$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft File: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft (raw, json) Hash identifier: CyJBY+cGB7CdQwuXdl0apBXcHPL+EgUYYf6xwBcctts= Subject key identifier: 92:BC:A3:0B:BC:27:AC:A4:11:08:B8:7C:49:23:87:33:AA:A9:7F:05 Authority key identifier: 43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC Certificate issuer: /CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Certificate serial: 5CE478209D3C60150F9DED53C0F3AAA3F77295B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 00:50:03 +0000 Manifest this update: Sat 24 Oct 2026 00:45:03 +0000 Manifest next update: Sun 25 Oct 2026 02:13:03 +0000 Files and hashes: 1: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl (hash: NMej7gIQ5LzPikqdmbaexBpL8LFcYep/aqokvJMoIFQ=) 2: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: zJ5Jgen43BSfgth1+Wx2KQ4rMgZaYS8tSCDudAuawmM=) 3: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: zK6cRL88GJh6m3ulXU/23rYWx1uCoF/U17/Vb4bnDxI=) 4: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: 8so5gt5H9uGwMpnvmuPmOphhipCyfITSegbgfqUMLB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 02:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e4:78:20:9d:3c:60:15:0f:9d:ed:53:c0:f3:aa:a3:f7:72:95:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Validity Not Before: Oct 24 00:45:03 2026 GMT Not After : Oct 25 02:13:03 2026 GMT Subject: CN=92BCA30BBC27ACA41108B87C49238733AAA97F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:3a:b3:45:9b:b5:22:9f:2e:94:bb:df:f0: 9e:50:c5:42:dd:55:17:81:4d:c9:34:1e:09:87:d4: 1e:b5:a6:b6:51:10:b3:a4:da:18:fa:17:0b:e0:18: 54:a0:16:ca:fc:6b:14:4e:e3:87:c7:52:56:7d:3b: 92:06:a9:90:5a:2f:43:37:e0:17:1e:a7:78:50:dd: 18:3f:5c:ae:80:4a:54:17:f2:77:0d:b2:99:84:90: 96:0e:81:ff:01:b4:5a:87:73:ea:45:ed:64:1e:fd: 96:28:55:36:2a:18:2a:c0:2a:70:7f:7b:90:1c:9c: 77:2c:73:27:f4:b5:00:28:36:ad:86:78:ec:bc:ec: 7f:28:ff:60:f5:b1:82:27:de:db:db:98:e8:aa:82: 86:37:b6:3d:c5:7e:ec:6d:74:dc:ee:e1:20:4a:de: 05:31:3c:90:48:31:5c:23:0f:c7:7b:9a:79:9d:86: 42:ad:8a:df:c6:c9:64:0c:7d:2a:b2:44:7c:af:05: 6b:74:e5:86:d2:ab:c7:d6:e3:82:ee:3d:1e:56:22: 0c:8e:33:cf:0c:fd:b4:71:42:42:75:2b:08:b0:e5: 71:e9:af:d4:07:48:d5:fc:f3:df:63:86:d6:c6:16: 57:4b:af:92:92:85:b4:cb:a3:92:72:ec:c1:07:8e: 37:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BC:A3:0B:BC:27:AC:A4:11:08:B8:7C:49:23:87:33:AA:A9:7F:05 X509v3 Authority Key Identifier: keyid:43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:69:61:9e:40:5b:d7:00:25:88:67:80:53:c9:a7:01:1d:58: 02:d3:f3:fb:46:ab:14:8e:1f:f4:1d:fa:d6:4f:ec:63:ed:10: cb:b7:30:d4:39:2a:4e:6e:15:30:ca:72:5e:c5:5c:95:09:96: f9:72:08:ad:0f:7b:5c:75:e6:9d:fc:4a:4c:c6:9b:68:2b:55: a5:ce:f6:27:bd:b7:ee:29:38:b5:17:2d:44:f9:3f:66:97:78: 61:48:55:86:8f:12:e3:5e:a7:15:22:43:a1:0b:ab:9d:e3:1d: 20:32:a7:e1:aa:41:50:29:47:d1:63:ee:df:9c:5d:94:04:82: 53:dc:2d:7e:f4:42:64:5f:0b:f1:a8:ba:ea:5f:a8:7d:ce:64: 5c:57:26:b0:c5:d3:98:f1:6c:2c:e4:38:f4:28:24:b9:f2:55: fb:65:c5:56:1c:cc:fd:f6:9b:40:00:d8:0f:47:1d:cc:5d:3d: aa:36:5d:f7:5e:05:c1:53:a3:8d:1a:f2:51:83:32:29:f5:59: dd:9d:41:fc:fb:6a:42:6e:62:c7:80:46:63:9c:27:99:27:60: d2:48:8d:23:11:d4:e2:43:00:0b:c6:f9:bb:e9:4f:5a:40:f8: ac:eb:a1:14:d4:8c:39:81:3f:ab:47:6e:f3:3c:e1:16:b0:49: b4:d8:1a:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOR4IJ08YBUPne1TwPOqo/dylbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQz NzQyQjNCQzAeFw0yNjEwMjQwMDQ1MDNaFw0yNjEwMjUwMjEzMDNaMDMxMTAvBgNV BAMTKDkyQkNBMzBCQkMyN0FDQTQxMTA4Qjg3QzQ5MjM4NzMzQUFBOTdGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRtDqzRZu1Ip8ulLvf8J5QxULd VReBTck0HgmH1B61prZRELOk2hj6FwvgGFSgFsr8axRO44fHUlZ9O5IGqZBaL0M3 4Bcep3hQ3Rg/XK6ASlQX8ncNspmEkJYOgf8BtFqHc+pF7WQe/ZYoVTYqGCrAKnB/ e5AcnHcscyf0tQAoNq2GeOy87H8o/2D1sYIn3tvbmOiqgoY3tj3FfuxtdNzu4SBK 3gUxPJBIMVwjD8d7mnmdhkKtit/GyWQMfSqyRHyvBWt05YbSq8fW44LuPR5WIgyO M88M/bRxQkJ1Kwiw5XHpr9QHSNX8899jhtbGFldLr5KShbTLo5Jy7MEHjjd5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkryjC7wnrKQRCLh8SSOHM6qpfwUwHwYDVR0j BBgwFoAUQ/iW7rcPL5eIP/RZyuOstDdCs7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MzM5MzQtMzg0NC00NjUzLThmYWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVC NzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQzNzQyQjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0Y4OTZFRUI3MEYyRjk3ODgzRkY0NTlDQUUzQUNCNDM3NDJC M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FD QjQzNzQyQjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5pYZ5AW9cAJYhngFPJpwEdWALT8/tGqxSO H/Qd+tZP7GPtEMu3MNQ5Kk5uFTDKcl7FXJUJlvlyCK0Pe1x15p38SkzGm2grVaXO 9ie9t+4pOLUXLUT5P2aXeGFIVYaPEuNepxUiQ6ELq53jHSAyp+GqQVApR9Fj7t+c XZQEglPcLX70QmRfC/GouupfqH3OZFxXJrDF05jxbCzkOPQoJLnyVftlxVYczP32 m0AA2A9HHcxdPao2XfdeBcFTo40a8lGDMin1Wd2dQfz7akJuYseARmOcJ5knYNJI jSMR1OJDAAvG+bvpT1pA+KzroRTUjDmBP6tHbvM84RawSbTYGlo= -----END CERTIFICATE-----Generated at Sat Oct 24 14:33:11 2026 by rpki-client