$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft File: C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft (raw, json) Hash identifier: 4f89lm0f8pw4Wuf3hIR0dC/Ze3WYGkPgq69Cd6zg9ow= Subject key identifier: C0:E5:33:D4:0F:06:98:DF:46:90:9D:B4:83:05:9B:83:98:CE:A4:6E Authority key identifier: C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E Certificate issuer: /CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E Certificate serial: 3A56D82905DC1CD44834548E5539691F51E42A58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 15:49:20 +0000 Manifest this update: Sat 14 Nov 2026 15:44:20 +0000 Manifest next update: Sun 15 Nov 2026 18:55:20 +0000 Files and hashes: 1: C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl (hash: Qj1CBWjDGNdUYtzPHAr8H5/XRdF4m/VQaP1s18r255E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:56:d8:29:05:dc:1c:d4:48:34:54:8e:55:39:69:1f:51:e4:2a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E Validity Not Before: Nov 14 15:44:20 2026 GMT Not After : Nov 15 18:55:20 2026 GMT Subject: CN=C0E533D40F0698DF46909DB483059B8398CEA46E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:9d:44:2e:0b:0f:69:2a:c9:4f:b6:f1:0c: 86:37:55:0f:0a:6c:0c:07:62:45:4a:fc:28:f9:60: 8c:b4:bf:73:7f:42:f4:ea:b9:e7:2a:2e:45:db:10: ca:66:ee:ab:3a:f5:28:5b:cd:46:3a:2b:65:75:e9: 62:6e:59:79:5a:c2:5f:11:34:2e:60:4b:bc:b9:ac: 47:af:54:84:07:6f:a0:d4:3b:a8:f4:54:16:15:fd: 70:8e:58:4d:5c:aa:7d:48:2a:f7:78:06:51:d8:a5: 2f:37:db:20:07:cd:6c:54:b5:17:6d:a7:d7:ee:60: 2a:89:f7:30:72:3e:9c:8f:bf:d8:cf:63:39:72:1c: f9:17:ad:7e:8f:14:dc:6c:dc:43:08:2f:7c:eb:4a: c8:ee:7c:d4:9d:53:64:0a:c0:22:e7:4c:65:ff:67: 68:d1:93:59:e1:7d:a2:6d:e6:3f:4a:1c:70:7b:a0: d4:3d:c9:9f:b5:db:60:4e:b1:ea:9d:78:21:6b:43: 39:d5:bc:1e:50:0c:b8:14:0c:7e:c8:3e:c3:3e:1f: 3e:74:92:2d:b3:95:ea:c3:f1:df:06:b3:be:72:95: f8:ef:68:5c:eb:a1:7e:bd:18:03:c5:3f:42:29:76: ae:93:a3:3e:1c:30:2f:df:69:82:d3:e1:56:54:c5: 9b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E5:33:D4:0F:06:98:DF:46:90:9D:B4:83:05:9B:83:98:CE:A4:6E X509v3 Authority Key Identifier: keyid:C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:16:7e:83:c4:33:b4:3e:78:ac:4e:04:dc:57:f3:a8:23:54: 30:e2:df:6c:46:36:70:6e:b5:2f:bd:9a:16:f6:45:78:40:22: 3e:d6:ce:b5:da:4c:40:e9:e4:cc:fe:0d:5e:20:44:b4:ec:51: a9:e8:66:77:15:17:32:93:a5:fc:1c:34:22:48:76:73:99:00: ea:45:30:2a:db:ac:1e:48:db:5a:31:bb:74:d6:6d:67:34:5d: 92:20:7e:25:cc:b3:cb:40:8b:b4:4d:11:cf:27:5b:05:77:71: 22:ee:14:10:68:f0:cd:af:11:05:f6:fb:0b:75:13:31:11:09: da:94:b4:d6:71:58:bb:61:e3:e5:f0:f6:0e:e8:45:cb:af:31: 9c:23:4b:02:42:cb:33:d2:98:33:58:f8:05:d0:c6:45:c3:36: 7d:95:b8:b4:ab:1c:fb:ab:a2:44:c4:03:7d:ee:78:25:f3:be: 61:10:1e:95:be:17:6d:21:64:ff:b5:2e:3d:d2:3f:34:a5:12: fa:b3:a0:55:69:5d:c1:ab:f3:13:a1:d8:a6:00:08:74:4b:31: 1a:ff:b4:4b:5e:86:40:ed:c9:02:00:08:a5:83:1d:dc:bd:40: a6:d6:29:4c:fb:1c:ad:d1:fc:33:62:1a:53:5c:42:da:41:4f: 9a:87:7a:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlbYKQXcHNRINFSOVTlpH1HkKlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEy QTBDNDQ1RTAeFw0yNjExMTQxNTQ0MjBaFw0yNjExMTUxODU1MjBaMDMxMTAvBgNV BAMTKEMwRTUzM0Q0MEYwNjk4REY0NjkwOURCNDgzMDU5QjgzOThDRUE0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Qp1ELgsPaSrJT7bxDIY3VQ8K bAwHYkVK/Cj5YIy0v3N/QvTquecqLkXbEMpm7qs69ShbzUY6K2V16WJuWXlawl8R NC5gS7y5rEevVIQHb6DUO6j0VBYV/XCOWE1cqn1IKvd4BlHYpS832yAHzWxUtRdt p9fuYCqJ9zByPpyPv9jPYzlyHPkXrX6PFNxs3EMIL3zrSsjufNSdU2QKwCLnTGX/ Z2jRk1nhfaJt5j9KHHB7oNQ9yZ+122BOseqdeCFrQznVvB5QDLgUDH7IPsM+Hz50 ki2zlerD8d8Gs75ylfjvaFzroX69GAPFP0Ipdq6Toz4cMC/faYLT4VZUxZvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwOUz1A8GmN9GkJ20gwWbg5jOpG4wHwYDVR0j BBgwFoAUxGUApC8QwuHIBPKnICM6uioMRF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjE3MmVlZjktZWM2YS00NTU4LTgxODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQy RjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEyQTBDNDQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDY1MDBBNDJGMTBDMkUxQzgwNEYyQTcyMDIzM0FCQTJBMEM0 NDVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNB QkEyQTBDNDQ1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYWfoPEM7Q+eKxOBNxX86gjVDDi32xGNnBu tS+9mhb2RXhAIj7WzrXaTEDp5Mz+DV4gRLTsUanoZncVFzKTpfwcNCJIdnOZAOpF MCrbrB5I21oxu3TWbWc0XZIgfiXMs8tAi7RNEc8nWwV3cSLuFBBo8M2vEQX2+wt1 EzERCdqUtNZxWLth4+Xw9g7oRcuvMZwjSwJCyzPSmDNY+AXQxkXDNn2VuLSrHPur okTEA33ueCXzvmEQHpW+F20hZP+1Lj3SPzSlEvqzoFVpXcGr8xOh2KYACHRLMRr/ tEtehkDtyQIACKWDHdy9QKbWKUz7HK3R/DNiGlNcQtpBT5qHeoo= -----END CERTIFICATE-----Generated at Sun Nov 15 10:05:23 2026 by rpki-client