$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft File: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft (raw, json) Hash identifier: tkBIK5TpOg6HCCy++ZwHBkkw9VNTCRS+QD4nmYOzbdE= Subject key identifier: 46:EA:31:99:4D:55:52:A1:75:17:17:30:C6:9E:78:24:94:DE:94:60 Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0 Certificate issuer: /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0 Certificate serial: 093000FF549CF853B762C3FC123BF387E19D423C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:23:22 +0000 Manifest this update: Sat 13 Jun 2026 11:18:22 +0000 Manifest next update: Sun 14 Jun 2026 13:12:22 +0000 Files and hashes: 1: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: uXr8DnKi8QtOAVEEstmImQaN4M7bPiEAwEuGTottsCo=) 2: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: jcwrytSrVr9iAZjPRv58Wx2zSE/xYS0utsjnTbXZlh8=) 3: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: oJrAXv58oZDMk40W9JRPwNDx1VF9IQdEUdgQPzLFkmg=) 4: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl (hash: DaWryFwjdFDckMb8hS5Hhmw4pwTq9iwrKPZj4Tn6VaU=) 5: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: 1okkgqoiBVDWBMw8B8fUz+WUWSrHUDprl2WG1iMqp8w=) 6: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: WTtSNSnNo9oz9/i7rHt1jxuFUkS6d/teW8M9wk46Nik=) 7: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=) 8: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: P3rNCMyzAiokg7rVA737lP8Lovb0gWKaIdt9sIaalEY=) 9: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 8IXeZT2nMIplDuKAy9sTdwidwLtl6QHRFLk7GQI0XlE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:30:00:ff:54:9c:f8:53:b7:62:c3:fc:12:3b:f3:87:e1:9d:42:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0 Validity Not Before: Jun 13 11:18:22 2026 GMT Not After : Jun 14 13:12:22 2026 GMT Subject: CN=46EA31994D5552A175171730C69E782494DE9460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:c5:e5:d0:41:38:50:30:07:00:63:80:c3: 5d:12:0e:f4:38:08:70:1a:91:08:d4:ef:b8:00:5f: bf:3c:57:19:b3:0b:be:1f:97:6d:f8:25:2d:94:aa: ff:96:55:73:24:6c:ac:a0:1f:c1:ea:0f:2f:47:b6: 76:73:1d:9a:5a:9c:3c:b1:47:b2:99:9a:81:c2:83: 3c:bd:9f:22:9e:d4:73:34:9a:a6:dd:7c:be:8e:f1: 04:7f:9f:6c:7d:c5:a2:6c:af:1f:77:db:d9:e2:97: 19:7b:5f:84:fc:c0:53:06:bb:59:fd:d5:5c:49:1d: e0:2c:81:06:91:2d:21:6e:85:25:eb:5d:9f:87:22: 76:90:8b:94:af:9e:68:58:36:fb:41:4d:91:f3:36: 29:90:85:0f:1e:60:c8:2e:94:49:43:65:24:78:05: 8d:ad:f3:6e:1a:10:1d:c6:b5:74:6d:0e:f2:6a:34: 47:7c:dd:fe:bb:09:2d:fb:8a:b6:00:25:de:3e:31: d8:82:e8:ea:48:37:e4:36:d6:e5:db:85:27:17:a3: 7d:c1:6d:4f:31:40:cb:e4:3c:15:c2:ca:32:74:72: f7:64:2b:f4:4b:55:e8:9c:b4:4e:b1:93:f2:26:9e: 3e:53:5c:46:9a:68:10:1f:30:cb:e8:71:8d:0f:af: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EA:31:99:4D:55:52:A1:75:17:17:30:C6:9E:78:24:94:DE:94:60 X509v3 Authority Key Identifier: keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:72:be:0a:c5:33:96:8c:f8:71:f6:18:d7:55:4e:a9:71:0b: fc:13:2b:98:17:72:ab:74:e1:35:04:23:e7:cf:ac:64:a8:96: db:12:6f:d4:5d:b0:17:b8:56:06:9f:33:1c:49:5c:e9:e6:f3: a7:3a:fa:00:96:38:45:9c:85:74:3a:35:cd:f1:a1:1e:e0:50: 6a:3b:7a:ac:c4:e9:63:72:0c:8b:6f:35:35:00:a8:a2:bf:bc: 49:b6:9a:e1:a3:bc:d6:12:dc:90:52:3b:63:b3:66:cd:40:9a: a8:c7:59:f2:ad:63:e7:24:96:1a:3a:7b:f9:f3:19:e3:23:d6: c1:a0:95:12:62:39:db:30:09:6e:fb:5c:ab:54:e8:f6:ee:a9: 49:f2:0d:28:4e:65:f1:2c:34:bd:3a:e1:4b:a6:11:c3:7d:0b: 9a:7a:5a:57:37:fb:a0:4e:b3:6c:43:9a:5d:5b:80:42:61:7b: 8e:33:e1:26:7f:14:4a:03:38:a0:9a:19:00:be:e2:ca:ae:f6: a3:b0:98:11:0b:b0:0e:06:24:25:95:28:f5:a0:1b:85:0f:3a: 55:ca:4f:13:67:34:9d:98:22:2f:e0:e9:85:33:b9:62:44:fe: 3d:db:fd:22:42:9b:f9:dd:b6:f9:bb:4f:8a:b8:9a:8b:fd:da: 11:0b:99:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTAA/1Sc+FO3YsP8Ejvzh+GdQjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2NjkzNTVFQkIwRkUzQUU2QzA2QzhERjdBOTE3QkVC NDg4NDlBMDAeFw0yNjA2MTMxMTE4MjJaFw0yNjA2MTQxMzEyMjJaMDMxMTAvBgNV BAMTKDQ2RUEzMTk5NEQ1NTUyQTE3NTE3MTczMEM2OUU3ODI0OTRERTk0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66cXl0EE4UDAHAGOAw10SDvQ4 CHAakQjU77gAX788VxmzC74fl234JS2Uqv+WVXMkbKygH8HqDy9HtnZzHZpanDyx R7KZmoHCgzy9nyKe1HM0mqbdfL6O8QR/n2x9xaJsrx9329nilxl7X4T8wFMGu1n9 1VxJHeAsgQaRLSFuhSXrXZ+HInaQi5SvnmhYNvtBTZHzNimQhQ8eYMgulElDZSR4 BY2t824aEB3GtXRtDvJqNEd83f67CS37irYAJd4+MdiC6OpIN+Q21uXbhScXo33B bU8xQMvkPBXCyjJ0cvdkK/RLVeictE6xk/Imnj5TXEaaaBAfMMvocY0Pr1E3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuoxmU1VUqF1Fxcwxp54JJTelGAwHwYDVR0j BBgwFoAURmaTVeuw/jrmwGyN96kXvrSISaAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRkYzFkZDgtNmQyNS00N2M3LWFhYTQtYmRkZjFiOWQ2NzdlLzAvNDY2NjkzNTVF QkIwRkUzQUU2QzA2QzhERjdBOTE3QkVCNDg4NDlBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NjY2OTM1NUVCQjBGRTNBRTZDMDZDOERGN0E5MTdCRUI0ODg0 OUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvNDY2NjkzNTVFQkIwRkUzQUU2QzA2QzhERjdBOTE3 QkVCNDg4NDlBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxyvgrFM5aM+HH2GNdVTqlxC/wTK5gXcqt0 4TUEI+fPrGSoltsSb9RdsBe4VgafMxxJXOnm86c6+gCWOEWchXQ6Nc3xoR7gUGo7 eqzE6WNyDItvNTUAqKK/vEm2muGjvNYS3JBSO2OzZs1AmqjHWfKtY+cklho6e/nz GeMj1sGglRJiOdswCW77XKtU6PbuqUnyDShOZfEsNL064UumEcN9C5p6Wlc3+6BO s2xDml1bgEJhe44z4SZ/FEoDOKCaGQC+4squ9qOwmBELsA4GJCWVKPWgG4UPOlXK TxNnNJ2YIi/g6YUzuWJE/j3b/SJCm/ndtvm7T4q4mov92hELmYI= -----END CERTIFICATE-----Generated at Sat Jun 13 22:39:19 2026 by rpki-client