$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft File: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft (raw, json) Hash identifier: iTCjBxtqPAtBvDsmueq9Nrd0VySBSQSHnz6Guc/TvGU= Subject key identifier: AB:F4:3D:0C:9D:0D:48:08:B8:94:AE:2B:B5:D3:10:B1:C6:99:32:A2 Authority key identifier: 04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 Certificate issuer: /CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Certificate serial: 60BE717816D73A94F81983A4700DF09E6E8AF996 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 17:50:44 +0000 Manifest this update: Tue 16 Jun 2026 17:45:44 +0000 Manifest next update: Wed 17 Jun 2026 20:06:44 +0000 Files and hashes: 1: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl (hash: s6Zb9bUipBcaI8QlwlM8JPuyea+2kXKm624wdB9Y5SI=) 2: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: oxa0EP+y+hdJofNCCgpYexC5+mjVA3iUnOOBPz/fXeM=) 3: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: nnMaKehS3/1AXaDrstWHeSvF12XPdKSaOxHeLpG5OPc=) 4: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: SaxfvfB1C+pa8JqacbPuSe8u4XyvvbZQ+27IK/agWXM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:be:71:78:16:d7:3a:94:f8:19:83:a4:70:0d:f0:9e:6e:8a:f9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Validity Not Before: Jun 16 17:45:44 2026 GMT Not After : Jun 17 20:06:44 2026 GMT Subject: CN=ABF43D0C9D0D4808B894AE2BB5D310B1C69932A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fc:df:cb:43:bc:d6:d7:40:b8:c4:ea:c8:aa: 0c:5c:ad:06:91:ab:33:62:0e:07:76:60:9c:14:bb: cc:9d:0a:54:32:1c:29:8c:22:a9:20:55:51:12:5d: 6b:9c:43:08:0a:1e:55:0a:20:84:06:a0:6e:cd:35: 46:77:b3:88:d8:e8:0e:06:c7:cd:95:1a:ff:e9:cd: 38:af:33:76:62:84:d8:51:d9:ba:30:7c:fa:ab:4b: 42:ec:4f:31:fe:70:ea:37:33:b0:02:46:c5:9b:7b: 0c:fe:f0:82:91:ad:3a:07:5a:e0:a7:62:ae:12:44: 53:34:3c:89:64:22:c7:5c:65:cf:6f:67:be:92:c3: 37:cc:4e:d4:6a:fb:ff:5f:cf:69:46:69:fb:76:64: 8a:f0:18:f1:6a:0a:1c:e2:72:b8:ed:f1:17:c3:e8: d0:b2:58:17:85:a8:eb:a0:a1:9b:48:94:58:7d:f2: 43:d3:df:d1:79:5f:b7:48:6f:2c:a6:0a:9c:55:22: 40:cc:03:e8:fb:70:e8:e1:21:7e:4b:e6:37:ea:cf: b2:38:04:2e:23:c2:8a:f9:bb:2c:e0:a3:41:5b:c9: 94:1b:c8:d4:d2:a4:cf:9b:fb:c3:17:8f:e4:d0:7f: e3:64:b0:36:e3:9d:21:3b:83:ed:01:4c:c7:db:a6: d9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F4:3D:0C:9D:0D:48:08:B8:94:AE:2B:B5:D3:10:B1:C6:99:32:A2 X509v3 Authority Key Identifier: keyid:04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2d:17:12:88:b6:76:0d:f4:69:aa:e8:b8:d8:0a:4c:aa:db: 00:8b:f7:02:65:7d:f1:2e:2d:b2:0e:ef:e4:16:a4:fd:e6:d1: c6:3e:3a:b7:31:0b:1f:84:72:b2:54:5c:82:cc:04:c9:f6:1c: cf:b6:5a:66:2e:16:0a:23:95:4d:ca:e1:63:82:ee:73:fa:d1: 57:38:68:88:80:7c:26:93:33:a8:f3:ff:9a:16:d4:09:0f:d6: 93:fe:78:b6:0f:d1:28:45:88:41:4a:5b:54:bc:63:ec:72:5f: d0:e6:a7:a3:17:73:de:b1:08:12:6c:df:2c:38:ea:7d:08:5e: a8:e9:8d:88:c9:c1:1f:67:26:94:b3:eb:28:a8:a0:5c:69:d8: 25:f8:bd:92:fe:0a:2a:c7:a8:14:89:20:94:49:19:d4:0e:3e: fd:bc:cc:1f:d8:3d:94:fd:49:da:63:a0:29:bd:aa:f1:28:26: 5a:69:22:ad:00:b1:c8:14:53:01:0d:74:cd:67:7f:fd:b4:3a: 91:61:14:cd:ce:e1:f6:5a:63:57:bb:87:5a:3b:7f:24:00:5e: 74:a2:12:8d:03:63:da:c5:3c:5a:1d:c5:6d:a5:6c:80:45:14: 17:93:14:d3:8b:a2:38:33:6d:02:9c:a1:7c:be:1d:3b:e6:df: dc:c1:ac:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYL5xeBbXOpT4GYOkcA3wnm6K+ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4 NjRFOUZEMjAeFw0yNjA2MTYxNzQ1NDRaFw0yNjA2MTcyMDA2NDRaMDMxMTAvBgNV BAMTKEFCRjQzRDBDOUQwRDQ4MDhCODk0QUUyQkI1RDMxMEIxQzY5OTMyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk/N/LQ7zW10C4xOrIqgxcrQaR qzNiDgd2YJwUu8ydClQyHCmMIqkgVVESXWucQwgKHlUKIIQGoG7NNUZ3s4jY6A4G x82VGv/pzTivM3ZihNhR2bowfPqrS0LsTzH+cOo3M7ACRsWbewz+8IKRrToHWuCn Yq4SRFM0PIlkIsdcZc9vZ76SwzfMTtRq+/9fz2lGaft2ZIrwGPFqChzicrjt8RfD 6NCyWBeFqOugoZtIlFh98kPT39F5X7dIbyymCpxVIkDMA+j7cOjhIX5L5jfqz7I4 BC4jwor5uyzgo0FbyZQbyNTSpM+b+8MXj+TQf+NksDbjnSE7g+0BTMfbptkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq/Q9DJ0NSAi4lK4rtdMQscaZMqIwHwYDVR0j BBgwFoAUBGpLjEeLOMt++58Gpa2cdIZOn9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNiOGFlOTctNjgxOC00OGE5LWFiZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0 NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4NjRFOUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDZBNEI4QzQ3OEIzOENCN0VGQjlGMDZBNUFEOUM3NDg2NEU5 RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlD NzQ4NjRFOUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHItFxKItnYN9Gmq6LjYCkyq2wCL9wJlffEu LbIO7+QWpP3m0cY+OrcxCx+EcrJUXILMBMn2HM+2WmYuFgojlU3K4WOC7nP60Vc4 aIiAfCaTM6jz/5oW1AkP1pP+eLYP0ShFiEFKW1S8Y+xyX9Dmp6MXc96xCBJs3yw4 6n0IXqjpjYjJwR9nJpSz6yiooFxp2CX4vZL+CirHqBSJIJRJGdQOPv28zB/YPZT9 SdpjoCm9qvEoJlppIq0AscgUUwENdM1nf/20OpFhFM3O4fZaY1e7h1o7fyQAXnSi Eo0DY9rFPFodxW2lbIBFFBeTFNOLojgzbQKcoXy+HTvm39zBrJ8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:51 2026 by rpki-client