$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft File: 2843C420C9538DE003DB96047ACE7F2FE1B83454.mft (raw, json) Hash identifier: HApxmbhwc8lQtL3iAH1//kidynlqwGyXpEnSD81oxNE= Subject key identifier: 55:D5:8B:86:4F:1D:83:AB:3A:93:11:00:F1:A5:84:BA:4E:F9:13:62 Authority key identifier: 28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 Certificate issuer: /CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Certificate serial: 54A754077FC26FEDFAB34C2BA1207F914DD0B03E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:59:39 +0000 Manifest this update: Wed 23 Sep 2026 14:54:39 +0000 Manifest next update: Thu 24 Sep 2026 17:41:39 +0000 Files and hashes: 1: 2843C420C9538DE003DB96047ACE7F2FE1B83454.crl (hash: 6Tb40VNv37crQliEVci3J9O7qwF+1+AGbd2kX2NZQOY=) 2: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: Ekh2cRoP3jEu4ToqLXfO3pEmBPqQ1/HiAdtyj75YlY4=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: Gs+snvngtmEUYMerL8umS66cdNSbHO+hqLt5UBqYHqk=) 4: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: ZmQheHX1MZV/oBZW9LIfogQSYln7HG4CQMJRL8sFUs4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a7:54:07:7f:c2:6f:ed:fa:b3:4c:2b:a1:20:7f:91:4d:d0:b0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Validity Not Before: Sep 23 14:54:39 2026 GMT Not After : Sep 24 17:41:39 2026 GMT Subject: CN=55D58B864F1D83AB3A931100F1A584BA4EF91362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:6a:5e:f2:54:b9:9b:ad:4e:7b:2f:24:11: 38:af:4d:fc:f1:78:28:cb:46:ff:cd:0c:1b:60:c7: 17:fc:32:d5:f1:35:38:1f:f1:51:bc:43:84:db:84: 9c:c4:cf:0b:4e:1d:c8:5c:3e:e2:d0:2f:e0:8a:86: 9a:e2:e1:31:7c:2a:f4:8c:b1:26:98:b6:38:81:fb: 1a:cc:8a:fc:fa:d9:bd:67:a5:d7:1c:65:69:5c:d8: 2e:13:8b:41:3c:77:2a:84:32:e9:96:f5:ed:ba:4e: 73:0b:b4:eb:4a:ce:4a:2e:ad:21:94:b9:2e:f3:3f: 60:d0:c6:b5:11:b0:5c:0d:b4:7d:4b:1c:31:e8:34: f6:8d:94:d9:c5:c3:46:d1:1b:da:34:0b:0d:32:3b: ba:d2:11:80:3a:bb:01:2e:92:9d:22:59:ce:af:42: 8e:76:21:05:d4:cc:c8:d0:da:01:a0:c6:c8:12:92: c5:10:33:8f:8a:68:eb:66:2f:65:04:fd:0a:da:db: d5:ae:b9:25:17:f9:ca:d7:a3:a7:9b:42:9a:bd:53: fa:a2:f7:c6:10:5c:0a:06:d1:c1:09:9e:b3:be:4d: 64:c3:5e:1e:8f:12:ce:15:2c:78:a6:f7:9b:f7:2f: c6:3e:c2:d8:0a:ec:48:20:13:a5:9d:ff:cc:41:67: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D5:8B:86:4F:1D:83:AB:3A:93:11:00:F1:A5:84:BA:4E:F9:13:62 X509v3 Authority Key Identifier: keyid:28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:8a:0b:4f:74:21:0a:08:0c:2b:87:62:19:f4:ad:6e:e0:0b: 2b:2d:5d:a3:8e:c6:e5:a0:0c:31:c0:9b:c6:b5:a6:5a:c2:6b: 04:32:7d:ed:01:6c:95:18:11:e0:a3:83:3e:2b:e6:41:e5:1b: 08:2a:03:db:ed:b6:c5:f7:b5:cb:5d:d8:9f:9b:e7:39:6d:b9: d0:3f:19:37:01:f6:c7:2b:ac:89:b7:b9:f0:73:df:64:56:32: 83:7d:d5:9f:67:5c:e9:b2:4a:a7:43:23:2c:ab:09:db:04:26: 6f:b8:31:0b:36:4f:8c:a2:64:fc:48:28:4b:99:c3:d3:a2:85: 63:aa:b8:55:2f:8c:2b:30:ed:be:70:85:15:36:82:73:51:b4: fd:16:9b:30:2d:3a:c2:84:86:b3:62:6c:a7:df:2c:ee:48:d9: b7:e5:7f:68:8a:79:46:d9:5e:a0:41:91:b9:8e:23:cc:7e:93: 15:c7:bb:fa:37:00:07:51:c7:97:f4:2c:0b:e3:13:1d:0b:32: 94:7a:cb:8c:f6:cb:23:af:52:6a:06:b2:0c:7b:4a:ff:77:1c: 12:8c:5a:23:46:24:44:9a:fe:cf:1a:a4:af:e5:ae:24:92:2e: 7e:d9:c3:96:4c:af:4d:6f:f0:81:ea:e3:e0:0d:ad:58:d0:4c: 3d:bf:43:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKdUB3/Cb+36s0wroSB/kU3QsD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdGMkZF MUI4MzQ1NDAeFw0yNjA5MjMxNDU0MzlaFw0yNjA5MjQxNzQxMzlaMDMxMTAvBgNV BAMTKDU1RDU4Qjg2NEYxRDgzQUIzQTkzMTEwMEYxQTU4NEJBNEVGOTEzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZWpe8lS5m61Oey8kETivTfzx eCjLRv/NDBtgxxf8MtXxNTgf8VG8Q4TbhJzEzwtOHchcPuLQL+CKhpri4TF8KvSM sSaYtjiB+xrMivz62b1npdccZWlc2C4Ti0E8dyqEMumW9e26TnMLtOtKzkourSGU uS7zP2DQxrURsFwNtH1LHDHoNPaNlNnFw0bRG9o0Cw0yO7rSEYA6uwEukp0iWc6v Qo52IQXUzMjQ2gGgxsgSksUQM4+KaOtmL2UE/Qra29WuuSUX+crXo6ebQpq9U/qi 98YQXAoG0cEJnrO+TWTDXh6PEs4VLHim95v3L8Y+wtgK7EggE6Wd/8xBZ8ntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVdWLhk8dg6s6kxEA8aWEuk75E2IwHwYDVR0j BBgwFoAUKEPEIMlTjeAD25YEes5/L+G4NFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOTA5NDQtNjU2ZC00YWE3LTkxNzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBD OTUzOERFMDAzREI5NjA0N0FDRTdGMkZFMUI4MzQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQzQzQyMEM5NTM4REUwMDNEQjk2MDQ3QUNFN0YyRkUxQjgz NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdG MkZFMUI4MzQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKKC090IQoIDCuHYhn0rW7gCystXaOOxuWg DDHAm8a1plrCawQyfe0BbJUYEeCjgz4r5kHlGwgqA9vttsX3tctd2J+b5zltudA/ GTcB9scrrIm3ufBz32RWMoN91Z9nXOmySqdDIyyrCdsEJm+4MQs2T4yiZPxIKEuZ w9OihWOquFUvjCsw7b5whRU2gnNRtP0WmzAtOsKEhrNibKffLO5I2bflf2iKeUbZ XqBBkbmOI8x+kxXHu/o3AAdRx5f0LAvjEx0LMpR6y4z2yyOvUmoGsgx7Sv93HBKM WiNGJESa/s8apK/lriSSLn7Zw5ZMr01v8IHq4+ANrVjQTD2/Q/k= -----END CERTIFICATE-----Generated at Wed Sep 23 22:19:51 2026 by rpki-client