$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft File: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft (raw, json) Hash identifier: n8auCQIuxNLMvpEYqgn128bByEh8ohEIoRrskh3aqO0= Subject key identifier: A7:3B:91:96:05:00:53:29:62:4B:82:B6:2C:92:93:C9:74:61:EF:16 Authority key identifier: 43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 Certificate issuer: /CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Certificate serial: 1D59DBB8002B2576A8E51B7350C3F509CA99C516 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft Manifest number: E6 Signing time: Fri 23 Oct 2026 18:42:25 +0000 Manifest this update: Fri 23 Oct 2026 18:37:25 +0000 Manifest next update: Sat 24 Oct 2026 21:11:25 +0000 Files and hashes: 1: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl (hash: 90rC+HxaH4RahLfRi4fPoFhFIKB5xuqQZlEqgNZX0dU=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: kfj+LC1/46I9BKuoHuEKXzZ9F4a4GvOD3Kj38WDtLhU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 21:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:59:db:b8:00:2b:25:76:a8:e5:1b:73:50:c3:f5:09:ca:99:c5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Validity Not Before: Oct 23 18:37:25 2026 GMT Not After : Oct 24 21:11:25 2026 GMT Subject: CN=A73B919605005329624B82B62C9293C97461EF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:a4:97:45:3d:0a:24:9a:96:46:52:0d:88: 07:90:54:b2:3a:54:3d:03:4c:bd:8f:e9:2c:23:12: ca:70:55:11:ed:e3:11:db:11:36:49:20:5a:4d:3b: bd:47:77:01:84:b2:b3:5f:ef:b4:9e:50:6c:29:fa: 43:71:0b:bd:5a:b0:00:c3:6b:c9:7d:0f:2d:6c:79: 4c:3f:43:17:48:2b:de:fc:a8:6e:1b:5d:25:27:9d: 4a:4c:62:e3:f9:9f:b6:ab:71:a5:0c:e8:d5:61:1e: 8e:f4:47:7b:0c:33:dc:ef:58:ed:f1:5b:f5:83:fb: 31:8d:5e:ec:0b:63:48:3c:32:fb:42:7a:be:e3:30: 08:6e:69:22:d0:95:ff:bb:62:c1:9d:c7:f3:17:c1: fe:13:37:ef:30:4d:c1:71:7c:d4:88:ca:81:3b:7d: 58:c3:74:88:41:40:e8:4a:da:ec:ad:67:aa:1c:8f: 3c:6c:f9:fa:9e:29:df:c7:cb:36:ba:c5:3a:36:12: ec:b8:07:84:45:26:82:d3:10:82:c0:e0:03:0c:3e: c1:37:62:ec:74:f0:73:53:56:fe:18:4f:8c:f4:c8: da:47:ac:f0:ff:de:a5:53:54:8e:d9:39:a7:82:6e: 7a:8c:31:d5:ca:9d:01:17:a9:04:45:f5:8a:83:d4: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3B:91:96:05:00:53:29:62:4B:82:B6:2C:92:93:C9:74:61:EF:16 X509v3 Authority Key Identifier: keyid:43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b8:31:f7:e8:06:85:98:d8:ee:95:2c:b9:6f:1f:81:fc:b4: de:04:e9:e0:ff:9b:13:3e:42:74:fb:bb:4b:ef:f7:39:11:ea: 56:ad:63:de:e9:c8:8d:3e:c8:bc:08:74:e8:1d:98:d0:fc:62: 31:29:98:a1:a8:74:18:d1:33:43:46:47:95:8e:de:c0:0a:6e: 84:de:38:81:27:7e:1e:71:fd:1a:21:b4:64:6c:3a:c5:04:ad: db:53:13:c5:8d:e3:06:af:32:96:35:3e:aa:d1:56:8d:e3:15: 5c:d2:af:ce:c4:fe:8d:9c:d6:5d:71:7c:d0:8f:b2:30:c9:ad: df:a2:3e:92:1d:d8:34:36:a5:a3:1b:0b:67:07:e3:d7:60:ff: 31:c1:78:92:68:08:f3:44:ac:f8:12:34:23:0a:34:d2:2b:c4: 5c:21:c2:d7:af:4f:ba:a3:0f:47:67:02:e1:8e:6e:a0:e9:b8: 82:db:0b:d9:23:44:d2:a5:5d:95:3f:99:31:51:7f:8f:f4:ba: 76:ac:76:bc:8b:de:19:0a:34:0a:96:9c:07:e0:c1:c8:01:36: cb:12:e9:55:3f:58:c5:bf:52:38:35:89:f9:08:8a:08:cc:42: dd:23:53:c0:86:de:5a:b3:78:f3:91:05:7b:0c:47:0a:8e:19: c8:33:ba:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVnbuAArJXao5RtzUMP1CcqZxRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURB QTRDNTczOTAeFw0yNjEwMjMxODM3MjVaFw0yNjEwMjQyMTExMjVaMDMxMTAvBgNV BAMTKEE3M0I5MTk2MDUwMDUzMjk2MjRCODJCNjJDOTI5M0M5NzQ2MUVGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PaSXRT0KJJqWRlINiAeQVLI6 VD0DTL2P6SwjEspwVRHt4xHbETZJIFpNO71HdwGEsrNf77SeUGwp+kNxC71asADD a8l9Dy1seUw/QxdIK978qG4bXSUnnUpMYuP5n7arcaUM6NVhHo70R3sMM9zvWO3x W/WD+zGNXuwLY0g8MvtCer7jMAhuaSLQlf+7YsGdx/MXwf4TN+8wTcFxfNSIyoE7 fVjDdIhBQOhK2uytZ6ocjzxs+fqeKd/Hyza6xTo2Euy4B4RFJoLTEILA4AMMPsE3 Yux08HNTVv4YT4z0yNpHrPD/3qVTVI7ZOaeCbnqMMdXKnQEXqQRF9YqD1HTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpzuRlgUAUyliS4K2LJKTyXRh7xYwHwYDVR0j BBgwFoAUQ7W/KTvbQGLp4X2Kf/nXrapMVzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhODg4OTctYzM4Ny00NzM1LWFjZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkz QkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURBQTRDNTczOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0I1QkYyOTNCREI0MDYyRTlFMTdEOEE3RkY5RDdBREFBNEM1 NzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3 QURBQTRDNTczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABK4MffoBoWY2O6VLLlvH4H8tN4E6eD/mxM+ QnT7u0vv9zkR6latY97pyI0+yLwIdOgdmND8YjEpmKGodBjRM0NGR5WO3sAKboTe OIEnfh5x/RohtGRsOsUErdtTE8WN4wavMpY1PqrRVo3jFVzSr87E/o2c1l1xfNCP sjDJrd+iPpId2DQ2paMbC2cH49dg/zHBeJJoCPNErPgSNCMKNNIrxFwhwtevT7qj D0dnAuGObqDpuILbC9kjRNKlXZU/mTFRf4/0unasdryL3hkKNAqWnAfgwcgBNssS 6VU/WMW/Ujg1ifkIigjMQt0jU8CG3lqzePORBXsMRwqOGcgzutA= -----END CERTIFICATE-----Generated at Sat Oct 24 07:08:12 2026 by rpki-client