$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: tP5vDoNYb1faAKFqu575ZpZi36UiOa6yQILGUKQYirM= Subject key identifier: EB:07:24:1F:2A:08:1B:1F:97:B8:41:1A:1A:6A:BB:8E:6D:7C:F4:39 Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 12A77EA4B629861B9C5A61387A9E4340EA2F51AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 042B Signing time: Sun 01 Mar 2026 18:22:16 +0000 Manifest this update: Sun 01 Mar 2026 18:17:16 +0000 Manifest next update: Thu 05 Mar 2026 05:25:16 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: YYshjWJChQ7GjjLm5x5OoEwBOuUfUWvc0tdshb8NzOU=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: h84L1JycsdPXdXBzMLwM6XotOW1ura7DC0PWrqGx0Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a7:7e:a4:b6:29:86:1b:9c:5a:61:38:7a:9e:43:40:ea:2f:51:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Mar 1 18:17:16 2026 GMT Not After : Mar 5 05:25:16 2026 GMT Subject: CN=EB07241F2A081B1F97B8411A1A6ABB8E6D7CF439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8d:9d:3e:7a:fa:a8:6f:09:38:de:54:e3:73: 92:61:ca:28:91:77:94:a2:32:1a:11:53:01:4d:fa: 00:79:f0:59:08:c9:1e:56:82:a7:8a:ef:66:fa:3d: 75:f2:1e:bf:c0:0a:97:f0:f2:68:c0:e0:78:1f:64: 49:51:83:20:93:91:6b:12:b4:2f:68:ad:2d:3f:5c: 8b:e2:cc:4e:2d:07:58:a8:9b:09:5c:87:da:15:17: 8d:d0:68:a0:76:09:d3:46:dd:38:d0:4d:04:96:ab: 44:21:03:57:58:3d:0d:0c:ee:be:31:5b:42:ba:a4: f4:22:e0:38:ca:fd:bf:9a:97:e8:39:7b:d9:82:6a: 27:fa:fd:fa:6c:90:db:31:4a:88:5c:9e:04:9d:f2: ca:33:dc:45:8d:e9:bb:a8:24:47:25:ed:96:7e:17: 89:a3:93:3b:7a:c7:73:db:7c:bb:19:a3:c5:90:f5: a9:ae:3d:d7:f4:8e:b9:ee:76:4f:a8:0e:fc:6b:62: bc:21:e1:2d:c7:cc:d9:65:b7:f4:88:80:5c:5d:9b: e2:40:bc:d3:51:48:a1:b0:3a:f2:bf:69:18:75:b4: 9a:c5:00:57:a6:ca:0c:f2:f0:2b:4a:09:9a:2c:bd: e1:62:2c:f4:f7:81:31:e5:e5:fe:c2:5c:9e:4e:6f: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:07:24:1F:2A:08:1B:1F:97:B8:41:1A:1A:6A:BB:8E:6D:7C:F4:39 X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:70:c1:dc:1f:1c:1b:97:a8:47:8c:a7:fc:f6:19:87:b1:65: 71:d6:72:e3:b8:25:0c:97:a9:ee:4b:f1:92:42:b8:07:ef:b8: cf:b7:47:a7:84:88:61:25:67:00:3f:c6:dd:46:d0:d9:a7:95: bd:40:28:92:66:c2:e8:16:aa:56:98:d6:3e:d7:6a:8a:15:02: c5:67:ec:30:8e:15:9d:d3:71:32:dd:f4:c0:e5:e0:7f:a8:d6: 9b:94:63:0b:b9:e1:5c:31:e7:4d:bf:04:0f:f5:dd:d8:22:8a: 8b:de:e3:94:35:44:aa:2c:f1:fb:f5:ba:e8:a7:99:b3:15:80: 08:e7:3d:f2:57:68:4a:57:17:6a:0b:41:25:62:64:95:e6:92: 46:7a:0e:83:5b:80:2d:2b:8a:8a:65:c3:ee:15:96:f7:43:9b: 64:e1:22:56:92:22:09:ad:b6:5a:18:66:52:fb:a7:41:f1:00: dc:60:ec:b8:41:0d:f1:b4:9c:bc:60:4a:f2:22:93:0a:ee:da: 5f:44:8d:ae:ef:c1:87:5a:00:4e:cd:2d:d7:13:7e:82:8c:70: e2:6c:29:4a:64:f9:89:bc:d0:40:af:fe:3d:ac:c1:6f:22:12: 45:2d:26:f8:71:1b:de:0d:c3:b3:b1:e5:be:96:4c:29:d5:2f: db:0a:2c:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqd+pLYphhucWmE4ep5DQOovUaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNjAzMDExODE3MTZaFw0yNjAzMDUwNTI1MTZaMDMxMTAvBgNV BAMTKEVCMDcyNDFGMkEwODFCMUY5N0I4NDExQTFBNkFCQjhFNkQ3Q0Y0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjZ0+evqobwk43lTjc5JhyiiR d5SiMhoRUwFN+gB58FkIyR5WgqeK72b6PXXyHr/ACpfw8mjA4HgfZElRgyCTkWsS tC9orS0/XIvizE4tB1iomwlch9oVF43QaKB2CdNG3TjQTQSWq0QhA1dYPQ0M7r4x W0K6pPQi4DjK/b+al+g5e9mCaif6/fpskNsxSohcngSd8soz3EWN6buoJEcl7ZZ+ F4mjkzt6x3PbfLsZo8WQ9amuPdf0jrnudk+oDvxrYrwh4S3HzNllt/SIgFxdm+JA vNNRSKGwOvK/aRh1tJrFAFemygzy8CtKCZosveFiLPT3gTHl5f7CXJ5Obz8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wckHyoIGx+XuEEaGmq7jm189DkwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRwwdwfHBuXqEeMp/z2GYexZXHWcuO4JQyX qe5L8ZJCuAfvuM+3R6eEiGElZwA/xt1G0Nmnlb1AKJJmwugWqlaY1j7XaooVAsVn 7DCOFZ3TcTLd9MDl4H+o1puUYwu54Vwx502/BA/13dgiiove45Q1RKos8fv1uuin mbMVgAjnPfJXaEpXF2oLQSViZJXmkkZ6DoNbgC0rioplw+4VlvdDm2ThIlaSIgmt tloYZlL7p0HxANxg7LhBDfG0nLxgSvIikwru2l9Eja7vwYdaAE7NLdcTfoKMcOJs KUpk+Ym80ECv/j2swW8iEkUtJvhxG94Nw7Ox5b6WTCnVL9sKLHA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:38 2026 by rpki-client