$ rpki-client -vvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft File: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft (raw, json) Hash identifier: FWtVbwjXPX7f8fROrhbotwUL0vE2HbF5ANJVhThJPQM= Subject key identifier: 89:96:18:99:60:01:52:BB:7B:4E:7E:BD:8C:16:B7:6A:62:8B:64:59 Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Certificate serial: 02D5C6BCFDE9ECFFED818892D093F99918F51492 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:32 +0000 Manifest this update: Tue 12 May 2026 18:13:32 +0000 Manifest next update: Wed 13 May 2026 18:41:32 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=) 2: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: q99UPT0teezCe/Wtc8EBt8wiQOUmurJEflzD8Gd4ong=) 3: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl (hash: LWru09VzeUKvtOFizzpx8jVyDjELmAPI6Hy8RgiA3Wo=) 4: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: 6T6qe96D7zQgyFzklJ6iaQcLNZnBxADfp/QBK9mZ1I4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d5:c6:bc:fd:e9:ec:ff:ed:81:88:92:d0:93:f9:99:18:f5:14:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Validity Not Before: May 12 18:13:32 2026 GMT Not After : May 13 18:41:32 2026 GMT Subject: CN=89961899600152BB7B4E7EBD8C16B76A628B6459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f3:1a:7a:5a:02:5c:dc:1e:69:d7:00:ee:63: 45:cc:74:65:c8:83:49:70:3d:8e:3e:c9:68:b4:6c: 13:a9:6e:97:47:57:53:b6:4a:05:d4:61:32:c3:01: 3c:6a:66:36:bf:6c:77:f8:6c:ca:58:d7:7d:18:66: 46:eb:cc:bc:95:4d:02:28:54:1e:89:79:9f:12:4d: 7a:80:df:0c:4d:92:f0:84:d7:4d:f2:8d:d2:85:89: f7:29:e1:f8:72:60:39:f1:86:c3:bc:a3:f8:e4:fc: a8:18:fd:7a:b0:fa:2b:68:ff:27:ee:9b:b5:8c:34: 48:22:f6:9a:7c:1a:0d:d6:49:b6:74:31:c4:1f:f3: 87:91:30:7f:92:e5:39:7a:2b:22:0a:87:86:df:31: 0b:59:a4:c3:e5:3f:3a:dc:6e:f4:25:f0:1d:88:0e: 2f:32:80:fb:67:a2:cc:55:41:c4:35:47:46:6b:78: 71:c7:27:f1:c6:66:fb:47:12:96:72:f9:5a:e1:9d: 59:e8:7b:d9:2e:94:aa:53:fc:7b:94:c3:87:08:10: 5c:4f:03:bf:0d:ec:6a:7f:ad:4c:1b:1f:50:65:eb: be:59:8e:06:78:9f:d2:e4:82:02:d7:1d:40:6f:53: 58:1e:45:36:97:c5:d8:80:65:b3:f7:9a:7d:ce:7a: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:96:18:99:60:01:52:BB:7B:4E:7E:BD:8C:16:B7:6A:62:8B:64:59 X509v3 Authority Key Identifier: keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0b:3b:49:fa:5a:9a:47:ba:fd:51:86:b2:47:e6:b1:9c:96: c4:76:3d:8c:29:c6:8a:f7:b5:11:50:da:b6:8d:65:36:dd:c5: ec:5a:35:55:ff:3e:2d:41:09:da:62:bc:49:3c:69:60:f6:29: 5e:54:85:ea:ef:56:ad:28:22:6a:ce:94:f4:68:11:32:57:20: 42:e7:95:b5:f6:60:98:46:74:39:92:91:d6:5e:9a:6d:74:03: 9f:df:7d:50:b9:43:8d:19:b5:2c:39:95:39:ae:70:7f:76:0a: 6f:9b:85:5e:19:21:a7:fe:d4:dc:ab:7b:d3:60:6e:7f:3e:a6: eb:18:34:9b:2d:f0:2a:79:a2:58:56:8b:34:8b:47:0a:81:9c: 97:f0:03:95:9d:72:dc:3d:08:f4:cb:80:73:7d:0a:58:d5:60: 8c:0f:53:cd:f7:40:bb:75:6f:1e:4e:88:7e:02:64:04:e0:ca: 0b:13:fe:89:01:9f:3b:f1:30:ef:08:fb:7d:04:18:1d:87:9e: 86:61:d8:87:0e:ed:6f:d3:f9:b7:bd:d8:01:c6:3b:3a:3f:99: aa:7d:a1:0c:e5:e7:47:2d:b3:bf:2a:22:ab:3b:fd:81:e0:34: 8b:c4:98:68:3c:47:90:cf:77:05:08:97:58:d8:a1:c4:77:3d: 1d:a7:8d:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtXGvP3p7P/tgYiS0JP5mRj1FJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2 OUY0ODI5RTAeFw0yNjA1MTIxODEzMzJaFw0yNjA1MTMxODQxMzJaMDMxMTAvBgNV BAMTKDg5OTYxODk5NjAwMTUyQkI3QjRFN0VCRDhDMTZCNzZBNjI4QjY0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn8xp6WgJc3B5p1wDuY0XMdGXI g0lwPY4+yWi0bBOpbpdHV1O2SgXUYTLDATxqZja/bHf4bMpY130YZkbrzLyVTQIo VB6JeZ8STXqA3wxNkvCE103yjdKFifcp4fhyYDnxhsO8o/jk/KgY/Xqw+ito/yfu m7WMNEgi9pp8Gg3WSbZ0McQf84eRMH+S5Tl6KyIKh4bfMQtZpMPlPzrcbvQl8B2I Di8ygPtnosxVQcQ1R0ZreHHHJ/HGZvtHEpZy+VrhnVnoe9kulKpT/HuUw4cIEFxP A78N7Gp/rUwbH1Bl675ZjgZ4n9LkggLXHUBvU1geRTaXxdiAZbP3mn3Oeu9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiZYYmWABUrt7Tn69jBa3amKLZFkwHwYDVR0j BBgwFoAUQ+ejCll7sylzyythedmtiWn0gp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM4ZDU4MGItNDUyZS00MmQ3LWIwNDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1 OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2OUY0ODI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0U3QTMwQTU5N0JCMzI5NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4 MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFE ODk2OUY0ODI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8LO0n6WppHuv1RhrJH5rGclsR2PYwpxor3 tRFQ2raNZTbdxexaNVX/Pi1BCdpivEk8aWD2KV5UhervVq0oImrOlPRoETJXIELn lbX2YJhGdDmSkdZemm10A5/ffVC5Q40ZtSw5lTmucH92Cm+bhV4ZIaf+1Nyre9Ng bn8+pusYNJst8Cp5olhWizSLRwqBnJfwA5Wdctw9CPTLgHN9CljVYIwPU833QLt1 bx5OiH4CZATgygsT/okBnzvxMO8I+30EGB2HnoZh2IcO7W/T+be92AHGOzo/map9 oQzl50cts78qIqs7/YHgNIvEmGg8R5DPdwUIl1jYocR3PR2njc0= -----END CERTIFICATE-----Generated at Wed May 13 10:10:31 2026 by rpki-client