
$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft
File: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft (raw, json)
Hash identifier: Xn5q1oEIwrvuS7t0Ou/EW/8ypPTljhAOED5cPx5k9Ok=
Subject key identifier: F4:FB:F7:95:A5:F3:CD:5A:28:2A:FB:FD:9F:9C:EE:F4:E9:40:53:B0
Authority key identifier: 43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39
Certificate issuer: /CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739
Certificate serial: 547FCCE28B84EBF4C644834C37A4DABD83F17C33
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 06:12:17 +0000
Manifest this update: Sat 20 Jun 2026 06:07:17 +0000
Manifest next update: Sun 21 Jun 2026 09:40:17 +0000
Files and hashes: 1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: kfj+LC1/46I9BKuoHuEKXzZ9F4a4GvOD3Kj38WDtLhU=)
2: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl (hash: pxN0918xw/fENMOpD39yHOyAqG16Rk7l4BnIFHkGQAc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl
rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 07:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7f:cc:e2:8b:84:eb:f4:c6:44:83:4c:37:a4:da:bd:83:f1:7c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739
Validity
Not Before: Jun 20 06:07:17 2026 GMT
Not After : Jun 21 09:40:17 2026 GMT
Subject: CN=F4FBF795A5F3CD5A282AFBFD9F9CEEF4E94053B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d3:dd:b3:af:94:a4:ba:67:50:c5:8d:d3:72:
d9:46:57:26:c4:1f:c0:f7:66:7c:40:a4:92:45:03:
ee:c5:ca:db:cd:46:e8:03:31:42:28:75:c7:0c:70:
e2:5d:da:91:dd:4e:26:cb:cd:27:30:6d:df:1b:76:
c7:20:e3:6d:da:69:57:69:a1:67:39:08:75:54:95:
27:f4:57:9c:8f:7d:b3:83:f2:9c:43:b8:d7:76:86:
0e:17:96:29:51:ed:89:65:9a:e1:0c:14:da:2a:78:
3e:07:47:8d:c5:53:19:a0:60:ec:cc:78:c5:9c:f4:
0d:61:d2:60:d5:ce:4f:3f:f1:89:e7:ff:f4:92:6e:
38:ec:82:72:b7:3d:23:ae:99:2a:41:ed:db:fc:82:
6f:26:e5:f7:72:88:6c:41:14:ee:f9:cf:e1:61:a5:
83:c7:c4:5b:5c:fc:dd:98:bf:c9:1f:a2:b6:27:81:
dd:e7:a6:7b:20:6b:41:82:3f:56:68:a8:a0:ea:8d:
5f:c2:dd:92:55:12:b8:b0:68:18:15:11:20:a8:35:
82:4d:78:ba:2a:4c:1a:6d:ad:cd:df:a3:65:e2:9e:
f4:6c:8e:b4:2e:74:38:3c:70:47:90:89:0a:38:71:
13:eb:17:ac:a6:22:98:11:fa:b5:60:d5:ef:f7:38:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FB:F7:95:A5:F3:CD:5A:28:2A:FB:FD:9F:9C:EE:F4:E9:40:53:B0
X509v3 Authority Key Identifier:
keyid:43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1c:a3:79:4d:09:ed:04:4b:20:dc:68:98:b2:60:05:f4:7f:
91:02:eb:08:38:b4:a2:86:90:56:cc:62:bf:2b:01:3a:39:5b:
6a:9e:3e:0b:2e:aa:ce:66:2f:cd:cf:17:09:97:5d:2d:bb:3f:
1f:75:e6:83:7e:6d:16:04:bd:68:d8:94:08:04:79:8e:12:64:
95:40:2f:47:7c:08:2e:b1:45:0f:31:20:5d:25:fa:10:4f:da:
38:59:20:29:03:df:a6:5c:a0:e5:b7:98:4d:50:2d:1f:13:0d:
d6:32:b8:21:c8:36:66:71:2b:3f:b3:0f:a7:35:fe:ee:f9:4f:
7a:3b:a2:95:de:02:a0:db:08:ea:1b:8d:f6:e1:3b:4a:d7:64:
f2:4d:9d:7e:a8:0a:70:c6:46:83:0f:84:b1:c3:43:07:53:a5:
be:f2:74:3c:1c:0c:81:32:11:a7:89:75:bc:8a:4b:06:00:8a:
1f:f2:b6:e6:52:29:b2:78:2e:13:a0:1d:a2:f1:0d:69:ea:f9:
c8:01:b1:cb:54:05:c3:d5:df:48:f8:dc:a0:64:66:fd:6b:81:
26:b5:de:6b:fa:a2:70:84:95:9f:0b:c7:59:a3:c1:25:d9:e5:
f6:48:62:7d:f9:a5:f8:10:b4:d6:b1:0d:a8:2d:e5:18:a8:5d:
47:e1:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:21:12 2026 by rpki-client