$ rpki-client -vvf rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft File: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft (raw, json) Hash identifier: h18QmKJbZ0uefw5RhQnMPEcurcVy4qo8PMibHjC7JpM= Subject key identifier: 66:AD:D3:F4:03:4A:DD:6C:EE:A5:F1:51:47:69:37:84:63:AE:46:43 Authority key identifier: 43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 Certificate issuer: /CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Certificate serial: 01359F92F176855E2339D011D881BBFA0BC32508 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 17:31:36 +0000 Manifest this update: Thu 23 Jul 2026 17:26:36 +0000 Manifest next update: Fri 24 Jul 2026 18:06:36 +0000 Files and hashes: 1: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl (hash: gS5YyKMAL9biZMWzlrvFw7ttpyyWo0IQw+TiKriaP1A=) 2: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: j4dDYSTdl5zyq2E6gFmPn2O8HAKj+mVFK8qjYvnr4Tk=) 3: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: lOYan/tTMeCFnrAywnM0SljREMtkE1qDoXn8AuN63bo=) 4: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: UF6agt0uAGTYKvSykXC4qalAzD3vwK1cnzV5myQ1GUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:35:9f:92:f1:76:85:5e:23:39:d0:11:d8:81:bb:fa:0b:c3:25:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Validity Not Before: Jul 23 17:26:36 2026 GMT Not After : Jul 24 18:06:36 2026 GMT Subject: CN=66ADD3F4034ADD6CEEA5F1514769378463AE4643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:ba:0a:d5:e4:d6:65:7c:4b:b5:64:66:fa: 46:4d:a7:7b:92:0b:56:9e:85:9d:54:d1:6a:27:3c: 44:6d:33:42:ce:1d:81:1d:21:4b:fe:68:ee:71:b7: 6a:0d:d0:65:04:8b:03:ae:c8:5a:a0:66:b7:6f:02: c7:59:1f:9e:2e:f1:87:f3:88:22:dc:04:63:99:1c: 05:db:22:84:1d:35:94:63:fd:45:a9:35:a7:af:49: 6b:e0:6d:57:55:07:eb:46:9f:bf:a3:38:c7:6a:8d: 91:b1:5b:22:70:ab:cb:87:4a:fb:b1:cf:b0:26:e1: 41:db:f1:5b:40:31:20:9d:c7:a6:e6:ff:bd:1b:76: 2b:76:5a:85:8a:ee:68:fe:04:79:00:b6:b3:bc:e5: 95:40:f2:cf:f7:98:85:f4:af:bf:1c:b7:39:02:57: 9d:20:7e:97:1f:13:8f:10:dd:fa:81:e1:c2:d0:42: 00:bd:83:df:0c:68:d5:b6:0a:9b:aa:1b:8a:00:b0: 59:fc:76:d0:25:c5:3f:75:8a:b3:fa:74:06:d0:38: 6d:a3:32:9f:81:50:d6:8f:be:fb:ad:06:c6:90:f5: 13:1d:3e:d7:bd:06:2f:6d:1c:6e:2e:01:a0:bc:1f: ec:6f:20:50:dd:51:6c:d5:1a:dd:7c:a0:9b:ad:71: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AD:D3:F4:03:4A:DD:6C:EE:A5:F1:51:47:69:37:84:63:AE:46:43 X509v3 Authority Key Identifier: keyid:43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:40:ee:5e:12:20:7c:33:16:e0:3c:2d:c2:59:9f:c3:6b:9b: a6:c1:10:f9:07:ac:45:1d:f8:df:a5:d3:b6:4c:78:f0:2e:b5: 74:c4:b8:81:51:67:5e:29:eb:ca:27:25:61:55:77:ea:73:c1: 47:a5:bb:32:d4:d9:8e:46:da:f4:34:b1:09:06:77:59:49:91: a5:c5:6d:1a:56:c3:c4:04:05:b9:0b:15:ae:6f:f8:32:31:26: 66:f3:8f:52:13:92:ea:4b:fd:90:b0:e6:ca:f1:7e:85:c2:50: db:8a:75:8c:1d:b8:4a:44:dd:cf:74:d6:af:5a:2f:2e:93:15: 5e:d6:7a:30:ef:18:e8:7c:5d:9f:7e:01:58:00:fa:de:12:1f: ca:e5:59:37:ff:ca:84:c4:6e:88:8b:23:e4:81:86:5c:35:86: 47:06:1f:7a:ad:bb:d7:e3:23:df:f0:cb:5e:d5:e4:88:1c:ee: 66:79:36:c5:e6:62:19:e6:41:69:fb:8a:26:04:94:92:ca:8e: ad:49:e6:09:16:b9:e5:c8:7a:8a:cc:a1:38:01:68:91:a9:7a: 9c:df:98:6f:96:89:09:f5:78:21:05:a4:b7:5c:e3:ab:d9:0c: 77:7c:e7:8b:b5:90:f0:79:9b:57:56:b3:44:a5:92:63:9d:cc: 54:b4:b7:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATWfkvF2hV4jOdAR2IG7+gvDJQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1 NTJGNjcwMjAeFw0yNjA3MjMxNzI2MzZaFw0yNjA3MjQxODA2MzZaMDMxMTAvBgNV BAMTKDY2QUREM0Y0MDM0QURENkNFRUE1RjE1MTQ3NjkzNzg0NjNBRTQ2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC397oK1eTWZXxLtWRm+kZNp3uS C1aehZ1U0WonPERtM0LOHYEdIUv+aO5xt2oN0GUEiwOuyFqgZrdvAsdZH54u8Yfz iCLcBGOZHAXbIoQdNZRj/UWpNaevSWvgbVdVB+tGn7+jOMdqjZGxWyJwq8uHSvux z7Am4UHb8VtAMSCdx6bm/70bdit2WoWK7mj+BHkAtrO85ZVA8s/3mIX0r78ctzkC V50gfpcfE48Q3fqB4cLQQgC9g98MaNW2CpuqG4oAsFn8dtAlxT91irP6dAbQOG2j Mp+BUNaPvvutBsaQ9RMdPte9Bi9tHG4uAaC8H+xvIFDdUWzVGt18oJutcWhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZq3T9ANK3WzupfFRR2k3hGOuRkMwHwYDVR0j BBgwFoAUQ9CUPQrUn9NNeaf0Ntn3r1UvZwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjczNTA3ZjMtZjhjMC00MTBiLWIxOWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0Qw QUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1NTJGNjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1MkY2 NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3 QUY1NTJGNjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9A7l4SIHwzFuA8LcJZn8Nrm6bBEPkHrEUd +N+l07ZMePAutXTEuIFRZ14p68onJWFVd+pzwUeluzLU2Y5G2vQ0sQkGd1lJkaXF bRpWw8QEBbkLFa5v+DIxJmbzj1ITkupL/ZCw5srxfoXCUNuKdYwduEpE3c901q9a Ly6TFV7WejDvGOh8XZ9+AVgA+t4SH8rlWTf/yoTEboiLI+SBhlw1hkcGH3qtu9fj I9/wy17V5Igc7mZ5NsXmYhnmQWn7iiYElJLKjq1J5gkWueXIeorMoTgBaJGpepzf mG+WiQn1eCEFpLdc46vZDHd854u1kPB5m1dWs0SlkmOdzFS0t8A= -----END CERTIFICATE-----Generated at Fri Jul 24 03:47:06 2026 by rpki-client