$ rpki-client -vvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft File: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft (raw, json) Hash identifier: Sn6y5My3KCQO4JTMxAmx+wawJC1quvhbDSEWUUIENO0= Subject key identifier: 6C:7C:51:6A:14:81:F0:CE:04:5C:D3:F5:47:AD:84:2C:39:85:9B:C5 Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Certificate serial: 073E8F790B3CD3D22A06161A6F10D56FB42644D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 23:07:08 +0000 Manifest this update: Sat 13 Jun 2026 23:02:08 +0000 Manifest next update: Mon 15 Jun 2026 00:14:08 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=) 2: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: 6T6qe96D7zQgyFzklJ6iaQcLNZnBxADfp/QBK9mZ1I4=) 3: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl (hash: fsj/qRhjBo8eAlfg68ig+66noLM2EctUBFOKcQ2T2pM=) 4: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: q99UPT0teezCe/Wtc8EBt8wiQOUmurJEflzD8Gd4ong=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 00:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3e:8f:79:0b:3c:d3:d2:2a:06:16:1a:6f:10:d5:6f:b4:26:44:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Validity Not Before: Jun 13 23:02:08 2026 GMT Not After : Jun 15 00:14:08 2026 GMT Subject: CN=6C7C516A1481F0CE045CD3F547AD842C39859BC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:eb:ec:92:04:20:24:5d:41:4e:43:ca:c1: db:2c:c8:fa:5e:04:18:e4:16:24:e3:1b:c5:8d:8b: 27:78:34:d2:52:aa:20:5b:62:5c:4f:aa:93:89:d5: 2b:59:bc:c2:17:24:3d:e3:ca:4d:83:3a:68:60:d7: b2:e1:e0:1c:30:1a:88:b5:dd:e9:28:fd:16:24:f5: 1a:c0:00:e7:1d:f0:f9:f6:7f:ce:9d:ff:4b:02:64: 18:dd:f2:a9:58:28:c5:81:1f:b5:fa:5f:aa:b6:87: 56:20:55:af:a0:43:c3:95:8b:a2:93:69:68:ee:03: a1:97:6f:a6:13:51:e6:1f:35:e3:81:8f:0d:92:87: 70:96:cb:e9:da:15:28:6c:a7:47:17:0b:ec:e6:2b: 84:91:ef:a8:8d:09:82:24:57:53:f2:e5:79:71:f2: 2a:61:de:93:ac:e8:2e:cf:21:97:f6:ae:62:2e:0c: 8d:a1:ad:fa:2f:1d:d4:53:de:97:36:60:c6:4b:89: a4:35:34:2e:d6:5c:86:d1:95:b2:49:25:38:a9:28: 9b:66:51:d4:8f:b8:d8:37:23:99:9e:b8:69:0f:c4: 2f:2f:6b:49:01:9a:ee:48:f6:95:ae:ef:49:b3:31: 7a:d9:3a:f2:dd:6b:0d:18:91:c7:da:83:63:13:00: e4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7C:51:6A:14:81:F0:CE:04:5C:D3:F5:47:AD:84:2C:39:85:9B:C5 X509v3 Authority Key Identifier: keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:67:c3:4c:92:1f:0e:44:9e:3d:91:39:48:cc:f8:6a:5e:7a: c5:3f:58:8b:b0:53:1d:24:79:17:b8:22:09:1c:5f:e6:f5:39: a5:ff:b6:52:03:cc:78:fa:7c:74:1b:9e:cf:e8:8b:8c:83:2e: 69:c7:29:c9:e1:36:7c:c2:1c:0f:49:a8:d8:a3:f8:57:69:50: 51:ee:16:ea:e8:16:95:99:49:87:83:b9:0e:2e:5a:b6:b1:e3: 7c:69:e1:a4:93:fc:17:c3:f5:7e:61:2d:f9:66:91:80:89:94: b5:c7:33:d4:18:8c:14:1b:66:20:a3:28:a7:57:e8:36:29:39: d4:c7:98:7a:af:4b:15:72:f4:6c:19:9c:85:a9:c3:02:c9:de: c1:e6:87:61:5e:12:a0:9e:ef:f9:d2:23:c7:90:1d:60:aa:39: cd:ff:de:c7:26:26:fd:76:e7:3f:4e:d8:4e:79:42:46:50:83: a6:22:c6:1c:15:ac:3c:14:92:3f:58:72:de:52:3e:24:59:9f: 2a:4d:3d:ab:c2:8e:35:79:ba:0f:cb:0c:b9:98:f9:cf:85:c8: 02:52:f0:4c:26:b6:f3:7f:7f:3e:e6:a5:1c:62:66:7a:f0:20: ec:1d:1f:f8:2b:3a:70:3c:b3:63:b1:cf:f4:2b:3f:59:4d:60: 47:78:4f:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBz6PeQs809IqBhYabxDVb7QmRNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2 OUY0ODI5RTAeFw0yNjA2MTMyMzAyMDhaFw0yNjA2MTUwMDE0MDhaMDMxMTAvBgNV BAMTKDZDN0M1MTZBMTQ4MUYwQ0UwNDVDRDNGNTQ3QUQ4NDJDMzk4NTlCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEG+vskgQgJF1BTkPKwdssyPpe BBjkFiTjG8WNiyd4NNJSqiBbYlxPqpOJ1StZvMIXJD3jyk2DOmhg17Lh4BwwGoi1 3eko/RYk9RrAAOcd8Pn2f86d/0sCZBjd8qlYKMWBH7X6X6q2h1YgVa+gQ8OVi6KT aWjuA6GXb6YTUeYfNeOBjw2Sh3CWy+naFShsp0cXC+zmK4SR76iNCYIkV1Py5Xlx 8iph3pOs6C7PIZf2rmIuDI2hrfovHdRT3pc2YMZLiaQ1NC7WXIbRlbJJJTipKJtm UdSPuNg3I5meuGkPxC8va0kBmu5I9pWu70mzMXrZOvLdaw0Ykcfag2MTAORtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbHxRahSB8M4EXNP1R62ELDmFm8UwHwYDVR0j BBgwFoAUQ+ejCll7sylzyythedmtiWn0gp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM4ZDU4MGItNDUyZS00MmQ3LWIwNDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1 OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2OUY0ODI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0U3QTMwQTU5N0JCMzI5NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4 MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFE ODk2OUY0ODI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpnw0ySHw5Enj2ROUjM+GpeesU/WIuwUx0k eRe4IgkcX+b1OaX/tlIDzHj6fHQbns/oi4yDLmnHKcnhNnzCHA9JqNij+FdpUFHu FuroFpWZSYeDuQ4uWrax43xp4aST/BfD9X5hLflmkYCJlLXHM9QYjBQbZiCjKKdX 6DYpOdTHmHqvSxVy9GwZnIWpwwLJ3sHmh2FeEqCe7/nSI8eQHWCqOc3/3scmJv12 5z9O2E55QkZQg6YixhwVrDwUkj9Yct5SPiRZnypNPavCjjV5ug/LDLmY+c+FyAJS 8EwmtvN/fz7mpRxiZnrwIOwdH/grOnA8s2Oxz/QrP1lNYEd4T8s= -----END CERTIFICATE-----Generated at Sun Jun 14 08:47:10 2026 by rpki-client