$ rpki-client -vvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft File: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft (raw, json) Hash identifier: B4JWTJTFaxYsIY9REnPzukqMBis7Ezld15CH1GgYsfI= Subject key identifier: 0A:25:04:98:0C:29:92:3C:57:4C:F6:D5:AD:EA:FD:02:93:B9:6E:F6 Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Certificate serial: 1FF277FF53FFB21C6F40C09151982501E7DB7688 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:09:17 +0000 Manifest this update: Fri 24 Jul 2026 00:04:17 +0000 Manifest next update: Sat 25 Jul 2026 00:11:17 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=) 2: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: 6T6qe96D7zQgyFzklJ6iaQcLNZnBxADfp/QBK9mZ1I4=) 3: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl (hash: g9desAXAs5kPyS8uRtOtDmorWOe9KjpKlKLZATG9IE0=) 4: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: q99UPT0teezCe/Wtc8EBt8wiQOUmurJEflzD8Gd4ong=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f2:77:ff:53:ff:b2:1c:6f:40:c0:91:51:98:25:01:e7:db:76:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Validity Not Before: Jul 24 00:04:17 2026 GMT Not After : Jul 25 00:11:17 2026 GMT Subject: CN=0A2504980C29923C574CF6D5ADEAFD0293B96EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:8b:7f:82:87:36:c3:b1:6e:cb:f4:6b:4b: 17:2f:e1:38:d9:10:06:48:e3:7f:4c:6d:ad:e0:0c: fd:d6:c8:59:1e:95:28:c4:8c:f7:cb:8d:45:39:cd: 6f:ed:6c:31:68:5e:9d:5c:81:46:44:c0:c0:0a:63: 0a:f2:41:7a:1d:81:45:64:f6:d8:55:a4:a6:1e:8d: bf:8a:0f:95:02:de:ea:46:97:ae:52:9c:43:1d:b1: e0:78:8a:54:70:ed:64:63:e5:fb:85:a7:bb:25:04: c2:dd:92:52:72:5b:31:4d:2d:a4:e0:96:19:95:23: d3:ea:f9:8e:0d:9f:79:7c:53:9d:34:e2:b5:ee:df: 66:4a:b1:65:19:a9:f9:22:c7:c0:c8:67:58:6c:d4: 5e:fc:44:56:c5:fd:37:83:a4:5c:b0:c1:06:72:4d: 19:67:ec:ad:1e:4f:9e:a4:d6:d0:5d:c1:2c:44:3f: 0f:ae:df:b9:28:b3:e3:8e:60:50:f2:94:ee:b2:96: c8:1d:3a:2a:2d:1c:73:5a:f8:77:1d:44:37:b6:06: 6d:0f:98:1c:97:8d:a1:c8:55:f1:7e:32:14:f8:9a: a5:e6:a2:73:a7:f8:34:5d:ce:05:ea:57:60:69:92: b6:57:32:f2:74:c4:db:a9:71:15:e6:9f:32:6f:32: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:25:04:98:0C:29:92:3C:57:4C:F6:D5:AD:EA:FD:02:93:B9:6E:F6 X509v3 Authority Key Identifier: keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4e:a6:7f:e2:90:6a:36:5e:6d:6c:29:df:55:29:5d:0b:7f: 51:cc:dd:a6:4c:1c:0a:35:0c:43:27:18:33:63:8d:ae:00:f5: 95:27:5a:40:63:16:f4:76:ff:0c:2d:41:3e:b5:77:04:37:4b: fa:1e:f4:68:79:49:fe:cb:12:21:58:8a:78:f9:1d:5d:dd:08: 09:9c:4c:5a:59:0f:dd:b6:e6:d9:7f:1f:1f:cb:ce:60:f8:7e: 52:11:cb:97:2a:a7:a6:c7:3b:6b:2b:c3:38:d4:f6:dc:b7:6f: ae:b2:f3:82:a6:7d:72:e0:12:55:64:da:42:33:6a:16:a1:33: 37:f5:37:21:d8:82:e8:e7:a2:eb:3e:83:05:67:6e:75:38:5e: 2b:56:38:08:d5:74:3c:87:31:d9:34:3b:b6:6f:f8:ef:d9:c7: 16:87:6c:72:a3:8b:a9:e2:f9:5c:b3:3e:71:9e:43:5a:7b:02: c5:e3:26:6c:31:62:a4:a1:f9:17:b5:bb:09:13:97:fc:3a:fe: 54:96:f5:d4:9f:b4:b5:f8:e3:eb:65:a0:6d:35:53:5c:1f:86: 0b:74:38:ab:16:f8:b9:88:e1:c4:64:35:7d:94:3a:ba:f0:27: 05:cd:2c:1c:06:eb:06:2a:51:64:9b:94:b4:0b:7d:fc:f5:32: b3:3f:40:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/J3/1P/shxvQMCRUZglAefbdogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2 OUY0ODI5RTAeFw0yNjA3MjQwMDA0MTdaFw0yNjA3MjUwMDExMTdaMDMxMTAvBgNV BAMTKDBBMjUwNDk4MEMyOTkyM0M1NzRDRjZENUFERUFGRDAyOTNCOTZFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuq4t/goc2w7Fuy/RrSxcv4TjZ EAZI439Mba3gDP3WyFkelSjEjPfLjUU5zW/tbDFoXp1cgUZEwMAKYwryQXodgUVk 9thVpKYejb+KD5UC3upGl65SnEMdseB4ilRw7WRj5fuFp7slBMLdklJyWzFNLaTg lhmVI9Pq+Y4Nn3l8U5004rXu32ZKsWUZqfkix8DIZ1hs1F78RFbF/TeDpFywwQZy TRln7K0eT56k1tBdwSxEPw+u37kos+OOYFDylO6ylsgdOiotHHNa+HcdRDe2Bm0P mByXjaHIVfF+MhT4mqXmonOn+DRdzgXqV2BpkrZXMvJ0xNupcRXmnzJvMnEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCiUEmAwpkjxXTPbVrer9ApO5bvYwHwYDVR0j BBgwFoAUQ+ejCll7sylzyythedmtiWn0gp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM4ZDU4MGItNDUyZS00MmQ3LWIwNDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1 OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2OUY0ODI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0U3QTMwQTU5N0JCMzI5NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4 MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFE ODk2OUY0ODI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVOpn/ikGo2Xm1sKd9VKV0Lf1HM3aZMHAo1 DEMnGDNjja4A9ZUnWkBjFvR2/wwtQT61dwQ3S/oe9Gh5Sf7LEiFYinj5HV3dCAmc TFpZD9225tl/Hx/LzmD4flIRy5cqp6bHO2srwzjU9ty3b66y84KmfXLgElVk2kIz ahahMzf1NyHYgujnous+gwVnbnU4XitWOAjVdDyHMdk0O7Zv+O/ZxxaHbHKji6ni +VyzPnGeQ1p7AsXjJmwxYqSh+Re1uwkTl/w6/lSW9dSftLX44+tloG01U1wfhgt0 OKsW+LmI4cRkNX2UOrrwJwXNLBwG6wYqUWSblLQLffz1MrM/QJc= -----END CERTIFICATE-----Generated at Fri Jul 24 15:10:43 2026 by rpki-client