODE0MzJaFw0yNjA4MDMyMDI5MzJaMDMxMTAvBgNV BAMTKEIxQTdDNjM5RDU0QTg1QTQ5MkU0RTNENjI5M0QwMzY3MTIyNUE5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDy2Bg/ZvJgUIeWpNHJUCMmm+V 2Zqrf6Tc4nrx/0QWkX7U+ENWiwxnLJUz1GyuErahakO+kyv5PFyO++3Cl6G/Xwzk KSwgxKVjzfbAaCm2whqO3/vypf2xbcrPuq/3aJFS/+Z4us9CPkLrCl6qxnWIC7Bb K5EEm7Y0OdYSRFm1AFhF3f8S461oUvS7blevUwsM/Yi0gETNLwmJ34VCyohydC7w v+ViZqWeZsQQYwO7FU+4aBMQCAm32PHgci+6SqYdcvDbtThja1PZ39ktVXZcDoJI /0pqIWFNvoTOlNAbwN1ob2YBnUx2jYNGkwDgL3zc+kZORr2EoBZ2x9AUw/6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsafGOdVKhaSS5OPWKT0DZxIlqScwHwYDVR0j BBgwFoAUtGiG3xPJXVyDS9cs3BdCxGMnKnIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBiYTg1YTAtMzUzNC00OWE0LWE4MjYtMTNhNzM1Zjk0MzY5LzAvQjQ2ODg2REYx M0M5NUQ1QzgzNEJENzJDREMxNzQyQzQ2MzI3MkE3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNDY4ODZERjEzQzk1RDVDODM0QkQ3MkNEQzE3NDJDNDYzMjcy QTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvQjQ2ODg2REYxM0M5NUQ1QzgzNEJENzJDREMxNzQy QzQ2MzI3MkE3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwpL063yQnadi92N/ZcoWZFgzL/KfB6KHl/ 8UM/b6lPx8KAKYlwBTOIlwb2zC5YF6Czg/Ojnrdwhvge0GNqCCOf6fut5m4Qt6Cq txDgfyhwqNtX1hcu1aeGfBWR7U6/JlMktUiYGaow4+agnX+BotUXvzrUNFFk1hMh GJVPPbrjtPJmoZQcRKoCfNs/Ps7mq5k9z+VwSvjhURT6N4z3ayX/+AMbyfxfkvVv sUvgOAwgfFC8jlxXI4nAZJqVw0u1mSAXhVgSMFhi4Szr9mEkxTfxb8F/snYt+r35 +vCwTI35LHgEXZK0Syk6co52yT+qF7QDI1SH3ZfxURZVi2pZbl8= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:51 2026 by rpki-client