
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
File: 43E1CC61CDE59968FE0810D4937130A67D6541DC.mft (raw, json)
Hash identifier: 7bHvyGqK4ekDFdAomwWGj3SSKnd+HF8PcqGNorCO+zc=
Subject key identifier: B3:AA:8E:67:20:4B:F2:F4:71:30:94:84:CF:3C:CD:8C:04:FE:D8:55
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Certificate issuer: /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial: 2D532A83DDB5CE53A1FCF1C6CB0C61F57EE8B66B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 07:25:38 +0000
Manifest this update: Sun 25 Oct 2026 07:20:38 +0000
Manifest next update: Mon 26 Oct 2026 08:31:38 +0000
Files and hashes: 1: 323430353a613534303a313030343a3a2f34382d3438203d3e203338313536.roa (hash: SMs3l2LaIu15xotNctGRKXxr41nAKmtqdH/wDotPjcE=)
2: 323430353a613534303a313030623a3a2f34382d3438203d3e203338313536.roa (hash: ArldJV59T/AN0DLLjKdryy3dXOdpQHjw8YFmTH59OUg=)
3: 3230332e3139302e3131342e302f32342d3234203d3e203338313536.roa (hash: 1zxciFrgfrpypZ13HHtfhkMtV3yJILY8QtbERuPSSxQ=)
4: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (hash: /s6NqXf3Az+33qCBWrV7/rHS8XMqrqM1zxdpU1dDV14=)
5: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (hash: zPNtfgZ0xuIJb6mJb8ImM+3c3T3QiTY+1lYZMk1v2MU=)
6: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (hash: GpjHek9a827cy//pNFDcORXn2t6JzxU+p9J93Ct0LZo=)
7: 43E1CC61CDE59968FE0810D4937130A67D6541DC.crl (hash: L0XmKh/UMK31jrHIQjV9Kzvuwlo1/vt8Kikwma6gqps=)
8: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (hash: JOAtBF5+cfAqGhS9/3m1ZllG3nhy/U+cT4H4mHFtRKs=)
9: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (hash: SUQFDo/3me7K6mK7WbxUn/2b9SHI+OuxemQ1myZfogM=)
10: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (hash: G3L597uJ/MtChNRFU4TPZTfQd8hCBfeft5oOi8ZO5Xk=)
11: 3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (hash: 1wbNP75Z/wA6pW2UhWTpcnJU8wNdOjHZn2vOKC8mX5U=)
12: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (hash: FymgtPH5XRJeo2g24rTB6Zt9DBTm0EmGQZ0QaJOmZSE=)
13: 323430353a613534303a313030313a3a2f34382d3438203d3e203338313536.roa (hash: ghjk9WxpBpcObQwhuyRJKOhe294PLPBofYqlraUkN+g=)
14: 3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (hash: e7mQPN3Z6KC/Ik9Qm59+I1SvLwjeilQ2SD4cxlIQDBE=)
15: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (hash: DmCqSyLAbR1GcGB2b6c28zFVw4CNHOLr1uOyNF7nwjc=)
16: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (hash: WgZKLMLpwFRH8Rc+mjcsJQGYvAiCBksSGlUySVC2KTU=)
17: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (hash: LWtx3txnmj9FjoJjDB/lmvmHZmgHx1jmLc6PPib5at8=)
18: 3230332e3139302e3131322e302f32312d3231203d3e203338313536.roa (hash: FE7yZMTislKGWcbY4qG0beL79uHJRAECT1HhYr/vMVw=)
19: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (hash: /GkPi/+AOEhPufjKPy1+oO0pijIgfjVervEREyDjquk=)
20: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (hash: Cigucd/NI7znq4aJY8FxoWkyWnlcJwSTYzMKj0Cfavc=)
21: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (hash: df96YWKu427U+HPJiLnno+3fbVy36Hxa342nQy+ZfoU=)
22: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (hash: Yg8Yec064Brwf9x/NAfoSbhCfddxi4fn/8a7jii/RNk=)
23: 3230332e3139302e3131322e302f32342d3234203d3e203338313536.roa (hash: akD2QIfBzuzka9CzlNwOGyLhb8S59sJqB1gcfu/lphg=)
24: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (hash: cpyNUFqnnPw0hoOUNBzdPXv7w/EpVs/cMCjjRluZNLo=)
25: 323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (hash: jHrKWWZukLMZ3J2401GmiEuzkAvQx3pBL2xKoO7CBis=)
26: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (hash: mYAvetqJOaK+g42xXQIVuzKQ0V+8EMMx37honK4xGaY=)
27: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (hash: q/tSBWv/7VM0Xu29FwAxjeFSDX/WD3INyENxffhPO4Q=)
28: 323430353a613534303a313030383a3a2f34382d3438203d3e203338313536.roa (hash: jdESrjmJQhjG8kc6FD8N6X6iVxeMA55PP67c1tPELGM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:53:2a:83:dd:b5:ce:53:a1:fc:f1:c6:cb:0c:61:f5:7e:e8:b6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Validity
Not Before: Oct 25 07:20:38 2026 GMT
Not After : Oct 26 08:31:38 2026 GMT
Subject: CN=B3AA8E67204BF2F471309484CF3CCD8C04FED855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:22:ab:32:54:cf:ef:7f:88:bd:b1:c3:b6:
14:d1:74:d3:6d:cc:02:d7:e3:1b:ef:e4:bb:19:5c:
3f:a6:cc:d7:9e:37:7d:ad:5c:37:97:91:10:49:8a:
52:92:20:4c:3a:76:3f:7a:b3:65:29:bf:06:38:80:
89:9a:76:b6:fe:e7:ea:13:64:b3:fe:0b:80:d9:1f:
37:9c:30:5e:6a:7f:5d:25:1d:e1:38:5d:b3:fc:ad:
42:4c:36:2d:6f:2e:9f:f1:a1:59:f0:7c:37:60:18:
a4:16:7a:b6:8e:03:db:d7:08:4c:a3:28:6d:b3:2e:
21:e3:18:2d:57:b0:53:7d:27:8a:e5:4c:20:09:93:
c9:77:83:14:a7:33:0a:25:d2:21:23:fa:1b:fe:b7:
3f:f5:03:62:b4:37:7e:0b:0b:4c:da:bc:fb:d3:1b:
3d:a3:e8:9d:5d:2c:ac:17:ff:77:77:39:c1:6f:e9:
c9:d0:70:2c:31:28:9d:f4:61:7e:68:cf:13:59:68:
4a:da:ee:c3:32:69:ca:0d:21:44:6e:e1:23:ec:7b:
b8:30:0a:cd:fc:85:57:92:0a:c1:49:cd:3c:f3:32:
47:73:c1:39:fd:d4:c9:d5:44:e0:85:8a:49:50:e5:
15:ed:c4:d4:dc:a6:c9:00:53:78:64:7e:c4:d3:84:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:8E:67:20:4B:F2:F4:71:30:94:84:CF:3C:CD:8C:04:FE:D8:55
X509v3 Authority Key Identifier:
keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e4:21:6c:0c:68:53:3a:99:6a:0c:de:3d:7a:3b:c2:57:23:
f5:04:c9:9c:90:cb:12:49:af:20:a1:11:c1:df:79:91:aa:1e:
83:03:99:8f:4e:7a:81:01:81:a8:81:53:63:a6:1c:10:b7:02:
41:99:ff:75:da:04:c2:18:b9:d6:c4:cd:5e:9b:59:93:d6:ae:
0f:e8:c8:0a:d3:2f:7d:4b:37:3f:6d:c7:3f:06:2b:e0:59:6a:
4a:b1:42:66:40:54:2c:a9:ec:7a:0f:9f:37:00:f3:82:50:65:
7d:73:38:b6:3e:2e:ce:73:04:71:0b:51:48:2f:ca:5b:db:a6:
f1:8a:ad:0f:a6:da:77:a0:e6:e3:df:ba:50:05:f0:b2:2f:ab:
2e:c0:7f:5f:af:e2:73:7a:b4:d4:07:f2:8d:c5:10:aa:b6:27:
f0:a6:41:f0:b0:f2:62:55:c1:e5:ff:da:bf:90:d4:51:5b:24:
9a:50:70:95:b7:d4:0c:f6:bd:80:96:a7:84:7e:91:26:83:17:
b3:4b:de:8a:cf:91:80:66:ea:c9:36:3b:ed:77:14:64:5c:f6:
20:60:94:fc:28:11:df:17:aa:7d:dc:41:c4:1d:ad:84:a2:31:
67:18:80:95:65:fb:29:f9:88:ee:63:49:32:a3:1f:bc:8e:19:
88:22:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:44:25 2026 by rpki-client