$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft File: 2843C420C9538DE003DB96047ACE7F2FE1B83454.mft (raw, json) Hash identifier: VwbTwI8fBqxOG1CQJQP7MFQl3AOtSUcbEywPOVidR64= Subject key identifier: 12:AD:8A:96:14:CE:14:99:C7:F8:A6:CD:F0:9D:2F:4A:6A:40:D6:33 Authority key identifier: 28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 Certificate issuer: /CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Certificate serial: 144D643E054FC971B4F4B01DC2320A2F128AED98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:43:45 +0000 Manifest this update: Mon 21 Sep 2026 05:38:45 +0000 Manifest next update: Tue 22 Sep 2026 08:01:45 +0000 Files and hashes: 1: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: ZmQheHX1MZV/oBZW9LIfogQSYln7HG4CQMJRL8sFUs4=) 2: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: Gs+snvngtmEUYMerL8umS66cdNSbHO+hqLt5UBqYHqk=) 3: 2843C420C9538DE003DB96047ACE7F2FE1B83454.crl (hash: 58r0HWPKugGTv+EBKATN0edsBxhnPJtcpOlomSy3Mno=) 4: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: Ekh2cRoP3jEu4ToqLXfO3pEmBPqQ1/HiAdtyj75YlY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4d:64:3e:05:4f:c9:71:b4:f4:b0:1d:c2:32:0a:2f:12:8a:ed:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Validity Not Before: Sep 21 05:38:45 2026 GMT Not After : Sep 22 08:01:45 2026 GMT Subject: CN=12AD8A9614CE1499C7F8A6CDF09D2F4A6A40D633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:70:62:c4:42:55:75:4c:40:65:b6:56:2e: e9:22:a4:3a:68:dd:f8:e6:33:d3:a5:f9:e7:11:14: 0a:38:d7:d1:9c:18:60:a9:22:6c:3d:64:f6:85:9d: dd:17:3c:2c:13:62:b7:38:75:da:33:90:92:54:2a: 64:a5:59:2a:6e:b0:6f:83:e5:53:e6:28:d9:4b:d1: c1:bf:5d:9d:92:e3:a9:b2:b4:7c:b2:c7:5f:c3:da: 17:c1:52:b0:65:6f:9d:fa:50:79:3f:8b:4a:55:ac: 7e:52:39:cf:29:61:f9:6a:a8:35:d9:8d:c4:81:ff: 53:19:d9:bc:6a:e1:22:ad:46:15:e9:16:16:1f:8a: 02:c9:de:88:ea:a6:c8:91:46:31:37:83:10:38:c7: c7:1f:31:35:f2:37:16:87:16:21:ff:4c:98:15:5b: 6b:6f:60:c2:54:eb:96:c2:d9:ca:ec:5d:b7:94:19: 09:98:ff:37:89:cb:f8:74:0f:45:b1:62:e0:6c:e9: ca:4d:7b:78:6a:bf:88:a5:ea:1b:7f:c3:9e:ea:0b: 80:5c:3e:b8:a6:1d:bd:ff:72:42:8b:0e:a4:e8:a8: dd:9d:22:9b:08:93:03:0a:28:f5:98:d2:90:84:a4: 6e:eb:66:c8:b9:2a:74:73:97:cb:09:ca:d3:86:57: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AD:8A:96:14:CE:14:99:C7:F8:A6:CD:F0:9D:2F:4A:6A:40:D6:33 X509v3 Authority Key Identifier: keyid:28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:7e:9c:48:7e:08:b9:6f:4d:bc:5c:63:3f:c6:8c:c3:f2:aa: 2b:66:6f:bd:66:4b:19:cc:bb:bc:f0:99:f3:ba:c1:ea:27:07: 2c:e8:a0:a9:0b:5b:9d:c1:4d:be:40:9c:52:da:60:aa:e8:0b: fc:a8:7e:fc:ee:24:c1:9e:d4:1a:cb:ec:09:b8:29:01:70:13: 11:68:bd:86:69:f0:0e:bb:ae:fb:8c:b6:9b:e1:76:2e:a6:97: d5:15:0c:74:d2:a5:d8:8f:d3:a2:31:43:3a:ea:0d:82:9b:c4: 91:e1:70:74:2c:1a:f0:50:53:5f:2a:10:2d:14:ed:7a:c9:07: a4:67:e3:4d:61:89:7a:86:3e:ef:5c:c0:23:9b:a5:85:8a:fa: d7:29:f7:14:61:5e:28:76:14:01:62:42:3e:fd:ea:3d:93:f5: bf:27:4a:71:e0:e3:32:4a:03:f0:d5:79:ae:5c:03:e7:1f:0a: e8:83:35:ad:c5:66:e8:a3:d9:0d:74:26:95:a8:d1:9b:fe:26: 0c:d6:42:73:7f:fa:ea:a4:79:6a:23:90:30:ef:4c:dc:81:c6: c8:be:81:19:35:c5:66:71:57:9a:ad:d1:36:24:5f:14:87:83: 57:33:97:dc:1a:22:3e:76:1e:cd:2d:2a:05:23:a7:5a:ef:7e: 04:b0:1d:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFE1kPgVPyXG09LAdwjIKLxKK7ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdGMkZF MUI4MzQ1NDAeFw0yNjA5MjEwNTM4NDVaFw0yNjA5MjIwODAxNDVaMDMxMTAvBgNV BAMTKDEyQUQ4QTk2MTRDRTE0OTlDN0Y4QTZDREYwOUQyRjRBNkE0MEQ2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZnBixEJVdUxAZbZWLukipDpo 3fjmM9Ol+ecRFAo419GcGGCpImw9ZPaFnd0XPCwTYrc4ddozkJJUKmSlWSpusG+D 5VPmKNlL0cG/XZ2S46mytHyyx1/D2hfBUrBlb536UHk/i0pVrH5SOc8pYflqqDXZ jcSB/1MZ2bxq4SKtRhXpFhYfigLJ3ojqpsiRRjE3gxA4x8cfMTXyNxaHFiH/TJgV W2tvYMJU65bC2crsXbeUGQmY/zeJy/h0D0WxYuBs6cpNe3hqv4il6ht/w57qC4Bc PrimHb3/ckKLDqToqN2dIpsIkwMKKPWY0pCEpG7rZsi5KnRzl8sJytOGV4QDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEq2KlhTOFJnH+KbN8J0vSmpA1jMwHwYDVR0j BBgwFoAUKEPEIMlTjeAD25YEes5/L+G4NFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOTA5NDQtNjU2ZC00YWE3LTkxNzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBD OTUzOERFMDAzREI5NjA0N0FDRTdGMkZFMUI4MzQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQzQzQyMEM5NTM4REUwMDNEQjk2MDQ3QUNFN0YyRkUxQjgz NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdG MkZFMUI4MzQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKV+nEh+CLlvTbxcYz/GjMPyqitmb71mSxnM u7zwmfO6weonByzooKkLW53BTb5AnFLaYKroC/yofvzuJMGe1BrL7Am4KQFwExFo vYZp8A67rvuMtpvhdi6ml9UVDHTSpdiP06IxQzrqDYKbxJHhcHQsGvBQU18qEC0U 7XrJB6Rn401hiXqGPu9cwCObpYWK+tcp9xRhXih2FAFiQj796j2T9b8nSnHg4zJK A/DVea5cA+cfCuiDNa3FZuij2Q10JpWo0Zv+JgzWQnN/+uqkeWojkDDvTNyBxsi+ gRk1xWZxV5qt0TYkXxSHg1czl9waIj52Hs0tKgUjp1rvfgSwHUY= -----END CERTIFICATE-----Generated at Mon Sep 21 23:22:52 2026 by rpki-client