$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft File: 46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft (raw, json) Hash identifier: olBMVuJSvaPs27i3FCSzPs4IkuRIrh81ETafINOzAyk= Subject key identifier: 4A:4D:F0:23:56:E0:FD:6F:CE:A7:B3:CD:24:6B:85:A9:F1:5E:2C:69 Authority key identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F Certificate issuer: /CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F Certificate serial: 1C71186C5C063E1F3B0BE31B4E7DC639D671D037 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:03:58 +0000 Manifest this update: Tue 22 Sep 2026 01:58:58 +0000 Manifest next update: Wed 23 Sep 2026 05:12:58 +0000 Files and hashes: 1: 46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl (hash: tnwWpmn3phTc30xzuucK7sYYzQIx1xUuB+Vn9NyEix0=) 2: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: /LgC9mtYgR6oGEgu/CxTVNw9E4BQBfj6BuM/4svSIN4=) 3: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: fti8KMcK7Su1rf6h/nPpwfsRIDldzix1ecJxj65TBmc=) 4: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: eUuw3yw55g0fngkB7tsUSkh/znzGsN9FtMfeP3wJOV4=) 5: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: 3BwispZxvie5HA8ZPKSlj+DmXQJa2RqkjXaOSsS1x1Y=) 6: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (hash: mOIy6jqUeVMspfreDn1PT5EUDCXF4LQ8aTefz/4cLLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:71:18:6c:5c:06:3e:1f:3b:0b:e3:1b:4e:7d:c6:39:d6:71:d0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F Validity Not Before: Sep 22 01:58:58 2026 GMT Not After : Sep 23 05:12:58 2026 GMT Subject: CN=4A4DF02356E0FD6FCEA7B3CD246B85A9F15E2C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d4:84:2b:e2:32:ce:4c:c5:2a:11:dd:be:cc: 38:f4:3a:96:4b:9b:c7:7c:f5:dd:54:3d:67:e3:c9: 7f:7b:f5:27:2f:ac:82:a2:cd:f9:0e:1d:f4:de:b8: 61:6e:fe:f8:1f:f2:a1:60:dc:ab:f3:0a:bd:99:ba: 11:5f:d8:99:d5:39:83:54:4b:cb:e8:80:9e:1b:73: 17:27:25:13:bf:01:3c:1c:51:26:cd:15:9d:7c:1e: d9:ab:81:a1:03:4f:49:dc:e1:ac:df:28:16:6e:44: 37:17:d4:04:40:6b:93:74:a5:5f:e9:6f:7f:8d:08: 46:6e:c6:e9:9b:06:21:b9:21:dc:14:01:75:7b:c1: 82:8f:4a:69:76:e2:57:34:b4:87:b5:39:bc:a8:e1: ad:0c:f4:72:06:87:ad:93:d7:ba:19:bb:4c:63:b5: 2d:44:56:b4:af:b1:f0:ae:ce:55:cd:d8:be:cd:1f: d2:be:45:93:a4:ee:5d:5a:c4:8f:59:bd:e9:fa:66: 98:c4:69:ad:d1:52:b4:a3:d7:b7:6b:d6:38:02:d8: 6a:c8:40:2d:12:f2:b1:ce:98:ce:d8:18:fb:4e:87: f3:23:f6:52:97:40:0d:31:42:72:d0:7c:6c:55:21: 89:d5:3d:c0:06:37:d6:ee:ae:49:ed:4f:8b:51:4b: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4D:F0:23:56:E0:FD:6F:CE:A7:B3:CD:24:6B:85:A9:F1:5E:2C:69 X509v3 Authority Key Identifier: keyid:46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:11:af:ee:62:26:52:ac:fa:64:b9:f5:63:20:6f:4f:04:2b: 76:23:e0:c5:78:80:fc:d5:77:f7:28:da:20:51:2a:cc:29:9d: 33:99:72:f7:aa:50:64:a0:3c:f6:c2:bb:e9:d5:8d:61:b4:2f: 5f:c2:33:4e:5b:64:4a:47:b3:6b:48:1d:b9:01:3a:bf:f7:fe: 65:d1:36:dd:1f:19:ff:e1:29:e4:0e:d9:15:ed:d4:ca:e2:10: ee:52:2f:53:84:b2:18:3a:de:36:15:41:19:13:87:bc:96:04: 0a:61:03:fc:8e:ca:34:cb:f3:71:5c:09:45:cb:fa:d4:ad:25: 9d:94:68:fb:ac:85:6d:1a:39:b7:bb:17:60:70:56:51:79:65: e3:74:c0:47:c8:2a:a7:b3:7b:3a:53:73:0f:54:71:fa:9e:60: 68:97:7a:61:b8:ae:e7:4f:ae:91:ce:21:fa:aa:9d:32:e1:19: 1c:7a:4e:ab:68:d9:08:af:11:f8:11:0a:8b:09:85:e3:e1:09: ae:95:67:57:10:52:ed:d0:5b:09:1d:94:ed:9d:0e:eb:68:0e: 92:67:55:26:6e:cc:c1:16:47:3c:3c:6e:67:4a:5b:0c:aa:74: 0b:28:cd:62:df:ee:91:5e:74:de:91:6e:cf:f3:95:80:b9:32: b1:97:11:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHEYbFwGPh87C+MbTn3GOdZx0DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFMzE0ODEyRkIzMERFMDEzNkNDODdGMDBFRjk4QkE0 QThGN0Y0RjAeFw0yNjA5MjIwMTU4NThaFw0yNjA5MjMwNTEyNThaMDMxMTAvBgNV BAMTKDRBNERGMDIzNTZFMEZENkZDRUE3QjNDRDI0NkI4NUE5RjE1RTJDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1IQr4jLOTMUqEd2+zDj0OpZL m8d89d1UPWfjyX979ScvrIKizfkOHfTeuGFu/vgf8qFg3KvzCr2ZuhFf2JnVOYNU S8vogJ4bcxcnJRO/ATwcUSbNFZ18HtmrgaEDT0nc4azfKBZuRDcX1ARAa5N0pV/p b3+NCEZuxumbBiG5IdwUAXV7wYKPSml24lc0tIe1Obyo4a0M9HIGh62T17oZu0xj tS1EVrSvsfCuzlXN2L7NH9K+RZOk7l1axI9Zven6ZpjEaa3RUrSj17dr1jgC2GrI QC0S8rHOmM7YGPtOh/Mj9lKXQA0xQnLQfGxVIYnVPcAGN9burkntT4tRS4lLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSk3wI1bg/W/Op7PNJGuFqfFeLGkwHwYDVR0j BBgwFoAURuMUgS+zDeATbMh/AO+YukqPf08wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVmMmM2NmMtMWY4Ny00ZDk4LWE0NjctMzIxOGI2NDViM2FjLzAvNDZFMzE0ODEy RkIzMERFMDEzNkNDODdGMDBFRjk4QkE0QThGN0Y0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NkUzMTQ4MTJGQjMwREUwMTM2Q0M4N0YwMEVGOThCQTRBOEY3 RjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVmMmM2NmMtMWY4Ny00ZDk4LWE0 NjctMzIxOGI2NDViM2FjLzAvNDZFMzE0ODEyRkIzMERFMDEzNkNDODdGMDBFRjk4 QkE0QThGN0Y0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwRr+5iJlKs+mS59WMgb08EK3Yj4MV4gPzV d/co2iBRKswpnTOZcveqUGSgPPbCu+nVjWG0L1/CM05bZEpHs2tIHbkBOr/3/mXR Nt0fGf/hKeQO2RXt1MriEO5SL1OEshg63jYVQRkTh7yWBAphA/yOyjTL83FcCUXL +tStJZ2UaPushW0aObe7F2BwVlF5ZeN0wEfIKqezezpTcw9UcfqeYGiXemG4rudP rpHOIfqqnTLhGRx6Tqto2QivEfgRCosJhePhCa6VZ1cQUu3QWwkdlO2dDutoDpJn VSZuzMEWRzw8bmdKWwyqdAsozWLf7pFedN6Rbs/zlYC5MrGXEcw= -----END CERTIFICATE-----Generated at Tue Sep 22 06:53:18 2026 by rpki-client