$ rpki-client -vvvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft File: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft (raw, json) Hash identifier: 7kQHzLbbWuQbcwSxMooneKl5mfHUdRx2MfiZ2vA+Y6A= Subject key identifier: A5:EE:04:06:49:79:AB:50:5E:13:88:4D:0D:65:EF:BE:EA:73:AB:89 Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Certificate serial: 1CF51AD170A4F1BBE2C12854886820DD3FE4F17A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 22:05:01 +0000 Manifest this update: Wed 02 Sep 2026 22:00:01 +0000 Manifest next update: Fri 04 Sep 2026 01:58:01 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: q99UPT0teezCe/Wtc8EBt8wiQOUmurJEflzD8Gd4ong=) 2: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=) 3: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl (hash: emEgbNGM1cASL0Sadq1tt0QDka0NPkzOiivXuPYLJ0A=) 4: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: 6T6qe96D7zQgyFzklJ6iaQcLNZnBxADfp/QBK9mZ1I4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 01:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f5:1a:d1:70:a4:f1:bb:e2:c1:28:54:88:68:20:dd:3f:e4:f1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Validity Not Before: Sep 2 22:00:01 2026 GMT Not After : Sep 4 01:58:01 2026 GMT Subject: CN=A5EE04064979AB505E13884D0D65EFBEEA73AB89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:89:21:51:fb:7c:e7:8d:9b:af:37:36:f5:3a: 9a:c8:b1:b1:2e:a4:12:c6:2c:0f:6c:59:a1:dd:dd: 8f:50:42:f7:19:f6:28:6c:2a:3c:c4:11:67:37:08: a3:02:50:7c:e2:66:59:56:60:06:21:1a:8f:40:e2: 27:df:49:3a:c5:aa:8c:d5:62:3d:93:f2:64:1c:1e: 95:2b:0e:62:4c:77:e3:b8:de:5d:25:4f:ea:3b:38: 2f:c8:67:5e:c9:f8:4c:0c:85:d3:fc:b8:a4:34:89: b2:80:8d:db:dd:3f:a1:0f:05:92:47:49:3f:a8:17: 21:74:7b:99:c1:bb:f0:a3:40:00:b8:6a:56:ac:ae: af:b8:35:fe:4c:ea:95:27:ec:1d:4e:ef:9b:39:f2: eb:6d:37:13:fe:8f:07:5f:a6:d6:42:07:d0:97:08: 5a:06:84:db:5d:13:ea:1c:72:15:d1:43:82:9a:87: f8:35:1e:8c:60:c6:be:5c:39:4f:31:6a:0e:9c:de: e2:dc:c1:9f:a0:eb:1f:ea:ae:ac:cf:94:de:c5:75: 98:e8:03:98:3e:ee:61:f1:a0:a4:a8:05:92:43:3b: 17:9a:1e:32:05:f3:a7:2c:14:79:24:d1:ed:a3:23: 41:ff:3e:0d:6c:57:1d:cf:75:39:f6:91:60:05:cf: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EE:04:06:49:79:AB:50:5E:13:88:4D:0D:65:EF:BE:EA:73:AB:89 X509v3 Authority Key Identifier: keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f8:79:5f:a5:ca:af:e6:2f:70:e9:c3:81:d2:70:18:5b:ef: ae:a6:c4:d1:0d:6b:1a:0d:49:05:68:df:f7:9d:93:90:12:38: 6a:f8:68:52:26:8c:80:e0:43:62:e2:9b:97:d0:58:7d:50:06: aa:fe:9f:dc:21:a0:c3:ad:4c:fe:2f:16:b4:e9:88:97:da:d1: 7e:66:ad:6e:28:96:79:7f:81:bd:f8:79:69:63:62:c7:ce:7a: 8f:82:b1:dc:a5:9e:b6:30:06:f5:f3:dd:15:1b:7b:9f:c9:27: 93:08:06:9b:43:3d:ef:67:34:95:32:ae:5e:92:09:0b:1d:d8: 84:28:b2:c4:34:19:e6:ab:27:bc:9f:d8:6c:26:d3:aa:4f:d8: 45:44:24:64:30:75:cf:a0:cc:bb:ea:eb:8a:64:8e:e8:90:05: 3c:b3:2d:16:c8:bd:59:1b:3c:57:71:c7:63:91:b5:d8:4e:f1: 45:57:4c:34:ae:82:96:a3:5d:d5:b3:a9:b2:cd:28:70:62:66: f6:c7:70:7d:35:54:36:67:7a:c0:e2:4d:f6:3c:07:d7:b7:84: 56:63:85:d8:82:1c:da:30:fe:2a:a2:99:7a:13:68:29:a3:a8: bd:45:bc:1d:c1:91:bf:38:74:65:59:ef:40:b0:38:b9:1d:18: 24:53:f7:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPUa0XCk8bviwShUiGgg3T/k8XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2 OUY0ODI5RTAeFw0yNjA5MDIyMjAwMDFaFw0yNjA5MDQwMTU4MDFaMDMxMTAvBgNV BAMTKEE1RUUwNDA2NDk3OUFCNTA1RTEzODg0RDBENjVFRkJFRUE3M0FCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCiSFR+3znjZuvNzb1OprIsbEu pBLGLA9sWaHd3Y9QQvcZ9ihsKjzEEWc3CKMCUHziZllWYAYhGo9A4iffSTrFqozV Yj2T8mQcHpUrDmJMd+O43l0lT+o7OC/IZ17J+EwMhdP8uKQ0ibKAjdvdP6EPBZJH ST+oFyF0e5nBu/CjQAC4alasrq+4Nf5M6pUn7B1O75s58uttNxP+jwdfptZCB9CX CFoGhNtdE+occhXRQ4Kah/g1Hoxgxr5cOU8xag6c3uLcwZ+g6x/qrqzPlN7FdZjo A5g+7mHxoKSoBZJDOxeaHjIF86csFHkk0e2jI0H/Pg1sVx3PdTn2kWAFz96lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpe4EBkl5q1BeE4hNDWXvvupzq4kwHwYDVR0j BBgwFoAUQ+ejCll7sylzyythedmtiWn0gp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM4ZDU4MGItNDUyZS00MmQ3LWIwNDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1 OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2OUY0ODI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0U3QTMwQTU5N0JCMzI5NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4 MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFE ODk2OUY0ODI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX4eV+lyq/mL3Dpw4HScBhb766mxNENaxoN SQVo3/edk5ASOGr4aFImjIDgQ2Lim5fQWH1QBqr+n9whoMOtTP4vFrTpiJfa0X5m rW4olnl/gb34eWljYsfOeo+CsdylnrYwBvXz3RUbe5/JJ5MIBptDPe9nNJUyrl6S CQsd2IQossQ0GearJ7yf2Gwm06pP2EVEJGQwdc+gzLvq64pkjuiQBTyzLRbIvVkb PFdxx2ORtdhO8UVXTDSugpajXdWzqbLNKHBiZvbHcH01VDZnesDiTfY8B9e3hFZj hdiCHNow/iqimXoTaCmjqL1FvB3Bkb84dGVZ70CwOLkdGCRT950= -----END CERTIFICATE-----Generated at Thu Sep 3 18:58:29 2026 by rpki-client