$ rpki-client -vvvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft File: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft (raw, json) Hash identifier: ShXkhcWyGSGvCBbuJFE4hEJDX/0NCKrTn+znM82+tl4= Subject key identifier: 5A:6C:A1:B8:90:88:D0:25:96:50:9F:4F:18:59:B6:51:B3:7B:BB:D0 Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Certificate serial: 31B8BA83846E695FA8EA6BB1EE1F78106B5BE7EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft Manifest number: EA Signing time: Sat 24 Oct 2026 14:22:05 +0000 Manifest this update: Sat 24 Oct 2026 14:17:05 +0000 Manifest next update: Sun 25 Oct 2026 15:57:05 +0000 Files and hashes: 1: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: 6T6qe96D7zQgyFzklJ6iaQcLNZnBxADfp/QBK9mZ1I4=) 2: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: q99UPT0teezCe/Wtc8EBt8wiQOUmurJEflzD8Gd4ong=) 3: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=) 4: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl (hash: 5WA4bULA4BHjzas3SC5NZb7vGGVFnsVI/am6BJGSj68=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b8:ba:83:84:6e:69:5f:a8:ea:6b:b1:ee:1f:78:10:6b:5b:e7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Validity Not Before: Oct 24 14:17:05 2026 GMT Not After : Oct 25 15:57:05 2026 GMT Subject: CN=5A6CA1B89088D02596509F4F1859B651B37BBBD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:d1:46:04:ae:d0:49:77:99:3e:87:08:c7: e8:fc:f7:54:45:02:8b:59:6e:34:68:4a:f4:4f:ff: cf:ca:5b:d7:dd:e3:81:61:0c:5d:65:a0:f9:f1:68: e2:cd:67:66:fd:55:89:94:67:42:0a:c0:ef:15:71: b9:05:c0:a4:47:db:18:b6:d7:f6:16:78:98:46:5f: fd:7c:c3:c1:6d:5f:ab:72:51:85:02:a3:d1:4a:e0: fe:32:72:0c:1d:6c:db:67:a6:44:6f:79:db:e2:d2: 1c:41:e6:19:cc:4c:60:ce:77:d1:ef:23:eb:01:c2: 40:32:c7:6a:85:2c:37:f9:86:49:27:7f:48:84:fe: 0e:92:25:bd:c6:ad:eb:d5:18:59:82:61:86:39:2e: e6:8a:d4:fe:5e:d0:78:1a:1d:b0:7b:e9:c1:2e:c8: 90:58:94:ac:ff:b9:b7:1b:05:5f:02:19:34:a5:e5: 62:69:b7:b9:7e:9b:d9:a0:1f:96:50:a4:83:b9:50: 3f:c9:1b:8f:45:e4:d0:7a:fb:5f:a6:ce:0a:6e:f3: ed:af:cc:ad:1c:f5:73:92:6f:c5:6a:1f:76:b9:cc: b6:11:ff:02:ed:eb:d7:09:03:52:5a:db:b9:8e:8f: e9:13:50:65:d8:f6:19:26:ec:af:45:49:af:b8:fc: 77:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:A1:B8:90:88:D0:25:96:50:9F:4F:18:59:B6:51:B3:7B:BB:D0 X509v3 Authority Key Identifier: keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:00:92:3c:50:fa:e6:fd:1e:61:c3:8c:53:4f:8a:30:d8:f4: f9:b7:24:34:46:38:c7:91:22:48:f3:f3:da:66:29:82:04:00: 16:a5:ea:dd:d6:5f:1d:2e:10:01:64:b7:91:74:02:54:c2:d6: 76:fd:66:2a:80:23:dc:99:70:d9:73:75:1c:47:d3:65:16:dd: 28:ad:00:0c:b3:d7:eb:5f:6a:aa:45:47:f6:5d:5c:81:25:20: 45:aa:c3:5d:fb:48:27:71:9f:3d:f3:32:e5:57:6a:af:f8:61: 98:2b:ef:10:8d:5e:15:bf:b7:9e:0a:9c:2e:d8:26:09:47:e8: a0:81:e3:f7:13:1d:0a:d5:8c:e3:ee:0d:44:89:92:ca:4a:01: 86:be:67:3a:37:88:ba:27:40:0b:eb:91:96:69:5c:b1:eb:3c: f1:f0:1d:6e:11:23:57:94:22:80:cb:7d:55:d4:08:58:51:88: 68:f2:aa:57:85:52:d8:a4:5d:0a:1b:2e:ea:29:2f:5e:b7:e2: f3:5d:e0:12:1a:b9:48:a4:ff:37:84:21:05:76:b8:2d:18:0a: 0c:7b:8f:6e:a4:28:53:b7:47:a1:a2:77:ee:00:32:39:83:92: d9:16:fb:98:af:ed:fe:72:28:89:dc:f7:ee:66:7a:83:05:2f: 0d:8f:dd:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbi6g4RuaV+o6mux7h94EGtb5+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2 OUY0ODI5RTAeFw0yNjEwMjQxNDE3MDVaFw0yNjEwMjUxNTU3MDVaMDMxMTAvBgNV BAMTKDVBNkNBMUI4OTA4OEQwMjU5NjUwOUY0RjE4NTlCNjUxQjM3QkJCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfNFGBK7QSXeZPocIx+j891RF AotZbjRoSvRP/8/KW9fd44FhDF1loPnxaOLNZ2b9VYmUZ0IKwO8VcbkFwKRH2xi2 1/YWeJhGX/18w8FtX6tyUYUCo9FK4P4ycgwdbNtnpkRvedvi0hxB5hnMTGDOd9Hv I+sBwkAyx2qFLDf5hkknf0iE/g6SJb3GrevVGFmCYYY5LuaK1P5e0HgaHbB76cEu yJBYlKz/ubcbBV8CGTSl5WJpt7l+m9mgH5ZQpIO5UD/JG49F5NB6+1+mzgpu8+2v zK0c9XOSb8VqH3a5zLYR/wLt69cJA1Ja27mOj+kTUGXY9hkm7K9FSa+4/HfRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWmyhuJCI0CWWUJ9PGFm2UbN7u9AwHwYDVR0j BBgwFoAUQ+ejCll7sylzyythedmtiWn0gp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM4ZDU4MGItNDUyZS00MmQ3LWIwNDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1 OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2OUY0ODI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0U3QTMwQTU5N0JCMzI5NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4 MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFE ODk2OUY0ODI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcAkjxQ+ub9HmHDjFNPijDY9Pm3JDRGOMeR Ikjz89pmKYIEABal6t3WXx0uEAFkt5F0AlTC1nb9ZiqAI9yZcNlzdRxH02UW3Sit AAyz1+tfaqpFR/ZdXIElIEWqw137SCdxnz3zMuVXaq/4YZgr7xCNXhW/t54KnC7Y JglH6KCB4/cTHQrVjOPuDUSJkspKAYa+Zzo3iLonQAvrkZZpXLHrPPHwHW4RI1eU IoDLfVXUCFhRiGjyqleFUtikXQobLuopL1634vNd4BIauUik/zeEIQV2uC0YCgx7 j26kKFO3R6Gid+4AMjmDktkW+5iv7f5yKInc9+5meoMFLw2P3cI= -----END CERTIFICATE-----Generated at Sun Oct 25 09:16:21 2026 by rpki-client