$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: HULjEb65RbIWNgaXw1PiUdxOmyGXh5FmEsBOeBMMLoA= Subject key identifier: 11:4C:D2:78:B8:6E:C0:2F:64:AB:C1:07:DE:73:AE:4C:00:F7:76:1E Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 4223690E7E9DBE07819C998DD29D99A04DE454CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: 017C Signing time: Tue 24 Mar 2026 11:00:51 +0000 Manifest this update: Tue 24 Mar 2026 10:55:51 +0000 Manifest next update: Fri 27 Mar 2026 22:32:51 +0000 Files and hashes: 1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: qxQ+6T9yrSIPoh+WZqiNWh2YyFV04+QAx96S0X8/TDk=) 2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: YKgSToVIDVqa6Ldbq9nFy6CORVBol3+SJeUGNSOW5b0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:23:69:0e:7e:9d:be:07:81:9c:99:8d:d2:9d:99:a0:4d:e4:54:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Mar 24 10:55:51 2026 GMT Not After : Mar 27 22:32:51 2026 GMT Subject: CN=114CD278B86EC02F64ABC107DE73AE4C00F7761E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:ef:22:46:0b:69:08:4b:da:2f:db:57:1c: 3b:87:3f:4a:36:46:fa:12:a9:17:4b:bb:d1:92:ef: 08:6f:e2:12:a7:87:e5:34:2e:77:9d:63:57:86:14: c1:fe:8e:49:01:a1:4a:d5:cf:32:64:f1:30:b2:f5: 75:11:50:10:34:61:3f:0f:c6:39:e2:de:2e:c9:eb: a2:04:91:18:36:79:6c:73:09:20:3b:43:ff:c1:02: 36:8f:a4:f7:7c:e3:2d:38:e3:4a:bb:bc:94:37:e4: ec:8b:53:c8:cb:ff:70:72:39:d4:c4:3c:ee:8a:08: 07:70:f6:9d:19:a0:04:d4:b7:4d:50:10:0a:3c:f0: b9:f4:bc:4f:8e:df:dd:2a:8f:6c:e2:77:a1:ff:4a: e6:7c:5c:10:2a:4a:2a:54:e5:01:de:18:51:31:42: ec:89:a8:d7:69:20:f9:95:f9:3e:bd:04:06:75:30: fd:b2:a0:9d:f5:af:3d:4e:d8:85:92:90:e1:4f:e3: 3a:a9:c8:1f:4d:8f:8b:6c:b0:1c:5a:ab:7d:78:a9: 4e:ee:7d:98:ff:7a:24:e1:af:ee:6f:cd:a8:bc:a6: f5:fa:4c:18:8b:02:ea:7d:ac:e6:62:39:2d:dd:ec: eb:9e:1f:e1:19:c7:8b:d8:9c:22:2a:6e:1c:32:06: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4C:D2:78:B8:6E:C0:2F:64:AB:C1:07:DE:73:AE:4C:00:F7:76:1E X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:8d:da:da:1c:cb:2f:ef:85:8f:9a:f9:ed:c5:96:2f:9e:60: 78:3c:e4:e5:4e:8a:4b:c1:e0:ce:b8:d4:c0:bc:f3:1b:45:f1: fb:2b:0a:f2:96:9a:66:95:e9:22:1a:61:c1:2f:d0:ee:dd:c8: 4f:6b:9e:5c:64:d8:90:53:87:7c:43:a1:a3:f9:cc:bd:a7:ac: 8e:a9:21:aa:c5:52:3d:17:44:68:81:a3:7e:a4:ef:06:ca:2b: 68:15:a6:da:ee:f5:63:35:71:7e:bb:6e:61:1c:dd:fd:95:5a: 1a:11:65:ec:07:f8:e6:a8:c9:24:39:49:65:ae:e0:2e:23:b3: 0c:1e:15:3e:26:11:34:eb:8f:c1:4a:9f:a5:c2:36:b1:e4:a6: 0c:5f:10:8d:6f:71:ec:15:4d:c8:4d:10:11:ad:df:07:a9:42: d4:27:cc:a7:bc:14:61:cf:43:8f:0d:08:a2:ae:98:82:3f:19: 7d:ee:c9:3b:ea:f0:e8:e2:b9:38:bb:7f:1c:b1:b0:d0:48:6d: fd:12:23:74:13:2d:46:34:81:5a:cb:7c:43:41:68:4d:f5:8c: 5e:17:bc:bd:b9:c3:0e:0e:9d:6e:f9:c0:a5:c4:ff:5a:59:84: 99:87:00:c7:05:0c:41:87:2e:02:56:5f:f1:f5:f3:04:01:b0: 30:6d:80:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiNpDn6dvgeBnJmN0p2ZoE3kVMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNjAzMjQxMDU1NTFaFw0yNjAzMjcyMjMyNTFaMDMxMTAvBgNV BAMTKDExNENEMjc4Qjg2RUMwMkY2NEFCQzEwN0RFNzNBRTRDMDBGNzc2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFe8iRgtpCEvaL9tXHDuHP0o2 RvoSqRdLu9GS7whv4hKnh+U0LnedY1eGFMH+jkkBoUrVzzJk8TCy9XURUBA0YT8P xjni3i7J66IEkRg2eWxzCSA7Q//BAjaPpPd84y0440q7vJQ35OyLU8jL/3ByOdTE PO6KCAdw9p0ZoATUt01QEAo88Ln0vE+O390qj2zid6H/SuZ8XBAqSipU5QHeGFEx QuyJqNdpIPmV+T69BAZ1MP2yoJ31rz1O2IWSkOFP4zqpyB9Nj4tssBxaq314qU7u fZj/eiThr+5vzai8pvX6TBiLAup9rOZiOS3d7OueH+EZx4vYnCIqbhwyBtr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEUzSeLhuwC9kq8EH3nOuTAD3dh4wHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+N2tocyy/vhY+a+e3Fli+eYHg85OVOikvB 4M641MC88xtF8fsrCvKWmmaV6SIaYcEv0O7dyE9rnlxk2JBTh3xDoaP5zL2nrI6p IarFUj0XRGiBo36k7wbKK2gVptru9WM1cX67bmEc3f2VWhoRZewH+OaoySQ5SWWu 4C4jswweFT4mETTrj8FKn6XCNrHkpgxfEI1vcewVTchNEBGt3wepQtQnzKe8FGHP Q48NCKKumII/GX3uyTvq8OjiuTi7fxyxsNBIbf0SI3QTLUY0gVrLfENBaE31jF4X vL25ww4OnW75wKXE/1pZhJmHAMcFDEGHLgJWX/H18wQBsDBtgB4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:48 2026 by rpki-client