$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: t+z7zNpoxo01J8dGE+J+lIbuopyk1/TbDnPJAQsrKRc= Subject key identifier: 7C:A2:BA:EB:0A:C1:AB:74:08:CE:91:33:37:09:49:75:8F:B0:EF:43 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 48FFD03F424D1575BF5434C5940E829042CB7F6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 017E Signing time: Thu 16 Apr 2026 01:51:46 +0000 Manifest this update: Thu 16 Apr 2026 01:46:46 +0000 Manifest next update: Sun 19 Apr 2026 02:19:46 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: 81VU0FLkvAkLhPAYibKMDV567J1aVEtHBAtmHh2LRZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ff:d0:3f:42:4d:15:75:bf:54:34:c5:94:0e:82:90:42:cb:7f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Apr 16 01:46:46 2026 GMT Not After : Apr 19 02:19:46 2026 GMT Subject: CN=7CA2BAEB0AC1AB7408CE9133370949758FB0EF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:53:29:29:5a:13:d6:b6:11:74:91:eb:ab: 2a:6e:f1:56:6b:1f:26:35:ac:c5:8d:86:08:53:32: 0d:2c:65:e8:31:cb:a9:cf:36:9f:31:88:ff:af:f9: 49:f5:32:80:b6:aa:04:f3:b8:b9:fb:55:3b:ca:92: c2:69:7c:b0:d8:9f:1f:91:3b:11:77:91:55:1d:26: ec:d9:d9:5a:65:3d:d6:ed:32:d6:07:ef:44:94:53: e2:f8:d8:ae:ca:02:f3:45:62:89:c7:86:7d:8f:29: cc:dc:f7:96:7d:4c:ca:3f:52:55:37:fa:74:ba:03: db:c3:e5:c2:3e:50:fd:84:31:f1:38:7a:5a:2b:71: 44:55:d3:55:e7:f8:e8:77:07:38:fa:1c:97:f1:fa: 8f:7a:57:2a:18:ce:c7:15:cc:b8:01:58:42:d1:1d: 55:b2:a5:c4:f2:e2:2e:8a:ef:cb:67:f8:c5:f4:b3: 28:e9:f2:4e:ac:b0:e1:e6:d7:a4:4d:28:8f:5c:81: c2:22:df:ff:92:af:09:eb:b8:e8:5b:e3:12:bf:10: cc:83:43:b7:57:da:e4:7d:8e:8d:17:ce:e0:36:c4: bd:19:89:96:80:e9:20:22:c6:8e:32:46:39:6e:e3: 0a:e4:6c:cc:74:c9:55:7d:12:25:85:ef:7d:b4:b8: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A2:BA:EB:0A:C1:AB:74:08:CE:91:33:37:09:49:75:8F:B0:EF:43 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e8:9f:dd:5c:92:c7:9a:32:17:58:70:59:44:70:61:dd:6b: 11:05:74:c8:46:4d:8b:1a:99:3f:80:56:e3:37:f7:74:aa:3d: b4:10:89:b0:cf:d9:4b:39:2e:b6:fb:35:4c:b0:f7:d2:df:b6: 1a:e6:39:82:f3:43:97:73:56:bb:b1:b5:66:8d:a9:08:4f:98: fd:bf:13:b3:a5:71:5d:0f:08:07:b0:13:5c:e9:48:bd:92:7d: fa:d3:7a:df:52:cb:ec:62:0d:1d:22:fc:95:65:94:3e:47:fa: a1:8a:05:4a:d2:92:d2:ff:2b:ad:10:80:92:dd:99:f0:37:00: 27:c5:91:97:3a:4a:0c:91:b8:c7:9e:c0:83:7d:ad:9b:b8:cf: 67:e8:3e:ab:96:0e:70:da:56:d4:2e:08:15:82:0b:20:86:ec: c9:86:20:e5:91:ee:41:64:31:2d:4d:f3:0a:5e:39:4e:4a:55: fa:f1:b4:bc:cf:c6:23:c1:c3:8d:0d:8c:28:3d:96:5e:61:43: d4:68:b7:4a:42:36:4e:b0:d0:40:65:96:b4:1d:c3:6d:7f:52: ae:ed:03:e7:8b:14:47:54:3b:38:27:60:aa:64:fa:90:ea:cd: 33:ef:7d:cb:2d:b4:29:eb:fd:fe:9d:4e:c7:6b:d6:c5:fb:b5: 7e:33:20:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSP/QP0JNFXW/VDTFlA6CkELLf24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNjA0MTYwMTQ2NDZaFw0yNjA0MTkwMjE5NDZaMDMxMTAvBgNV BAMTKDdDQTJCQUVCMEFDMUFCNzQwOENFOTEzMzM3MDk0OTc1OEZCMEVGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmFMpKVoT1rYRdJHrqypu8VZr HyY1rMWNhghTMg0sZegxy6nPNp8xiP+v+Un1MoC2qgTzuLn7VTvKksJpfLDYnx+R OxF3kVUdJuzZ2VplPdbtMtYH70SUU+L42K7KAvNFYonHhn2PKczc95Z9TMo/UlU3 +nS6A9vD5cI+UP2EMfE4elorcURV01Xn+Oh3Bzj6HJfx+o96VyoYzscVzLgBWELR HVWypcTy4i6K78tn+MX0syjp8k6ssOHm16RNKI9cgcIi3/+SrwnruOhb4xK/EMyD Q7dX2uR9jo0XzuA2xL0ZiZaA6SAixo4yRjlu4wrkbMx0yVV9EiWF7320uNl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfKK66wrBq3QIzpEzNwlJdY+w70MwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3on91ckseaMhdYcFlEcGHdaxEFdMhGTYsa mT+AVuM393SqPbQQibDP2Us5Lrb7NUyw99LfthrmOYLzQ5dzVruxtWaNqQhPmP2/ E7OlcV0PCAewE1zpSL2SffrTet9Sy+xiDR0i/JVllD5H+qGKBUrSktL/K60QgJLd mfA3ACfFkZc6SgyRuMeewIN9rZu4z2foPquWDnDaVtQuCBWCCyCG7MmGIOWR7kFk MS1N8wpeOU5KVfrxtLzPxiPBw40NjCg9ll5hQ9Rot0pCNk6w0EBllrQdw21/Uq7t A+eLFEdUOzgnYKpk+pDqzTPvfcsttCnr/f6dTsdr1sX7tX4zIIs= -----END CERTIFICATE-----Generated at Fri Apr 17 18:01:26 2026 by rpki-client