$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft File: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft (raw, json) Hash identifier: c2MNDUmGcv88je3ourm9/dRe6lPvz4IEZ+AcezApLtg= Subject key identifier: 74:7E:F7:EF:36:CC:E9:88:41:33:A6:41:1A:95:D4:B3:21:B2:68:21 Authority key identifier: 43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 Certificate issuer: /CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Certificate serial: 1388E90729ACEC70554066145A6028603FB010 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft Manifest number: 9F Signing time: Fri 28 Aug 2026 00:20:33 +0000 Manifest this update: Fri 28 Aug 2026 00:15:33 +0000 Manifest next update: Sat 29 Aug 2026 03:26:33 +0000 Files and hashes: 1: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: lOYan/tTMeCFnrAywnM0SljREMtkE1qDoXn8AuN63bo=) 2: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl (hash: oysZnDHwoEc7OsIyGgUreNg2s1Kr+Idp7dB5zL/zGPM=) 3: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: UF6agt0uAGTYKvSykXC4qalAzD3vwK1cnzV5myQ1GUY=) 4: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: j4dDYSTdl5zyq2E6gFmPn2O8HAKj+mVFK8qjYvnr4Tk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 03:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:88:e9:07:29:ac:ec:70:55:40:66:14:5a:60:28:60:3f:b0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Validity Not Before: Aug 28 00:15:33 2026 GMT Not After : Aug 29 03:26:33 2026 GMT Subject: CN=747EF7EF36CCE9884133A6411A95D4B321B26821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d2:6a:1d:25:dc:15:49:b8:87:ca:d7:33:18: a6:d9:6f:79:07:ae:17:81:8a:40:87:69:69:54:96: ce:68:01:4d:f9:53:bf:b7:0a:a5:41:4a:9f:0c:91: 85:6c:a6:9d:d8:30:26:71:37:17:7d:9c:bd:5b:72: 5a:51:50:c9:e1:3d:15:7d:a3:c1:3b:c7:51:13:71: 25:24:0b:e7:e5:4d:e6:f9:86:0d:6c:c3:94:f9:9b: 6c:76:95:bc:c0:11:cc:a4:ec:2d:bc:de:8d:ad:37: 47:5e:60:d4:56:20:e8:4d:90:59:e4:20:ee:5c:bb: 68:93:d1:2a:78:4e:cd:0a:15:28:3d:59:1f:e6:c1: 1a:29:16:c5:40:12:53:12:51:61:20:3b:d1:e0:4e: 6d:3d:ff:b7:27:e1:6a:de:38:98:ab:0c:7f:b5:e4: b7:02:46:e9:a3:71:d3:24:d5:01:f2:99:dd:7a:4e: 7c:b1:ff:e5:c9:80:6d:0f:8a:e0:81:f4:3d:8d:99: 8f:0b:31:97:25:50:ce:35:1a:44:4f:6f:aa:80:64: 03:e4:0f:95:84:ef:6f:e7:05:80:61:20:a4:72:70: de:5a:a6:a4:4b:31:69:e2:ca:47:03:9f:65:a4:0b: 91:ff:59:17:aa:fe:d8:f5:57:64:97:af:f0:4e:e7: d7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7E:F7:EF:36:CC:E9:88:41:33:A6:41:1A:95:D4:B3:21:B2:68:21 X509v3 Authority Key Identifier: keyid:43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:cf:96:66:3a:e2:3b:1f:ff:2c:a5:66:70:d5:bc:b0:27:b4: e0:10:93:a9:60:4c:8d:af:d4:2f:23:6c:92:54:2f:7a:13:93: 79:cb:67:8b:d0:63:98:fe:5e:24:a4:5e:fa:d7:07:f5:a3:13: 8f:af:da:a6:79:1d:e7:b0:b8:52:eb:83:fb:b6:9a:52:d3:44: b3:a1:cc:1c:e3:70:98:43:c3:1d:ee:8d:18:e4:b5:98:86:2c: 05:ea:4b:9c:72:fb:58:5d:38:1d:9b:64:94:20:e1:02:fe:31: 63:47:f2:47:67:ba:17:e1:83:f6:d3:2b:a7:1f:c3:40:a7:51: 18:11:58:e3:df:39:bd:01:b2:5e:65:47:2a:b6:fd:0f:d8:5f: 84:a3:97:83:fd:70:5c:99:58:e3:48:e9:8c:6b:b7:e5:78:27: 6c:f0:80:58:92:6e:af:71:25:6e:b6:23:f6:b1:96:ae:6a:98: b7:c8:ae:0e:46:5c:d7:0d:f4:7d:41:3a:6a:b7:3f:10:e3:7e: 3c:ec:b4:00:11:29:ae:d8:a0:38:b6:9f:dd:49:5b:3d:9c:36: f7:10:2c:f3:07:eb:d3:9f:61:08:16:9a:e8:e9:c1:62:fe:de: 0d:1a:63:a9:80:8b:da:f1:dc:50:0c:9d:17:68:63:d4:b4:20: 9b:3c:54:58 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITE4jpByms7HBVQGYUWmAoYD+wEDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1 MkY2NzAyMB4XDTI2MDgyODAwMTUzM1oXDTI2MDgyOTAzMjYzM1owMzExMC8GA1UE AxMoNzQ3RUY3RUYzNkNDRTk4ODQxMzNBNjQxMUE5NUQ0QjMyMUIyNjgyMTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANnSah0l3BVJuIfK1zMYptlveQeu F4GKQIdpaVSWzmgBTflTv7cKpUFKnwyRhWymndgwJnE3F32cvVtyWlFQyeE9FX2j wTvHURNxJSQL5+VN5vmGDWzDlPmbbHaVvMARzKTsLbzeja03R15g1FYg6E2QWeQg 7ly7aJPRKnhOzQoVKD1ZH+bBGikWxUASUxJRYSA70eBObT3/tyfhat44mKsMf7Xk twJG6aNx0yTVAfKZ3XpOfLH/5cmAbQ+K4IH0PY2ZjwsxlyVQzjUaRE9vqoBkA+QP lYTvb+cFgGEgpHJw3lqmpEsxaeLKRwOfZaQLkf9ZF6r+2PVXZJev8E7n18UCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBR0fvfvNszpiEEzpkEaldSzIbJoITAfBgNVHSME GDAWgBRD0JQ9CtSf0015p/Q22fevVS9nAjAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9i NzM1MDdmMy1mOGMwLTQxMGItYjE5ZS01N2U0OGJmMzIzMDUvMC80M0QwOTQzRDBB RDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1MkY2NzAyLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzQzRDA5NDNEMEFENDlGRDM0RDc5QTdGNDM2RDlGN0FGNTUyRjY3 MDIuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNzM1MDdmMy1mOGMwLTQxMGItYjE5 ZS01N2U0OGJmMzIzMDUvMC80M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdB RjU1MkY2NzAyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAaM+WZjriOx//LKVmcNW8sCe04BCTqWBMja/U LyNsklQvehOTectni9BjmP5eJKRe+tcH9aMTj6/apnkd57C4UuuD+7aaUtNEs6HM HONwmEPDHe6NGOS1mIYsBepLnHL7WF04HZtklCDhAv4xY0fyR2e6F+GD9tMrpx/D QKdRGBFY4985vQGyXmVHKrb9D9hfhKOXg/1wXJlY40jpjGu35XgnbPCAWJJur3El brYj9rGWrmqYt8iuDkZc1w30fUE6arc/EON+POy0ABEprtigOLaf3UlbPZw29xAs 8wfr059hCBaa6OnBYv7eDRpjqYCL2vHcUAydF2hj1LQgmzxUWA== -----END CERTIFICATE-----Generated at Fri Aug 28 04:31:57 2026 by rpki-client