$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft File: C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft (raw, json) Hash identifier: u0YM+pnkJOynhO+DbCE8sA79tT5RKQD4EK9RG4Qgupo= Subject key identifier: B0:7E:65:BB:B3:BE:70:D2:07:2B:D6:B7:B7:B3:6C:C2:0D:84:D4:BB Authority key identifier: C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E Certificate issuer: /CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E Certificate serial: 2364E60100F7A9B23F2959DA29EC5AA9336BCF03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft Manifest number: BF Signing time: Tue 22 Sep 2026 05:07:56 +0000 Manifest this update: Tue 22 Sep 2026 05:02:56 +0000 Manifest next update: Wed 23 Sep 2026 05:58:56 +0000 Files and hashes: 1: C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl (hash: DKUABacAX4A2ZkFlD47TXJkL2lNIkL6NWoQ1uXsK4hY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:64:e6:01:00:f7:a9:b2:3f:29:59:da:29:ec:5a:a9:33:6b:cf:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E Validity Not Before: Sep 22 05:02:56 2026 GMT Not After : Sep 23 05:58:56 2026 GMT Subject: CN=B07E65BBB3BE70D2072BD6B7B7B36CC20D84D4BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:3e:0e:92:6a:6c:fa:d1:3b:bf:61:d8:26: 24:0f:7a:64:5b:aa:1d:d5:94:d7:38:09:d1:19:92: 71:7e:a2:07:e3:dc:32:af:4a:16:6f:69:da:32:d9: 91:fc:1a:d6:90:ec:3e:7f:a3:65:d1:da:39:48:7b: d9:20:51:ac:f0:5a:4f:80:92:32:c7:2b:f3:92:d9: 04:90:fc:ed:76:cf:73:ab:84:ce:45:f2:1c:33:7a: 04:10:f6:83:60:3a:df:3b:50:e5:38:af:a6:46:bc: 29:4a:20:1c:d6:31:20:31:aa:a4:e1:f0:3b:c4:be: 4a:90:c7:ea:39:c1:38:4e:27:36:c8:ce:57:73:be: 11:85:79:34:a8:f2:38:fc:07:ef:eb:bd:24:21:c6: ae:32:bf:95:a5:b6:17:e2:0a:4f:71:41:ad:8a:32: 60:48:c6:b0:f6:18:d2:58:2a:a6:26:ba:ed:a5:2f: 2f:ad:1c:f1:f0:93:ab:1f:5a:3c:7c:fe:7d:c4:dd: 2a:8a:1e:41:0d:e4:3e:90:64:79:b0:d7:e7:ee:0e: 8b:6c:50:6d:e9:21:b5:4c:d9:5f:e9:fd:6c:46:5e: 66:02:6d:5d:3c:5a:8f:52:f6:80:cc:03:4f:d0:60: 24:06:eb:9a:57:52:e0:8a:96:42:01:2f:49:42:34: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7E:65:BB:B3:BE:70:D2:07:2B:D6:B7:B7:B3:6C:C2:0D:84:D4:BB X509v3 Authority Key Identifier: keyid:C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c6:ec:ad:ce:7c:5f:c0:51:0b:82:ca:1c:3d:ee:57:77:4c: c9:00:b6:6e:69:93:24:34:a1:f9:ca:59:43:3e:ba:7a:77:c8: e6:aa:22:bc:6a:11:7f:7f:09:ab:0e:71:43:86:15:81:ee:51: ee:77:98:d4:5c:b7:b5:e5:bf:25:65:0e:4f:53:b6:a1:8e:05: 3b:15:23:3a:ac:04:71:55:51:48:4b:47:29:16:25:b1:df:df: c1:22:55:d2:c8:32:a2:ed:3d:be:9b:d5:09:98:d9:a7:8b:d1: 87:d1:da:4f:3f:83:bd:d0:42:ff:55:4f:97:62:29:15:44:91: ba:f2:43:b0:13:38:75:47:2e:18:48:65:8a:d6:1d:04:03:ab: 60:2d:50:eb:74:45:6f:70:9f:25:c0:13:dc:bb:97:cb:f1:d6: a2:2f:7f:bf:a0:f3:fb:2b:c3:b6:b5:a9:f2:c4:c2:3a:60:b6: c8:9b:10:ec:5d:5a:f1:5b:89:7f:1b:44:d5:6e:f8:36:ec:85: 60:a4:8a:2a:46:be:c3:ef:83:a2:3d:0d:0c:68:e8:bd:a2:72: b7:b9:3a:bf:fa:a0:45:81:47:07:69:b9:04:33:17:15:d8:ae: 2b:79:52:1b:f0:29:80:2a:ec:b2:7b:58:dd:53:f9:be:23:ba: 24:11:74:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2TmAQD3qbI/KVnaKexaqTNrzwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEy QTBDNDQ1RTAeFw0yNjA5MjIwNTAyNTZaFw0yNjA5MjMwNTU4NTZaMDMxMTAvBgNV BAMTKEIwN0U2NUJCQjNCRTcwRDIwNzJCRDZCN0I3QjM2Q0MyMEQ4NEQ0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkRj4Okmps+tE7v2HYJiQPemRb qh3VlNc4CdEZknF+ogfj3DKvShZvadoy2ZH8GtaQ7D5/o2XR2jlIe9kgUazwWk+A kjLHK/OS2QSQ/O12z3OrhM5F8hwzegQQ9oNgOt87UOU4r6ZGvClKIBzWMSAxqqTh 8DvEvkqQx+o5wThOJzbIzldzvhGFeTSo8jj8B+/rvSQhxq4yv5WlthfiCk9xQa2K MmBIxrD2GNJYKqYmuu2lLy+tHPHwk6sfWjx8/n3E3SqKHkEN5D6QZHmw1+fuDots UG3pIbVM2V/p/WxGXmYCbV08Wo9S9oDMA0/QYCQG65pXUuCKlkIBL0lCNOvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsH5lu7O+cNIHK9a3t7Nswg2E1LswHwYDVR0j BBgwFoAUxGUApC8QwuHIBPKnICM6uioMRF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjE3MmVlZjktZWM2YS00NTU4LTgxODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQy RjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEyQTBDNDQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDY1MDBBNDJGMTBDMkUxQzgwNEYyQTcyMDIzM0FCQTJBMEM0 NDVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNB QkEyQTBDNDQ1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDG7K3OfF/AUQuCyhw97ld3TMkAtm5pkyQ0 ofnKWUM+unp3yOaqIrxqEX9/CasOcUOGFYHuUe53mNRct7XlvyVlDk9TtqGOBTsV IzqsBHFVUUhLRykWJbHf38EiVdLIMqLtPb6b1QmY2aeL0YfR2k8/g73QQv9VT5di KRVEkbryQ7ATOHVHLhhIZYrWHQQDq2AtUOt0RW9wnyXAE9y7l8vx1qIvf7+g8/sr w7a1qfLEwjpgtsibEOxdWvFbiX8bRNVu+DbshWCkiipGvsPvg6I9DQxo6L2icre5 Or/6oEWBRwdpuQQzFxXYrit5UhvwKYAq7LJ7WN1T+b4juiQRdM8= -----END CERTIFICATE-----Generated at Tue Sep 22 17:18:16 2026 by rpki-client