$ rpki-client -vvvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft File: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft (raw, json) Hash identifier: FTsCfNZBYwPKrbJBvcC7GB0tlC5zLD/pBz5qng2TknU= Subject key identifier: D1:7E:80:F3:37:55:AA:42:EF:78:88:68:4F:10:95:11:DF:1A:F3:07 Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Certificate serial: 73C618F38B3EF304A617FCC5B0D4FC1CD7D10E05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 17:47:03 +0000 Manifest this update: Sat 26 Sep 2026 17:42:03 +0000 Manifest next update: Sun 27 Sep 2026 18:58:03 +0000 Files and hashes: 1: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: 6T6qe96D7zQgyFzklJ6iaQcLNZnBxADfp/QBK9mZ1I4=) 2: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl (hash: 9HvSJDIysm9GmogFRLj+aUNMqQzZ6j2hE8cuq4QA4x4=) 3: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=) 4: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: q99UPT0teezCe/Wtc8EBt8wiQOUmurJEflzD8Gd4ong=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c6:18:f3:8b:3e:f3:04:a6:17:fc:c5:b0:d4:fc:1c:d7:d1:0e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Validity Not Before: Sep 26 17:42:03 2026 GMT Not After : Sep 27 18:58:03 2026 GMT Subject: CN=D17E80F33755AA42EF7888684F109511DF1AF307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:ba:90:be:87:95:39:5a:88:3b:8f:62:52: 0f:7e:f2:67:b0:a3:8d:67:0f:a5:f5:5b:a4:03:70: e1:7d:6c:95:d0:59:15:75:04:79:d1:51:cd:2c:e2: 21:bd:79:e5:6f:b4:a3:d1:30:a5:a9:1e:d4:d6:a5: 85:cc:97:fd:99:29:7a:03:58:1f:db:91:d6:c8:8d: 3b:5a:4f:4c:03:8e:f9:cd:80:d5:7c:d3:c7:7c:c3: ec:83:c8:22:bb:78:e7:31:b4:b8:84:43:1f:fb:ae: 00:8f:28:aa:3a:a1:f5:74:b1:ee:7c:bf:16:ff:72: 47:73:d2:ea:c5:62:e5:0b:fe:af:5e:10:18:dc:95: fc:c1:97:0b:ab:1d:20:26:a9:58:1b:c7:f7:21:61: b6:f3:f9:54:16:52:a7:02:b0:ed:15:c8:54:c8:1c: a5:9a:8b:39:5d:70:85:f1:3d:ae:c6:68:6d:7b:74: 86:12:6e:f2:a5:f4:3c:48:44:4f:9e:3b:85:47:88: 6f:26:38:6b:3c:a0:33:ab:ea:3a:1f:f6:49:22:18: 1a:50:2a:f5:db:51:f6:56:48:8f:97:63:15:71:ea: 47:1c:e6:49:cd:8b:63:de:21:5c:40:32:83:e8:21: 35:6f:4f:61:35:b6:51:52:56:cf:12:00:18:16:2b: b4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7E:80:F3:37:55:AA:42:EF:78:88:68:4F:10:95:11:DF:1A:F3:07 X509v3 Authority Key Identifier: keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9b:01:2c:fd:b4:c3:c2:d8:23:9d:d7:16:99:cc:fe:ad:a9: 85:69:20:2e:1f:c7:93:55:fa:a2:a3:72:c1:f6:b2:14:55:a3: 28:17:07:7d:56:2d:fd:71:d2:77:14:94:73:c6:08:13:46:71: 1b:82:fa:48:ba:e9:af:74:71:ac:1d:e1:70:dd:d8:85:1a:50: cb:ec:cb:ba:cc:20:50:e1:cb:38:b9:ec:2a:f4:80:83:13:da: 62:81:15:b5:22:2a:58:e5:46:95:99:7c:35:f9:46:6e:c4:33: 48:38:2a:69:3c:2a:20:dd:a6:15:b3:d1:4e:1d:c0:5b:de:f5: e1:88:fd:1f:e9:00:f3:d9:60:0d:90:ef:86:7d:76:65:df:a9: 60:6c:f4:c5:45:c9:0c:ef:37:ee:f8:00:3c:df:37:9b:d8:05: ee:26:d6:44:8b:dc:f7:be:73:b5:50:ba:20:61:d5:37:54:ac: 7b:b9:24:ab:43:43:81:33:53:50:79:c1:42:16:a3:fe:a8:eb: 22:5b:f0:60:09:4d:ab:37:a9:f4:69:21:77:aa:f4:32:13:9e: fe:ee:bd:70:90:2b:db:14:85:4e:5b:f8:53:16:32:eb:e9:cd: 95:f9:36:4a:37:7a:cc:ad:d6:81:c1:a1:d9:6f:8c:aa:24:fb: 06:91:5c:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8YY84s+8wSmF/zFsNT8HNfRDgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2 OUY0ODI5RTAeFw0yNjA5MjYxNzQyMDNaFw0yNjA5MjcxODU4MDNaMDMxMTAvBgNV BAMTKEQxN0U4MEYzMzc1NUFBNDJFRjc4ODg2ODRGMTA5NTExREYxQUYzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNrqQvoeVOVqIO49iUg9+8mew o41nD6X1W6QDcOF9bJXQWRV1BHnRUc0s4iG9eeVvtKPRMKWpHtTWpYXMl/2ZKXoD WB/bkdbIjTtaT0wDjvnNgNV808d8w+yDyCK7eOcxtLiEQx/7rgCPKKo6ofV0se58 vxb/ckdz0urFYuUL/q9eEBjclfzBlwurHSAmqVgbx/chYbbz+VQWUqcCsO0VyFTI HKWaizldcIXxPa7GaG17dIYSbvKl9DxIRE+eO4VHiG8mOGs8oDOr6jof9kkiGBpQ KvXbUfZWSI+XYxVx6kcc5knNi2PeIVxAMoPoITVvT2E1tlFSVs8SABgWK7TFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0X6A8zdVqkLveIhoTxCVEd8a8wcwHwYDVR0j BBgwFoAUQ+ejCll7sylzyythedmtiWn0gp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM4ZDU4MGItNDUyZS00MmQ3LWIwNDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1 OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2OUY0ODI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0U3QTMwQTU5N0JCMzI5NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4 MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFE ODk2OUY0ODI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6bASz9tMPC2COd1xaZzP6tqYVpIC4fx5NV +qKjcsH2shRVoygXB31WLf1x0ncUlHPGCBNGcRuC+ki66a90cawd4XDd2IUaUMvs y7rMIFDhyzi57Cr0gIMT2mKBFbUiKljlRpWZfDX5Rm7EM0g4Kmk8KiDdphWz0U4d wFve9eGI/R/pAPPZYA2Q74Z9dmXfqWBs9MVFyQzvN+74ADzfN5vYBe4m1kSL3Pe+ c7VQuiBh1TdUrHu5JKtDQ4EzU1B5wUIWo/6o6yJb8GAJTas3qfRpIXeq9DITnv7u vXCQK9sUhU5b+FMWMuvpzZX5Nko3esyt1oHBodlvjKok+waRXM8= -----END CERTIFICATE-----Generated at Sun Sep 27 05:04:12 2026 by rpki-client