$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft File: 2843C420C9538DE003DB96047ACE7F2FE1B83454.mft (raw, json) Hash identifier: U/mDLvgI8efSfYoe7sinsdcmLeQy92K8nQdyvsnqefM= Subject key identifier: DD:2D:10:41:21:14:6D:78:4B:01:85:D0:7F:0D:B4:9B:81:3A:B6:C9 Authority key identifier: 28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 Certificate issuer: /CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Certificate serial: 1479CAA4B51F16519560DEAC107625572AF65571 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 18:07:19 +0000 Manifest this update: Sat 14 Nov 2026 18:02:19 +0000 Manifest next update: Sun 15 Nov 2026 20:35:19 +0000 Files and hashes: 1: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: Ekh2cRoP3jEu4ToqLXfO3pEmBPqQ1/HiAdtyj75YlY4=) 2: 2843C420C9538DE003DB96047ACE7F2FE1B83454.crl (hash: SHT6Z5XG/tXl6zqrKYZ9mBl3Kb0EUDhJCnrX0NvBPlQ=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: Gs+snvngtmEUYMerL8umS66cdNSbHO+hqLt5UBqYHqk=) 4: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: ZmQheHX1MZV/oBZW9LIfogQSYln7HG4CQMJRL8sFUs4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:79:ca:a4:b5:1f:16:51:95:60:de:ac:10:76:25:57:2a:f6:55:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Validity Not Before: Nov 14 18:02:19 2026 GMT Not After : Nov 15 20:35:19 2026 GMT Subject: CN=DD2D104121146D784B0185D07F0DB49B813AB6C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b4:6c:1c:f3:87:bc:33:73:d3:9f:d7:c7:11: de:23:9e:b0:a5:5b:03:60:30:03:58:57:b4:72:c0: 03:9b:58:3e:65:8e:ee:3e:73:3a:4b:a6:87:df:76: 2b:58:7d:ac:01:33:b6:25:9b:8f:1b:8d:71:70:0f: 82:d1:59:74:4a:83:0d:ab:f9:7a:bb:81:c8:5e:eb: 63:18:d6:c8:b7:df:c7:38:d4:61:ca:75:2e:0e:71: 92:a4:92:56:d7:61:3c:c6:38:8d:b8:31:3a:c8:77: ca:2c:9e:fc:f5:fa:f0:c1:12:70:6e:43:09:89:25: a4:5b:f8:02:86:38:e0:37:40:de:47:a7:c3:e2:11: 43:a5:9b:f2:4c:14:0f:3c:26:b4:f3:bc:d2:f3:6a: c6:8a:97:30:15:af:29:f3:bb:e9:43:b7:09:a5:89: 86:bf:88:d3:d1:5b:86:af:19:4e:f9:08:27:14:2d: e4:8b:15:b0:90:db:54:94:1f:73:d8:12:9c:58:9f: 72:68:66:b3:b8:2f:05:b3:02:30:3b:a0:79:16:50: 56:d0:ce:ef:70:14:dd:94:f4:c6:87:3d:3f:1b:ac: d0:71:74:c1:f8:5a:af:28:ac:df:33:c0:ff:b0:10: 02:a6:63:0b:c3:70:0e:26:c8:2d:b3:07:ca:d7:d2: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2D:10:41:21:14:6D:78:4B:01:85:D0:7F:0D:B4:9B:81:3A:B6:C9 X509v3 Authority Key Identifier: keyid:28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:85:a0:c2:de:9e:b3:bf:5c:b5:86:43:0f:a4:60:2c:72:8a: 54:a9:a3:f7:a7:d9:cf:06:e0:79:61:82:2e:f3:c2:bb:3b:57: f9:96:d7:f5:3e:d5:33:2c:72:11:b9:d3:9c:94:7a:aa:8d:ad: ed:6a:8d:48:77:10:f4:0f:9a:f7:a7:64:52:e7:48:2a:7e:3d: 5b:37:6f:25:05:13:a0:8a:11:8e:a8:8c:a3:b5:91:66:63:a3: 2e:6e:0f:9c:e0:d9:bc:7c:98:b3:17:65:54:dc:1e:57:61:9a: 40:87:40:9e:7c:6e:b9:ed:82:6d:05:ca:77:68:43:1f:3b:a3: 60:29:b9:7f:a1:a6:79:7f:e5:2d:c4:ef:2a:49:e2:18:a7:10: e5:a9:ab:e3:69:2f:12:cd:78:44:10:03:be:81:de:6c:33:ec: f4:c0:c0:e2:3b:9d:57:5d:2c:f7:32:9d:a1:86:a8:b6:09:54: 44:36:0a:b1:49:54:88:67:ed:cf:c3:f2:c1:e2:e0:a1:03:5c: d0:a7:5a:32:12:b8:b1:7a:d8:d2:8e:3f:0f:e1:22:5d:d4:a0: 81:33:dc:26:45:a5:cc:60:8c:e6:a9:67:25:e7:85:a8:ae:a8: f9:83:f7:df:c6:ff:8a:4d:60:10:f0:c8:a8:fb:7b:84:29:cd: 2a:a9:03:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHnKpLUfFlGVYN6sEHYlVyr2VXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdGMkZF MUI4MzQ1NDAeFw0yNjExMTQxODAyMTlaFw0yNjExMTUyMDM1MTlaMDMxMTAvBgNV BAMTKEREMkQxMDQxMjExNDZENzg0QjAxODVEMDdGMERCNDlCODEzQUI2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4tGwc84e8M3PTn9fHEd4jnrCl WwNgMANYV7RywAObWD5lju4+czpLpoffditYfawBM7Ylm48bjXFwD4LRWXRKgw2r +Xq7gche62MY1si338c41GHKdS4OcZKkklbXYTzGOI24MTrId8osnvz1+vDBEnBu QwmJJaRb+AKGOOA3QN5Hp8PiEUOlm/JMFA88JrTzvNLzasaKlzAVrynzu+lDtwml iYa/iNPRW4avGU75CCcULeSLFbCQ21SUH3PYEpxYn3JoZrO4LwWzAjA7oHkWUFbQ zu9wFN2U9MaHPT8brNBxdMH4Wq8orN8zwP+wEAKmYwvDcA4myC2zB8rX0pPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3S0QQSEUbXhLAYXQfw20m4E6tskwHwYDVR0j BBgwFoAUKEPEIMlTjeAD25YEes5/L+G4NFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOTA5NDQtNjU2ZC00YWE3LTkxNzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBD OTUzOERFMDAzREI5NjA0N0FDRTdGMkZFMUI4MzQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQzQzQyMEM5NTM4REUwMDNEQjk2MDQ3QUNFN0YyRkUxQjgz NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdG MkZFMUI4MzQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOFoMLenrO/XLWGQw+kYCxyilSpo/en2c8G 4Hlhgi7zwrs7V/mW1/U+1TMschG505yUeqqNre1qjUh3EPQPmvenZFLnSCp+PVs3 byUFE6CKEY6ojKO1kWZjoy5uD5zg2bx8mLMXZVTcHldhmkCHQJ58brntgm0Fyndo Qx87o2ApuX+hpnl/5S3E7ypJ4hinEOWpq+NpLxLNeEQQA76B3mwz7PTAwOI7nVdd LPcynaGGqLYJVEQ2CrFJVIhn7c/D8sHi4KEDXNCnWjISuLF62NKOPw/hIl3UoIEz 3CZFpcxgjOapZyXnhaiuqPmD99/G/4pNYBDwyKj7e4QpzSqpA9E= -----END CERTIFICATE-----Generated at Sun Nov 15 05:44:08 2026 by rpki-client