$ rpki-client -vvf rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft File: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft (raw, json) Hash identifier: PjmFMYsjEN2hiGXpwXyXwsNyG3Hl3tBynQgEeDxLNts= Subject key identifier: 96:F5:9F:9B:85:53:4D:65:B4:87:10:2D:1B:7D:B5:C1:90:D9:C9:15 Authority key identifier: 43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 Certificate issuer: /CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Certificate serial: 1F47D7217380ED501E8C42C32AA3DD08FAC767B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft Manifest number: 78 Signing time: Wed 29 Jul 2026 11:04:18 +0000 Manifest this update: Wed 29 Jul 2026 10:59:18 +0000 Manifest next update: Thu 30 Jul 2026 11:16:18 +0000 Files and hashes: 1: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl (hash: rWHZmR5zOL3S1ba2RZkxkftEay8SYVjBdOxJo9FHWWE=) 2: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: j4dDYSTdl5zyq2E6gFmPn2O8HAKj+mVFK8qjYvnr4Tk=) 3: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: lOYan/tTMeCFnrAywnM0SljREMtkE1qDoXn8AuN63bo=) 4: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: UF6agt0uAGTYKvSykXC4qalAzD3vwK1cnzV5myQ1GUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:47:d7:21:73:80:ed:50:1e:8c:42:c3:2a:a3:dd:08:fa:c7:67:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Validity Not Before: Jul 29 10:59:18 2026 GMT Not After : Jul 30 11:16:18 2026 GMT Subject: CN=96F59F9B85534D65B487102D1B7DB5C190D9C915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:d6:ee:4c:b8:83:c9:98:e6:52:e2:c5:67: cc:e6:54:eb:78:b4:91:f4:e2:cb:13:09:1a:a0:74: 68:aa:6f:76:a8:7d:d7:64:10:2e:ae:e6:ba:0c:90: 1d:83:96:bd:80:db:c4:ea:04:ff:1b:87:45:30:ff: 7b:98:7b:93:34:e6:de:8d:1c:70:f5:d9:07:81:10: 43:3a:32:0f:e3:88:3d:ff:fa:53:51:cb:a0:25:a5: 4a:39:a9:61:5c:e0:51:e2:fd:7f:67:00:c2:fc:a3: 9b:7c:1b:9a:9a:e0:1d:43:92:71:d8:ce:20:d4:87: 84:bd:c9:47:7f:00:7b:da:0e:08:7e:ec:82:1b:af: 50:60:c1:20:6d:da:81:a0:9e:f2:b2:b8:8d:7f:c1: d1:ba:f4:ae:7c:70:cd:45:71:a5:4a:e6:18:24:e4: f1:47:af:2f:87:04:90:3a:67:78:38:8c:bc:7e:bf: 10:76:fa:a2:16:93:44:cd:5c:9d:05:64:14:fa:e2: 11:b4:e3:4e:84:f2:96:34:69:2d:48:50:57:0f:75: 4d:10:9c:96:5d:bc:0c:64:16:82:0f:62:d9:8e:e2: 3f:50:f2:ac:bb:8d:fd:0b:bf:99:d6:fc:46:8d:4f: 11:9b:6a:83:5f:2b:a0:4c:1d:a2:3b:de:94:3a:eb: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F5:9F:9B:85:53:4D:65:B4:87:10:2D:1B:7D:B5:C1:90:D9:C9:15 X509v3 Authority Key Identifier: keyid:43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f0:01:d8:3a:cf:11:aa:40:b2:d7:bf:4e:d8:3f:90:03:bd: fa:4f:79:0b:b0:9e:b2:ff:50:4a:8b:ad:58:fe:3d:75:43:b7: 83:a6:b6:e0:3e:70:cd:82:2a:22:63:d0:72:22:99:51:0b:9d: c6:38:c8:0b:be:bf:ee:1a:55:8e:a7:c4:bd:d8:9d:ca:09:ed: 26:84:be:d0:b0:dc:c4:46:ef:98:1b:e5:40:18:f7:94:d3:71: 61:00:70:2a:72:31:05:2a:06:b9:a4:cb:e8:29:4a:df:c0:ef: 1f:25:cd:1e:bd:f2:a7:92:77:89:f5:b3:9f:42:0b:99:51:3d: c1:d7:c5:fa:a6:54:fc:ec:1c:14:a3:06:a6:11:7d:d5:11:c9: 2b:59:34:66:ef:c7:99:3f:de:f6:7b:2d:5d:f1:4b:89:75:d9: f6:f8:66:92:61:ef:58:2a:8b:7a:31:86:1f:7d:d0:14:17:0a: da:b8:6b:54:03:6a:54:09:5b:59:e9:5c:24:9f:40:03:2f:1c: e2:be:c0:5b:9c:b6:23:46:19:04:c2:f5:f1:67:13:1e:dc:17: 74:04:f1:7f:ca:b2:d9:6b:07:04:ca:78:7d:da:db:75:63:ad: e9:cf:11:5d:a3:3b:f0:00:f6:82:6f:cc:ef:3a:1e:5d:b2:10: 1e:2c:10:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0fXIXOA7VAejELDKqPdCPrHZ7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1 NTJGNjcwMjAeFw0yNjA3MjkxMDU5MThaFw0yNjA3MzAxMTE2MThaMDMxMTAvBgNV BAMTKDk2RjU5RjlCODU1MzRENjVCNDg3MTAyRDFCN0RCNUMxOTBEOUM5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uNbuTLiDyZjmUuLFZ8zmVOt4 tJH04ssTCRqgdGiqb3aofddkEC6u5roMkB2Dlr2A28TqBP8bh0Uw/3uYe5M05t6N HHD12QeBEEM6Mg/jiD3/+lNRy6AlpUo5qWFc4FHi/X9nAML8o5t8G5qa4B1DknHY ziDUh4S9yUd/AHvaDgh+7IIbr1BgwSBt2oGgnvKyuI1/wdG69K58cM1FcaVK5hgk 5PFHry+HBJA6Z3g4jLx+vxB2+qIWk0TNXJ0FZBT64hG0406E8pY0aS1IUFcPdU0Q nJZdvAxkFoIPYtmO4j9Q8qy7jf0Lv5nW/EaNTxGbaoNfK6BMHaI73pQ660GvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvWfm4VTTWW0hxAtG321wZDZyRUwHwYDVR0j BBgwFoAUQ9CUPQrUn9NNeaf0Ntn3r1UvZwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjczNTA3ZjMtZjhjMC00MTBiLWIxOWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0Qw QUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1NTJGNjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1MkY2 NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3 QUY1NTJGNjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7wAdg6zxGqQLLXv07YP5ADvfpPeQuwnrL/ UEqLrVj+PXVDt4OmtuA+cM2CKiJj0HIimVELncY4yAu+v+4aVY6nxL3YncoJ7SaE vtCw3MRG75gb5UAY95TTcWEAcCpyMQUqBrmky+gpSt/A7x8lzR698qeSd4n1s59C C5lRPcHXxfqmVPzsHBSjBqYRfdURyStZNGbvx5k/3vZ7LV3xS4l12fb4ZpJh71gq i3oxhh990BQXCtq4a1QDalQJW1npXCSfQAMvHOK+wFuctiNGGQTC9fFnEx7cF3QE 8X/KstlrBwTKeH3a23VjrenPEV2jO/AA9oJvzO86Hl2yEB4sEBY= -----END CERTIFICATE-----Generated at Wed Jul 29 15:21:43 2026 by rpki-client