$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft File: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft (raw, json) Hash identifier: XV4DMrQWku811wjtqbHibQsoSlRkhmtmn3Y0eD1hb08= Subject key identifier: 4A:0F:94:A3:BC:6E:09:B0:4B:CB:75:0A:A7:14:45:07:6D:55:47:33 Authority key identifier: 43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC Certificate issuer: /CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Certificate serial: 3AE3E01B3CCC0CE034F531C9856BFAEC48E1B3B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:44:02 +0000 Manifest this update: Thu 24 Sep 2026 06:39:02 +0000 Manifest next update: Fri 25 Sep 2026 09:19:02 +0000 Files and hashes: 1: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: 8so5gt5H9uGwMpnvmuPmOphhipCyfITSegbgfqUMLB8=) 2: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: zK6cRL88GJh6m3ulXU/23rYWx1uCoF/U17/Vb4bnDxI=) 3: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: zJ5Jgen43BSfgth1+Wx2KQ4rMgZaYS8tSCDudAuawmM=) 4: 43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl (hash: tR4QwWE1mcSo+isVrh0YEJphDec6lwJ9580ehKClUXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e3:e0:1b:3c:cc:0c:e0:34:f5:31:c9:85:6b:fa:ec:48:e1:b3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Validity Not Before: Sep 24 06:39:02 2026 GMT Not After : Sep 25 09:19:02 2026 GMT Subject: CN=4A0F94A3BC6E09B04BCB750AA71445076D554733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:b8:a3:34:d2:84:72:f2:ae:25:a4:ec:e7: 3e:e7:9f:34:86:fc:48:c1:a5:1f:f8:b8:b0:de:37: dd:5a:62:54:26:ef:c7:a2:f5:84:b0:5e:44:06:e5: 04:ea:71:e8:45:5b:77:0b:4f:c9:65:d4:e2:9c:17: 4c:d3:0f:7b:59:25:91:97:77:98:e4:9d:f2:29:c2: 49:d0:b9:e3:54:83:62:1d:c2:90:4c:4a:c2:5a:b4: d4:51:e3:2b:3f:8a:03:cf:c7:72:21:66:08:cc:72: e3:c8:90:fa:e7:34:23:2d:c2:1a:9e:8e:e7:41:bf: 28:95:4f:f5:0a:19:2d:4f:9c:5c:23:4c:25:c7:d5: b9:49:39:47:91:8d:54:f1:bc:85:2f:9f:0c:f5:dc: f8:a9:c7:52:54:1a:5b:7e:bf:f5:66:e1:7e:2c:60: 79:6d:8a:0e:6b:9c:2d:22:c1:37:fa:0f:91:26:57: 13:18:4b:01:01:0d:a5:85:5e:cb:d9:e8:16:9a:4a: 75:52:b7:b9:de:12:34:a7:d4:b8:31:4b:4f:3d:df: 07:0a:ff:7c:13:70:dc:8e:0c:f0:f8:4c:64:1d:77: 08:68:6a:a4:57:d8:f5:42:f1:d8:a7:22:db:3d:b1: ad:08:9d:4c:08:9d:59:d7:e5:96:94:dc:25:10:c7: a1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0F:94:A3:BC:6E:09:B0:4B:CB:75:0A:A7:14:45:07:6D:55:47:33 X509v3 Authority Key Identifier: keyid:43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a1:92:4a:94:3b:be:87:ee:cc:b8:a4:38:00:6e:6e:68:1c: 72:2a:be:61:fb:6b:a4:93:60:17:b2:d1:80:dc:1c:60:ed:b7: 31:6c:ca:bf:c9:1a:fc:35:b2:07:f5:55:a6:ff:67:21:8e:ff: 7e:fb:06:fa:2d:29:50:73:38:5e:25:06:21:38:81:ae:72:58: 44:22:d1:89:fe:97:dd:84:7f:f7:98:28:a8:d8:44:ad:6a:5b: 36:b8:52:d2:62:f0:7a:6f:23:0b:28:97:2e:0f:53:16:4f:27: 18:31:e1:36:09:ee:0d:db:13:2e:fa:fa:d0:44:32:14:8c:80: a0:74:cb:81:fb:dd:7d:0c:e4:bb:61:da:89:c4:de:5a:2b:8c: 69:c8:1a:98:40:5d:00:7a:11:03:b1:09:5a:f0:7c:be:ed:79: 6f:90:7e:5e:9b:62:3b:c9:d4:c8:4e:4a:8f:08:55:73:f9:ee: 28:d7:6b:96:c9:08:ce:84:3d:a7:51:42:a9:b8:49:da:09:4a: ea:b2:c5:6a:36:3b:d5:c3:3b:84:8e:e5:e4:70:26:12:38:9a: ba:ee:63:8c:f6:40:b9:c4:77:59:a2:e1:30:e0:a2:6b:0e:6a: 95:c6:63:70:e8:de:d2:88:fb:37:0a:1a:fc:fc:a1:3c:da:15: 84:50:de:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuPgGzzMDOA09THJhWv67Ejhs7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQz NzQyQjNCQzAeFw0yNjA5MjQwNjM5MDJaFw0yNjA5MjUwOTE5MDJaMDMxMTAvBgNV BAMTKDRBMEY5NEEzQkM2RTA5QjA0QkNCNzUwQUE3MTQ0NTA3NkQ1NTQ3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiX7ijNNKEcvKuJaTs5z7nnzSG /EjBpR/4uLDeN91aYlQm78ei9YSwXkQG5QTqcehFW3cLT8ll1OKcF0zTD3tZJZGX d5jknfIpwknQueNUg2IdwpBMSsJatNRR4ys/igPPx3IhZgjMcuPIkPrnNCMtwhqe judBvyiVT/UKGS1PnFwjTCXH1blJOUeRjVTxvIUvnwz13Pipx1JUGlt+v/Vm4X4s YHltig5rnC0iwTf6D5EmVxMYSwEBDaWFXsvZ6BaaSnVSt7neEjSn1LgxS0893wcK /3wTcNyODPD4TGQddwhoaqRX2PVC8dinIts9sa0InUwInVnX5ZaU3CUQx6FZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSg+Uo7xuCbBLy3UKpxRFB21VRzMwHwYDVR0j BBgwFoAUQ/iW7rcPL5eIP/RZyuOstDdCs7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MzM5MzQtMzg0NC00NjUzLThmYWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVC NzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQzNzQyQjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0Y4OTZFRUI3MEYyRjk3ODgzRkY0NTlDQUUzQUNCNDM3NDJC M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FD QjQzNzQyQjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6hkkqUO76H7sy4pDgAbm5oHHIqvmH7a6ST YBey0YDcHGDttzFsyr/JGvw1sgf1Vab/ZyGO/377BvotKVBzOF4lBiE4ga5yWEQi 0Yn+l92Ef/eYKKjYRK1qWza4UtJi8HpvIwsoly4PUxZPJxgx4TYJ7g3bEy76+tBE MhSMgKB0y4H73X0M5Lth2onE3lorjGnIGphAXQB6EQOxCVrwfL7teW+Qfl6bYjvJ 1MhOSo8IVXP57ijXa5bJCM6EPadRQqm4SdoJSuqyxWo2O9XDO4SO5eRwJhI4mrru Y4z2QLnEd1mi4TDgomsOapXGY3Do3tKI+zcKGvz8oTzaFYRQ3r8= -----END CERTIFICATE-----Generated at Thu Sep 24 10:12:36 2026 by rpki-client