$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft File: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft (raw, json) Hash identifier: IFWQMWzq/13RuwfKBiJw9nZl8YZwiiEjGW2XRacmzT0= Subject key identifier: 82:12:98:EA:1F:FB:68:B7:E3:7D:FF:A0:B7:58:29:7F:40:91:42:CB Authority key identifier: 43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 Certificate issuer: /CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Certificate serial: 4FEA26C59D94227194D9B9B3C3E2C7AD1012D10D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:18:53 +0000 Manifest this update: Thu 23 Jul 2026 11:13:53 +0000 Manifest next update: Fri 24 Jul 2026 12:33:53 +0000 Files and hashes: 1: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl (hash: arc7g6P5mhWgMvYXgEmSnOJEVvc9C3K3DeNc3GqiSx0=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: kfj+LC1/46I9BKuoHuEKXzZ9F4a4GvOD3Kj38WDtLhU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ea:26:c5:9d:94:22:71:94:d9:b9:b3:c3:e2:c7:ad:10:12:d1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Validity Not Before: Jul 23 11:13:53 2026 GMT Not After : Jul 24 12:33:53 2026 GMT Subject: CN=821298EA1FFB68B7E37DFFA0B758297F409142CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:64:e9:4b:a9:cd:3a:fa:b6:40:a4:c8:a2: a0:7a:9d:c9:35:ed:81:fd:db:29:c5:93:80:ea:b3: 26:cc:b8:da:ca:04:64:87:dc:ed:da:b1:4e:c6:29: 15:08:84:04:9d:d9:8d:47:25:7e:c3:aa:9a:91:56: f1:ff:0f:f7:ef:3b:52:5c:01:d0:52:f7:3a:4b:ef: 6f:9a:bb:d4:47:08:f8:3a:1f:6e:f2:48:38:06:d6: 62:0d:52:fa:59:91:49:57:59:b6:9b:5d:af:a1:96: 31:8d:3d:81:d6:80:c4:94:24:7f:20:9c:ae:ec:b1: 7e:cb:9b:db:28:91:7f:66:51:66:5f:45:36:4c:9b: 14:e8:8a:b1:58:d3:da:c5:1d:a0:2b:2c:82:66:a4: 69:a7:19:93:37:52:36:3f:ef:b5:f9:c6:e8:98:ba: 50:55:42:6b:f7:3c:ff:ec:6a:8b:e8:39:54:51:45: d9:29:a0:45:80:2c:fe:30:cd:8e:62:7d:c2:4c:13: 29:1b:02:7b:bf:50:48:62:8a:6f:a3:3f:24:00:26: 09:61:fb:90:0f:1e:a6:0e:0d:49:74:20:5a:78:b3: 5f:d1:35:d6:ee:38:b1:a4:1c:d7:cb:14:96:e2:45: b5:b4:ce:3b:fb:f7:26:cf:ac:2a:5c:9c:44:c8:93: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:12:98:EA:1F:FB:68:B7:E3:7D:FF:A0:B7:58:29:7F:40:91:42:CB X509v3 Authority Key Identifier: keyid:43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:5b:fb:f5:77:02:8c:53:d7:d8:9f:77:2a:57:6f:0c:eb:95: e9:52:a1:6d:e7:ac:3b:70:4e:36:78:8b:4f:c7:ed:2e:f0:40: b8:e7:6e:33:ee:4b:26:20:fd:01:17:fa:29:11:d7:c8:87:cb: 02:9c:47:16:9c:14:54:00:90:9d:94:52:92:69:86:29:06:2d: 85:19:2f:66:f2:56:bb:59:69:9e:00:2e:dc:6d:6d:c3:d2:6d: 58:88:ba:5d:0c:5c:96:61:2d:20:00:4f:f8:7e:97:d5:77:4e: 9d:4a:52:c6:f6:22:12:8b:43:2a:9b:68:12:5d:c8:7f:66:5a: 6d:ee:f7:43:0f:e2:b2:97:d0:a0:09:ba:6a:2b:14:94:d7:09: ba:15:ad:e5:72:38:23:05:79:fd:c2:54:b8:75:e4:9a:1d:e7: a1:77:92:53:75:13:97:cb:f9:3b:f2:73:4d:d7:9e:69:31:0a: 72:04:89:15:31:e7:72:5b:7c:db:e4:ce:71:ab:c0:52:36:1a: 4c:35:02:71:7c:85:0a:27:1e:83:e2:c0:3f:d6:c6:b3:11:23: 6d:47:9d:c1:f2:ab:3a:fd:01:ad:2e:1b:98:bf:e1:7f:d0:c6: 67:32:c9:3c:a7:f3:16:24:ca:2c:fe:2e:4e:f7:ec:ff:b7:7a: 9f:eb:2f:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+omxZ2UInGU2bmzw+LHrRAS0Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURB QTRDNTczOTAeFw0yNjA3MjMxMTEzNTNaFw0yNjA3MjQxMjMzNTNaMDMxMTAvBgNV BAMTKDgyMTI5OEVBMUZGQjY4QjdFMzdERkZBMEI3NTgyOTdGNDA5MTQyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6GTpS6nNOvq2QKTIoqB6nck1 7YH92ynFk4DqsybMuNrKBGSH3O3asU7GKRUIhASd2Y1HJX7DqpqRVvH/D/fvO1Jc AdBS9zpL72+au9RHCPg6H27ySDgG1mINUvpZkUlXWbabXa+hljGNPYHWgMSUJH8g nK7ssX7Lm9sokX9mUWZfRTZMmxToirFY09rFHaArLIJmpGmnGZM3UjY/77X5xuiY ulBVQmv3PP/saovoOVRRRdkpoEWALP4wzY5ifcJMEykbAnu/UEhiim+jPyQAJglh +5APHqYODUl0IFp4s1/RNdbuOLGkHNfLFJbiRbW0zjv79ybPrCpcnETIk9lZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghKY6h/7aLfjff+gt1gpf0CRQsswHwYDVR0j BBgwFoAUQ7W/KTvbQGLp4X2Kf/nXrapMVzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhODg4OTctYzM4Ny00NzM1LWFjZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkz QkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURBQTRDNTczOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0I1QkYyOTNCREI0MDYyRTlFMTdEOEE3RkY5RDdBREFBNEM1 NzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3 QURBQTRDNTczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJb+/V3AoxT19ifdypXbwzrlelSoW3nrDtw TjZ4i0/H7S7wQLjnbjPuSyYg/QEX+ikR18iHywKcRxacFFQAkJ2UUpJphikGLYUZ L2byVrtZaZ4ALtxtbcPSbViIul0MXJZhLSAAT/h+l9V3Tp1KUsb2IhKLQyqbaBJd yH9mWm3u90MP4rKX0KAJumorFJTXCboVreVyOCMFef3CVLh15Jod56F3klN1E5fL +Tvyc03XnmkxCnIEiRUx53JbfNvkznGrwFI2Gkw1AnF8hQonHoPiwD/WxrMRI21H ncHyqzr9Aa0uG5i/4X/QxmcyyTyn8xYkyiz+Lk737P+3ep/rL5g= -----END CERTIFICATE-----Generated at Fri Jul 24 02:12:37 2026 by rpki-client