$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft File: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft (raw, json) Hash identifier: 2HgT5eOg9MBoSkKBLrJupuscEfv04X+n5dlhachQmIE= Subject key identifier: EF:21:87:62:FB:9F:7B:71:00:33:35:BC:D1:7C:3E:6E:A9:8C:CF:FF Authority key identifier: 43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 Certificate issuer: /CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Certificate serial: 67A4B7C1C1D9B574AE8FD7AB75F2524237F52562 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 05:58:11 +0000 Manifest this update: Thu 24 Sep 2026 05:53:11 +0000 Manifest next update: Fri 25 Sep 2026 06:19:11 +0000 Files and hashes: 1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: kfj+LC1/46I9BKuoHuEKXzZ9F4a4GvOD3Kj38WDtLhU=) 2: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl (hash: Fx5FzPOAvcP9MVj0BhWMcVXFVLUHTzo/AFlWq/+budo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a4:b7:c1:c1:d9:b5:74:ae:8f:d7:ab:75:f2:52:42:37:f5:25:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Validity Not Before: Sep 24 05:53:11 2026 GMT Not After : Sep 25 06:19:11 2026 GMT Subject: CN=EF218762FB9F7B71003335BCD17C3E6EA98CCFFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:03:30:bd:d7:06:3e:00:09:90:be:5a:30:49: de:e1:14:25:39:e6:06:05:fb:06:1d:81:2b:66:07: 7c:9e:b7:90:a7:34:57:6e:35:90:b1:6a:18:c0:5f: 10:1e:07:cf:d5:44:80:ad:53:0e:9e:76:69:be:ab: 8d:4b:ad:6f:f0:1e:b4:00:c3:3f:66:be:14:a0:a3: 29:67:e7:06:fe:70:d8:46:cb:c6:90:4a:88:e6:43: 85:3f:46:6f:1e:ba:d5:0c:46:45:28:95:60:10:d2: 83:ac:60:44:21:7f:15:19:e1:3d:77:b3:18:eb:ea: 2c:14:7b:6a:9d:3c:20:e1:a7:6d:f6:72:5e:dd:1e: f9:f7:21:97:d1:29:59:df:c5:99:f7:80:d1:c5:1e: bf:df:14:52:b4:d4:89:ec:42:65:26:b2:c1:81:5a: a3:97:97:ba:53:9f:03:f0:ba:09:7c:08:de:5f:83: bd:2e:66:02:7f:b9:82:a4:46:17:dd:c8:da:d7:84: 26:69:ba:8d:46:01:7f:0b:68:d9:9e:84:c5:12:4a: e4:fd:54:9f:8f:7c:a5:c1:2a:48:f7:8d:19:8a:25: 19:ec:78:92:ab:31:a1:5a:c7:3b:7b:7c:01:23:21: 65:3f:9c:5a:00:72:e5:24:b9:68:81:a6:0e:db:60: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:21:87:62:FB:9F:7B:71:00:33:35:BC:D1:7C:3E:6E:A9:8C:CF:FF X509v3 Authority Key Identifier: keyid:43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7e:31:89:9e:6f:e3:95:ca:34:14:88:f2:59:30:fb:f7:a4: 87:ad:19:22:a3:c8:5a:d8:4d:42:47:0a:d9:71:df:04:c1:3f: b9:f6:b4:4a:27:94:e9:03:61:52:46:ab:c2:53:22:f6:b4:3f: c2:d2:ad:54:5d:2d:56:bd:67:1c:26:ee:74:53:de:f9:d2:b7: 7b:c2:62:26:58:90:81:3d:2b:5f:df:9e:c5:84:fc:67:71:35: 8a:22:c6:68:f9:62:5f:85:90:3f:17:0c:30:0f:92:77:42:d4: 57:ce:79:92:9b:1c:64:bc:4a:bc:e7:99:20:db:f2:70:d6:84: e4:c0:de:02:f8:15:ba:60:b1:00:4a:ab:9e:b0:37:3c:5b:1f: 41:da:9c:e0:2e:42:a9:cf:f9:f3:dd:ac:42:10:a9:41:f7:5d: f4:ec:b8:a4:26:32:9d:5e:bc:e4:2d:78:70:2a:2f:a4:0b:09: 72:b0:55:25:46:9a:8f:5f:ad:9a:4e:19:d0:f0:72:5e:92:39: e3:c0:57:cf:45:d4:20:bf:b3:c8:cc:a1:9a:db:ff:d2:54:1e: 59:e7:5e:1f:29:03:a0:31:f5:40:16:d5:87:f8:41:c2:af:28: 22:54:6c:37:4d:43:b4:19:a6:b0:47:bf:21:a6:55:58:aa:92: 82:1f:43:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6S3wcHZtXSuj9erdfJSQjf1JWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURB QTRDNTczOTAeFw0yNjA5MjQwNTUzMTFaFw0yNjA5MjUwNjE5MTFaMDMxMTAvBgNV BAMTKEVGMjE4NzYyRkI5RjdCNzEwMDMzMzVCQ0QxN0MzRTZFQTk4Q0NGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAzC91wY+AAmQvlowSd7hFCU5 5gYF+wYdgStmB3yet5CnNFduNZCxahjAXxAeB8/VRICtUw6edmm+q41LrW/wHrQA wz9mvhSgoyln5wb+cNhGy8aQSojmQ4U/Rm8eutUMRkUolWAQ0oOsYEQhfxUZ4T13 sxjr6iwUe2qdPCDhp232cl7dHvn3IZfRKVnfxZn3gNHFHr/fFFK01InsQmUmssGB WqOXl7pTnwPwugl8CN5fg70uZgJ/uYKkRhfdyNrXhCZpuo1GAX8LaNmehMUSSuT9 VJ+PfKXBKkj3jRmKJRnseJKrMaFaxzt7fAEjIWU/nFoAcuUkuWiBpg7bYFgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7yGHYvufe3EAMzW80Xw+bqmMz/8wHwYDVR0j BBgwFoAUQ7W/KTvbQGLp4X2Kf/nXrapMVzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhODg4OTctYzM4Ny00NzM1LWFjZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkz QkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURBQTRDNTczOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0I1QkYyOTNCREI0MDYyRTlFMTdEOEE3RkY5RDdBREFBNEM1 NzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3 QURBQTRDNTczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx+MYmeb+OVyjQUiPJZMPv3pIetGSKjyFrY TUJHCtlx3wTBP7n2tEonlOkDYVJGq8JTIva0P8LSrVRdLVa9Zxwm7nRT3vnSt3vC YiZYkIE9K1/fnsWE/GdxNYoixmj5Yl+FkD8XDDAPkndC1FfOeZKbHGS8SrznmSDb 8nDWhOTA3gL4FbpgsQBKq56wNzxbH0HanOAuQqnP+fPdrEIQqUH3XfTsuKQmMp1e vOQteHAqL6QLCXKwVSVGmo9frZpOGdDwcl6SOePAV89F1CC/s8jMoZrb/9JUHlnn Xh8pA6Ax9UAW1Yf4QcKvKCJUbDdNQ7QZprBHvyGmVViqkoIfQ6k= -----END CERTIFICATE-----Generated at Thu Sep 24 18:29:30 2026 by rpki-client