$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft File: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft (raw, json) Hash identifier: 0ny9IngE+NTWRnsEbLQtKs62eA3MRqJOWEQKOWHM1bE= Subject key identifier: F3:01:F2:AF:77:24:8F:AA:F2:02:6D:67:0E:9F:E8:FE:2E:33:E5:B5 Authority key identifier: 04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 Certificate issuer: /CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Certificate serial: 5EDEDDEEE2526F1F2BEFBFEE5E2B802BAAA8432F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 01:05:31 +0000 Manifest this update: Sun 15 Nov 2026 01:00:31 +0000 Manifest next update: Mon 16 Nov 2026 01:35:31 +0000 Files and hashes: 1: 046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl (hash: l/BPVjMmAGCRQ7ijGQDvfpwQrnGVXCr1Cv7scPHHfFQ=) 2: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: oxa0EP+y+hdJofNCCgpYexC5+mjVA3iUnOOBPz/fXeM=) 3: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: SaxfvfB1C+pa8JqacbPuSe8u4XyvvbZQ+27IK/agWXM=) 4: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: nnMaKehS3/1AXaDrstWHeSvF12XPdKSaOxHeLpG5OPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 01:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:de:dd:ee:e2:52:6f:1f:2b:ef:bf:ee:5e:2b:80:2b:aa:a8:43:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2 Validity Not Before: Nov 15 01:00:31 2026 GMT Not After : Nov 16 01:35:31 2026 GMT Subject: CN=F301F2AF77248FAAF2026D670E9FE8FE2E33E5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:51:39:26:bf:f7:8b:19:32:2d:2d:43:13:56: 78:5a:13:8c:18:a1:05:59:80:af:04:db:f5:8e:bf: 26:1c:1c:36:f7:d0:f6:bb:62:a5:22:44:8c:7b:84: e4:9c:e8:27:77:f3:3d:91:a0:da:d6:6a:82:6d:ed: 9e:8d:55:a3:7b:d9:0d:53:f8:2a:2f:b7:b8:95:5d: 5d:d6:08:94:01:e7:d7:15:12:f9:ac:ea:a0:55:44: 16:ae:e6:f6:11:67:eb:f0:6d:9a:de:8a:e4:f4:93: d1:01:6e:83:6f:3a:e7:28:3c:c0:6a:e1:de:b0:80: 81:1c:54:c3:fa:4a:7b:84:18:f5:03:7c:d1:84:ea: cc:e9:65:ae:6a:77:c3:c8:be:f0:8c:73:01:f6:9e: 63:a5:e5:2a:40:2e:7c:7a:02:86:23:0d:5b:cd:3a: 9f:c3:5d:62:a1:3c:0a:59:3b:71:04:0e:ae:ca:f6: 6b:06:03:ad:48:75:96:8f:e7:b2:6f:2e:89:c6:7f: 0b:12:64:e4:11:4a:06:48:8a:2d:8a:8a:53:5a:f2: f0:a3:45:68:fa:75:0c:fe:86:d5:ec:9c:de:14:ec: 11:da:03:ad:95:74:90:4c:53:81:0f:40:13:2e:49: 06:a7:8e:4c:51:5e:13:36:0f:64:ac:1d:39:43:c1: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:01:F2:AF:77:24:8F:AA:F2:02:6D:67:0E:9F:E8:FE:2E:33:E5:B5 X509v3 Authority Key Identifier: keyid:04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:65:fe:c0:36:d7:bb:3b:9c:8d:15:c0:05:e6:86:60:4e:e5: 68:4f:bb:cd:36:b7:7e:9f:86:38:15:57:a3:48:d7:79:75:ce: 85:1f:9c:ff:78:08:8d:22:47:19:ed:21:26:58:18:ea:c6:14: 7e:fe:e9:6a:ff:d5:30:a0:2b:a3:af:c0:2b:ac:db:c7:fa:84: e9:66:2e:96:96:e6:9e:f1:83:56:b3:ac:6f:7c:88:2c:fe:be: 95:25:00:aa:5b:58:64:ea:17:b0:a3:86:25:19:27:9f:d2:2e: 4a:d7:4d:c1:cb:b5:b2:ef:29:e5:dd:43:17:31:10:f9:70:16: 08:27:ff:a7:dd:bf:ef:bc:d7:72:a3:76:19:27:3a:cd:21:c2: 79:ce:0c:a8:12:51:18:2f:08:aa:db:93:ee:48:b7:73:c4:55: 47:e8:03:d8:7b:da:1c:15:50:54:ad:ab:c3:81:57:99:09:6f: a0:52:de:39:d7:02:8f:cd:da:20:e1:e6:25:8d:24:9e:6a:ec: a1:6d:34:e9:f9:c2:9f:7d:11:a5:ff:2f:57:fc:53:b8:63:00: 47:2a:ef:02:dd:ed:ab:9c:4d:3a:b2:5a:2b:55:98:4c:58:31: 0a:0f:15:65:db:13:52:b8:70:d7:5a:25:16:bb:c3:ff:90:7b: d0:65:80:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXt7d7uJSbx8r77/uXiuAK6qoQy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4 NjRFOUZEMjAeFw0yNjExMTUwMTAwMzFaFw0yNjExMTYwMTM1MzFaMDMxMTAvBgNV BAMTKEYzMDFGMkFGNzcyNDhGQUFGMjAyNkQ2NzBFOUZFOEZFMkUzM0U1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3UTkmv/eLGTItLUMTVnhaE4wY oQVZgK8E2/WOvyYcHDb30Pa7YqUiRIx7hOSc6Cd38z2RoNrWaoJt7Z6NVaN72Q1T +Covt7iVXV3WCJQB59cVEvms6qBVRBau5vYRZ+vwbZreiuT0k9EBboNvOucoPMBq 4d6wgIEcVMP6SnuEGPUDfNGE6szpZa5qd8PIvvCMcwH2nmOl5SpALnx6AoYjDVvN Op/DXWKhPApZO3EEDq7K9msGA61IdZaP57JvLonGfwsSZOQRSgZIii2KilNa8vCj RWj6dQz+htXsnN4U7BHaA62VdJBMU4EPQBMuSQanjkxRXhM2D2SsHTlDwcnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8wHyr3ckj6ryAm1nDp/o/i4z5bUwHwYDVR0j BBgwFoAUBGpLjEeLOMt++58Gpa2cdIZOn9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNiOGFlOTctNjgxOC00OGE5LWFiZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0 NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4NjRFOUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDZBNEI4QzQ3OEIzOENCN0VGQjlGMDZBNUFEOUM3NDg2NEU5 RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlD NzQ4NjRFOUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFl/sA217s7nI0VwAXmhmBO5WhPu802t36f hjgVV6NI13l1zoUfnP94CI0iRxntISZYGOrGFH7+6Wr/1TCgK6OvwCus28f6hOlm LpaW5p7xg1azrG98iCz+vpUlAKpbWGTqF7CjhiUZJ5/SLkrXTcHLtbLvKeXdQxcx EPlwFggn/6fdv++813KjdhknOs0hwnnODKgSURgvCKrbk+5It3PEVUfoA9h72hwV UFStq8OBV5kJb6BS3jnXAo/N2iDh5iWNJJ5q7KFtNOn5wp99EaX/L1f8U7hjAEcq 7wLd7aucTTqyWitVmExYMQoPFWXbE1K4cNdaJRa7w/+Qe9BlgKM= -----END CERTIFICATE-----Generated at Sun Nov 15 17:57:19 2026 by rpki-client