$ rpki-client -vvvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft File: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft (raw, json) Hash identifier: TcZYzMGotcvo0xWl+zMKaxJpe2tuRXV0uoxsMjnx1rg= Subject key identifier: AF:61:75:D4:31:FB:E1:5D:00:6B:06:60:BD:E9:A6:2E:D1:B2:85:CC Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Certificate serial: 68DBE2ED92CDF7C0DCC737590C4EF072FCF173D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft Manifest number: D8 Signing time: Sun 11 Oct 2026 01:02:44 +0000 Manifest this update: Sun 11 Oct 2026 00:57:44 +0000 Manifest next update: Mon 12 Oct 2026 01:10:44 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=) 2: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: 6T6qe96D7zQgyFzklJ6iaQcLNZnBxADfp/QBK9mZ1I4=) 3: 43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl (hash: ozmlvR4D1yjjgVOgCTTD7aXD2qCcTWyNjmYw9NKROt4=) 4: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: q99UPT0teezCe/Wtc8EBt8wiQOUmurJEflzD8Gd4ong=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:db:e2:ed:92:cd:f7:c0:dc:c7:37:59:0c:4e:f0:72:fc:f1:73:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E Validity Not Before: Oct 11 00:57:44 2026 GMT Not After : Oct 12 01:10:44 2026 GMT Subject: CN=AF6175D431FBE15D006B0660BDE9A62ED1B285CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5c:5b:3b:d0:79:d9:2a:da:0b:02:b5:04:eb: db:0c:87:65:58:08:06:4e:2c:b5:cf:11:bc:e3:92: e5:56:72:b9:89:e3:cb:62:d3:d5:c0:92:c8:92:f5: 49:30:ed:37:fd:9f:77:8a:04:55:a9:49:ff:3e:04: 1b:92:11:8b:e4:42:e9:e2:dd:7e:e7:73:25:ad:47: af:35:fb:18:ca:92:05:1e:e7:1d:86:b2:b9:68:13: f6:41:47:60:b9:8e:8a:c5:c7:a2:5c:31:1a:90:f7: 0d:3e:16:11:cb:cd:ed:d9:a6:9f:74:a3:1f:4c:9d: 23:35:81:1b:07:6b:78:fd:e1:1d:1d:28:c3:e3:8f: f1:da:2f:79:3b:c0:d4:b6:a2:4c:af:5e:1f:ea:a2: b2:17:84:0a:19:df:c2:ab:c6:c3:18:be:c9:9a:25: 19:48:c4:0b:65:26:b7:96:9f:75:e5:e4:38:81:ee: 6b:6b:8f:c7:f2:6b:d8:ca:70:ac:6b:55:d6:e2:7b: 08:7c:be:34:f5:25:11:21:85:00:da:b1:4f:1d:0e: 13:71:b4:b2:19:37:39:d9:4c:bb:18:75:15:db:f8: 89:95:87:74:16:89:2f:b1:37:27:ff:92:a5:bb:53: 03:c2:73:d9:01:b5:ef:ae:0d:af:6c:1c:8d:f6:0e: 00:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:75:D4:31:FB:E1:5D:00:6B:06:60:BD:E9:A6:2E:D1:B2:85:CC X509v3 Authority Key Identifier: keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0d:8e:ba:50:e7:8d:02:ee:1f:12:22:e6:87:ec:ed:1a:c4: 18:11:9e:37:2d:94:48:90:81:52:48:8f:26:48:f2:f2:86:4f: ef:8a:a3:76:f5:56:8d:8f:a5:18:61:51:5b:ec:ee:fa:e5:7e: 85:6b:99:f2:78:62:1d:55:53:02:05:48:68:5f:a9:4f:d5:0f: ea:d7:cf:47:33:a3:54:af:c4:8b:23:8c:b4:fb:50:d6:31:ca: 40:d4:1a:2b:ad:f2:dc:f9:5f:5c:d9:83:b2:49:ae:e3:4f:9d: 0d:9b:6e:df:93:5b:b1:67:e9:44:c7:5e:8c:da:47:21:3d:0c: c8:80:38:31:6c:65:54:d7:8d:f0:86:2e:2c:86:7b:5a:33:a6: e7:21:21:f5:21:a8:8d:f1:d4:ba:3b:96:53:d4:40:45:2b:d1: 04:20:cf:97:9a:05:97:f9:b5:d0:40:9f:14:5d:d3:04:c6:d6: ef:ab:44:33:79:c8:b3:ee:2c:ed:ec:57:80:db:9b:fd:64:a5: e9:00:37:bd:01:25:58:19:a1:49:9d:89:6f:c4:d6:8d:20:c4: b4:33:57:24:a7:5f:5d:cb:7a:d5:c7:e0:3a:75:22:79:8c:6f: 29:ed:9a:a4:d8:67:5d:c7:89:e4:1c:df:ef:78:96:d0:47:44: 78:c9:9f:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNvi7ZLN98DcxzdZDE7wcvzxc9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2 OUY0ODI5RTAeFw0yNjEwMTEwMDU3NDRaFw0yNjEwMTIwMTEwNDRaMDMxMTAvBgNV BAMTKEFGNjE3NUQ0MzFGQkUxNUQwMDZCMDY2MEJERTlBNjJFRDFCMjg1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXFs70HnZKtoLArUE69sMh2VY CAZOLLXPEbzjkuVWcrmJ48ti09XAksiS9Ukw7Tf9n3eKBFWpSf8+BBuSEYvkQuni 3X7ncyWtR681+xjKkgUe5x2GsrloE/ZBR2C5jorFx6JcMRqQ9w0+FhHLze3Zpp90 ox9MnSM1gRsHa3j94R0dKMPjj/HaL3k7wNS2okyvXh/qorIXhAoZ38KrxsMYvsma JRlIxAtlJreWn3Xl5DiB7mtrj8fya9jKcKxrVdbiewh8vjT1JREhhQDasU8dDhNx tLIZNznZTLsYdRXb+ImVh3QWiS+xNyf/kqW7UwPCc9kBte+uDa9sHI32DgAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr2F11DH74V0AawZgvemmLtGyhcwwHwYDVR0j BBgwFoAUQ+ejCll7sylzyythedmtiWn0gp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM4ZDU4MGItNDUyZS00MmQ3LWIwNDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1 OTdCQjMyOTczQ0IyQjYxNzlEOUFEODk2OUY0ODI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0U3QTMwQTU5N0JCMzI5NzNDQjJCNjE3OUQ5QUQ4OTY5RjQ4 MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNDNFN0EzMEE1OTdCQjMyOTczQ0IyQjYxNzlEOUFE ODk2OUY0ODI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8NjrpQ540C7h8SIuaH7O0axBgRnjctlEiQ gVJIjyZI8vKGT++Ko3b1Vo2PpRhhUVvs7vrlfoVrmfJ4Yh1VUwIFSGhfqU/VD+rX z0czo1SvxIsjjLT7UNYxykDUGiut8tz5X1zZg7JJruNPnQ2bbt+TW7Fn6UTHXoza RyE9DMiAODFsZVTXjfCGLiyGe1ozpuchIfUhqI3x1Lo7llPUQEUr0QQgz5eaBZf5 tdBAnxRd0wTG1u+rRDN5yLPuLO3sV4Dbm/1kpekAN70BJVgZoUmdiW/E1o0gxLQz VySnX13LetXH4Dp1InmMbyntmqTYZ13HieQc3+94ltBHRHjJn7o= -----END CERTIFICATE-----Generated at Sun Oct 11 07:23:31 2026 by rpki-client