$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft File: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json) Hash identifier: w1rqfA7JDvUFC2ZBqoKjNu0+Kvk6Acm35apG0g8S8Tk= Subject key identifier: 93:19:08:1F:5A:FA:D7:1A:92:28:D9:7C:40:E9:B6:23:8A:F5:EE:F1 Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 48C2775E58A5B2CA21A0C09BCC4356114F9E8E6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft Manifest number: 0150 Signing time: Wed 15 Apr 2026 23:42:08 +0000 Manifest this update: Wed 15 Apr 2026 23:37:08 +0000 Manifest next update: Sun 19 Apr 2026 10:51:08 +0000 Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: vB79AQ7LVU9msWJ/4Zg3oCzBcGrchuHrWRYyI1kBoZQ=) 2: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: QnBX69DLGy3PrWp6OcCRXNenu71ykMXxqgt28sMlAqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c2:77:5e:58:a5:b2:ca:21:a0:c0:9b:cc:43:56:11:4f:9e:8e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Apr 15 23:37:08 2026 GMT Not After : Apr 19 10:51:08 2026 GMT Subject: CN=9319081F5AFAD71A9228D97C40E9B6238AF5EEF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7e:ae:0d:1a:4e:5c:e5:ac:66:ea:e2:ce:6f: d8:fb:ed:83:60:98:fd:96:e0:8d:27:fa:85:66:6f: 8f:5a:35:9a:74:84:ef:d9:f7:8d:45:e6:7e:22:8d: ff:6a:5a:d4:f7:38:b7:5b:e8:38:36:57:5a:d0:4b: a4:2c:2e:44:76:09:5d:14:85:e3:6b:9c:59:d0:6c: e5:f8:74:5d:d9:b2:1a:41:8c:ef:48:a5:f1:62:fc: 8b:80:d7:41:43:64:5a:3b:d5:16:24:eb:d7:2d:51: 4e:fa:05:7e:59:5b:fe:19:f0:aa:6d:6b:6d:18:1d: eb:d7:3c:1e:63:87:0a:ed:8c:1a:fc:0c:06:2b:f2: 2d:81:02:81:93:de:62:59:a0:db:26:9f:50:5e:57: 52:14:cf:54:e0:88:82:02:a0:60:4e:2a:47:57:50: 25:8b:44:3d:59:3e:f3:38:d0:04:7c:20:a5:36:30: 3f:3e:39:ce:0e:b6:b1:87:eb:8f:e1:e8:74:d4:32: ff:90:48:03:30:b0:0d:f4:2f:1d:4c:ee:a3:8d:cf: bc:e3:33:1f:14:9a:ff:53:7b:4a:b2:48:1b:51:2b: f0:45:11:51:26:23:18:05:81:a1:bf:fa:34:ff:9a: c1:49:db:27:9b:5c:69:59:db:69:89:23:2e:1f:51: da:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:19:08:1F:5A:FA:D7:1A:92:28:D9:7C:40:E9:B6:23:8A:F5:EE:F1 X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d3:29:45:a8:98:29:a2:c0:f1:57:7c:fd:13:32:05:c3:d4: 08:d6:81:92:82:07:bd:fd:cd:c4:36:d1:05:cf:fa:98:26:70: 42:30:4d:64:d2:f5:81:aa:0e:5d:10:3c:c6:8b:50:e2:04:88: 73:05:fd:bc:b4:7f:0f:23:39:ed:41:36:08:ae:7f:ea:43:5e: 33:9e:bf:eb:0c:fe:f3:4c:e9:8a:28:a4:83:2e:6f:a7:75:de: a7:1d:9d:f8:8c:f4:4c:86:17:e7:30:6c:7d:a6:ff:af:4d:9f: 34:62:d2:38:15:e3:cd:d9:6f:90:97:ec:c1:7b:13:7c:71:18: ae:ae:8d:e1:27:c4:31:85:bd:ff:69:6d:7c:33:8b:b1:cf:c2: a6:1e:6f:82:75:a1:96:7c:67:f7:2c:68:96:2f:d8:2c:5f:7e: 1c:a6:84:b0:2d:fe:72:88:12:58:6c:62:a5:bc:92:be:c3:c0: 3a:e0:57:95:2c:2e:19:15:d1:47:bb:4f:c1:02:8c:90:2f:7a: 40:29:75:0c:fd:d6:86:fc:d2:6b:a3:3c:6e:9b:f1:97:07:b5: 87:6c:6b:32:e3:2b:2f:47:92:55:72:3d:e2:80:68:79:92:ed: 94:6a:93:bc:ca:ca:25:eb:75:a7:8c:48:c4:d8:8a:da:c0:7e: 4a:37:fc:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSMJ3XlilssohoMCbzENWEU+ejmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlB QUVCNUQwMzAeFw0yNjA0MTUyMzM3MDhaFw0yNjA0MTkxMDUxMDhaMDMxMTAvBgNV BAMTKDkzMTkwODFGNUFGQUQ3MUE5MjI4RDk3QzQwRTlCNjIzOEFGNUVFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1fq4NGk5c5axm6uLOb9j77YNg mP2W4I0n+oVmb49aNZp0hO/Z941F5n4ijf9qWtT3OLdb6Dg2V1rQS6QsLkR2CV0U heNrnFnQbOX4dF3ZshpBjO9IpfFi/IuA10FDZFo71RYk69ctUU76BX5ZW/4Z8Kpt a20YHevXPB5jhwrtjBr8DAYr8i2BAoGT3mJZoNsmn1BeV1IUz1TgiIICoGBOKkdX UCWLRD1ZPvM40AR8IKU2MD8+Oc4OtrGH64/h6HTUMv+QSAMwsA30Lx1M7qONz7zj Mx8Umv9Te0qySBtRK/BFEVEmIxgFgaG/+jT/msFJ2yebXGlZ22mJIy4fUdo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkxkIH1r61xqSKNl8QOm2I4r17vEwHwYDVR0j BBgwFoAURqLmNP/0CuVF7H22eoiBiarrXQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjg4MGRkYi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC80NkEyRTYzNEZG RjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1RDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlBQUVC NUQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgx ODlBQUVCNUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXTKUWomCmiwPFXfP0TMgXD1AjWgZKCB739 zcQ20QXP+pgmcEIwTWTS9YGqDl0QPMaLUOIEiHMF/by0fw8jOe1BNgiuf+pDXjOe v+sM/vNM6YoopIMub6d13qcdnfiM9EyGF+cwbH2m/69NnzRi0jgV483Zb5CX7MF7 E3xxGK6ujeEnxDGFvf9pbXwzi7HPwqYeb4J1oZZ8Z/csaJYv2CxffhymhLAt/nKI ElhsYqW8kr7DwDrgV5UsLhkV0Ue7T8ECjJAvekApdQz91ob80mujPG6b8ZcHtYds azLjKy9HklVyPeKAaHmS7ZRqk7zKyiXrdaeMSMTYitrAfko3/JI= -----END CERTIFICATE-----Generated at Fri Apr 17 13:51:35 2026 by rpki-client