$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft File: 2843C420C9538DE003DB96047ACE7F2FE1B83454.mft (raw, json) Hash identifier: p/Qisk7sxPnAOSCZ2ImiwomrHMLVC6Y4AOHmx1ZBx7I= Subject key identifier: 30:3F:C0:61:87:5C:D2:05:52:1A:E7:38:AB:CD:D2:96:E2:3A:4E:A4 Authority key identifier: 28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 Certificate issuer: /CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Certificate serial: 7FA2D885D69E9FA71834BC3497957C54DD5AD3E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 07:54:35 +0000 Manifest this update: Thu 23 Jul 2026 07:49:35 +0000 Manifest next update: Fri 24 Jul 2026 11:45:35 +0000 Files and hashes: 1: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: Ekh2cRoP3jEu4ToqLXfO3pEmBPqQ1/HiAdtyj75YlY4=) 2: 2843C420C9538DE003DB96047ACE7F2FE1B83454.crl (hash: 26LiGt5xpVanZ1EcwTCZb790C9YaxK60Sh0bXacbf6Y=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: Gs+snvngtmEUYMerL8umS66cdNSbHO+hqLt5UBqYHqk=) 4: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: ZmQheHX1MZV/oBZW9LIfogQSYln7HG4CQMJRL8sFUs4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a2:d8:85:d6:9e:9f:a7:18:34:bc:34:97:95:7c:54:dd:5a:d3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Validity Not Before: Jul 23 07:49:35 2026 GMT Not After : Jul 24 11:45:35 2026 GMT Subject: CN=303FC061875CD205521AE738ABCDD296E23A4EA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:1e:d0:48:9a:ac:7e:64:48:51:e9:a0:e9: aa:00:b3:c7:da:f4:45:1d:e5:fd:67:74:44:8a:c1: 49:7b:3e:26:c3:84:85:8f:bc:56:45:5b:0b:c2:84: 6d:80:73:a6:c8:ad:8b:46:77:71:bb:86:c3:0a:3a: 04:e3:bb:c1:4f:9a:26:e8:2e:62:9c:ea:05:99:cc: 45:d3:0c:d9:5f:88:b7:9e:83:72:e5:59:af:6a:e1: 39:7a:d4:a6:f3:f1:0a:58:65:50:d9:6f:2f:c0:76: ea:fa:ad:65:a8:aa:c2:31:e4:8c:0b:49:3b:03:0f: fa:a5:7c:cc:c8:95:cb:2d:d4:03:00:88:c5:44:8a: 8f:23:15:4f:1c:b2:91:65:77:1f:12:10:2e:e2:05: 39:28:25:43:e8:0c:21:b3:a9:67:da:0e:c4:cd:aa: 55:09:81:61:0f:d0:4c:a6:e8:fa:66:0f:87:bd:fd: 23:9e:18:e9:2d:f5:f1:f2:03:95:7a:77:2b:84:4c: 72:74:79:b4:3f:23:76:1d:51:cc:c9:21:93:85:e1: 24:82:bc:98:5e:4a:29:73:2e:8d:8e:bd:d3:32:25: ce:9a:ee:26:49:f0:60:b9:9a:7f:c7:42:72:31:35: a6:ac:ea:b3:4f:e5:84:dd:2d:48:28:15:99:da:70: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3F:C0:61:87:5C:D2:05:52:1A:E7:38:AB:CD:D2:96:E2:3A:4E:A4 X509v3 Authority Key Identifier: keyid:28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:04:5d:90:6b:38:22:56:64:13:84:b6:6a:73:81:c0:ef:ef: a8:63:f8:7b:f3:a7:ce:0b:3b:d6:10:dd:87:87:eb:3a:dd:d9: f5:a4:93:c7:2a:5b:c0:2f:7f:49:d7:14:c3:e2:9b:e7:b9:77: 28:c1:e3:83:86:41:b1:ce:bc:65:d8:e2:5e:c9:9c:ae:fe:ee: 56:37:a8:ac:9b:61:03:7b:19:2f:d7:65:71:ad:11:de:36:db: 57:50:21:a3:e4:fc:c4:99:af:a2:9f:40:33:39:30:d6:cb:1b: 5f:3f:24:db:22:4e:4d:e6:c5:f2:cf:da:42:ea:7a:0e:3f:a3: 74:44:9a:09:8c:e0:ba:ee:a1:b0:4b:4c:d0:4c:9e:ab:f7:a6: 9f:59:45:07:bc:a2:80:6c:8a:4c:7e:68:05:52:92:82:63:71: 30:58:23:c2:d3:27:56:9e:2d:3c:7d:5e:76:79:04:76:ee:96: 8d:4e:4b:0f:97:23:da:06:ad:67:87:81:93:0f:0f:63:75:c1: 1e:46:5f:40:4d:59:8e:10:0f:09:3a:63:6b:af:94:f5:ea:06: 1d:82:31:6b:f3:7c:37:5e:4d:5b:ad:5e:40:71:1b:9c:65:ef: bf:fc:e4:6b:61:dd:a8:5e:c2:b1:4f:bf:cf:f5:e4:d8:66:fd: 39:d6:ef:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf6LYhdaen6cYNLw0l5V8VN1a0+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdGMkZF MUI4MzQ1NDAeFw0yNjA3MjMwNzQ5MzVaFw0yNjA3MjQxMTQ1MzVaMDMxMTAvBgNV BAMTKDMwM0ZDMDYxODc1Q0QyMDU1MjFBRTczOEFCQ0REMjk2RTIzQTRFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeLR7QSJqsfmRIUemg6aoAs8fa 9EUd5f1ndESKwUl7PibDhIWPvFZFWwvChG2Ac6bIrYtGd3G7hsMKOgTju8FPmibo LmKc6gWZzEXTDNlfiLeeg3LlWa9q4Tl61Kbz8QpYZVDZby/Adur6rWWoqsIx5IwL STsDD/qlfMzIlcst1AMAiMVEio8jFU8cspFldx8SEC7iBTkoJUPoDCGzqWfaDsTN qlUJgWEP0Eym6PpmD4e9/SOeGOkt9fHyA5V6dyuETHJ0ebQ/I3YdUczJIZOF4SSC vJheSilzLo2OvdMyJc6a7iZJ8GC5mn/HQnIxNaas6rNP5YTdLUgoFZnacMA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMD/AYYdc0gVSGuc4q83SluI6TqQwHwYDVR0j BBgwFoAUKEPEIMlTjeAD25YEes5/L+G4NFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOTA5NDQtNjU2ZC00YWE3LTkxNzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBD OTUzOERFMDAzREI5NjA0N0FDRTdGMkZFMUI4MzQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQzQzQyMEM5NTM4REUwMDNEQjk2MDQ3QUNFN0YyRkUxQjgz NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdG MkZFMUI4MzQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8EXZBrOCJWZBOEtmpzgcDv76hj+Hvzp84L O9YQ3YeH6zrd2fWkk8cqW8Avf0nXFMPim+e5dyjB44OGQbHOvGXY4l7JnK7+7lY3 qKybYQN7GS/XZXGtEd4221dQIaPk/MSZr6KfQDM5MNbLG18/JNsiTk3mxfLP2kLq eg4/o3REmgmM4LruobBLTNBMnqv3pp9ZRQe8ooBsikx+aAVSkoJjcTBYI8LTJ1ae LTx9XnZ5BHbulo1OSw+XI9oGrWeHgZMPD2N1wR5GX0BNWY4QDwk6Y2uvlPXqBh2C MWvzfDdeTVutXkBxG5xl77/85Gth3ahewrFPv8/15Nhm/TnW76k= -----END CERTIFICATE-----Generated at Fri Jul 24 01:18:27 2026 by rpki-client