$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: hY08lQgJTj67BaUZ3Xuj6rpktRjkcQp2Ee4ntIAVxao= Subject key identifier: DF:24:0B:24:40:FF:0D:93:F4:E3:7B:21:5F:9E:43:50:77:61:2B:E8 Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 412FD4AF229B4AFDD393405570EBE8C94D5DADAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: 0172 Signing time: Sun 01 Mar 2026 09:10:49 +0000 Manifest this update: Sun 01 Mar 2026 09:05:49 +0000 Manifest next update: Wed 04 Mar 2026 16:06:49 +0000 Files and hashes: 1: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: 2c5nbciBqD6Mo4cYjtGp7UDkwsdBvbTUMtxgyGQ4xJ8=) 2: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: qxQ+6T9yrSIPoh+WZqiNWh2YyFV04+QAx96S0X8/TDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2f:d4:af:22:9b:4a:fd:d3:93:40:55:70:eb:e8:c9:4d:5d:ad:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Mar 1 09:05:49 2026 GMT Not After : Mar 4 16:06:49 2026 GMT Subject: CN=DF240B2440FF0D93F4E37B215F9E435077612BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:b9:ab:e1:07:92:a7:c3:95:5b:97:8f:05: b5:4b:57:86:6f:9c:5b:69:e9:c2:19:18:5a:a1:71: 6d:b5:18:0c:f3:06:3a:a6:e4:70:74:96:5e:32:f6: b7:5d:63:dd:10:05:fd:17:5c:40:fe:51:ed:57:f5: 22:31:e1:ed:f6:25:17:68:83:34:c9:a9:ed:3d:a9: 93:3c:ef:b9:cf:08:75:94:4f:9b:9f:bc:d6:ab:a2: 43:55:39:8d:52:15:af:50:5b:19:fe:db:da:db:7b: 5c:a4:3f:18:fa:68:21:7b:5c:c8:ba:f8:45:c0:db: 73:9a:f5:3f:67:26:3d:ce:37:3f:70:7c:a2:12:bf: 4a:9a:13:45:8b:db:57:f0:4a:d1:42:d3:ce:c4:2a: 12:ea:a5:92:30:8f:9d:93:8e:2f:aa:c7:21:77:b7: e3:29:a1:c2:c6:b3:9b:0c:e2:96:ae:dd:77:56:63: bd:1e:9a:da:98:f4:43:24:42:fa:0e:91:6f:2b:ef: 54:1f:a7:48:af:d2:8a:4e:2e:9c:b4:11:06:6a:45: 3f:44:75:aa:b3:d8:e0:29:cf:9d:c3:2c:a2:6e:96: 94:09:95:59:e2:d5:df:65:b1:5e:27:a0:00:b0:97: 1c:2c:f4:b7:72:6e:99:e4:ff:4e:75:cf:29:93:cf: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:24:0B:24:40:FF:0D:93:F4:E3:7B:21:5F:9E:43:50:77:61:2B:E8 X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:99:ff:cd:6a:90:4f:1f:25:26:e0:bd:35:2c:13:7b:7b:38: 5d:ca:92:80:af:f6:aa:04:89:3e:4b:20:52:1f:70:f0:83:e8: f2:72:60:28:5b:a0:51:1e:71:88:7e:85:e4:05:a3:7b:47:7b: 4c:92:b8:c4:54:c1:8f:58:7b:ce:85:dc:57:56:18:1a:6b:7f: 5e:ad:6c:d9:78:9d:5e:d2:2d:53:6d:41:6b:67:16:93:3e:28: cc:b6:fd:b0:6a:74:a2:eb:a0:9e:ed:41:9e:cd:10:41:4e:de: a0:11:af:b7:f7:4c:76:29:74:15:23:39:81:f1:99:17:e5:17: 68:53:22:0b:0f:34:de:17:2a:f6:c6:5c:df:8a:ef:f8:37:f1: 2f:b3:9f:2c:16:7d:bc:14:d9:06:51:76:17:51:ab:4a:37:25: 45:cb:17:f1:cf:81:13:bb:94:c3:d0:71:97:77:6e:89:77:65: 25:78:29:8a:14:69:71:df:99:6b:5a:53:53:ea:24:77:9a:cf: 52:84:5f:7f:1e:55:61:73:c3:ad:11:06:d8:a7:8a:4c:cb:09: 0f:13:61:12:13:71:bd:89:26:03:9c:45:86:9e:8a:cf:7c:16: 8b:04:f1:12:2a:12:a7:ec:ac:7c:cf:da:97:9d:3f:b4:ab:ae: f7:b8:00:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQS/UryKbSv3Tk0BVcOvoyU1dra4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNjAzMDEwOTA1NDlaFw0yNjAzMDQxNjA2NDlaMDMxMTAvBgNV BAMTKERGMjQwQjI0NDBGRjBEOTNGNEUzN0IyMTVGOUU0MzUwNzc2MTJCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1rmr4QeSp8OVW5ePBbVLV4Zv nFtp6cIZGFqhcW21GAzzBjqm5HB0ll4y9rddY90QBf0XXED+Ue1X9SIx4e32JRdo gzTJqe09qZM877nPCHWUT5ufvNarokNVOY1SFa9QWxn+29rbe1ykPxj6aCF7XMi6 +EXA23Oa9T9nJj3ONz9wfKISv0qaE0WL21fwStFC087EKhLqpZIwj52Tji+qxyF3 t+MpocLGs5sM4pau3XdWY70emtqY9EMkQvoOkW8r71Qfp0iv0opOLpy0EQZqRT9E daqz2OApz53DLKJulpQJlVni1d9lsV4noACwlxws9Ldybpnk/051zymTz02pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3yQLJED/DZP043shX55DUHdhK+gwHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWZ/81qkE8fJSbgvTUsE3t7OF3KkoCv9qoE iT5LIFIfcPCD6PJyYChboFEecYh+heQFo3tHe0ySuMRUwY9Ye86F3FdWGBprf16t bNl4nV7SLVNtQWtnFpM+KMy2/bBqdKLroJ7tQZ7NEEFO3qARr7f3THYpdBUjOYHx mRflF2hTIgsPNN4XKvbGXN+K7/g38S+znywWfbwU2QZRdhdRq0o3JUXLF/HPgRO7 lMPQcZd3bol3ZSV4KYoUaXHfmWtaU1PqJHeaz1KEX38eVWFzw60RBtinikzLCQ8T YRITcb2JJgOcRYaeis98FosE8RIqEqfsrHzP2pedP7Srrve4AA4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:21:31 2026 by rpki-client