
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
File: 43E1CC61CDE59968FE0810D4937130A67D6541DC.mft (raw, json)
Hash identifier: RkgwrX3JYYBuwUqRKw8pyIRRB26pW/0fbMmDosmT3o8=
Subject key identifier: A7:FF:EE:5D:7A:D7:2A:C9:81:9A:1A:0B:5B:CE:38:2D:65:E9:8C:91
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Certificate issuer: /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial: 36AD8C098299832ACF77CC468BB78692F30512A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 14:13:43 +0000
Manifest this update: Wed 23 Sep 2026 14:08:43 +0000
Manifest next update: Thu 24 Sep 2026 14:28:43 +0000
Files and hashes: 1: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (hash: LWtx3txnmj9FjoJjDB/lmvmHZmgHx1jmLc6PPib5at8=)
2: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (hash: cpyNUFqnnPw0hoOUNBzdPXv7w/EpVs/cMCjjRluZNLo=)
3: 3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (hash: 1wbNP75Z/wA6pW2UhWTpcnJU8wNdOjHZn2vOKC8mX5U=)
4: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (hash: WgZKLMLpwFRH8Rc+mjcsJQGYvAiCBksSGlUySVC2KTU=)
5: 3230332e3139302e3131342e302f32342d3234203d3e203338313536.roa (hash: 1zxciFrgfrpypZ13HHtfhkMtV3yJILY8QtbERuPSSxQ=)
6: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (hash: q/tSBWv/7VM0Xu29FwAxjeFSDX/WD3INyENxffhPO4Q=)
7: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (hash: G3L597uJ/MtChNRFU4TPZTfQd8hCBfeft5oOi8ZO5Xk=)
8: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (hash: SUQFDo/3me7K6mK7WbxUn/2b9SHI+OuxemQ1myZfogM=)
9: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (hash: JOAtBF5+cfAqGhS9/3m1ZllG3nhy/U+cT4H4mHFtRKs=)
10: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (hash: mYAvetqJOaK+g42xXQIVuzKQ0V+8EMMx37honK4xGaY=)
11: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (hash: Cigucd/NI7znq4aJY8FxoWkyWnlcJwSTYzMKj0Cfavc=)
12: 323430353a613534303a313030383a3a2f34382d3438203d3e203338313536.roa (hash: jdESrjmJQhjG8kc6FD8N6X6iVxeMA55PP67c1tPELGM=)
13: 323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (hash: jHrKWWZukLMZ3J2401GmiEuzkAvQx3pBL2xKoO7CBis=)
14: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (hash: FymgtPH5XRJeo2g24rTB6Zt9DBTm0EmGQZ0QaJOmZSE=)
15: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (hash: DmCqSyLAbR1GcGB2b6c28zFVw4CNHOLr1uOyNF7nwjc=)
16: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (hash: Yg8Yec064Brwf9x/NAfoSbhCfddxi4fn/8a7jii/RNk=)
17: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (hash: zPNtfgZ0xuIJb6mJb8ImM+3c3T3QiTY+1lYZMk1v2MU=)
18: 3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (hash: e7mQPN3Z6KC/Ik9Qm59+I1SvLwjeilQ2SD4cxlIQDBE=)
19: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (hash: /s6NqXf3Az+33qCBWrV7/rHS8XMqrqM1zxdpU1dDV14=)
20: 43E1CC61CDE59968FE0810D4937130A67D6541DC.crl (hash: A+ryvRS+O/oG9hFLwieEZIxUAXyK60b+ZoXYjBgHpYo=)
21: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (hash: /GkPi/+AOEhPufjKPy1+oO0pijIgfjVervEREyDjquk=)
22: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (hash: GpjHek9a827cy//pNFDcORXn2t6JzxU+p9J93Ct0LZo=)
23: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (hash: df96YWKu427U+HPJiLnno+3fbVy36Hxa342nQy+ZfoU=)
24: 323430353a613534303a313030623a3a2f34382d3438203d3e203338313536.roa (hash: ArldJV59T/AN0DLLjKdryy3dXOdpQHjw8YFmTH59OUg=)
25: 3230332e3139302e3131322e302f32342d3234203d3e203338313536.roa (hash: akD2QIfBzuzka9CzlNwOGyLhb8S59sJqB1gcfu/lphg=)
26: 323430353a613534303a313030313a3a2f34382d3438203d3e203338313536.roa (hash: ghjk9WxpBpcObQwhuyRJKOhe294PLPBofYqlraUkN+g=)
27: 323430353a613534303a313030343a3a2f34382d3438203d3e203338313536.roa (hash: SMs3l2LaIu15xotNctGRKXxr41nAKmtqdH/wDotPjcE=)
28: 3230332e3139302e3131322e302f32312d3231203d3e203338313536.roa (hash: FE7yZMTislKGWcbY4qG0beL79uHJRAECT1HhYr/vMVw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 14:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ad:8c:09:82:99:83:2a:cf:77:cc:46:8b:b7:86:92:f3:05:12:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Validity
Not Before: Sep 23 14:08:43 2026 GMT
Not After : Sep 24 14:28:43 2026 GMT
Subject: CN=A7FFEE5D7AD72AC9819A1A0B5BCE382D65E98C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:00:6e:00:33:f7:3e:c2:38:43:d2:09:32:
04:c1:9f:1d:67:ca:b3:5e:88:ab:d7:8e:8c:86:15:
2e:8c:13:e3:7a:79:53:a6:25:27:f7:2b:28:c0:a0:
cc:33:65:db:c4:af:41:a3:01:85:a0:2c:d8:c4:34:
8e:82:26:c1:bb:e2:61:05:58:0a:7b:5d:3f:19:8f:
66:31:bb:cb:79:fe:10:9b:a1:a5:33:4e:83:c2:2b:
5f:91:b3:39:e0:3f:70:e7:85:34:ef:c0:39:b9:34:
05:47:0b:27:b1:3c:e3:47:e4:e4:6e:49:48:20:5e:
a3:cc:39:b7:e6:48:4f:29:91:19:1d:9b:66:36:0c:
00:2c:99:94:f5:8f:79:b9:5a:f9:88:9b:12:44:a3:
7d:16:5c:67:88:4c:54:54:67:95:31:a9:48:02:cc:
55:1a:03:52:57:61:70:32:e6:e5:40:a2:03:e1:8c:
e2:cb:16:67:88:65:6b:a6:18:46:26:d2:3b:55:71:
ad:6c:7b:a2:2d:63:bb:1c:c5:5d:32:ad:07:93:5c:
b2:49:4b:18:c1:e4:2e:6c:ca:c4:9b:70:b7:84:8e:
8a:3d:d6:85:b4:5c:0c:c2:5e:66:ba:43:99:e1:de:
5f:1f:84:bc:e6:df:ad:5e:95:6b:c3:90:cb:2e:42:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:EE:5D:7A:D7:2A:C9:81:9A:1A:0B:5B:CE:38:2D:65:E9:8C:91
X509v3 Authority Key Identifier:
keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0c:47:7e:7b:67:8f:45:cf:50:89:26:86:7e:64:9e:08:79:
ea:e0:f8:cb:67:56:21:2e:46:70:f4:71:ad:17:b1:8f:b3:e9:
73:87:49:13:97:14:91:e1:e5:a3:c3:f6:7b:24:0e:41:f4:d0:
03:3e:fe:09:e6:8e:81:3b:32:c9:9a:9f:60:82:61:e8:51:67:
48:3b:c1:7a:a5:1b:10:b3:9a:fb:38:7b:92:86:33:c9:24:1e:
f6:07:95:ba:05:ff:b0:af:07:0c:92:23:42:8b:19:a4:d2:9c:
0d:8c:02:f0:05:70:8a:73:9a:3f:f6:03:32:69:d5:56:fd:1e:
4e:6d:03:c4:15:95:83:39:86:fc:f0:f9:d6:24:9f:78:83:55:
13:c6:77:0a:f3:ca:9c:f6:49:30:94:f3:e4:89:a0:03:cc:22:
80:84:25:41:61:ed:d5:4c:6c:af:f1:5d:f5:e3:c2:59:06:c7:
2f:a5:65:3c:b7:eb:7c:01:c1:88:10:1b:f6:07:d6:d7:a2:6c:
8b:4f:4a:90:42:27:7e:56:f7:6f:c0:9a:9e:16:2e:9a:68:53:
ec:61:ec:12:31:c5:7d:3a:8e:1f:6d:fe:9f:83:91:43:11:0f:
08:8f:f5:cc:31:79:81:27:1f:2c:50:74:47:5d:4f:10:df:84:
db:15:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:57 2026 by rpki-client