$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft File: 2843C420C9538DE003DB96047ACE7F2FE1B83454.mft (raw, json) Hash identifier: ENgn7V10cRm54eNkXI0dsZMyq/IKZvnTCiz50Gb1I1o= Subject key identifier: BF:63:14:31:70:DE:AD:CD:DF:33:7A:24:A3:93:7E:0E:FA:31:A0:85 Authority key identifier: 28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 Certificate issuer: /CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Certificate serial: 57AF460D38EBC5A3727284AE78AF67C8A71A0CF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft Manifest number: FF Signing time: Tue 10 Nov 2026 05:58:25 +0000 Manifest this update: Tue 10 Nov 2026 05:53:25 +0000 Manifest next update: Wed 11 Nov 2026 07:40:25 +0000 Files and hashes: 1: 2843C420C9538DE003DB96047ACE7F2FE1B83454.crl (hash: AturitZrMjWQTz0wJ+fPVwyIDJ6S0Z+Cei5roJnxP7o=) 2: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: Gs+snvngtmEUYMerL8umS66cdNSbHO+hqLt5UBqYHqk=) 3: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: ZmQheHX1MZV/oBZW9LIfogQSYln7HG4CQMJRL8sFUs4=) 4: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: Ekh2cRoP3jEu4ToqLXfO3pEmBPqQ1/HiAdtyj75YlY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:af:46:0d:38:eb:c5:a3:72:72:84:ae:78:af:67:c8:a7:1a:0c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Validity Not Before: Nov 10 05:53:25 2026 GMT Not After : Nov 11 07:40:25 2026 GMT Subject: CN=BF63143170DEADCDDF337A24A3937E0EFA31A085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:9f:15:ce:2a:4a:8f:d7:b4:96:04:aa:b3: 32:05:b9:1c:61:9d:2f:05:e0:a9:8a:05:9f:1d:a0: 61:d8:3a:15:5c:f6:6e:a4:ab:33:d9:44:d2:96:85: 06:ee:59:f5:e4:c8:6d:cd:c5:c5:68:3a:a2:0d:63: 5d:45:fc:78:02:57:77:9f:ff:bd:40:83:08:f0:7d: d0:18:68:b6:17:cd:27:84:26:06:45:5b:46:e7:f0: 60:86:f2:3e:ce:64:d8:d0:3b:08:32:8e:fa:a6:c3: d3:2f:37:23:42:4a:31:58:8b:58:36:1f:db:d0:45: c0:ef:e2:cd:be:7e:4f:e5:34:b6:5e:5b:fd:d3:0f: 35:bb:44:12:cb:49:d3:6d:44:32:2a:c1:d6:f8:c9: 50:26:ea:5e:26:06:6e:a6:df:03:08:2a:5a:14:a6: e6:e1:f3:4b:3a:90:4e:20:31:22:38:f1:34:7c:89: 3b:af:72:79:b4:dc:cf:45:61:19:d7:64:61:7d:9d: 5a:22:54:d3:30:77:15:69:b7:96:08:fe:23:08:be: 39:a2:73:35:46:14:8c:cf:e8:73:da:48:49:ef:5c: 4a:0b:43:14:13:57:3d:8f:c7:09:b3:65:45:b1:1b: 88:6d:ea:5f:67:9b:49:55:2f:1b:71:32:43:1d:a2: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:63:14:31:70:DE:AD:CD:DF:33:7A:24:A3:93:7E:0E:FA:31:A0:85 X509v3 Authority Key Identifier: keyid:28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bc:7d:05:51:fe:27:84:00:d4:15:f9:1c:07:fd:40:7d:67: 88:83:32:38:af:89:17:e9:6c:1a:cb:2f:4a:b3:28:43:70:a1: 17:bc:b3:21:99:60:1a:bc:04:b0:a9:41:bc:d8:c0:50:27:15: 69:16:ad:05:c0:05:fa:ba:16:ac:f7:70:b2:2a:d5:dc:87:b6: 4d:fb:2b:54:cb:d3:5e:b6:8e:ee:7b:54:8e:e3:a9:71:59:47: 3b:8e:dc:01:ce:80:d5:98:0e:9d:10:31:90:77:95:8a:3f:35: e8:8e:1e:92:07:76:8a:21:0a:da:f6:7b:7a:45:43:5a:11:97: ca:df:86:a9:9c:9f:9d:00:23:d6:52:2a:24:09:32:21:19:b0: 4a:a0:dd:38:16:7b:52:a9:c5:89:f8:31:44:6e:ef:9b:25:8e: 9c:ac:0b:88:b5:5f:f1:a4:5d:cb:01:fa:c0:e5:1b:1a:0b:06: d2:8c:8b:44:f4:3f:0e:ce:60:c6:e0:b3:c4:54:f2:e0:f2:31: a4:6c:5d:75:a8:59:55:46:bd:43:1e:56:7c:39:ab:c6:7a:25: ef:ed:cf:ab:a4:48:40:fd:22:d6:ae:4c:e6:51:41:f4:b2:83: af:72:02:c5:07:e8:e8:ee:2b:35:d4:1d:25:83:af:14:7c:39: 7c:79:d9:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV69GDTjrxaNycoSueK9nyKcaDPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdGMkZF MUI4MzQ1NDAeFw0yNjExMTAwNTUzMjVaFw0yNjExMTEwNzQwMjVaMDMxMTAvBgNV BAMTKEJGNjMxNDMxNzBERUFEQ0RERjMzN0EyNEEzOTM3RTBFRkEzMUEwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcJ8VzipKj9e0lgSqszIFuRxh nS8F4KmKBZ8doGHYOhVc9m6kqzPZRNKWhQbuWfXkyG3NxcVoOqINY11F/HgCV3ef /71AgwjwfdAYaLYXzSeEJgZFW0bn8GCG8j7OZNjQOwgyjvqmw9MvNyNCSjFYi1g2 H9vQRcDv4s2+fk/lNLZeW/3TDzW7RBLLSdNtRDIqwdb4yVAm6l4mBm6m3wMIKloU pubh80s6kE4gMSI48TR8iTuvcnm03M9FYRnXZGF9nVoiVNMwdxVpt5YI/iMIvjmi czVGFIzP6HPaSEnvXEoLQxQTVz2PxwmzZUWxG4ht6l9nm0lVLxtxMkMdolh9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv2MUMXDerc3fM3oko5N+DvoxoIUwHwYDVR0j BBgwFoAUKEPEIMlTjeAD25YEes5/L+G4NFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOTA5NDQtNjU2ZC00YWE3LTkxNzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBD OTUzOERFMDAzREI5NjA0N0FDRTdGMkZFMUI4MzQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQzQzQyMEM5NTM4REUwMDNEQjk2MDQ3QUNFN0YyRkUxQjgz NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdG MkZFMUI4MzQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALu8fQVR/ieEANQV+RwH/UB9Z4iDMjiviRfp bBrLL0qzKENwoRe8syGZYBq8BLCpQbzYwFAnFWkWrQXABfq6Fqz3cLIq1dyHtk37 K1TL0162ju57VI7jqXFZRzuO3AHOgNWYDp0QMZB3lYo/NeiOHpIHdoohCtr2e3pF Q1oRl8rfhqmcn50AI9ZSKiQJMiEZsEqg3TgWe1KpxYn4MURu75sljpysC4i1X/Gk XcsB+sDlGxoLBtKMi0T0Pw7OYMbgs8RU8uDyMaRsXXWoWVVGvUMeVnw5q8Z6Je/t z6ukSED9ItauTOZRQfSyg69yAsUH6OjuKzXUHSWDrxR8OXx52W8= -----END CERTIFICATE-----Generated at Tue Nov 10 17:53:25 2026 by rpki-client