$ rpki-client -vvf rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft File: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft (raw, json) Hash identifier: xEumHZzfY7wXQyUd6fK7VwSqaoGNaY+4n4tH7IT4xmk= Subject key identifier: EA:81:85:6B:B9:56:4D:A6:FF:86:EE:26:17:44:A6:B8:74:0A:93:25 Authority key identifier: 43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 Certificate issuer: /CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Certificate serial: 23D36929B3F1C7ED37F18FB7A1EF07E916D0C21E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft Manifest number: 63 Signing time: Mon 13 Jul 2026 19:13:47 +0000 Manifest this update: Mon 13 Jul 2026 19:08:47 +0000 Manifest next update: Tue 14 Jul 2026 21:28:47 +0000 Files and hashes: 1: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: UF6agt0uAGTYKvSykXC4qalAzD3vwK1cnzV5myQ1GUY=) 2: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl (hash: tGETFAFj98Bpw/Ld8tbCxnMQCkaIfbZLO0pdxfCbK28=) 3: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: j4dDYSTdl5zyq2E6gFmPn2O8HAKj+mVFK8qjYvnr4Tk=) 4: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: lOYan/tTMeCFnrAywnM0SljREMtkE1qDoXn8AuN63bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 21:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d3:69:29:b3:f1:c7:ed:37:f1:8f:b7:a1:ef:07:e9:16:d0:c2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Validity Not Before: Jul 13 19:08:47 2026 GMT Not After : Jul 14 21:28:47 2026 GMT Subject: CN=EA81856BB9564DA6FF86EE261744A6B8740A9325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:b8:d3:ed:46:63:03:56:65:e6:f7:61:c8: e2:6e:32:18:e3:98:8e:f1:e0:93:e8:93:01:2e:b6: 69:60:68:b1:e6:9f:d5:72:82:95:a2:65:98:e0:de: 93:eb:55:bb:41:3a:b3:50:e3:25:70:07:f2:be:39: a0:3f:2d:c9:9a:f6:ea:b5:ed:61:1f:e8:68:63:c7: 30:25:3f:dc:33:97:ea:14:1c:61:b6:70:18:d7:bd: ae:9a:dd:45:e6:d9:95:ed:65:cc:5e:1e:a6:a9:28: f3:4c:91:d0:10:1c:0a:5a:50:15:cd:fe:f6:18:bf: 68:f5:84:36:b7:bc:09:ec:fc:33:d7:18:ef:6b:f7: 10:93:5a:ae:0a:93:93:3e:70:81:6a:af:6b:83:e7: f2:17:ad:b6:6c:e3:c9:7b:88:27:a3:90:8d:99:6e: f5:6d:fa:66:7c:8a:20:92:74:b4:ea:f1:55:ad:64: 31:c2:c2:ba:21:25:52:ca:e3:a5:28:57:6d:3c:cc: 1c:77:53:f7:35:67:62:47:ec:8a:40:ff:0f:9a:a6: 45:14:cb:c2:47:05:ad:de:b2:f7:e3:a5:ad:1d:07: 47:76:5f:4b:4f:aa:b5:8f:f1:5d:66:2c:69:b9:d3: 1b:a2:17:ca:e0:95:af:6f:97:54:c4:1f:0d:aa:1b: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:85:6B:B9:56:4D:A6:FF:86:EE:26:17:44:A6:B8:74:0A:93:25 X509v3 Authority Key Identifier: keyid:43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:87:8f:95:46:7c:93:91:56:a5:73:0f:3e:c3:6d:1a:43:4a: 56:5a:b7:38:ba:a0:be:d2:42:af:79:4e:48:4c:dc:50:ba:1c: c3:08:bc:f5:de:c7:25:06:e0:c4:c2:18:8f:65:26:46:9b:5d: 58:00:0f:8c:ab:c4:ce:92:31:29:84:af:56:6b:64:53:ae:b3: 2d:20:ca:0f:1f:66:08:09:08:8d:c5:54:fb:c2:ec:d8:75:bf: 3a:94:1a:48:ab:7d:cc:73:dd:34:19:d4:a6:d2:63:92:9e:ff: 5a:bc:39:ba:48:a0:4d:c4:e7:fd:80:bc:df:75:3b:96:aa:ee: 4e:58:33:fe:08:c4:42:9d:9e:1e:df:ce:6c:aa:96:ee:5f:13: ba:38:cf:75:45:4a:f6:de:62:10:0c:25:e0:8f:d1:77:7e:c3: da:54:9e:01:df:74:df:ef:99:b9:59:a6:36:09:41:70:45:62: cb:14:ef:01:97:1e:6d:ff:f6:5e:e5:2f:ff:8e:bf:3d:b6:55: 45:e7:9e:d4:33:5b:65:f7:98:74:8e:f4:8d:76:29:28:5f:a5: a7:3b:98:ea:4d:3b:26:21:a2:67:b0:8a:29:1c:9c:0a:86:61: 45:62:95:9d:f6:35:64:54:95:c4:d2:18:77:51:55:59:9d:b7: 07:02:45:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9NpKbPxx+038Y+3oe8H6RbQwh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1 NTJGNjcwMjAeFw0yNjA3MTMxOTA4NDdaFw0yNjA3MTQyMTI4NDdaMDMxMTAvBgNV BAMTKEVBODE4NTZCQjk1NjREQTZGRjg2RUUyNjE3NDRBNkI4NzQwQTkzMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3LjT7UZjA1Zl5vdhyOJuMhjj mI7x4JPokwEutmlgaLHmn9VygpWiZZjg3pPrVbtBOrNQ4yVwB/K+OaA/Lcma9uq1 7WEf6GhjxzAlP9wzl+oUHGG2cBjXva6a3UXm2ZXtZcxeHqapKPNMkdAQHApaUBXN /vYYv2j1hDa3vAns/DPXGO9r9xCTWq4Kk5M+cIFqr2uD5/IXrbZs48l7iCejkI2Z bvVt+mZ8iiCSdLTq8VWtZDHCwrohJVLK46UoV208zBx3U/c1Z2JH7IpA/w+apkUU y8JHBa3esvfjpa0dB0d2X0tPqrWP8V1mLGm50xuiF8rgla9vl1TEHw2qG+8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oGFa7lWTab/hu4mF0SmuHQKkyUwHwYDVR0j BBgwFoAUQ9CUPQrUn9NNeaf0Ntn3r1UvZwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjczNTA3ZjMtZjhjMC00MTBiLWIxOWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0Qw QUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1NTJGNjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1MkY2 NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3 QUY1NTJGNjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWHj5VGfJORVqVzDz7DbRpDSlZatzi6oL7S Qq95TkhM3FC6HMMIvPXexyUG4MTCGI9lJkabXVgAD4yrxM6SMSmEr1ZrZFOusy0g yg8fZggJCI3FVPvC7Nh1vzqUGkirfcxz3TQZ1KbSY5Ke/1q8ObpIoE3E5/2AvN91 O5aq7k5YM/4IxEKdnh7fzmyqlu5fE7o4z3VFSvbeYhAMJeCP0Xd+w9pUngHfdN/v mblZpjYJQXBFYssU7wGXHm3/9l7lL/+Ovz22VUXnntQzW2X3mHSO9I12KShfpac7 mOpNOyYhomewiikcnAqGYUVilZ32NWRUlcTSGHdRVVmdtwcCRQQ= -----END CERTIFICATE-----Generated at Tue Jul 14 03:42:22 2026 by rpki-client