$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: p6nvJpGL+zCLhSakpsNHSLNJWXwYHwqDqa+/ZhJ2x5U= Subject key identifier: 10:64:0A:86:7F:1B:B8:B7:80:07:41:FD:AC:4A:90:FA:7E:EE:DD:37 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 5661A0E5A93A874342480F17E7E50F3A32E12693 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 0174 Signing time: Tue 24 Mar 2026 09:31:46 +0000 Manifest this update: Tue 24 Mar 2026 09:26:46 +0000 Manifest next update: Fri 27 Mar 2026 21:19:46 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: 6zxr7v8W9Cz3buzX+M65bK/X70dRndjNBMYZMbF731M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:61:a0:e5:a9:3a:87:43:42:48:0f:17:e7:e5:0f:3a:32:e1:26:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Mar 24 09:26:46 2026 GMT Not After : Mar 27 21:19:46 2026 GMT Subject: CN=10640A867F1BB8B7800741FDAC4A90FA7EEEDD37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:ab:08:f3:e8:82:60:18:6b:95:28:5e:98: b2:bf:b3:a4:a6:36:60:5c:d9:ce:cd:8b:20:da:6c: 95:a9:73:ed:58:d1:76:1b:ae:58:19:3f:e5:3f:1e: 9f:93:a6:ed:99:fc:6d:76:91:9f:1c:1e:9a:5a:17: 58:4f:ea:ac:93:c8:8a:b8:a4:62:f5:8e:9d:84:c0: 98:a8:27:a2:30:03:87:00:d2:d9:34:69:a5:2a:e8: 1e:8c:1c:ac:f1:2d:84:14:36:37:ce:06:fd:7c:1d: 77:ae:51:59:e0:81:08:de:a4:e7:75:8f:8a:76:36: d4:8c:dc:82:80:3d:ad:90:43:86:91:4f:88:98:f2: e2:12:3c:2a:e3:64:8c:08:43:20:1c:e3:f8:e1:30: 8d:d5:3d:b2:40:ed:10:6e:4d:61:ad:81:3e:5f:50: b2:24:f3:50:05:bc:af:12:f0:37:c3:7b:c0:78:3c: 39:19:8a:d7:e0:26:ba:00:c6:2b:5b:1c:b7:42:a3: e5:4b:08:3f:5d:7d:bc:21:af:6c:f1:7d:32:6d:94: f8:28:9a:6a:73:e5:26:c0:ec:74:76:7c:34:da:af: cd:b3:2a:62:62:82:c4:fa:e9:40:d6:a0:2a:d0:df: 4d:a0:43:48:81:d6:66:a3:d9:77:60:0d:9a:a9:00: bd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:0A:86:7F:1B:B8:B7:80:07:41:FD:AC:4A:90:FA:7E:EE:DD:37 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0a:d7:ab:de:be:a1:b2:c3:61:72:8b:63:05:32:ba:2d:e0: 53:4b:71:ca:1d:bc:cf:71:14:66:93:00:26:49:44:e6:eb:0d: 6a:18:18:1d:2e:71:d0:c0:6d:36:29:8e:76:0d:1e:68:ad:4f: 4e:30:24:36:76:98:91:dc:ff:57:dc:9e:c1:5d:7f:dc:d9:59: 6a:cc:81:ec:f9:d6:ae:72:95:9d:87:7f:b9:53:24:8b:9d:27: 75:70:f6:11:59:5d:a9:d6:6d:e0:91:3f:15:e3:78:a0:6d:a8: 58:df:4a:d3:7f:38:31:6b:cc:7a:90:39:71:e2:55:df:b9:8a: 89:0a:8c:c2:8f:71:a4:52:a9:7a:21:64:57:f7:3a:df:25:89: 8d:7a:e9:fb:35:11:be:7f:10:82:ed:ed:b8:7f:3f:80:90:8a: 10:a0:e0:a6:55:5f:1f:b4:48:e5:26:71:f4:a1:bf:c3:cc:f2: 35:4d:33:ed:f2:be:5c:99:11:57:ad:96:ca:0d:1a:4e:c3:d1: 13:fe:2f:aa:e3:90:e0:37:33:d8:6e:58:c6:16:de:58:cc:e2: ab:1a:90:a8:2b:5c:d5:50:22:94:0d:13:21:7e:5a:b7:5c:b6: a6:5f:96:2e:b3:d0:f8:60:c5:58:73:ad:bd:69:51:37:45:14: d2:d1:12:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVmGg5ak6h0NCSA8X5+UPOjLhJpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNjAzMjQwOTI2NDZaFw0yNjAzMjcyMTE5NDZaMDMxMTAvBgNV BAMTKDEwNjQwQTg2N0YxQkI4Qjc4MDA3NDFGREFDNEE5MEZBN0VFRUREMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrKsI8+iCYBhrlShemLK/s6Sm NmBc2c7NiyDabJWpc+1Y0XYbrlgZP+U/Hp+Tpu2Z/G12kZ8cHppaF1hP6qyTyIq4 pGL1jp2EwJioJ6IwA4cA0tk0aaUq6B6MHKzxLYQUNjfOBv18HXeuUVnggQjepOd1 j4p2NtSM3IKAPa2QQ4aRT4iY8uISPCrjZIwIQyAc4/jhMI3VPbJA7RBuTWGtgT5f ULIk81AFvK8S8DfDe8B4PDkZitfgJroAxitbHLdCo+VLCD9dfbwhr2zxfTJtlPgo mmpz5SbA7HR2fDTar82zKmJigsT66UDWoCrQ302gQ0iB1maj2XdgDZqpAL1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGQKhn8buLeAB0H9rEqQ+n7u3TcwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkK16vevqGyw2Fyi2MFMrot4FNLccodvM9x FGaTACZJRObrDWoYGB0ucdDAbTYpjnYNHmitT04wJDZ2mJHc/1fcnsFdf9zZWWrM gez51q5ylZ2Hf7lTJIudJ3Vw9hFZXanWbeCRPxXjeKBtqFjfStN/ODFrzHqQOXHi Vd+5iokKjMKPcaRSqXohZFf3Ot8liY166fs1Eb5/EILt7bh/P4CQihCg4KZVXx+0 SOUmcfShv8PM8jVNM+3yvlyZEVetlsoNGk7D0RP+L6rjkOA3M9huWMYW3ljM4qsa kKgrXNVQIpQNEyF+WrdctqZfli6z0PhgxVhzrb1pUTdFFNLREpc= -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:44 2026 by rpki-client