$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft File: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft (raw, json) Hash identifier: hRkBVlh0fKOHTRCHE9qaA7CFmi+gamS3l8A9ZWhMecM= Subject key identifier: 96:32:AE:D3:66:34:A2:58:42:71:9E:D4:CA:CA:27:A1:93:26:B8:23 Authority key identifier: 04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 Certificate issuer: /CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Certificate serial: 178BE6277356F5C8E29B069CE7938D34F8FEBD8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:31:02 +0000 Manifest this update: Mon 21 Sep 2026 07:26:02 +0000 Manifest next update: Tue 22 Sep 2026 08:52:02 +0000 Files and hashes: 1: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: SaxfvfB1C+pa8JqacbPuSe8u4XyvvbZQ+27IK/agWXM=) 2: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: nnMaKehS3/1AXaDrstWHeSvF12XPdKSaOxHeLpG5OPc=) 3: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: oxa0EP+y+hdJofNCCgpYexC5+mjVA3iUnOOBPz/fXeM=) 4: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl (hash: wrv4taqHEZcpQfDa5Gt0vxbHwcIYg6ab8f3Al5OdcXM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8b:e6:27:73:56:f5:c8:e2:9b:06:9c:e7:93:8d:34:f8:fe:bd:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Validity Not Before: Sep 21 07:26:02 2026 GMT Not After : Sep 22 08:52:02 2026 GMT Subject: CN=9632AED36634A25842719ED4CACA27A19326B823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d3:d6:93:25:ca:b0:39:0a:7d:8f:52:44:2b: 1d:24:4c:82:d7:e5:41:bc:df:5c:71:07:09:81:17: 7f:8d:d6:fe:d8:6e:70:d0:01:4b:73:24:60:00:9a: b2:b6:47:af:90:92:f0:f8:05:c7:1a:c7:18:10:b3: 5b:b1:f9:4d:bd:16:4b:a1:e2:5a:a2:ba:61:79:88: ac:5b:85:d9:28:c0:4c:87:0e:08:fc:7f:2a:2d:2d: f7:b7:58:bb:b1:74:85:2a:4c:5a:0b:f0:03:a9:76: 80:46:a6:a3:d8:8a:f8:8c:a6:16:d3:63:61:b6:cc: ba:32:57:6a:4e:8b:b9:2a:a7:94:bd:6e:2a:27:95: 38:fe:06:4f:80:fd:9d:f7:32:8b:d5:90:24:c2:ed: 14:3a:b9:01:18:bb:1a:96:46:d2:31:ce:d4:da:3e: f8:88:59:76:ec:1e:ae:21:10:e9:48:f2:4e:bd:c6: fe:e1:69:11:02:ea:7e:29:5c:89:36:d0:3b:67:43: a9:01:14:e7:1c:21:ab:12:06:05:95:73:75:e9:5d: 7e:18:5a:af:df:37:7e:c9:0a:93:48:4b:b0:39:b2: 2f:12:be:9d:ee:ae:f8:e6:b2:56:92:e1:87:05:3f: 80:eb:ea:9d:c6:e3:43:f4:53:b5:38:98:c8:f7:87: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:32:AE:D3:66:34:A2:58:42:71:9E:D4:CA:CA:27:A1:93:26:B8:23 X509v3 Authority Key Identifier: keyid:04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a7:3b:67:bc:20:af:d5:84:8a:27:61:22:d2:2e:3e:e4:16: c5:38:63:fa:62:e0:d5:a5:9f:ed:8c:b1:2c:fc:cb:5b:23:66: fa:0b:2a:c6:f3:71:da:bb:cd:bb:fd:8b:99:57:bf:37:e7:2f: d4:91:12:28:8c:57:e3:24:56:bb:e5:22:c6:21:19:0b:b7:29: 75:d1:75:b6:a4:47:4f:c1:6e:de:c6:20:b8:65:0e:94:31:a9: ca:0d:1f:0b:2e:00:c7:95:df:a0:1a:41:5b:90:92:ec:61:25: ef:a7:56:0a:b5:53:01:ac:ba:d7:df:8b:b0:64:6c:30:8a:df: 5b:4b:b3:8a:be:71:5c:74:85:4f:cb:9d:5a:8c:d0:c7:29:27: 68:60:e3:84:41:60:ec:21:a0:12:84:05:64:4f:96:6c:70:bc: 02:83:04:a8:c9:63:ff:a8:41:42:5d:a2:b9:2c:42:55:a0:c6: 9d:2a:fb:fd:69:f0:f2:ed:da:55:dc:0d:31:7c:fa:32:91:1f: dc:92:a5:9d:a0:71:a2:ef:14:aa:28:85:45:fa:b6:e6:e5:56: 07:a5:68:3c:e2:f0:23:b6:ac:39:aa:51:8a:2e:57:df:c9:2d: 9e:5d:ac:3e:f4:c8:3e:db:99:71:3e:3e:9c:ef:84:2b:e8:dd: cf:7d:23:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4vmJ3NW9cjimwac55ONNPj+vY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4 NjRFOUZEMjAeFw0yNjA5MjEwNzI2MDJaFw0yNjA5MjIwODUyMDJaMDMxMTAvBgNV BAMTKDk2MzJBRUQzNjYzNEEyNTg0MjcxOUVENENBQ0EyN0ExOTMyNkI4MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY09aTJcqwOQp9j1JEKx0kTILX 5UG831xxBwmBF3+N1v7YbnDQAUtzJGAAmrK2R6+QkvD4BccaxxgQs1ux+U29Fkuh 4lqiumF5iKxbhdkowEyHDgj8fyotLfe3WLuxdIUqTFoL8AOpdoBGpqPYiviMphbT Y2G2zLoyV2pOi7kqp5S9bionlTj+Bk+A/Z33MovVkCTC7RQ6uQEYuxqWRtIxztTa PviIWXbsHq4hEOlI8k69xv7haREC6n4pXIk20DtnQ6kBFOccIasSBgWVc3XpXX4Y Wq/fN37JCpNIS7A5si8Svp3urvjmslaS4YcFP4Dr6p3G40P0U7U4mMj3h7ypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUljKu02Y0olhCcZ7UysonoZMmuCMwHwYDVR0j BBgwFoAUBGpLjEeLOMt++58Gpa2cdIZOn9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNiOGFlOTctNjgxOC00OGE5LWFiZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0 NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4NjRFOUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDZBNEI4QzQ3OEIzOENCN0VGQjlGMDZBNUFEOUM3NDg2NEU5 RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlD NzQ4NjRFOUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABinO2e8IK/VhIonYSLSLj7kFsU4Y/pi4NWl n+2MsSz8y1sjZvoLKsbzcdq7zbv9i5lXvzfnL9SREiiMV+MkVrvlIsYhGQu3KXXR dbakR0/Bbt7GILhlDpQxqcoNHwsuAMeV36AaQVuQkuxhJe+nVgq1UwGsutffi7Bk bDCK31tLs4q+cVx0hU/LnVqM0McpJ2hg44RBYOwhoBKEBWRPlmxwvAKDBKjJY/+o QUJdorksQlWgxp0q+/1p8PLt2lXcDTF8+jKRH9ySpZ2gcaLvFKoohUX6tublVgel aDzi8CO2rDmqUYouV9/JLZ5drD70yD7bmXE+PpzvhCvo3c99I6Q= -----END CERTIFICATE-----Generated at Mon Sep 21 17:44:52 2026 by rpki-client