$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft File: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft (raw, json) Hash identifier: 7ZUEx9TDG7FTeROkTwAJn5h1zGwsHND28gqQzCVJ7zw= Subject key identifier: 12:D3:DE:C4:70:11:05:F1:D0:16:4E:BA:35:0A:7B:13:A3:99:35:EF Authority key identifier: 43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 Certificate issuer: /CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Certificate serial: 57B2DEFB29992DCA1D151F970EEB3B0C895E1FB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 03:47:27 +0000 Manifest this update: Thu 03 Sep 2026 03:42:27 +0000 Manifest next update: Fri 04 Sep 2026 07:11:27 +0000 Files and hashes: 1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: kfj+LC1/46I9BKuoHuEKXzZ9F4a4GvOD3Kj38WDtLhU=) 2: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl (hash: +TQJ8VLdenf+7P2r+GVsZ8loWd9YoTjANh7OxElaek8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 07:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b2:de:fb:29:99:2d:ca:1d:15:1f:97:0e:eb:3b:0c:89:5e:1f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Validity Not Before: Sep 3 03:42:27 2026 GMT Not After : Sep 4 07:11:27 2026 GMT Subject: CN=12D3DEC4701105F1D0164EBA350A7B13A39935EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:c4:00:15:7e:71:ed:1f:cd:eb:75:44:1b: 1b:92:72:cd:19:14:b5:4c:4e:ae:21:1a:df:43:25: a1:7c:35:1c:7f:2d:7d:8b:d2:ca:cd:29:61:02:16: fb:99:01:88:65:d7:70:11:53:fa:56:97:7d:e4:0e: 18:8a:d7:1b:67:b6:08:ff:0e:df:48:c1:2f:46:aa: 35:ee:c9:47:75:d8:84:53:c4:44:cf:d4:e1:e6:dd: b0:da:2f:85:54:c1:eb:f5:7a:dd:b2:e8:0c:21:14: 2c:48:3d:5f:4a:e6:53:ac:50:6c:df:9f:5a:49:b1: 1e:64:68:16:60:a3:1d:60:ee:ab:4c:9e:a2:48:d6: 78:a1:8f:a7:f5:f0:9d:43:4e:4a:6f:bc:c1:d4:54: 30:2d:d2:a2:0c:54:fc:26:ff:51:b5:d3:6a:82:df: 10:d3:25:34:57:6f:6b:eb:ca:2e:61:db:ae:89:cd: 01:1a:99:8b:4d:7b:71:69:3b:28:ac:0a:e7:f8:f6: 1f:31:96:7a:b0:bc:32:d0:9c:dd:cb:41:e5:1e:46: 91:1f:dc:39:a8:92:cd:11:f0:ba:8a:ee:ec:54:7f: f9:c7:1a:7e:16:ef:df:5e:20:82:89:3e:0a:e9:51: 32:2d:39:f4:6d:f6:94:52:0e:40:0d:7e:09:73:95: f3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D3:DE:C4:70:11:05:F1:D0:16:4E:BA:35:0A:7B:13:A3:99:35:EF X509v3 Authority Key Identifier: keyid:43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:be:e2:97:3d:10:27:7f:9e:d4:fb:38:64:af:9a:9f:14:67: 51:47:a0:aa:8e:f0:82:89:0e:31:88:b1:ef:fa:0f:da:dc:20: cd:c0:35:31:84:c6:e5:98:84:ba:25:05:c2:00:46:5c:90:16: 1d:75:8b:78:e1:5c:03:8a:d0:d6:c6:0b:40:c1:c7:f5:44:63: c3:2c:c5:35:1c:b5:5f:27:4a:9e:46:e7:6a:99:48:1f:d7:39: 38:79:8c:f6:90:61:f0:2d:38:28:87:96:e0:2d:69:ec:92:95: bf:0c:1c:84:21:fb:23:0f:19:4c:26:bc:e8:f8:90:d3:71:36: c4:8b:51:29:65:ba:f0:9d:6e:61:03:14:24:f4:26:60:85:89: 80:0f:f9:8c:bb:47:08:05:4c:f5:4a:d7:a1:31:85:bb:ee:c3: 99:80:48:34:1e:79:87:5a:87:14:01:f2:ba:a8:cb:a2:31:10: d0:b1:eb:d1:93:04:e3:76:6b:7d:f2:16:d0:9c:f5:25:ba:34: e5:cf:68:7a:2e:75:42:ac:74:4a:f0:93:54:23:7b:8a:3c:6b: 86:7d:32:c8:83:2b:ca:ae:38:42:72:0f:ac:92:06:4a:db:0f: f8:26:34:10:56:dd:88:d3:3b:29:ea:9f:35:17:4f:d0:9f:83: fb:e6:24:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7Le+ymZLcodFR+XDus7DIleH7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURB QTRDNTczOTAeFw0yNjA5MDMwMzQyMjdaFw0yNjA5MDQwNzExMjdaMDMxMTAvBgNV BAMTKDEyRDNERUM0NzAxMTA1RjFEMDE2NEVCQTM1MEE3QjEzQTM5OTM1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2cQAFX5x7R/N63VEGxuScs0Z FLVMTq4hGt9DJaF8NRx/LX2L0srNKWECFvuZAYhl13ARU/pWl33kDhiK1xtntgj/ Dt9IwS9GqjXuyUd12IRTxETP1OHm3bDaL4VUwev1et2y6AwhFCxIPV9K5lOsUGzf n1pJsR5kaBZgox1g7qtMnqJI1nihj6f18J1DTkpvvMHUVDAt0qIMVPwm/1G102qC 3xDTJTRXb2vryi5h266JzQEamYtNe3FpOyisCuf49h8xlnqwvDLQnN3LQeUeRpEf 3Dmoks0R8LqK7uxUf/nHGn4W799eIIKJPgrpUTItOfRt9pRSDkANfglzlfO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEtPexHARBfHQFk66NQp7E6OZNe8wHwYDVR0j BBgwFoAUQ7W/KTvbQGLp4X2Kf/nXrapMVzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhODg4OTctYzM4Ny00NzM1LWFjZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkz QkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURBQTRDNTczOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0I1QkYyOTNCREI0MDYyRTlFMTdEOEE3RkY5RDdBREFBNEM1 NzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3 QURBQTRDNTczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG+4pc9ECd/ntT7OGSvmp8UZ1FHoKqO8IKJ DjGIse/6D9rcIM3ANTGExuWYhLolBcIARlyQFh11i3jhXAOK0NbGC0DBx/VEY8Ms xTUctV8nSp5G52qZSB/XOTh5jPaQYfAtOCiHluAtaeySlb8MHIQh+yMPGUwmvOj4 kNNxNsSLUSlluvCdbmEDFCT0JmCFiYAP+Yy7RwgFTPVK16Exhbvuw5mASDQeeYda hxQB8rqoy6IxENCx69GTBON2a33yFtCc9SW6NOXPaHoudUKsdErwk1Qje4o8a4Z9 MsiDK8quOEJyD6ySBkrbD/gmNBBW3YjTOynqnzUXT9Cfg/vmJLw= -----END CERTIFICATE-----Generated at Thu Sep 3 17:46:21 2026 by rpki-client