$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft File: 2843C420C9538DE003DB96047ACE7F2FE1B83454.mft (raw, json) Hash identifier: a/yfRldJhLb4ODsDdqHOuxCasMXHIz5n59XNp6dvY3k= Subject key identifier: 78:FB:C2:B1:74:A8:A7:36:1C:85:37:B2:E6:D3:E6:57:DF:55:E8:F8 Authority key identifier: 28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 Certificate issuer: /CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Certificate serial: 19D1BE0322CD727BC4780B9C04E3A5D992D0F6C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 09:20:11 +0000 Manifest this update: Thu 17 Sep 2026 09:15:11 +0000 Manifest next update: Fri 18 Sep 2026 10:48:11 +0000 Files and hashes: 1: 2843C420C9538DE003DB96047ACE7F2FE1B83454.crl (hash: RhUfj5KFX+yQHL+gonHyk5AOjg01cLI2V1eaNEvSNAo=) 2: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: Gs+snvngtmEUYMerL8umS66cdNSbHO+hqLt5UBqYHqk=) 3: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: ZmQheHX1MZV/oBZW9LIfogQSYln7HG4CQMJRL8sFUs4=) 4: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: Ekh2cRoP3jEu4ToqLXfO3pEmBPqQ1/HiAdtyj75YlY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d1:be:03:22:cd:72:7b:c4:78:0b:9c:04:e3:a5:d9:92:d0:f6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2843C420C9538DE003DB96047ACE7F2FE1B83454 Validity Not Before: Sep 17 09:15:11 2026 GMT Not After : Sep 18 10:48:11 2026 GMT Subject: CN=78FBC2B174A8A7361C8537B2E6D3E657DF55E8F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:20:91:51:d4:db:0b:5f:87:c8:8f:d0:1c: 56:9c:7c:8e:4c:f0:cc:ab:9f:14:9b:cc:3b:af:16: 25:29:2f:b0:9c:9f:93:89:67:38:31:66:d9:6a:b3: 6f:88:d7:91:20:0b:9f:9f:c7:c9:b5:a4:a6:23:35: 75:e9:ea:93:92:a3:23:d7:71:62:1a:ac:68:fd:e1: 44:31:a1:f6:fd:fa:db:b7:37:97:b0:4c:44:b7:42: fb:e5:65:70:22:cd:98:14:22:17:14:18:f4:b3:36: f0:30:e4:82:4e:d3:cf:5a:33:fc:4a:26:5d:5c:c2: 29:4f:35:9a:35:0c:1e:06:70:b0:82:99:4f:b9:22: 27:c3:04:84:4c:ce:e9:34:1e:ad:4c:28:e3:a7:12: 6a:7b:af:93:6c:b9:05:ba:52:4a:b2:9f:d5:c0:78: ee:24:c0:4b:b5:20:b0:39:76:eb:99:f2:83:31:54: e8:55:a4:00:b4:3e:06:1a:2d:2f:55:23:cf:b6:d9: fd:50:25:26:8d:17:83:0d:e9:47:05:e7:1e:62:1e: 68:b2:72:2e:eb:02:dc:7e:62:72:f9:b0:62:b4:a3: 30:fe:c1:68:c9:8c:d2:79:a8:7b:2f:84:13:2d:d6: da:ee:ea:05:54:4c:f5:54:57:8c:04:03:7f:28:0a: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FB:C2:B1:74:A8:A7:36:1C:85:37:B2:E6:D3:E6:57:DF:55:E8:F8 X509v3 Authority Key Identifier: keyid:28:43:C4:20:C9:53:8D:E0:03:DB:96:04:7A:CE:7F:2F:E1:B8:34:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2843C420C9538DE003DB96047ACE7F2FE1B83454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/2843C420C9538DE003DB96047ACE7F2FE1B83454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:43:67:e7:26:72:69:cb:68:5f:38:8f:02:9e:9b:b2:8b:2f: 00:6d:06:6e:e5:08:ce:36:44:90:86:42:dc:a4:59:c8:08:b7: e1:fb:d9:e2:96:d8:d8:36:4c:44:33:80:e0:2e:c7:dd:b2:6c: e6:de:de:f1:4b:14:9e:72:f3:4e:6c:5a:8e:fe:b1:5d:c5:2f: 40:7c:4c:8f:2e:5e:1f:8d:a7:b0:68:77:79:9c:5e:01:7a:c6: 83:03:1a:b0:a0:b7:5a:bc:73:34:5c:47:a1:34:8b:62:5c:a0: f9:15:fc:b4:bb:b9:12:f4:bd:9c:7e:57:cc:40:18:ec:8c:4f: 92:ad:c0:bd:6f:91:6e:4a:e1:65:e8:b1:b5:08:32:ba:c6:4c: af:ce:ec:ab:4b:71:15:d7:f0:1f:31:b2:08:fb:70:6b:5f:0b: 6d:27:81:c2:c0:2c:90:de:8d:0a:98:bf:e5:7a:fe:09:84:78: eb:7a:98:7b:bb:40:c8:c3:4e:b7:31:f3:e4:f6:6a:1c:a1:a0: a4:26:dc:9a:6c:57:73:8a:42:30:5d:c8:df:78:8f:63:77:7e: a0:fb:88:0a:01:4b:53:dd:98:f9:89:aa:95:38:24:bf:cf:2f: cc:4d:da:4b:e5:41:29:5c:95:28:1f:5f:9f:06:d3:46:35:ee: 24:3a:2e:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdG+AyLNcnvEeAucBOOl2ZLQ9sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdGMkZF MUI4MzQ1NDAeFw0yNjA5MTcwOTE1MTFaFw0yNjA5MTgxMDQ4MTFaMDMxMTAvBgNV BAMTKDc4RkJDMkIxNzRBOEE3MzYxQzg1MzdCMkU2RDNFNjU3REY1NUU4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHICCRUdTbC1+HyI/QHFacfI5M 8MyrnxSbzDuvFiUpL7Ccn5OJZzgxZtlqs2+I15EgC5+fx8m1pKYjNXXp6pOSoyPX cWIarGj94UQxofb9+tu3N5ewTES3QvvlZXAizZgUIhcUGPSzNvAw5IJO089aM/xK Jl1cwilPNZo1DB4GcLCCmU+5IifDBIRMzuk0Hq1MKOOnEmp7r5NsuQW6Ukqyn9XA eO4kwEu1ILA5duuZ8oMxVOhVpAC0PgYaLS9VI8+22f1QJSaNF4MN6UcF5x5iHmiy ci7rAtx+YnL5sGK0ozD+wWjJjNJ5qHsvhBMt1tru6gVUTPVUV4wEA38oCogfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUePvCsXSopzYchTey5tPmV99V6PgwHwYDVR0j BBgwFoAUKEPEIMlTjeAD25YEes5/L+G4NFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOTA5NDQtNjU2ZC00YWE3LTkxNzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBD OTUzOERFMDAzREI5NjA0N0FDRTdGMkZFMUI4MzQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQzQzQyMEM5NTM4REUwMDNEQjk2MDQ3QUNFN0YyRkUxQjgz NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvMjg0M0M0MjBDOTUzOERFMDAzREI5NjA0N0FDRTdG MkZFMUI4MzQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBDZ+cmcmnLaF84jwKem7KLLwBtBm7lCM42 RJCGQtykWcgIt+H72eKW2Ng2TEQzgOAux92ybObe3vFLFJ5y805sWo7+sV3FL0B8 TI8uXh+Np7Bod3mcXgF6xoMDGrCgt1q8czRcR6E0i2JcoPkV/LS7uRL0vZx+V8xA GOyMT5KtwL1vkW5K4WXosbUIMrrGTK/O7KtLcRXX8B8xsgj7cGtfC20ngcLALJDe jQqYv+V6/gmEeOt6mHu7QMjDTrcx8+T2ahyhoKQm3JpsV3OKQjBdyN94j2N3fqD7 iAoBS1PdmPmJqpU4JL/PL8xN2kvlQSlclSgfX58G00Y17iQ6Lns= -----END CERTIFICATE-----Generated at Thu Sep 17 15:06:06 2026 by rpki-client