$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft File: 2843C420C9538DE003DB96047ACE7F2FE1B83454.mft (raw, json) Hash identifier: npC0IlN7059aKXAJAJ9qFJyr5zwiCSeEFojHc32iTwQ= Subject key identifier: 53:BE:CE:CA:1F:66:8A:98:97:59:86:71:1A:8F:1B:D0:D8:EE:ED:D6 Authority key identifier: 28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 Certificate issuer: /CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Certificate serial: 067A66ED26802425C6078FCE0742E59829670FEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 06:31:21 +0000 Manifest this update: Wed 04 Nov 2026 06:26:21 +0000 Manifest next update: Thu 05 Nov 2026 08:50:21 +0000 Files and hashes: 1: 2843C420C9538DE003DB96047ACE7F2FE1B83454.crl (hash: k/RuyWxeN5mch1xgrY6UTNbIIGhwjHkTwbdI1BbXpBk=) 2: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: ZmQheHX1MZV/oBZW9LIfogQSYln7HG4CQMJRL8sFUs4=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: Gs+snvngtmEUYMerL8umS66cdNSbHO+hqLt5UBqYHqk=) 4: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: Ekh2cRoP3jEu4ToqLXfO3pEmBPqQ1/HiAdtyj75YlY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 08:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7a:66:ed:26:80:24:25:c6:07:8f:ce:07:42:e5:98:29:67:0f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Validity Not Before: Nov 4 06:26:21 2026 GMT Not After : Nov 5 08:50:21 2026 GMT Subject: CN=53BECECA1F668A98975986711A8F1BD0D8EEEDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:8b:e7:32:43:79:c6:3f:99:d3:3c:93:74: f2:8a:a4:df:70:54:97:f2:18:31:26:f3:97:26:11: 28:1a:0c:b8:5f:cd:de:c4:2a:87:11:da:ff:f6:fe: 36:eb:82:86:85:37:e1:d3:8c:84:f7:75:e2:d3:21: 6f:d6:68:f0:c3:34:61:ec:d5:cc:b9:66:df:dc:21: cf:84:be:b9:77:9b:d8:f2:bb:a0:c7:3c:82:9e:e4: 8d:4e:b5:2d:e0:6f:2f:72:05:cf:ad:56:fe:e1:5d: 58:8f:94:9f:7b:4e:84:12:a0:9a:31:f9:6f:8e:8e: 06:37:4d:c9:cd:1d:8e:1e:da:46:5b:4a:b2:06:2a: 7e:75:7a:ba:33:9b:44:c2:24:cf:20:6f:78:89:8a: e8:1b:38:b0:e7:7e:4a:2b:ce:cd:b5:c5:e0:ed:08: f2:23:32:38:ba:82:c6:04:79:5d:24:61:8e:c3:49: 6e:7f:01:67:2b:de:4f:fc:04:1d:b2:15:2c:e7:67: 56:44:40:65:fb:10:6d:04:f8:d3:54:ce:27:39:46: 4c:05:09:63:35:0a:17:35:b6:c4:eb:07:dd:b3:9d: ba:a6:f5:d7:1e:c2:f0:cd:de:d1:aa:61:af:38:c4: d7:c8:bf:35:9f:11:3b:92:db:85:3c:b1:b5:58:d8: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BE:CE:CA:1F:66:8A:98:97:59:86:71:1A:8F:1B:D0:D8:EE:ED:D6 X509v3 Authority Key Identifier: keyid:28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:04:89:66:cf:9c:00:b7:a1:d4:49:ad:28:6f:aa:7d:8c:4f: b3:25:43:9d:bd:2d:2c:9c:2f:30:4b:76:a8:7a:bc:fc:e8:b2: 4e:cd:48:3c:69:d3:00:b4:1f:bd:2d:c4:ba:2f:50:26:e0:c8: 8e:cb:f7:b2:6f:11:52:df:25:df:be:65:29:c0:3d:e3:b8:e7: 68:c1:ff:f9:61:58:fb:af:72:bf:74:f5:0b:13:c9:a7:a2:b1: c8:13:b0:bd:9d:62:4e:a4:7e:18:3c:9a:26:83:9d:fa:3e:90: e4:39:6d:75:eb:5b:3a:37:64:fa:ac:2c:f0:55:c5:b0:65:81: 7f:e6:25:dd:2a:38:b5:02:b9:8b:1a:e7:fb:b2:d1:60:45:9d: 16:25:9c:cc:d3:13:26:09:fe:86:a4:5d:28:2c:27:dd:ce:31: 41:55:57:19:50:ba:e6:a1:5e:2c:10:d5:4e:51:8d:5c:20:90: 8c:57:ff:1b:54:ee:8e:7a:49:bb:89:d8:48:91:15:d1:39:74: 63:84:dc:09:f9:7a:19:49:c0:43:ac:3a:14:69:8f:3e:50:74: 00:83:69:fd:82:8c:ee:af:3f:04:19:0f:af:d7:18:f9:94:f1: 73:fc:05:74:98:e8:8b:21:e7:f8:f0:cc:fb:04:22:40:c4:e7: 86:66:d4:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnpm7SaAJCXGB4/OB0LlmClnD+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdGMkZF MUI4MzQ1NDAeFw0yNjExMDQwNjI2MjFaFw0yNjExMDUwODUwMjFaMDMxMTAvBgNV BAMTKDUzQkVDRUNBMUY2NjhBOTg5NzU5ODY3MTFBOEYxQkQwRDhFRUVERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyYvnMkN5xj+Z0zyTdPKKpN9w VJfyGDEm85cmESgaDLhfzd7EKocR2v/2/jbrgoaFN+HTjIT3deLTIW/WaPDDNGHs 1cy5Zt/cIc+Evrl3m9jyu6DHPIKe5I1OtS3gby9yBc+tVv7hXViPlJ97ToQSoJox +W+OjgY3TcnNHY4e2kZbSrIGKn51erozm0TCJM8gb3iJiugbOLDnfkorzs21xeDt CPIjMji6gsYEeV0kYY7DSW5/AWcr3k/8BB2yFSznZ1ZEQGX7EG0E+NNUzic5RkwF CWM1Chc1tsTrB92znbqm9dcewvDN3tGqYa84xNfIvzWfETuS24U8sbVY2KF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU77Oyh9mipiXWYZxGo8b0Nju7dYwHwYDVR0j BBgwFoAUKEPEIMlTjeAD25YEes5/L+G4NFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOTA5NDQtNjU2ZC00YWE3LTkxNzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBD OTUzOERFMDAzREI5NjA0N0FDRTdGMkZFMUI4MzQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQzQzQyMEM5NTM4REUwMDNEQjk2MDQ3QUNFN0YyRkUxQjgz NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdG MkZFMUI4MzQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4EiWbPnAC3odRJrShvqn2MT7MlQ529LSyc LzBLdqh6vPzosk7NSDxp0wC0H70txLovUCbgyI7L97JvEVLfJd++ZSnAPeO452jB //lhWPuvcr909QsTyaeiscgTsL2dYk6kfhg8miaDnfo+kOQ5bXXrWzo3ZPqsLPBV xbBlgX/mJd0qOLUCuYsa5/uy0WBFnRYlnMzTEyYJ/oakXSgsJ93OMUFVVxlQuuah XiwQ1U5RjVwgkIxX/xtU7o56SbuJ2EiRFdE5dGOE3An5ehlJwEOsOhRpjz5QdACD af2CjO6vPwQZD6/XGPmU8XP8BXSY6Ish5/jwzPsEIkDE54Zm1Nk= -----END CERTIFICATE-----Generated at Wed Nov 4 11:25:36 2026 by rpki-client