$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft File: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft (raw, json) Hash identifier: tXAWpymNvTU81PVl9sS5tQZXnPY2ag0Eo3tfHzt6E2c= Subject key identifier: 03:59:12:6E:64:A2:1B:1B:68:AC:A6:C2:A9:89:E1:06:B9:16:5A:50 Authority key identifier: 43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC Certificate issuer: /CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Certificate serial: 4B27282DDD82CDF1EC8C6D58549D01105B50554D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:08:35 +0000 Manifest this update: Wed 23 Sep 2026 14:03:35 +0000 Manifest next update: Thu 24 Sep 2026 14:39:35 +0000 Files and hashes: 1: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: zJ5Jgen43BSfgth1+Wx2KQ4rMgZaYS8tSCDudAuawmM=) 2: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: 8so5gt5H9uGwMpnvmuPmOphhipCyfITSegbgfqUMLB8=) 3: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: zK6cRL88GJh6m3ulXU/23rYWx1uCoF/U17/Vb4bnDxI=) 4: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl (hash: 4+5Rhn2ZfvtH9L501ny9pA6O2jAaLDgjgh9Yylodwyk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:27:28:2d:dd:82:cd:f1:ec:8c:6d:58:54:9d:01:10:5b:50:55:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Validity Not Before: Sep 23 14:03:35 2026 GMT Not After : Sep 24 14:39:35 2026 GMT Subject: CN=0359126E64A21B1B68ACA6C2A989E106B9165A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:63:6a:ed:56:7f:c6:73:7a:df:12:e7:9e: d9:5d:cf:37:5b:9c:f7:60:3d:66:e2:14:0f:b9:75: fc:22:18:01:34:b4:1e:ed:1d:28:42:dc:38:e3:b3: db:d5:b5:01:8d:ee:80:f9:a7:8f:0c:23:43:2d:01: 1d:34:8e:fe:1a:14:5a:30:5d:4c:58:9b:14:bc:d7: e2:fb:7d:12:9d:cb:76:7d:23:e0:da:b0:a2:21:1c: 92:c4:43:ab:b1:31:15:c5:cb:06:11:18:b9:fd:73: 67:fa:04:89:3d:84:c9:1d:a1:02:84:12:98:be:9a: 4e:0f:45:bf:53:5a:5f:a6:b1:8c:0e:ff:5f:a8:c3: 0f:da:b0:37:36:ac:a6:a3:36:f1:ec:d0:7d:69:e6: 92:e7:6c:e4:62:17:bd:02:0e:65:d4:8a:c0:58:28: 57:25:96:d4:ee:cc:4a:84:b3:d5:1d:0f:a3:32:83: 50:1d:17:cf:24:6c:a5:67:32:72:9e:de:62:3d:d4: e6:2b:50:ac:a5:79:8f:27:e4:87:19:56:62:a6:d8: 2c:a3:d8:2f:3f:ba:86:0a:b1:08:e4:92:ce:ea:18: be:26:d9:5a:0e:2a:0a:56:9e:04:5d:53:95:3e:05: d7:aa:c7:85:84:a5:a5:da:c7:3a:e5:28:a4:4c:b7: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:59:12:6E:64:A2:1B:1B:68:AC:A6:C2:A9:89:E1:06:B9:16:5A:50 X509v3 Authority Key Identifier: keyid:43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:67:6f:66:a7:43:39:72:0c:12:a9:c5:e2:92:3d:e9:f5:ba: d3:9e:87:59:a9:77:7d:32:ab:8c:b0:77:fd:17:c6:ed:b7:a0: 75:b1:28:22:f9:6c:83:3c:a3:1d:6a:21:de:65:8a:f9:e0:bf: 87:c0:9a:ac:c4:51:50:3b:ff:18:82:ee:3f:f2:b9:bb:45:37: 35:f6:a8:21:31:cb:77:75:cb:4a:7f:04:78:f0:ae:54:bc:37: fa:ce:ed:f1:66:64:ce:b4:30:74:c5:19:89:29:86:74:f6:6a: 3a:84:25:54:bf:d4:ff:e3:f8:f7:4d:c2:73:9f:44:93:a3:fc: fb:99:d0:92:79:e8:d2:8b:5c:1b:8e:ec:90:4f:b9:f5:70:20: 30:b0:95:d5:ae:3c:95:ab:f1:40:69:7e:b2:e4:73:b0:ee:ce: 7e:ae:4e:a2:3b:e6:76:c4:25:52:91:eb:0e:40:9f:de:74:55: d3:30:a2:54:36:db:8c:9d:a6:dd:cd:b2:a2:a4:ea:00:af:c9: cd:e1:a6:ec:b7:ce:ac:09:80:d9:b9:25:6c:0b:c4:cb:00:35: 67:e6:7e:3f:5e:6e:07:4f:f8:2c:a9:95:ab:b6:2e:53:c8:6b: 41:36:ab:a6:b6:31:ec:04:76:52:11:da:0d:27:8a:d1:f2:8f: 85:ac:61:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSycoLd2CzfHsjG1YVJ0BEFtQVU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQz NzQyQjNCQzAeFw0yNjA5MjMxNDAzMzVaFw0yNjA5MjQxNDM5MzVaMDMxMTAvBgNV BAMTKDAzNTkxMjZFNjRBMjFCMUI2OEFDQTZDMkE5ODlFMTA2QjkxNjVBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkeGNq7VZ/xnN63xLnntldzzdb nPdgPWbiFA+5dfwiGAE0tB7tHShC3Djjs9vVtQGN7oD5p48MI0MtAR00jv4aFFow XUxYmxS81+L7fRKdy3Z9I+DasKIhHJLEQ6uxMRXFywYRGLn9c2f6BIk9hMkdoQKE Epi+mk4PRb9TWl+msYwO/1+oww/asDc2rKajNvHs0H1p5pLnbORiF70CDmXUisBY KFclltTuzEqEs9UdD6Myg1AdF88kbKVnMnKe3mI91OYrUKyleY8n5IcZVmKm2Cyj 2C8/uoYKsQjkks7qGL4m2VoOKgpWngRdU5U+Bdeqx4WEpaXaxzrlKKRMtznbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA1kSbmSiGxtorKbCqYnhBrkWWlAwHwYDVR0j BBgwFoAUQ/iW7rcPL5eIP/RZyuOstDdCs7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MzM5MzQtMzg0NC00NjUzLThmYWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVC NzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQzNzQyQjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0Y4OTZFRUI3MEYyRjk3ODgzRkY0NTlDQUUzQUNCNDM3NDJC M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FD QjQzNzQyQjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBnb2anQzlyDBKpxeKSPen1utOeh1mpd30y q4ywd/0Xxu23oHWxKCL5bIM8ox1qId5livngv4fAmqzEUVA7/xiC7j/yubtFNzX2 qCExy3d1y0p/BHjwrlS8N/rO7fFmZM60MHTFGYkphnT2ajqEJVS/1P/j+PdNwnOf RJOj/PuZ0JJ56NKLXBuO7JBPufVwIDCwldWuPJWr8UBpfrLkc7Duzn6uTqI75nbE JVKR6w5An950VdMwolQ224ydpt3NsqKk6gCvyc3hpuy3zqwJgNm5JWwLxMsANWfm fj9ebgdP+Cyplau2LlPIa0E2q6a2MewEdlIR2g0nitHyj4WsYas= -----END CERTIFICATE-----Generated at Thu Sep 24 06:20:32 2026 by rpki-client