$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft File: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft (raw, json) Hash identifier: OxWE8xqJQp93oqQUrjV/iilmorCvYdPhT84fQrLPwlo= Subject key identifier: B4:16:28:61:55:05:E2:9D:F4:82:7F:68:6D:44:AC:37:81:E2:9B:7F Authority key identifier: 43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC Certificate issuer: /CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Certificate serial: 228D20013DEE2C39F65AF6E315F786AD4E2D4C31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:28:49 +0000 Manifest this update: Thu 23 Jul 2026 15:23:49 +0000 Manifest next update: Fri 24 Jul 2026 18:45:49 +0000 Files and hashes: 1: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: zK6cRL88GJh6m3ulXU/23rYWx1uCoF/U17/Vb4bnDxI=) 2: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: 8so5gt5H9uGwMpnvmuPmOphhipCyfITSegbgfqUMLB8=) 3: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl (hash: SLrslC7XFKwFF5uBrAiGi5oKZfkcAlfUdEcrh/KkBmE=) 4: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: zJ5Jgen43BSfgth1+Wx2KQ4rMgZaYS8tSCDudAuawmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8d:20:01:3d:ee:2c:39:f6:5a:f6:e3:15:f7:86:ad:4e:2d:4c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Validity Not Before: Jul 23 15:23:49 2026 GMT Not After : Jul 24 18:45:49 2026 GMT Subject: CN=B41628615505E29DF4827F686D44AC3781E29B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:f1:25:a5:73:bb:61:33:1a:69:cf:02:30: 46:18:da:76:f9:71:48:f9:7b:ac:f8:4f:90:14:74: 04:54:b4:e4:56:52:b0:20:d2:bb:12:d9:6d:2a:4b: 96:29:86:b1:4b:91:6f:23:88:22:aa:91:93:cb:57: a3:62:42:b9:c7:15:e4:fd:c5:92:ef:ef:da:35:19: 8e:9a:16:5c:8f:57:d6:2b:29:6b:66:6f:a3:05:35: 79:7f:12:2f:f8:38:3d:25:a7:f7:ff:11:b5:a6:37: db:00:9c:42:50:7e:f5:ec:74:03:77:99:a8:98:5f: 5e:5d:c6:aa:63:ae:65:10:fe:62:19:4b:89:81:bb: 07:56:dd:2b:41:eb:a2:ff:15:91:48:15:aa:77:ed: fb:20:84:c8:ce:e2:c8:70:7f:af:2a:32:81:e1:70: 5e:04:54:66:75:c5:1a:7b:b0:8d:53:9e:45:05:5e: 8e:b5:a3:01:9f:9d:8e:c8:19:96:fa:70:d8:1a:95: 67:5e:d1:b0:57:27:9b:d5:dd:e0:0d:28:e2:5c:fd: 06:4b:9e:61:e9:93:6a:14:ac:53:c7:2d:6a:45:7e: 5f:82:e2:96:ed:c4:10:d3:79:81:37:1b:11:f8:df: 57:41:45:a4:a8:d9:e8:e3:bb:74:dd:5e:35:bd:33: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:16:28:61:55:05:E2:9D:F4:82:7F:68:6D:44:AC:37:81:E2:9B:7F X509v3 Authority Key Identifier: keyid:43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f6:32:36:39:d1:b7:85:15:e8:5d:ed:c6:d3:40:d0:6f:39: e7:e5:1f:1c:8b:b2:88:a4:e7:42:d6:12:35:27:db:d7:ef:1a: fa:88:73:d0:1f:a6:f6:86:4f:38:90:23:ac:4e:76:7f:e9:f9: e9:f5:9f:96:e1:54:19:d7:c7:88:77:98:4d:c1:65:69:61:06: 37:ab:10:0a:01:b9:86:5c:60:41:71:20:bb:5f:20:84:73:4f: 85:16:3b:be:95:fc:4d:55:e9:91:c9:2d:b1:fc:4e:e2:f5:b3: 90:85:a3:2b:97:3f:4f:09:e2:b6:96:f8:79:00:85:6a:7c:43: ff:5a:f2:25:af:6f:ce:57:23:95:e9:82:14:1e:0a:be:72:aa: b1:06:a0:7d:f8:19:40:bf:af:c2:e6:97:ac:1e:47:d1:bd:20: 9d:03:fd:94:ec:95:6c:ac:1e:6a:7a:a7:c4:d3:53:3b:0e:7a: 49:c0:de:07:22:d5:22:17:f3:f1:1a:fe:f0:c3:5b:06:e2:24: 64:55:15:bc:52:09:6a:a0:27:ee:0e:d8:4c:fd:0c:84:59:e7: c2:5e:3d:50:22:a8:dd:c3:d5:50:b9:b0:8c:7c:7e:d1:b5:ac: a3:b6:da:04:8d:88:98:ed:c2:67:08:19:72:73:cb:43:89:1b: 44:8a:93:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIo0gAT3uLDn2WvbjFfeGrU4tTDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQz NzQyQjNCQzAeFw0yNjA3MjMxNTIzNDlaFw0yNjA3MjQxODQ1NDlaMDMxMTAvBgNV BAMTKEI0MTYyODYxNTUwNUUyOURGNDgyN0Y2ODZENDRBQzM3ODFFMjlCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHoPElpXO7YTMaac8CMEYY2nb5 cUj5e6z4T5AUdARUtORWUrAg0rsS2W0qS5YphrFLkW8jiCKqkZPLV6NiQrnHFeT9 xZLv79o1GY6aFlyPV9YrKWtmb6MFNXl/Ei/4OD0lp/f/EbWmN9sAnEJQfvXsdAN3 maiYX15dxqpjrmUQ/mIZS4mBuwdW3StB66L/FZFIFap37fsghMjO4shwf68qMoHh cF4EVGZ1xRp7sI1TnkUFXo61owGfnY7IGZb6cNgalWde0bBXJ5vV3eANKOJc/QZL nmHpk2oUrFPHLWpFfl+C4pbtxBDTeYE3GxH431dBRaSo2ejju3TdXjW9M5r/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtBYoYVUF4p30gn9obUSsN4Him38wHwYDVR0j BBgwFoAUQ/iW7rcPL5eIP/RZyuOstDdCs7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MzM5MzQtMzg0NC00NjUzLThmYWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVC NzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQzNzQyQjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0Y4OTZFRUI3MEYyRjk3ODgzRkY0NTlDQUUzQUNCNDM3NDJC M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FD QjQzNzQyQjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/2MjY50beFFehd7cbTQNBvOeflHxyLsoik 50LWEjUn29fvGvqIc9AfpvaGTziQI6xOdn/p+en1n5bhVBnXx4h3mE3BZWlhBjer EAoBuYZcYEFxILtfIIRzT4UWO76V/E1V6ZHJLbH8TuL1s5CFoyuXP08J4raW+HkA hWp8Q/9a8iWvb85XI5XpghQeCr5yqrEGoH34GUC/r8Lml6weR9G9IJ0D/ZTslWys Hmp6p8TTUzsOeknA3gci1SIX8/Ea/vDDWwbiJGRVFbxSCWqgJ+4O2Ez9DIRZ58Je PVAiqN3D1VC5sIx8ftG1rKO22gSNiJjtwmcIGXJzy0OJG0SKk/0= -----END CERTIFICATE-----Generated at Fri Jul 24 03:07:03 2026 by rpki-client