
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json)
Hash identifier: bVO+aaqrVzqiYpWR80MA80BpukGvqZslGwQSDsDWHxQ=
Subject key identifier: 2F:C7:23:B9:41:05:F7:42:0F:3B:2B:C0:32:36:21:D2:D1:F9:38:A7
Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9
Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
Certificate serial: 48860C07FC272F571D7A6D3CD6AC82B288D5D94C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
Manifest number: 0205
Signing time: Thu 16 Apr 2026 14:51:31 +0000
Manifest this update: Thu 16 Apr 2026 14:46:31 +0000
Manifest next update: Sun 19 Apr 2026 21:29:31 +0000
Files and hashes: 1: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: wlFQ0Mhp/1XnwwUvAj+JZIZYp8c/czLKraMQXNmD1R0=)
2: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: IcwSV1+ysXFFRPLvvbLmgJZdnaDv3MbwibJNTgfkyW4=)
3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d/oqyDi4sv5f7bgdGzOv2LunD1qLNy94sxilYJ9cVe0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl
rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 21:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:86:0c:07:fc:27:2f:57:1d:7a:6d:3c:d6:ac:82:b2:88:d5:d9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
Validity
Not Before: Apr 16 14:46:31 2026 GMT
Not After : Apr 19 21:29:31 2026 GMT
Subject: CN=2FC723B94105F7420F3B2BC0323621D2D1F938A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:6d:b0:70:d5:4f:2c:43:fe:ce:0b:ab:8e:
6f:f3:9a:6b:05:15:08:bc:c5:8a:1a:4f:f0:13:d4:
3d:18:84:78:28:ca:f3:7c:39:5b:6a:ce:86:36:71:
31:99:70:fb:00:a6:fc:74:ac:7a:03:78:b4:34:aa:
19:8f:fd:cf:54:3b:64:f6:76:b4:c8:19:dc:72:1e:
2d:97:51:0f:d9:91:29:f8:7b:4e:e5:74:22:80:5d:
22:b7:76:de:ac:3c:60:d7:b6:e8:ed:6d:2f:6f:06:
4e:a0:66:f9:3c:08:33:fe:a3:5a:e0:84:8c:7e:1f:
96:6b:76:20:e8:68:c0:23:1a:0e:93:89:d2:67:fb:
1f:9b:2d:a8:59:78:d5:e6:e0:7c:9f:87:38:5c:bf:
4a:2b:db:d2:ca:d3:7a:cf:ee:25:3b:e2:8d:a1:ce:
a7:98:da:e9:13:e3:60:35:3d:4f:d9:76:e5:40:c4:
86:03:a3:25:c5:b4:77:ba:e7:d5:0c:a4:9c:b3:91:
f4:b3:a8:8a:5c:30:f9:93:8d:14:84:61:3e:27:e3:
52:81:ae:4c:cf:e2:d6:57:c8:d6:9c:68:0e:b3:b8:
b5:a2:f8:e9:cc:1c:c2:41:72:d0:db:49:bf:bc:31:
cf:81:ff:0f:c5:e2:ff:af:2f:1f:14:ca:a4:be:87:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:23:B9:41:05:F7:42:0F:3B:2B:C0:32:36:21:D2:D1:F9:38:A7
X509v3 Authority Key Identifier:
keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5e:21:30:17:2f:5d:53:12:7d:45:9f:9e:03:c3:af:62:49:
63:98:37:cd:84:fb:46:5e:b9:e1:bb:6f:ac:5e:4e:08:b9:ad:
9e:98:9f:f8:da:37:9a:9b:a3:a1:bd:95:7c:e3:68:2a:fe:68:
7f:35:9a:d5:7c:23:c2:da:fb:6e:2b:bd:13:a8:f4:4d:4e:96:
6f:40:2b:8b:1e:a1:03:f2:d2:cd:16:89:b3:96:44:b4:d6:a3:
50:60:72:bf:ff:8f:12:3e:8f:13:91:65:07:ec:28:a9:a1:2e:
1f:c5:65:a0:97:cf:24:43:b1:81:15:32:89:ea:4b:75:0b:10:
da:7c:5a:4b:17:a3:e2:31:1c:64:0b:18:c2:20:81:b4:24:bf:
ca:60:ca:e9:23:2c:da:5f:ea:30:5c:24:6d:9e:2a:e2:c5:4b:
93:de:83:df:07:0d:5b:a9:a6:65:3c:7e:b5:e0:e1:8f:78:c7:
02:a8:ff:4f:d1:97:a4:49:46:08:af:11:49:a0:b9:3f:92:9b:
ab:0f:b0:34:7b:e4:3d:e5:e9:2c:77:47:f0:20:16:0d:5a:04:
fb:3f:c2:9b:b6:ed:a1:98:b9:bb:16:9c:af:0d:c1:a5:42:58:
8c:cb:c6:0b:76:48:75:e7:0a:5e:da:be:1d:12:fa:e6:d9:1d:
94:bd:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:13 2026 by rpki-client