$ rpki-client -vvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft File: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft (raw, json) Hash identifier: QwJgUnEcbW1dg2cJRF2PYMiCvnR2J1tgN/JFWTykQdE= Subject key identifier: F2:07:45:EC:93:E5:83:A2:21:58:72:A0:6F:DB:C6:CB:0D:7A:98:9E Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Certificate serial: 23281994B20DF9388F73C2F6E99935018277219D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 04:21:22 +0000 Manifest this update: Wed 29 Jul 2026 04:16:22 +0000 Manifest next update: Thu 30 Jul 2026 05:32:22 +0000 Files and hashes: 1: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl (hash: qRfHQbGzGg542nY7gPGRXyF39Qx8MeJ+XXwQRbpOhOw=) 2: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: q99UPT0teezCe/Wtc8EBt8wiQOUmurJEflzD8Gd4ong=) 3: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: 6T6qe96D7zQgyFzklJ6iaQcLNZnBxADfp/QBK9mZ1I4=) 4: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:28:19:94:b2:0d:f9:38:8f:73:c2:f6:e9:99:35:01:82:77:21:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Validity Not Before: Jul 29 04:16:22 2026 GMT Not After : Jul 30 05:32:22 2026 GMT Subject: CN=F20745EC93E583A2215872A06FDBC6CB0D7A989E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:8f:6f:d3:96:c7:22:ef:ff:95:5a:05:10: 6f:a6:42:00:4f:f0:f5:a2:f5:81:96:1d:42:4a:71: 6c:60:56:e9:e9:6b:84:dd:37:15:08:59:c4:34:fa: bb:82:15:82:03:94:e7:7d:f9:b7:e1:ca:1b:6e:c0: c4:89:15:28:60:ce:2d:07:1e:86:db:c6:b8:66:2f: 39:05:f3:35:71:1b:cb:f9:fe:f8:ca:81:93:11:a7: 1a:bc:98:92:bc:18:1b:24:1a:b5:43:7b:32:ed:1f: 47:bf:88:5c:3a:47:a8:c8:1f:78:0a:93:60:1c:d9: e8:0e:45:20:84:6e:65:61:a5:ce:75:76:bf:86:91: 5b:e1:82:3c:ec:2a:9c:18:34:1f:4a:ce:fa:f0:a4: 08:3f:16:b6:3f:47:06:c8:3f:ed:79:38:1a:70:a5: fb:5b:f5:8e:3d:83:47:55:b1:79:77:f1:86:56:be: 20:82:71:c9:2f:b9:b7:15:52:ad:38:0c:a6:f5:e7: e1:66:9b:8a:79:bb:be:99:90:79:1c:e4:72:0d:25: ac:05:5d:e3:a0:e0:80:e8:8f:8a:a9:75:f3:3d:bc: e7:2f:1e:5a:34:cc:e0:42:e0:ca:27:86:6a:28:24: 72:34:5a:22:df:4f:fd:10:fd:c6:7e:bd:8d:3c:d1: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:07:45:EC:93:E5:83:A2:21:58:72:A0:6F:DB:C6:CB:0D:7A:98:9E X509v3 Authority Key Identifier: keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f4:03:c3:ee:e9:09:ca:d9:58:dd:e2:5b:a1:52:f2:4c:ca: f6:a2:84:1b:1f:c0:89:3f:5c:62:09:c4:35:5d:d8:5c:9b:67: 6b:77:ec:17:4a:ab:b8:63:98:07:d2:8e:0d:5d:d2:bb:6b:c6: 44:44:09:7e:1c:0a:4d:35:81:3f:f8:f9:2e:bd:47:07:c1:89: 9f:4b:14:a1:bb:a4:75:04:28:68:bc:3a:cf:e8:e6:a0:a9:87: e1:be:a8:0a:70:b9:e8:83:28:8c:69:83:89:53:cc:8a:da:83: e0:7b:0a:c4:3a:d7:f9:80:95:f5:21:45:9f:06:2b:f9:95:0c: ed:b4:06:a6:d0:76:8e:52:0e:ab:bc:9d:83:c5:21:c8:f3:17: 90:b6:39:89:43:eb:8b:b1:f0:8f:89:34:88:c7:f5:98:09:9c: af:b4:77:6c:68:b3:5f:23:97:fe:2d:30:bd:fc:9d:54:a7:81: 01:45:eb:d7:52:c1:17:cc:72:9d:31:22:45:b7:0c:00:aa:18: 92:94:0a:4a:94:90:b7:38:97:5f:c3:70:c6:cb:c3:fc:a2:0b: 1c:4f:7c:95:28:31:4d:19:44:af:23:24:b4:ca:9e:46:22:70: 80:2b:d8:6d:57:8a:74:24:81:1c:fe:38:4f:d4:df:8a:4f:8e: 8d:01:3f:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIygZlLIN+TiPc8L26Zk1AYJ3IZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2 OUY0ODI5RTAeFw0yNjA3MjkwNDE2MjJaFw0yNjA3MzAwNTMyMjJaMDMxMTAvBgNV BAMTKEYyMDc0NUVDOTNFNTgzQTIyMTU4NzJBMDZGREJDNkNCMEQ3QTk4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzI9v05bHIu//lVoFEG+mQgBP 8PWi9YGWHUJKcWxgVunpa4TdNxUIWcQ0+ruCFYIDlOd9+bfhyhtuwMSJFShgzi0H HobbxrhmLzkF8zVxG8v5/vjKgZMRpxq8mJK8GBskGrVDezLtH0e/iFw6R6jIH3gK k2Ac2egORSCEbmVhpc51dr+GkVvhgjzsKpwYNB9KzvrwpAg/FrY/RwbIP+15OBpw pftb9Y49g0dVsXl38YZWviCCcckvubcVUq04DKb15+Fmm4p5u76ZkHkc5HINJawF XeOg4IDoj4qpdfM9vOcvHlo0zOBC4MonhmooJHI0WiLfT/0Q/cZ+vY080diLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8gdF7JPlg6IhWHKgb9vGyw16mJ4wHwYDVR0j BBgwFoAUQ+ejCll7sylzyythedmtiWn0gp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM4ZDU4MGItNDUyZS00MmQ3LWIwNDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1 OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2OUY0ODI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0U3QTMwQTU5N0JCMzI5NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4 MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFE ODk2OUY0ODI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP0A8Pu6QnK2Vjd4luhUvJMyvaihBsfwIk/ XGIJxDVd2FybZ2t37BdKq7hjmAfSjg1d0rtrxkRECX4cCk01gT/4+S69RwfBiZ9L FKG7pHUEKGi8Os/o5qCph+G+qApwueiDKIxpg4lTzIrag+B7CsQ61/mAlfUhRZ8G K/mVDO20BqbQdo5SDqu8nYPFIcjzF5C2OYlD64ux8I+JNIjH9ZgJnK+0d2xos18j l/4tML38nVSngQFF69dSwRfMcp0xIkW3DACqGJKUCkqUkLc4l1/DcMbLw/yiCxxP fJUoMU0ZRK8jJLTKnkYicIAr2G1XinQkgRz+OE/U34pPjo0BP9M= -----END CERTIFICATE-----Generated at Wed Jul 29 11:01:42 2026 by rpki-client