$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft File: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft (raw, json) Hash identifier: lCUxk6MEH5WEgSkNn0HdpMKaijKAcyf1ykN8gEh08XU= Subject key identifier: 48:17:BD:08:B7:D5:0E:7E:04:D7:75:17:E7:67:2E:29:35:2B:D9:B4 Authority key identifier: 43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 Certificate issuer: /CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Certificate serial: 1FD930F290D2C6702E56C84CB440A06E8D976FCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft Manifest number: EC Signing time: Sat 24 Oct 2026 01:25:58 +0000 Manifest this update: Sat 24 Oct 2026 01:20:58 +0000 Manifest next update: Sun 25 Oct 2026 03:16:58 +0000 Files and hashes: 1: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl (hash: yt6uPnprDiEY9XwXH8oBllavAo8DGMtlioj2OmYE60Q=) 2: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: lOYan/tTMeCFnrAywnM0SljREMtkE1qDoXn8AuN63bo=) 3: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: UF6agt0uAGTYKvSykXC4qalAzD3vwK1cnzV5myQ1GUY=) 4: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: j4dDYSTdl5zyq2E6gFmPn2O8HAKj+mVFK8qjYvnr4Tk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d9:30:f2:90:d2:c6:70:2e:56:c8:4c:b4:40:a0:6e:8d:97:6f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Validity Not Before: Oct 24 01:20:58 2026 GMT Not After : Oct 25 03:16:58 2026 GMT Subject: CN=4817BD08B7D50E7E04D77517E7672E29352BD9B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:dc:b7:5b:6f:a0:0d:ef:7a:ed:9a:42:77: d5:ae:22:3c:d4:12:4d:20:a0:9b:a6:b4:53:af:2d: 85:a9:73:68:77:0b:4a:f1:b5:bd:c3:9f:f5:3f:8f: eb:dd:3d:89:13:e5:70:02:f1:a5:5d:b3:2a:f3:73: 2f:5f:9a:09:3f:88:dc:58:18:92:f7:11:a0:8c:ac: 60:cd:ea:f9:6b:bf:d3:88:c5:a8:c3:49:28:4d:97: d2:96:47:4d:a2:22:1d:a8:2a:50:f6:ad:bb:e9:fa: 70:9c:e7:a7:e7:7d:fd:26:07:fc:4e:34:47:32:5f: 73:e4:67:f6:14:04:17:03:85:0d:55:99:95:03:17: 9b:b5:99:74:b8:be:20:b2:13:32:6a:68:81:cd:2b: c1:d4:c8:01:f2:3f:74:0c:5c:13:50:c5:71:e9:ff: fd:d8:a8:87:7b:d2:0f:ab:e3:3d:59:e3:35:b8:9a: f8:ab:b8:74:8a:04:df:d5:80:70:b0:f5:43:eb:94: 05:18:da:7a:98:79:00:f3:b8:9d:92:22:6b:40:53: c4:05:cc:6d:10:a6:c5:ab:23:dd:3c:0d:8c:d1:c5: f0:58:97:0b:36:a0:d4:78:b3:c3:14:06:f5:04:67: 17:2d:b5:98:cb:38:52:99:bc:8d:96:fb:2b:9b:29: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:17:BD:08:B7:D5:0E:7E:04:D7:75:17:E7:67:2E:29:35:2B:D9:B4 X509v3 Authority Key Identifier: keyid:43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:85:41:f9:ef:6a:66:a9:60:dd:ec:84:c3:ea:49:1d:78:51: 58:d4:b1:38:dd:9c:c0:43:3d:54:d9:1f:71:e0:10:60:c7:c1: cc:51:75:d0:eb:ad:23:be:b9:41:8f:4f:1b:90:40:6c:04:0f: 27:88:0b:dd:7a:dd:f8:aa:71:6c:0d:78:82:a6:66:6c:98:2b: 12:7d:ae:05:ec:8b:68:1b:25:ad:88:89:ac:a1:d9:21:1d:2d: a1:f8:5c:aa:a6:87:89:52:b2:83:ae:f2:fc:12:0c:34:fe:72: f6:31:de:da:6b:70:30:ba:a6:7f:07:69:6e:49:48:fd:18:48: 72:b6:40:92:1a:54:36:0a:cf:d4:b7:32:c0:87:c1:cf:64:38: 9f:b8:79:e1:33:78:0d:4e:19:ad:7a:78:e6:68:12:46:26:89: 52:58:2a:f6:80:fb:d0:96:fe:58:ee:12:b5:07:87:77:59:2a: b7:e0:74:79:25:9d:19:36:ae:7f:ca:ac:2b:e0:d9:43:e0:c5: a6:19:15:0e:f1:e3:a1:17:63:ba:85:2c:6e:ff:31:e4:83:e1: 7a:ae:2d:87:96:10:fc:ff:c2:97:9b:7f:e9:91:3a:43:96:1f: 8b:91:3c:61:c8:be:01:70:fb:95:f1:7d:1b:2b:0d:f5:9e:ba: ff:2e:d3:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9kw8pDSxnAuVshMtECgbo2Xb88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1 NTJGNjcwMjAeFw0yNjEwMjQwMTIwNThaFw0yNjEwMjUwMzE2NThaMDMxMTAvBgNV BAMTKDQ4MTdCRDA4QjdENTBFN0UwNEQ3NzUxN0U3NjcyRTI5MzUyQkQ5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vNy3W2+gDe967ZpCd9WuIjzU Ek0goJumtFOvLYWpc2h3C0rxtb3Dn/U/j+vdPYkT5XAC8aVdsyrzcy9fmgk/iNxY GJL3EaCMrGDN6vlrv9OIxajDSShNl9KWR02iIh2oKlD2rbvp+nCc56fnff0mB/xO NEcyX3PkZ/YUBBcDhQ1VmZUDF5u1mXS4viCyEzJqaIHNK8HUyAHyP3QMXBNQxXHp //3YqId70g+r4z1Z4zW4mviruHSKBN/VgHCw9UPrlAUY2nqYeQDzuJ2SImtAU8QF zG0QpsWrI908DYzRxfBYlws2oNR4s8MUBvUEZxcttZjLOFKZvI2W+yubKY8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSBe9CLfVDn4E13UX52cuKTUr2bQwHwYDVR0j BBgwFoAUQ9CUPQrUn9NNeaf0Ntn3r1UvZwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjczNTA3ZjMtZjhjMC00MTBiLWIxOWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0Qw QUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1NTJGNjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1MkY2 NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3 QUY1NTJGNjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2FQfnvamapYN3shMPqSR14UVjUsTjdnMBD PVTZH3HgEGDHwcxRddDrrSO+uUGPTxuQQGwEDyeIC9163fiqcWwNeIKmZmyYKxJ9 rgXsi2gbJa2Iiayh2SEdLaH4XKqmh4lSsoOu8vwSDDT+cvYx3tprcDC6pn8HaW5J SP0YSHK2QJIaVDYKz9S3MsCHwc9kOJ+4eeEzeA1OGa16eOZoEkYmiVJYKvaA+9CW /ljuErUHh3dZKrfgdHklnRk2rn/KrCvg2UPgxaYZFQ7x46EXY7qFLG7/MeSD4Xqu LYeWEPz/wpebf+mROkOWH4uRPGHIvgFw+5XxfRsrDfWeuv8u06g= -----END CERTIFICATE-----Generated at Sat Oct 24 20:40:40 2026 by rpki-client