$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft File: 2843C420C9538DE003DB96047ACE7F2FE1B83454.mft (raw, json) Hash identifier: knQXHxHNz5MJdIa+DhUP6lsgZAkAzs4YTQZMnb4HkTI= Subject key identifier: 37:76:1A:A0:60:5D:CD:31:48:54:36:50:F7:52:FD:7F:02:3A:39:8D Authority key identifier: 28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 Certificate issuer: /CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Certificate serial: 6A8203099E9F7C6994C7BBCE6FA99835126CF05A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:09:40 +0000 Manifest this update: Mon 20 Jul 2026 23:04:40 +0000 Manifest next update: Wed 22 Jul 2026 02:03:40 +0000 Files and hashes: 1: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: Ekh2cRoP3jEu4ToqLXfO3pEmBPqQ1/HiAdtyj75YlY4=) 2: 2843C420C9538DE003DB96047ACE7F2FE1B83454.crl (hash: MDpVs7ZHfiSRhBsPDnRQmaalBF5ATDYavRkIrGlkj2w=) 3: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: ZmQheHX1MZV/oBZW9LIfogQSYln7HG4CQMJRL8sFUs4=) 4: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: Gs+snvngtmEUYMerL8umS66cdNSbHO+hqLt5UBqYHqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:82:03:09:9e:9f:7c:69:94:c7:bb:ce:6f:a9:98:35:12:6c:f0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Validity Not Before: Jul 20 23:04:40 2026 GMT Not After : Jul 22 02:03:40 2026 GMT Subject: CN=37761AA0605DCD3148543650F752FD7F023A398D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:c5:ef:6c:45:19:25:3b:49:1a:d5:c1:be: 62:ec:56:f3:e9:f5:2f:b8:b1:6e:3e:fe:74:51:26: f6:86:68:57:1b:63:fb:76:c4:4f:7c:8a:56:b1:96: 39:90:be:a1:19:d8:c4:e4:07:b4:41:e8:a7:23:d4: cc:67:55:2b:5c:51:52:df:2e:e3:fe:10:74:07:36: f9:a4:ed:c0:1b:f5:5a:92:e2:38:1b:73:de:9b:52: e9:17:40:32:23:bc:e9:0f:2b:a4:93:a8:97:4a:80: f6:42:45:ed:b6:98:50:0b:22:4a:40:67:9e:c5:cd: f2:22:c1:0b:fb:6f:0d:7c:8a:8f:9c:b3:ae:1a:08: 20:b7:ab:95:71:04:66:1d:19:cb:69:f9:5f:2d:c6: ba:a5:bf:60:e3:e9:7e:e8:55:4a:b2:5c:d9:d8:37: a4:e5:bb:2e:97:8d:5b:52:3b:d1:4c:c2:d1:3c:de: 5f:e5:74:43:ae:92:57:b8:6b:7e:0a:91:44:ee:97: 51:25:df:fb:a7:29:08:80:f6:76:33:3c:30:97:25: 76:94:3f:8b:9e:bd:76:d5:f5:c0:8e:d6:89:58:30: 23:ea:69:ca:6b:af:8b:4f:25:5c:2c:6e:07:f0:70: a2:5c:69:40:5d:da:81:cd:3b:0d:1b:03:23:3c:e2: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:76:1A:A0:60:5D:CD:31:48:54:36:50:F7:52:FD:7F:02:3A:39:8D X509v3 Authority Key Identifier: keyid:28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:99:f9:15:0f:f7:75:18:3b:4e:89:de:7a:7a:d2:4f:0a:bd: 81:af:43:9c:58:1e:98:14:6e:cc:79:65:b8:ac:d3:34:92:ac: a6:e0:25:24:3c:e4:7b:fe:28:33:e6:d0:a3:83:5f:1f:41:82: 79:23:1c:e2:8e:88:66:aa:5c:1e:0c:8a:0d:e0:5b:5f:0d:af: 96:4e:5b:a8:a7:b6:5e:2c:58:6e:d1:45:96:85:22:69:ab:6b: ee:fe:ff:bd:de:5b:d6:0f:23:63:ea:f1:85:75:fb:47:61:fe: 22:14:9c:a5:9c:34:c0:df:4a:c0:92:a2:11:35:bb:d2:46:ed: 5f:3f:3b:de:9a:59:14:58:86:6c:6a:18:34:ff:c1:a0:26:20: ed:bd:27:31:e1:d8:8f:a5:9c:2a:1e:93:12:4d:43:e6:35:c3: 28:83:a8:17:01:14:b8:69:68:e0:6c:fa:d3:58:51:8d:07:f3: 02:d6:c8:38:3c:8c:fd:a7:50:5b:ef:2d:15:54:94:c9:2f:ea: 62:3c:bb:e9:91:e8:ac:14:94:1a:06:29:d3:e4:40:a5:2e:8f: a4:58:0e:2a:b5:b2:75:79:7b:35:38:12:b8:63:c9:34:f0:bc: 3c:f8:7b:db:b7:ff:fc:f4:b1:a4:00:fe:13:e1:b6:16:d0:05: 73:28:b3:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoIDCZ6ffGmUx7vOb6mYNRJs8FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdGMkZF MUI4MzQ1NDAeFw0yNjA3MjAyMzA0NDBaFw0yNjA3MjIwMjAzNDBaMDMxMTAvBgNV BAMTKDM3NzYxQUEwNjA1RENEMzE0ODU0MzY1MEY3NTJGRDdGMDIzQTM5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmecXvbEUZJTtJGtXBvmLsVvPp 9S+4sW4+/nRRJvaGaFcbY/t2xE98ilaxljmQvqEZ2MTkB7RB6Kcj1MxnVStcUVLf LuP+EHQHNvmk7cAb9VqS4jgbc96bUukXQDIjvOkPK6STqJdKgPZCRe22mFALIkpA Z57FzfIiwQv7bw18io+cs64aCCC3q5VxBGYdGctp+V8txrqlv2Dj6X7oVUqyXNnY N6Tluy6XjVtSO9FMwtE83l/ldEOukle4a34KkUTul1El3/unKQiA9nYzPDCXJXaU P4uevXbV9cCO1olYMCPqacprr4tPJVwsbgfwcKJcaUBd2oHNOw0bAyM84mNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN3YaoGBdzTFIVDZQ91L9fwI6OY0wHwYDVR0j BBgwFoAUKEPEIMlTjeAD25YEes5/L+G4NFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOTA5NDQtNjU2ZC00YWE3LTkxNzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBD OTUzOERFMDAzREI5NjA0N0FDRTdGMkZFMUI4MzQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQzQzQyMEM5NTM4REUwMDNEQjk2MDQ3QUNFN0YyRkUxQjgz NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdG MkZFMUI4MzQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqZ+RUP93UYO06J3np60k8KvYGvQ5xYHpgU bsx5Zbis0zSSrKbgJSQ85Hv+KDPm0KODXx9BgnkjHOKOiGaqXB4Mig3gW18Nr5ZO W6intl4sWG7RRZaFImmra+7+/73eW9YPI2Pq8YV1+0dh/iIUnKWcNMDfSsCSohE1 u9JG7V8/O96aWRRYhmxqGDT/waAmIO29JzHh2I+lnCoekxJNQ+Y1wyiDqBcBFLhp aOBs+tNYUY0H8wLWyDg8jP2nUFvvLRVUlMkv6mI8u+mR6KwUlBoGKdPkQKUuj6RY Diq1snV5ezU4ErhjyTTwvDz4e9u3//z0saQA/hPhthbQBXMos7Q= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:25 2026 by rpki-client