$ rpki-client -vvf rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft File: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft (raw, json) Hash identifier: RZf1AGS4qZ0gAUesV9ezlLIuY8O+n/cNiiFOyoUn5oA= Subject key identifier: 42:53:D2:33:9D:C3:9B:FC:27:65:DE:3B:2A:D2:AE:72:6D:B5:0D:9E Authority key identifier: 43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 Certificate issuer: /CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Certificate serial: 6D1D9D4BB872758F9CAC79C8C40CA28122612194 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft Manifest number: 14 Signing time: Sat 16 May 2026 08:09:11 +0000 Manifest this update: Sat 16 May 2026 08:04:11 +0000 Manifest next update: Sun 17 May 2026 08:19:11 +0000 Files and hashes: 1: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: j4dDYSTdl5zyq2E6gFmPn2O8HAKj+mVFK8qjYvnr4Tk=) 2: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: lOYan/tTMeCFnrAywnM0SljREMtkE1qDoXn8AuN63bo=) 3: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: UF6agt0uAGTYKvSykXC4qalAzD3vwK1cnzV5myQ1GUY=) 4: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl (hash: I4MMGVaG+0ULSCBhVC9b4i1e7Tvq43gso2TZ73l3z10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 08:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:1d:9d:4b:b8:72:75:8f:9c:ac:79:c8:c4:0c:a2:81:22:61:21:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Validity Not Before: May 16 08:04:11 2026 GMT Not After : May 17 08:19:11 2026 GMT Subject: CN=4253D2339DC39BFC2765DE3B2AD2AE726DB50D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:d0:f6:40:a1:8e:5f:93:a2:d9:3e:f0:d5: 44:e5:a8:16:86:07:e9:4c:00:03:e5:10:83:d2:e4: 32:41:18:d5:7c:4d:24:c2:65:b9:c7:91:cc:fa:64: 25:16:b0:7d:74:bc:7e:5e:5a:e1:7d:21:c2:cd:68: f1:4c:81:bc:c4:8a:e7:cb:fe:33:bd:e0:68:c1:18: ab:f2:35:d7:99:01:28:10:0b:40:7f:d5:87:52:dc: d4:47:73:18:06:78:76:81:26:84:47:01:99:8a:d5: 94:c9:f9:be:4c:2f:52:11:9e:24:08:85:33:68:7d: 7e:03:31:62:f8:f3:3b:6c:af:55:0d:25:17:9c:c3: 7c:24:9a:5f:08:ba:fe:36:a8:f6:68:18:27:ae:3a: d8:e9:f0:cb:6c:08:1f:98:d2:c9:15:c7:92:41:c1: 44:a7:56:5f:6b:ca:78:b4:5f:c3:1e:37:15:03:93: 37:70:bc:9e:a7:53:bc:da:d1:59:91:50:fe:c1:e6: a7:ca:3a:ed:52:16:44:9d:3a:ee:e5:19:90:31:4b: 20:d5:7a:dd:09:32:55:55:73:b2:40:be:97:e9:05: fe:7f:8c:9e:73:e9:f8:60:00:38:cd:7b:66:06:be: 3b:16:d5:c8:75:dd:4e:2e:c6:c9:ed:61:d9:24:d6: 8a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:D2:33:9D:C3:9B:FC:27:65:DE:3B:2A:D2:AE:72:6D:B5:0D:9E X509v3 Authority Key Identifier: keyid:43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:dd:73:2a:11:bf:2a:d3:26:5c:a2:20:70:58:0d:80:f0:da: da:82:92:68:63:e4:b5:a3:fa:ab:36:04:f6:d5:42:0d:06:6a: 6f:a6:49:01:c5:78:cd:2d:eb:08:7e:37:b2:ca:e3:5a:90:87: 81:eb:6f:aa:f2:15:8d:78:ec:4d:17:21:f3:8b:27:29:85:77: 32:1e:ed:9a:6a:e0:3c:c2:0b:b8:82:c7:8c:dc:71:4e:e1:7a: 2e:05:2c:3c:15:21:2e:8f:ad:8d:72:90:95:f3:af:67:79:ab: c1:02:cf:fc:83:34:63:d2:05:fa:b2:2a:d9:3d:1b:85:b0:b8: ef:df:fa:03:60:5c:85:6b:42:00:2c:d5:77:be:5c:c8:f2:ea: 9a:2f:f6:c1:23:d6:38:2d:1a:2e:f6:2a:cb:11:41:1c:5c:aa: 69:f2:3f:e1:0d:73:f8:c0:02:2d:61:94:78:82:5d:4b:46:b0: 5d:44:a8:fb:f4:89:f1:49:2f:33:8a:a1:4a:da:bd:00:bb:0b: 7f:61:38:f0:43:54:00:dd:b5:00:1d:52:4e:2c:6d:88:0c:7e: 71:60:04:27:82:7f:01:d7:a8:c1:e1:e2:a7:d6:d0:8b:3a:78: 56:7c:9f:ef:d3:7c:4f:0e:ce:77:19:52:ab:05:96:c6:91:f2: 60:7e:c2:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbR2dS7hydY+crHnIxAyigSJhIZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1 NTJGNjcwMjAeFw0yNjA1MTYwODA0MTFaFw0yNjA1MTcwODE5MTFaMDMxMTAvBgNV BAMTKDQyNTNEMjMzOURDMzlCRkMyNzY1REUzQjJBRDJBRTcyNkRCNTBEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8tD2QKGOX5Oi2T7w1UTlqBaG B+lMAAPlEIPS5DJBGNV8TSTCZbnHkcz6ZCUWsH10vH5eWuF9IcLNaPFMgbzEiufL /jO94GjBGKvyNdeZASgQC0B/1YdS3NRHcxgGeHaBJoRHAZmK1ZTJ+b5ML1IRniQI hTNofX4DMWL48ztsr1UNJRecw3wkml8Iuv42qPZoGCeuOtjp8MtsCB+Y0skVx5JB wUSnVl9ryni0X8MeNxUDkzdwvJ6nU7za0VmRUP7B5qfKOu1SFkSdOu7lGZAxSyDV et0JMlVVc7JAvpfpBf5/jJ5z6fhgADjNe2YGvjsW1ch13U4uxsntYdkk1or9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQlPSM53Dm/wnZd47KtKucm21DZ4wHwYDVR0j BBgwFoAUQ9CUPQrUn9NNeaf0Ntn3r1UvZwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjczNTA3ZjMtZjhjMC00MTBiLWIxOWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0Qw QUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1NTJGNjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1MkY2 NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3 QUY1NTJGNjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPdcyoRvyrTJlyiIHBYDYDw2tqCkmhj5LWj +qs2BPbVQg0Gam+mSQHFeM0t6wh+N7LK41qQh4Hrb6ryFY147E0XIfOLJymFdzIe 7Zpq4DzCC7iCx4zccU7hei4FLDwVIS6PrY1ykJXzr2d5q8ECz/yDNGPSBfqyKtk9 G4WwuO/f+gNgXIVrQgAs1Xe+XMjy6pov9sEj1jgtGi72KssRQRxcqmnyP+ENc/jA Ai1hlHiCXUtGsF1EqPv0ifFJLzOKoUravQC7C39hOPBDVADdtQAdUk4sbYgMfnFg BCeCfwHXqMHh4qfW0Is6eFZ8n+/TfE8OzncZUqsFlsaR8mB+wic= -----END CERTIFICATE-----Generated at Sun May 17 00:03:53 2026 by rpki-client