$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft File: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft (raw, json) Hash identifier: Ghs1PXkln4E3mfUL5Mlex4KPrb5cZVV2d3uiRQltujo= Subject key identifier: FE:41:B4:16:F2:87:10:5A:1D:E8:15:55:7D:F0:AB:7D:1D:E8:43:37 Authority key identifier: 43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 Certificate issuer: /CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Certificate serial: 63B453616965896E08DBCD72E11AF7EC4EB4DA63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:43:35 +0000 Manifest this update: Wed 17 Jun 2026 04:38:35 +0000 Manifest next update: Thu 18 Jun 2026 06:12:35 +0000 Files and hashes: 1: 43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl (hash: sQZQmlotJmVa+qyUMqyzvMGcfc+GnOUU5lyidxHgaPE=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: kfj+LC1/46I9BKuoHuEKXzZ9F4a4GvOD3Kj38WDtLhU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b4:53:61:69:65:89:6e:08:db:cd:72:e1:1a:f7:ec:4e:b4:da:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739 Validity Not Before: Jun 17 04:38:35 2026 GMT Not After : Jun 18 06:12:35 2026 GMT Subject: CN=FE41B416F287105A1DE815557DF0AB7D1DE84337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:68:30:af:28:35:7e:7d:2f:66:a2:26:7e: ff:f7:83:42:4b:65:81:61:1e:c9:e0:69:39:77:70: e1:be:7c:b3:ac:cb:6f:4f:d0:c3:7b:de:26:9a:80: 6b:17:40:a9:fb:67:44:ee:7b:66:61:b9:18:3f:e8: 80:fb:10:d4:ff:23:18:20:8f:da:14:d8:0a:93:64: e9:7e:61:fc:b6:c5:95:a8:8a:b0:da:e2:97:7c:14: ca:e6:ae:e3:96:7e:85:03:37:d0:d2:cc:1d:85:2d: 1f:18:f3:d5:9b:e3:de:45:2c:ee:ea:a5:51:b6:6e: 0d:18:5e:fd:e0:ab:34:7d:f9:fd:cd:77:df:8d:8e: 1d:56:66:f6:fa:26:f0:d8:23:9b:e1:5c:65:51:9f: 95:a2:33:0d:79:cc:77:bb:9a:ca:87:be:f4:f9:0d: 8c:db:2f:f2:c6:dd:cb:8b:ac:52:ef:82:7e:50:7a: e2:81:35:5b:c9:1d:46:d9:d1:2c:e1:11:a3:c8:17: 69:9e:84:2e:cc:e4:10:8f:6b:9b:33:58:2c:1a:00: 8a:77:c1:b9:e3:a2:42:1b:cd:d8:42:de:84:bc:ff: e8:7e:f9:0e:94:0b:0d:04:e8:8f:01:45:cc:0e:79: 93:0b:03:12:56:0a:03:09:de:09:89:ca:1c:7d:7d: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:41:B4:16:F2:87:10:5A:1D:E8:15:55:7D:F0:AB:7D:1D:E8:43:37 X509v3 Authority Key Identifier: keyid:43:B5:BF:29:3B:DB:40:62:E9:E1:7D:8A:7F:F9:D7:AD:AA:4C:57:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/43B5BF293BDB4062E9E17D8A7FF9D7ADAA4C5739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2b:3c:5b:1c:96:f5:ab:1c:e6:04:49:d4:5a:b8:a2:8d:20: f6:81:b2:ee:99:80:25:82:b8:13:25:38:b8:c4:a9:cf:f7:7a: 19:81:03:d4:17:12:4d:24:ef:91:14:38:71:1f:7a:08:ab:69: f8:ed:8c:34:1a:c3:7f:c8:5f:33:3d:b0:30:a4:33:60:c2:5b: 44:cb:03:5b:ba:d8:28:76:91:10:3e:35:b3:0d:72:cc:6f:7d: 7d:a8:28:65:d1:87:fc:1c:75:98:98:06:81:9b:fb:98:4f:e9: 51:e1:c2:7f:8c:ec:ef:43:09:51:45:77:0c:e6:34:8b:c5:5f: e2:a7:92:03:27:ff:f3:d1:91:30:54:d5:30:33:88:76:52:57: 03:9a:0e:a9:06:e1:01:3a:de:a9:d8:74:c7:b5:ae:df:87:1f: b4:47:f9:d4:79:54:01:f2:ab:3e:4a:c6:c0:d9:7c:dc:09:72: fe:fc:b8:e9:2e:4b:cc:3e:10:86:59:ff:f4:66:22:9e:b9:bf: 99:5a:31:10:93:fc:7a:f1:d6:e7:75:e6:dd:a1:ee:79:9c:d7: 77:04:1b:00:a1:45:79:1e:77:5d:26:8a:dc:d6:bd:6d:dd:41: 6a:32:c8:9b:dc:8b:47:af:a1:41:7b:44:c2:31:0d:f7:5d:db: b4:55:72:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7RTYWlliW4I281y4Rr37E602mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURB QTRDNTczOTAeFw0yNjA2MTcwNDM4MzVaFw0yNjA2MTgwNjEyMzVaMDMxMTAvBgNV BAMTKEZFNDFCNDE2RjI4NzEwNUExREU4MTU1NTdERjBBQjdEMURFODQzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVmgwryg1fn0vZqImfv/3g0JL ZYFhHsngaTl3cOG+fLOsy29P0MN73iaagGsXQKn7Z0Tue2ZhuRg/6ID7ENT/Ixgg j9oU2AqTZOl+Yfy2xZWoirDa4pd8FMrmruOWfoUDN9DSzB2FLR8Y89Wb495FLO7q pVG2bg0YXv3gqzR9+f3Nd9+Njh1WZvb6JvDYI5vhXGVRn5WiMw15zHe7msqHvvT5 DYzbL/LG3cuLrFLvgn5QeuKBNVvJHUbZ0SzhEaPIF2mehC7M5BCPa5szWCwaAIp3 wbnjokIbzdhC3oS8/+h++Q6UCw0E6I8BRcwOeZMLAxJWCgMJ3gmJyhx9fU4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/kG0FvKHEFod6BVVffCrfR3oQzcwHwYDVR0j BBgwFoAUQ7W/KTvbQGLp4X2Kf/nXrapMVzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhODg4OTctYzM4Ny00NzM1LWFjZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkz QkRCNDA2MkU5RTE3RDhBN0ZGOUQ3QURBQTRDNTczOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0I1QkYyOTNCREI0MDYyRTlFMTdEOEE3RkY5RDdBREFBNEM1 NzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvNDNCNUJGMjkzQkRCNDA2MkU5RTE3RDhBN0ZGOUQ3 QURBQTRDNTczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIErPFsclvWrHOYESdRauKKNIPaBsu6ZgCWC uBMlOLjEqc/3ehmBA9QXEk0k75EUOHEfegirafjtjDQaw3/IXzM9sDCkM2DCW0TL A1u62Ch2kRA+NbMNcsxvfX2oKGXRh/wcdZiYBoGb+5hP6VHhwn+M7O9DCVFFdwzm NIvFX+KnkgMn//PRkTBU1TAziHZSVwOaDqkG4QE63qnYdMe1rt+HH7RH+dR5VAHy qz5KxsDZfNwJcv78uOkuS8w+EIZZ//RmIp65v5laMRCT/Hrx1ud15t2h7nmc13cE GwChRXked10mitzWvW3dQWoyyJvci0evoUF7RMIxDfdd27RVckE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:30 2026 by rpki-client