$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft File: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft (raw, json) Hash identifier: LUogyO52GBvi//yfYQX4k08EQhLcTZ8Tb5zi/zJlr0A= Subject key identifier: C7:D0:8F:FC:6D:0B:F1:03:E8:26:7C:80:A4:10:70:2A:F0:D0:D2:AB Authority key identifier: 43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 Certificate issuer: /CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Certificate serial: 6D638ADF053BA62E17F632C156D22CC67C6EADE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft Manifest number: C6 Signing time: Fri 25 Sep 2026 21:11:50 +0000 Manifest this update: Fri 25 Sep 2026 21:06:50 +0000 Manifest next update: Sat 26 Sep 2026 23:12:50 +0000 Files and hashes: 1: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: j4dDYSTdl5zyq2E6gFmPn2O8HAKj+mVFK8qjYvnr4Tk=) 2: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl (hash: btmF2smnoIQc3kjViVyfkJqY9ThJ2C2ocpkeU5MJozg=) 3: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: UF6agt0uAGTYKvSykXC4qalAzD3vwK1cnzV5myQ1GUY=) 4: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: lOYan/tTMeCFnrAywnM0SljREMtkE1qDoXn8AuN63bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 23:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:63:8a:df:05:3b:a6:2e:17:f6:32:c1:56:d2:2c:c6:7c:6e:ad:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Validity Not Before: Sep 25 21:06:50 2026 GMT Not After : Sep 26 23:12:50 2026 GMT Subject: CN=C7D08FFC6D0BF103E8267C80A410702AF0D0D2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:79:56:6b:9d:16:42:83:df:7d:d4:4d:f2: 72:02:4f:8b:94:81:ee:a1:4b:29:ce:50:8c:df:24: af:6a:96:ac:4e:58:7b:e9:98:55:27:6d:0f:ba:f8: 43:77:0b:9d:f3:8f:19:c9:cd:64:b9:41:95:54:47: d3:c3:6a:92:ce:1b:b6:52:5b:da:0c:f7:75:bd:b7: 74:df:6b:40:56:a6:ad:0e:0f:83:eb:b6:ad:58:95: d1:70:24:30:80:77:08:a4:35:f6:4e:4a:2d:b4:f8: f4:19:33:0a:62:df:f4:ba:26:aa:56:25:a2:48:09: 61:f0:0d:3e:73:84:23:9e:eb:d2:9f:ba:e3:1e:d7: d2:1f:ef:09:0c:fb:6d:71:e4:c8:23:39:a6:92:b3: 7a:f9:00:d8:c6:b7:5b:c4:4d:84:c7:0d:55:19:1a: b1:0f:83:45:32:1d:3b:f0:c1:4c:61:8e:c8:e6:af: 68:22:11:68:84:09:6f:3e:7d:4b:06:e5:23:1f:f9: 16:9c:0d:86:92:25:4d:ec:f0:a4:b5:66:74:4d:3b: 92:f5:e5:de:c8:f6:88:ea:37:32:c8:25:3c:d8:3a: d3:3a:71:36:f3:b9:58:a4:0c:db:f0:98:66:f9:41: 81:04:ad:08:49:88:bb:ab:0b:ab:c4:d7:57:1e:d0: cd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D0:8F:FC:6D:0B:F1:03:E8:26:7C:80:A4:10:70:2A:F0:D0:D2:AB X509v3 Authority Key Identifier: keyid:43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:85:1a:9c:05:0f:2e:80:72:65:88:ab:31:97:1b:65:70:8f: 99:d1:40:14:5e:34:8c:66:00:26:ce:55:56:d6:81:2c:66:6d: 1c:85:d8:e9:67:5c:39:4d:c8:81:9b:60:af:6d:01:e5:fc:07: 7e:37:fb:37:1f:f7:18:d3:5c:e8:4d:79:07:dc:5e:68:66:88: 1e:8e:3d:db:8f:29:02:1d:5c:77:4c:b2:56:b2:cb:21:15:62: c4:ef:ef:2b:d5:75:fa:d4:92:b3:82:77:8f:fc:4d:e6:b8:c9: 43:f9:5a:e1:85:73:4e:14:24:84:99:ad:79:3c:0a:65:08:52: c6:47:2c:bf:62:ed:9f:16:a5:ab:af:d2:ed:50:ad:42:b3:53: bd:c0:77:3b:50:50:4d:d1:93:75:1d:37:5e:30:07:49:17:7c: fc:5c:29:1f:6d:72:a1:e5:a3:fd:71:2b:3b:55:5d:b1:bc:6f: 7f:9f:a5:ec:07:3f:2b:de:0d:99:ca:c4:0a:46:c3:31:ca:c0: 7c:32:f4:e4:fa:c1:fe:99:58:11:17:1e:0d:ef:31:38:a8:52: 39:46:9b:2a:69:6d:a9:86:ee:9c:60:8e:06:01:21:85:37:5d: 3f:52:ec:12:d1:da:d3:47:70:73:9e:21:5f:f8:dd:23:57:5e: dc:9b:a3:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWOK3wU7pi4X9jLBVtIsxnxurekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1 NTJGNjcwMjAeFw0yNjA5MjUyMTA2NTBaFw0yNjA5MjYyMzEyNTBaMDMxMTAvBgNV BAMTKEM3RDA4RkZDNkQwQkYxMDNFODI2N0M4MEE0MTA3MDJBRjBEMEQyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb43lWa50WQoPffdRN8nICT4uU ge6hSynOUIzfJK9qlqxOWHvpmFUnbQ+6+EN3C53zjxnJzWS5QZVUR9PDapLOG7ZS W9oM93W9t3Tfa0BWpq0OD4Prtq1YldFwJDCAdwikNfZOSi20+PQZMwpi3/S6JqpW JaJICWHwDT5zhCOe69KfuuMe19If7wkM+21x5MgjOaaSs3r5ANjGt1vETYTHDVUZ GrEPg0UyHTvwwUxhjsjmr2giEWiECW8+fUsG5SMf+RacDYaSJU3s8KS1ZnRNO5L1 5d7I9ojqNzLIJTzYOtM6cTbzuVikDNvwmGb5QYEErQhJiLurC6vE11ce0M2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx9CP/G0L8QPoJnyApBBwKvDQ0qswHwYDVR0j BBgwFoAUQ9CUPQrUn9NNeaf0Ntn3r1UvZwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjczNTA3ZjMtZjhjMC00MTBiLWIxOWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0Qw QUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1NTJGNjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1MkY2 NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3 QUY1NTJGNjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOFGpwFDy6AcmWIqzGXG2Vwj5nRQBReNIxm ACbOVVbWgSxmbRyF2OlnXDlNyIGbYK9tAeX8B343+zcf9xjTXOhNeQfcXmhmiB6O PduPKQIdXHdMslayyyEVYsTv7yvVdfrUkrOCd4/8Tea4yUP5WuGFc04UJISZrXk8 CmUIUsZHLL9i7Z8Wpauv0u1QrUKzU73AdztQUE3Rk3UdN14wB0kXfPxcKR9tcqHl o/1xKztVXbG8b3+fpewHPyveDZnKxApGwzHKwHwy9OT6wf6ZWBEXHg3vMTioUjlG myppbamG7pxgjgYBIYU3XT9S7BLR2tNHcHOeIV/43SNXXtyboyE= -----END CERTIFICATE-----Generated at Sat Sep 26 16:39:03 2026 by rpki-client