$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft File: 46932859C0D86F27F517A125185AE45763AEA7D7.mft (raw, json) Hash identifier: 5e4c+A+TBWBascYm+I3yt7OmxDX8iVXowJn5I0SYcqA= Subject key identifier: 20:70:B3:9D:D1:EC:A3:C7:A6:A6:3D:42:27:65:0D:ED:76:1C:AE:79 Authority key identifier: 46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7 Certificate issuer: /CN=46932859C0D86F27F517A125185AE45763AEA7D7 Certificate serial: 098B655EA6588BA20658BC87A65E1919CF3DFBB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 14:49:09 +0000 Manifest this update: Thu 24 Sep 2026 14:44:09 +0000 Manifest next update: Fri 25 Sep 2026 15:07:09 +0000 Files and hashes: 1: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: JlLJ7++ECgOuHqdNFhp6s2bGWg+2iwYDZNhy26Z53Oo=) 2: 46932859C0D86F27F517A125185AE45763AEA7D7.crl (hash: QNkMjRGjpnsmvN296V22yfQ2gLP+elNGeralo2wuYQQ=) 3: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: Trw+y/sXFJtkefRvcCLMU2FAEepNpbCrLf/kUCXfHQE=) 4: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: 26c5fhilGEyh6ibLUJuFc5ukaLSiZO65uEMgb+eN6Nk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8b:65:5e:a6:58:8b:a2:06:58:bc:87:a6:5e:19:19:cf:3d:fb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46932859C0D86F27F517A125185AE45763AEA7D7 Validity Not Before: Sep 24 14:44:09 2026 GMT Not After : Sep 25 15:07:09 2026 GMT Subject: CN=2070B39DD1ECA3C7A6A63D4227650DED761CAE79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a2:cc:24:8f:79:58:20:f1:0e:47:58:fe:62: bf:bd:26:02:62:da:37:f2:1e:70:27:a3:b6:f3:27: 4a:da:6f:a9:64:d3:83:c3:48:03:7d:9b:b0:ff:e7: b5:5f:50:15:46:c5:8b:9b:e1:96:9f:a4:9f:3c:a9: 43:2c:36:87:85:05:b1:67:f9:36:3a:e7:2f:3d:57: aa:73:73:a6:0d:e0:f5:a7:b9:74:09:f0:4d:12:54: f2:48:73:57:da:c2:54:12:b3:f6:69:bd:12:29:46: 63:a3:64:cc:03:4a:a9:c2:15:1b:11:2c:70:62:14: 20:1e:19:9c:b5:fe:44:9e:1a:db:dd:a6:5f:f7:2d: e4:2b:b9:ac:02:6e:b7:eb:57:1e:fa:ff:38:34:fb: e8:b0:99:fb:52:fc:62:b8:3d:5a:b6:0d:42:bb:9a: 8e:68:72:f6:d6:ac:8f:bd:a0:ee:18:29:d9:ac:c9: c8:8b:ec:87:9e:31:29:0d:4a:25:5f:92:66:27:0f: 82:b1:7b:4f:51:00:cc:9a:13:58:7c:31:93:3c:92: 77:c3:6d:1c:ac:67:78:01:dd:5d:9b:e1:d7:ae:0a: 81:0f:b4:b1:2e:87:6e:b1:3e:22:00:e2:3b:43:ca: 2e:41:26:99:ea:f8:ba:a7:d6:f9:f0:09:1b:31:15: 94:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:70:B3:9D:D1:EC:A3:C7:A6:A6:3D:42:27:65:0D:ED:76:1C:AE:79 X509v3 Authority Key Identifier: keyid:46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:f9:e5:5b:64:e2:9c:8b:fd:7f:17:7f:9b:d2:66:06:59:36: f6:44:ed:5e:d2:a3:b1:0c:5c:99:32:c4:ef:1e:10:ae:24:0f: 36:12:93:85:57:16:57:cc:a9:41:7c:72:ac:d4:58:21:cd:95: 82:ee:9d:30:29:9a:ba:a7:13:e6:e8:cd:10:23:04:ad:4b:54: c5:0b:1c:d5:4a:65:24:02:a6:1b:32:bf:5c:40:a2:06:70:fc: c1:0e:03:3b:a9:9d:c8:5f:02:f8:98:ae:8e:99:7a:2e:5f:6d: 5f:13:34:9a:0f:6c:a3:63:72:a3:d9:a2:b9:ce:37:9a:f1:3f: 29:66:60:a5:bf:1e:ef:80:8b:6c:12:ca:34:0d:3d:d8:c9:40: e6:1c:67:98:e6:dd:df:81:db:de:59:52:ae:ed:92:8f:80:c2: 70:63:63:f1:7e:fd:6b:06:78:01:13:98:a9:a7:5a:0c:85:cf: 47:d3:c1:ff:d7:41:da:54:97:a6:3c:f5:52:23:bb:e1:e0:58: 34:60:7e:77:6e:7e:ab:59:1b:2b:76:cd:ed:d3:03:65:1b:4e: 95:da:a1:29:a8:27:78:36:8c:b9:ed:86:83:50:f1:a5:67:36: d6:52:fb:80:6a:ec:50:e9:8c:6f:90:ea:f5:f7:ef:f9:0a:81: 16:59:ea:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYtlXqZYi6IGWLyHpl4ZGc89+7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5MzI4NTlDMEQ4NkYyN0Y1MTdBMTI1MTg1QUU0NTc2 M0FFQTdENzAeFw0yNjA5MjQxNDQ0MDlaFw0yNjA5MjUxNTA3MDlaMDMxMTAvBgNV BAMTKDIwNzBCMzlERDFFQ0EzQzdBNkE2M0Q0MjI3NjUwREVENzYxQ0FFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDooswkj3lYIPEOR1j+Yr+9JgJi 2jfyHnAno7bzJ0rab6lk04PDSAN9m7D/57VfUBVGxYub4ZafpJ88qUMsNoeFBbFn +TY65y89V6pzc6YN4PWnuXQJ8E0SVPJIc1fawlQSs/ZpvRIpRmOjZMwDSqnCFRsR LHBiFCAeGZy1/kSeGtvdpl/3LeQruawCbrfrVx76/zg0++iwmftS/GK4PVq2DUK7 mo5ocvbWrI+9oO4YKdmsyciL7IeeMSkNSiVfkmYnD4Kxe09RAMyaE1h8MZM8knfD bRysZ3gB3V2b4deuCoEPtLEuh26xPiIA4jtDyi5BJpnq+Lqn1vnwCRsxFZR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIHCzndHso8empj1CJ2UN7XYcrnkwHwYDVR0j BBgwFoAURpMoWcDYbyf1F6ElGFrkV2Oup9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGVkYzllNGYtODE4MC00MWQ2LWIwOGQtOGVlNWE4YTcwYTA1LzAvNDY5MzI4NTlD MEQ4NkYyN0Y1MTdBMTI1MTg1QUU0NTc2M0FFQTdENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NjkzMjg1OUMwRDg2RjI3RjUxN0ExMjUxODVBRTQ1NzYzQUVB N0Q3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvNDY5MzI4NTlDMEQ4NkYyN0Y1MTdBMTI1MTg1QUU0 NTc2M0FFQTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKz55Vtk4pyL/X8Xf5vSZgZZNvZE7V7So7EM XJkyxO8eEK4kDzYSk4VXFlfMqUF8cqzUWCHNlYLunTApmrqnE+bozRAjBK1LVMUL HNVKZSQCphsyv1xAogZw/MEOAzupnchfAviYro6Zei5fbV8TNJoPbKNjcqPZornO N5rxPylmYKW/Hu+Ai2wSyjQNPdjJQOYcZ5jm3d+B295ZUq7tko+AwnBjY/F+/WsG eAETmKmnWgyFz0fTwf/XQdpUl6Y89VIju+HgWDRgfndufqtZGyt2ze3TA2UbTpXa oSmoJ3g2jLnthoNQ8aVnNtZS+4Bq7FDpjG+Q6vX37/kKgRZZ6iE= -----END CERTIFICATE-----Generated at Thu Sep 24 20:26:09 2026 by rpki-client