$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft File: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft (raw, json) Hash identifier: /eER+jvhRJylSNVBbMaBTm4akx21g5N1KW78FN71GFY= Subject key identifier: 52:69:98:AC:E5:F7:E8:65:73:EA:73:2F:72:B6:8B:DB:DF:52:CE:C3 Authority key identifier: 43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC Certificate issuer: /CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Certificate serial: 53E852E1628A0198A46E077B6787972E5675BC3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 03:11:47 +0000 Manifest this update: Thu 03 Sep 2026 03:06:47 +0000 Manifest next update: Fri 04 Sep 2026 05:06:47 +0000 Files and hashes: 1: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl (hash: zEfvkPx7t4tBf2Jycs9881h9IVmrvywtjyYCbgxe1oE=) 2: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: zJ5Jgen43BSfgth1+Wx2KQ4rMgZaYS8tSCDudAuawmM=) 3: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: 8so5gt5H9uGwMpnvmuPmOphhipCyfITSegbgfqUMLB8=) 4: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: zK6cRL88GJh6m3ulXU/23rYWx1uCoF/U17/Vb4bnDxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e8:52:e1:62:8a:01:98:a4:6e:07:7b:67:87:97:2e:56:75:bc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Validity Not Before: Sep 3 03:06:47 2026 GMT Not After : Sep 4 05:06:47 2026 GMT Subject: CN=526998ACE5F7E86573EA732F72B68BDBDF52CEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:99:98:24:cd:fa:08:5f:9d:2a:fd:3c:65: 68:7b:e2:a5:1f:75:c7:cf:57:c7:78:32:fc:47:d3: ea:7f:6e:e5:31:65:ea:44:9c:6a:23:ca:f1:5a:35: c6:7a:86:ac:8b:85:8d:c1:4a:27:20:d4:f4:ce:e6: fd:63:5d:62:2e:85:c5:d4:44:be:e2:5c:6d:14:6f: b8:32:d9:a3:d9:48:2d:ee:82:ae:b7:8c:a7:c9:34: 57:5f:bb:c8:ef:22:6a:30:d7:6a:df:7d:b5:1c:b8: 85:d1:c7:8c:c4:f2:7a:ad:80:c6:45:b8:5e:54:bd: dc:72:4a:79:b7:78:3d:50:59:e8:ec:db:27:47:4e: 14:d8:47:64:f4:15:b8:fe:8e:37:47:14:a0:c1:fb: 57:c3:3e:25:de:f4:8f:36:aa:32:ab:9a:c8:85:f2: a9:d7:19:36:36:c2:04:56:b0:93:3d:b3:d5:1c:6b: d9:22:f3:a5:d4:a1:80:fa:7b:40:eb:9b:21:94:7f: fe:50:9f:61:f2:6c:f7:ba:a1:da:ff:01:51:e2:c9: 03:4d:84:01:9d:c9:88:84:fa:eb:3e:90:9c:98:88: 55:d1:b5:63:46:12:09:84:5a:3f:9d:9a:49:35:2e: 83:dc:63:40:fe:69:3e:e6:24:85:5f:5b:00:66:84: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:69:98:AC:E5:F7:E8:65:73:EA:73:2F:72:B6:8B:DB:DF:52:CE:C3 X509v3 Authority Key Identifier: keyid:43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5d:02:6f:6c:43:02:71:88:a6:48:5e:52:4a:69:fa:bd:d4: 92:3f:ee:be:b0:7b:c2:93:4c:65:77:fb:df:eb:4b:29:71:c4: d7:a7:51:47:92:7f:f2:fc:2d:95:33:90:67:f9:3f:f8:7a:ff: 7e:38:1d:00:31:2a:70:6e:73:ed:80:a3:64:14:93:32:e2:cd: 27:a6:75:1d:5e:bc:8e:40:b8:b1:2d:8a:f5:5a:c8:30:5e:b7: 9e:3c:ba:22:63:98:51:fe:70:33:bd:2c:62:f5:e2:d9:2c:f1: fc:d5:3d:13:7c:ec:f5:a0:cd:ea:f6:d0:b5:00:7a:d2:97:54: 60:36:f8:81:6e:1d:fb:31:cd:1c:a4:68:4e:78:c5:57:30:5a: 5a:73:97:88:3c:2e:ae:20:61:10:ef:3f:4c:14:f2:6d:d0:bd: aa:43:64:ab:ce:4e:30:53:8b:72:dd:a1:e8:4e:10:14:e5:63: 8f:40:b0:0f:bc:99:c3:b6:39:90:dd:9c:eb:b9:58:05:c7:25: 05:7b:bd:d7:fc:65:3a:e7:0f:b0:4d:c3:ab:70:2b:75:d7:66: 78:c9:a6:5b:e3:ad:43:aa:36:ab:0f:22:50:b9:44:24:26:ee: fc:26:30:a3:10:ee:60:b1:36:c8:18:ea:26:cc:5a:b0:4f:bf: e1:64:6d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+hS4WKKAZikbgd7Z4eXLlZ1vDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQz NzQyQjNCQzAeFw0yNjA5MDMwMzA2NDdaFw0yNjA5MDQwNTA2NDdaMDMxMTAvBgNV BAMTKDUyNjk5OEFDRTVGN0U4NjU3M0VBNzMyRjcyQjY4QkRCREY1MkNFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDJmYJM36CF+dKv08ZWh74qUf dcfPV8d4MvxH0+p/buUxZepEnGojyvFaNcZ6hqyLhY3BSicg1PTO5v1jXWIuhcXU RL7iXG0Ub7gy2aPZSC3ugq63jKfJNFdfu8jvImow12rffbUcuIXRx4zE8nqtgMZF uF5UvdxySnm3eD1QWejs2ydHThTYR2T0Fbj+jjdHFKDB+1fDPiXe9I82qjKrmsiF 8qnXGTY2wgRWsJM9s9Uca9ki86XUoYD6e0DrmyGUf/5Qn2HybPe6odr/AVHiyQNN hAGdyYiE+us+kJyYiFXRtWNGEgmEWj+dmkk1LoPcY0D+aT7mJIVfWwBmhLeBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUmmYrOX36GVz6nMvcraL299SzsMwHwYDVR0j BBgwFoAUQ/iW7rcPL5eIP/RZyuOstDdCs7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MzM5MzQtMzg0NC00NjUzLThmYWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVC NzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQzNzQyQjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0Y4OTZFRUI3MEYyRjk3ODgzRkY0NTlDQUUzQUNCNDM3NDJC M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FD QjQzNzQyQjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxdAm9sQwJxiKZIXlJKafq91JI/7r6we8KT TGV3+9/rSylxxNenUUeSf/L8LZUzkGf5P/h6/344HQAxKnBuc+2Ao2QUkzLizSem dR1evI5AuLEtivVayDBet548uiJjmFH+cDO9LGL14tks8fzVPRN87PWgzer20LUA etKXVGA2+IFuHfsxzRykaE54xVcwWlpzl4g8Lq4gYRDvP0wU8m3QvapDZKvOTjBT i3LdoehOEBTlY49AsA+8mcO2OZDdnOu5WAXHJQV7vdf8ZTrnD7BNw6twK3XXZnjJ plvjrUOqNqsPIlC5RCQm7vwmMKMQ7mCxNsgY6ibMWrBPv+FkbU8= -----END CERTIFICATE-----Generated at Thu Sep 3 09:27:58 2026 by rpki-client