$ rpki-client -vvf rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft File: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft (raw, json) Hash identifier: IRK1XoCg8fWdr3WKANsHz4Y4tEOjulyaXaX2sIc/qPM= Subject key identifier: 61:11:AA:A7:6E:CA:91:79:72:9A:C5:E3:58:B8:E2:6C:8A:AB:81:03 Authority key identifier: 43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 Certificate issuer: /CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Certificate serial: 0F7987CFFEB5432B2482D0C7C4AFD84B8C8D6334 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 13:20:52 +0000 Manifest this update: Sat 13 Jun 2026 13:15:52 +0000 Manifest next update: Sun 14 Jun 2026 15:59:52 +0000 Files and hashes: 1: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: UF6agt0uAGTYKvSykXC4qalAzD3vwK1cnzV5myQ1GUY=) 2: 43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl (hash: ebbAiSZzGD0a9MEvKWqPuXkMrIgCJA7y/vc+SiMtUsc=) 3: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: j4dDYSTdl5zyq2E6gFmPn2O8HAKj+mVFK8qjYvnr4Tk=) 4: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: lOYan/tTMeCFnrAywnM0SljREMtkE1qDoXn8AuN63bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:79:87:cf:fe:b5:43:2b:24:82:d0:c7:c4:af:d8:4b:8c:8d:63:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D0943D0AD49FD34D79A7F436D9F7AF552F6702 Validity Not Before: Jun 13 13:15:52 2026 GMT Not After : Jun 14 15:59:52 2026 GMT Subject: CN=6111AAA76ECA9179729AC5E358B8E26C8AAB8103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:b1:9c:a7:4f:73:7b:fb:3e:ce:4a:9d:60: dc:46:a7:c4:db:4e:14:7d:ed:a7:ac:37:fb:f5:de: 26:71:91:c9:5e:9f:6e:13:e9:da:09:48:d9:7a:2f: 93:ea:07:48:bc:2a:71:79:0b:b6:c3:1f:e2:33:23: 41:54:b7:55:c1:cb:46:89:81:97:78:f0:a8:f2:6a: 24:dc:48:47:d6:9a:1d:64:df:54:a7:f2:60:a7:e1: e3:7c:d3:e6:8b:9c:d9:b1:8c:7f:92:20:3e:73:b1: f8:59:3c:5d:6e:07:75:2e:72:46:e4:aa:79:19:7a: db:e4:8e:c1:8c:93:55:a1:b5:78:00:a3:d6:f9:42: a9:0b:44:78:9c:48:09:47:85:80:fd:98:16:7e:97: 81:b1:5d:fe:ce:c8:d8:3f:5d:b1:8b:f5:93:bf:f8: b8:cf:e7:a3:38:9f:e9:ef:44:bd:55:9e:01:d1:49: 7d:0e:72:44:fd:88:98:fa:20:fe:e6:65:f8:8c:63: 2b:ba:a1:b5:5f:ef:0e:ac:28:65:ce:3d:40:eb:0b: 14:10:1e:b7:f1:4c:9c:55:32:4d:57:f5:2d:26:7a: ce:b3:1a:77:ba:cc:21:dd:76:00:fe:bf:86:ce:bf: 57:f4:7f:a6:4f:d8:3d:f0:d7:89:97:a0:58:32:b2: 79:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:11:AA:A7:6E:CA:91:79:72:9A:C5:E3:58:B8:E2:6C:8A:AB:81:03 X509v3 Authority Key Identifier: keyid:43:D0:94:3D:0A:D4:9F:D3:4D:79:A7:F4:36:D9:F7:AF:55:2F:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/43D0943D0AD49FD34D79A7F436D9F7AF552F6702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1c:34:5a:c2:3b:2f:d8:63:87:ed:68:c9:d8:8d:e9:9c:e8: 1d:2f:4c:9a:73:f6:7d:3b:e8:8c:2c:5e:1b:53:90:c4:c1:07: 74:ce:b1:5b:fe:85:8c:c6:fb:1b:b5:59:cc:48:99:89:62:da: db:d5:57:6b:b9:e0:0a:a5:54:93:95:29:77:ca:e3:91:96:e8: f4:cc:32:f1:b0:7e:97:ac:6f:29:06:f8:07:88:5c:b5:e0:39: 0c:b9:ec:56:e1:e1:56:59:29:5b:ed:c6:bb:ea:39:eb:a1:50: 9d:34:a9:ef:41:13:b7:da:d2:78:8d:e3:87:bc:fb:37:00:74: d2:63:c2:47:c0:74:aa:84:51:97:b2:7c:49:c7:b9:dd:1c:ec: 4a:42:ce:20:91:b9:ec:57:43:fc:88:4a:f5:d7:0f:65:d2:bf: d9:c9:18:dc:97:70:f6:bc:c4:03:37:75:af:db:db:d3:34:3f: 09:c4:d8:63:80:f1:73:53:c9:f7:96:28:a9:c0:6f:f3:28:fa: 88:8e:de:af:cb:f6:83:b6:84:17:62:c1:6a:7c:e3:1d:f6:b8: b4:4c:28:8c:a7:66:eb:9b:dc:af:24:36:54:55:5b:49:4f:d1: fc:55:af:b5:8c:0b:ed:a3:99:2b:d0:14:2a:1a:04:6a:6a:74: 73:32:3b:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3mHz/61QyskgtDHxK/YS4yNYzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1 NTJGNjcwMjAeFw0yNjA2MTMxMzE1NTJaFw0yNjA2MTQxNTU5NTJaMDMxMTAvBgNV BAMTKDYxMTFBQUE3NkVDQTkxNzk3MjlBQzVFMzU4QjhFMjZDOEFBQjgxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tLGcp09ze/s+zkqdYNxGp8Tb ThR97aesN/v13iZxkclen24T6doJSNl6L5PqB0i8KnF5C7bDH+IzI0FUt1XBy0aJ gZd48KjyaiTcSEfWmh1k31Sn8mCn4eN80+aLnNmxjH+SID5zsfhZPF1uB3Uuckbk qnkZetvkjsGMk1WhtXgAo9b5QqkLRHicSAlHhYD9mBZ+l4GxXf7OyNg/XbGL9ZO/ +LjP56M4n+nvRL1VngHRSX0OckT9iJj6IP7mZfiMYyu6obVf7w6sKGXOPUDrCxQQ HrfxTJxVMk1X9S0mes6zGne6zCHddgD+v4bOv1f0f6ZP2D3w14mXoFgysnnpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYRGqp27KkXlymsXjWLjibIqrgQMwHwYDVR0j BBgwFoAUQ9CUPQrUn9NNeaf0Ntn3r1UvZwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjczNTA3ZjMtZjhjMC00MTBiLWIxOWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0Qw QUQ0OUZEMzRENzlBN0Y0MzZEOUY3QUY1NTJGNjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0QwOTQzRDBBRDQ5RkQzNEQ3OUE3RjQzNkQ5RjdBRjU1MkY2 NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvNDNEMDk0M0QwQUQ0OUZEMzRENzlBN0Y0MzZEOUY3 QUY1NTJGNjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYcNFrCOy/YY4ftaMnYjemc6B0vTJpz9n07 6IwsXhtTkMTBB3TOsVv+hYzG+xu1WcxImYli2tvVV2u54AqlVJOVKXfK45GW6PTM MvGwfpesbykG+AeIXLXgOQy57Fbh4VZZKVvtxrvqOeuhUJ00qe9BE7fa0niN44e8 +zcAdNJjwkfAdKqEUZeyfEnHud0c7EpCziCRuexXQ/yISvXXD2XSv9nJGNyXcPa8 xAM3da/b29M0PwnE2GOA8XNTyfeWKKnAb/Mo+oiO3q/L9oO2hBdiwWp84x32uLRM KIynZuub3K8kNlRVW0lP0fxVr7WMC+2jmSvQFCoaBGpqdHMyO5w= -----END CERTIFICATE-----Generated at Sun Jun 14 04:10:40 2026 by rpki-client