
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
File: B46886DF13C95D5C834BD72CDC1742C463272A72.mft (raw, json)
Hash identifier: vJRE2sToU0wTnA0NPDLmlVt6E8ZJ7W5vp70cwaAjplM=
Subject key identifier: F6:B5:34:B4:C2:F6:EF:66:F2:99:67:8B:0A:3D:A4:C5:51:25:FE:7A
Authority key identifier: B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72
Certificate issuer: /CN=B46886DF13C95D5C834BD72CDC1742C463272A72
Certificate serial: 704E846B6E8C24A12697B70C3C22231D14A4A7F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
Manifest number: DA
Signing time: Sun 11 Oct 2026 03:25:50 +0000
Manifest this update: Sun 11 Oct 2026 03:20:50 +0000
Manifest next update: Mon 12 Oct 2026 07:09:50 +0000
Files and hashes: 1: B46886DF13C95D5C834BD72CDC1742C463272A72.crl (hash: +Q9JYbBiYJjSjsrE5FYJivlXBi1UCr9GDA5QV6X5oeM=)
2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: q5l3eOYPeemq7qIazHMV6kibSs/1KaEDRsni+YgaV1w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl
rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 21:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4e:84:6b:6e:8c:24:a1:26:97:b7:0c:3c:22:23:1d:14:a4:a7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B46886DF13C95D5C834BD72CDC1742C463272A72
Validity
Not Before: Oct 11 03:20:50 2026 GMT
Not After : Oct 12 07:09:50 2026 GMT
Subject: CN=F6B534B4C2F6EF66F299678B0A3DA4C55125FE7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:f8:a8:b1:c8:8e:f3:01:59:e9:20:9c:98:
99:8b:f7:c5:91:1b:61:93:5c:ca:df:51:5f:ed:a6:
a9:07:28:a0:d6:9e:b8:b9:08:c3:82:4b:86:96:b6:
ad:1e:ab:f2:5d:2c:d6:eb:7d:eb:01:05:eb:21:54:
b1:25:9b:ff:84:53:5e:e6:92:90:02:38:d6:f9:07:
50:ab:75:56:70:77:89:d4:2e:26:4f:96:2f:ee:53:
96:8f:63:22:1c:76:11:9b:aa:15:6e:05:ac:62:91:
7c:f4:69:7d:8f:49:6e:33:f7:72:c2:f0:9d:8d:62:
a3:cf:97:8f:b5:77:ad:d9:06:89:2e:05:e2:61:38:
5b:24:1a:92:39:8a:64:b6:36:44:42:e7:f7:99:d1:
c9:41:27:f8:8a:42:80:6c:5c:e4:40:7d:1f:a3:24:
58:91:3d:02:3b:3c:d5:e8:81:e7:43:b8:f5:97:07:
aa:fc:3f:73:e5:80:72:2b:0a:99:24:6c:b3:2e:16:
98:30:98:d1:de:4c:04:a2:79:e8:c8:f0:62:80:79:
c4:bd:f8:cb:99:e6:6d:a1:ee:13:f0:ac:d5:22:bd:
0b:8a:d0:64:56:5a:11:0e:d6:25:3c:2d:35:b2:d0:
6d:bd:bc:98:f3:48:7a:29:f0:de:52:a1:85:f8:c7:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:34:B4:C2:F6:EF:66:F2:99:67:8B:0A:3D:A4:C5:51:25:FE:7A
X509v3 Authority Key Identifier:
keyid:B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:85:16:23:56:bf:45:ea:63:f1:d4:0c:b3:15:60:c8:7c:69:
72:80:e1:d9:c7:ae:8d:bb:d6:2d:88:03:8b:ee:ab:8d:7a:74:
a3:27:42:bd:1b:9b:4d:e0:91:e8:a9:ca:47:de:5c:8f:55:b1:
13:bd:ad:0d:f7:02:76:c1:ea:7e:c9:97:af:01:09:00:70:f9:
9c:78:a0:f1:08:b7:de:42:4b:04:fd:e0:77:0a:19:02:ea:a7:
2b:07:96:ac:a1:29:ab:7d:79:d8:3d:19:09:62:52:79:e4:d8:
d7:21:79:0d:a4:e6:4c:08:d7:20:5a:2a:07:94:34:cd:6f:aa:
c3:29:5d:5f:0c:55:14:ac:22:d2:50:b1:10:2e:77:4c:95:e2:
c8:bb:70:82:f3:6d:b7:3c:f9:3a:ce:12:38:78:ad:ae:95:0f:
9a:c6:9f:1c:bc:eb:ff:51:f8:73:e5:21:cc:c8:ec:3b:00:5a:
51:97:b8:12:25:a7:e6:f6:cd:5b:7d:ae:a7:00:3b:25:4c:8b:
da:39:79:2d:e7:c8:fd:e8:5f:c6:9f:1a:da:58:25:77:e3:a5:
7e:d1:c8:5d:b5:12:71:8a:8a:a6:41:51:79:d2:db:06:92:fc:
9a:0d:8d:ab:fa:7d:20:56:b9:40:2a:b5:fd:bb:c6:58:5f:af:
39:93:21:3c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcE6Ea26MJKEml7cMPCIjHRSkp/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ2ODg2REYxM0M5NUQ1QzgzNEJENzJDREMxNzQyQzQ2
MzI3MkE3MjAeFw0yNjEwMTEwMzIwNTBaFw0yNjEwMTIwNzA5NTBaMDMxMTAvBgNV
BAMTKEY2QjUzNEI0QzJGNkVGNjZGMjk5Njc4QjBBM0RBNEM1NTEyNUZFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCto/iosciO8wFZ6SCcmJmL98WR
G2GTXMrfUV/tpqkHKKDWnri5CMOCS4aWtq0eq/JdLNbrfesBBeshVLElm/+EU17m
kpACONb5B1CrdVZwd4nULiZPli/uU5aPYyIcdhGbqhVuBaxikXz0aX2PSW4z93LC
8J2NYqPPl4+1d63ZBokuBeJhOFskGpI5imS2NkRC5/eZ0clBJ/iKQoBsXORAfR+j
JFiRPQI7PNXogedDuPWXB6r8P3PlgHIrCpkkbLMuFpgwmNHeTASieejI8GKAecS9
+MuZ5m2h7hPwrNUivQuK0GRWWhEO1iU8LTWy0G29vJjzSHop8N5SoYX4x2w7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9rU0tML272bymWeLCj2kxVEl/nowHwYDVR0j
BBgwFoAUtGiG3xPJXVyDS9cs3BdCxGMnKnIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTBiYTg1YTAtMzUzNC00OWE0LWE4MjYtMTNhNzM1Zjk0MzY5LzAvQjQ2ODg2REYx
M0M5NUQ1QzgzNEJENzJDREMxNzQyQzQ2MzI3MkE3Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9CNDY4ODZERjEzQzk1RDVDODM0QkQ3MkNEQzE3NDJDNDYzMjcy
QTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4
MjYtMTNhNzM1Zjk0MzY5LzAvQjQ2ODg2REYxM0M5NUQ1QzgzNEJENzJDREMxNzQy
QzQ2MzI3MkE3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJKFFiNWv0XqY/HUDLMVYMh8aXKA4dnHro27
1i2IA4vuq416dKMnQr0bm03gkeipykfeXI9VsRO9rQ33AnbB6n7Jl68BCQBw+Zx4
oPEIt95CSwT94HcKGQLqpysHlqyhKat9edg9GQliUnnk2NcheQ2k5kwI1yBaKgeU
NM1vqsMpXV8MVRSsItJQsRAud0yV4si7cILzbbc8+TrOEjh4ra6VD5rGnxy86/9R
+HPlIczI7DsAWlGXuBIlp+b2zVt9rqcAOyVMi9o5eS3nyP3oX8afGtpYJXfjpX7R
yF21EnGKiqZBUXnS2waS/JoNjav6fSBWuUAqtf27xlhfrzmTITw=
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:28:12 2026 by rpki-client