$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: fiUqtuCzl2O9xsq2GCoYMlj+j1twVHwuumyazyWrrJc= Subject key identifier: 48:B6:9C:34:33:71:B5:A0:1D:F1:AA:92:36:F0:61:E8:7D:2C:D6:BA Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 54BE73B9BDC5EA40DDB50C65B58A79B602D67D7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: C3 Signing time: Sun 01 Mar 2026 01:22:32 +0000 Manifest this update: Sun 01 Mar 2026 01:17:32 +0000 Manifest next update: Wed 04 Mar 2026 05:41:32 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: efvZjdoEzl4ltcJM93Yzdf8ivA9svQHDMJI1cEF7zGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:be:73:b9:bd:c5:ea:40:dd:b5:0c:65:b5:8a:79:b6:02:d6:7d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Mar 1 01:17:32 2026 GMT Not After : Mar 4 05:41:32 2026 GMT Subject: CN=48B69C343371B5A01DF1AA9236F061E87D2CD6BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:c4:b7:71:fe:a8:8f:b5:6c:25:f3:42:fd: 4c:1a:9d:e6:4e:d0:87:30:c6:ae:e5:5f:de:1b:87: 11:13:92:c1:e4:12:a2:46:92:f3:bb:f1:11:e2:e2: 66:a3:ea:4d:d1:69:0f:e5:68:5a:6c:52:dc:59:c2: 9c:24:4a:48:69:d6:c0:d1:44:72:14:28:da:fc:fd: 6a:56:92:ee:5e:da:5f:25:68:40:ce:50:76:ba:66: 06:0a:ff:24:58:d8:2e:23:74:b1:49:65:52:d4:b0: ca:c3:82:bc:44:d1:aa:ab:f9:80:74:08:f3:51:9b: 7a:ea:d9:9a:ce:85:67:d3:d0:b9:2f:44:cd:0d:8d: 93:0a:c7:8a:23:13:6a:0b:4d:86:e6:12:0d:48:99: d0:90:de:4d:7d:fb:38:a1:0c:45:bf:b8:43:ad:f5: ff:a7:79:cd:12:41:ef:8d:21:34:91:0d:ba:50:e9: 45:94:fd:36:aa:22:4d:5f:56:8a:bd:2c:45:46:1d: fd:19:12:a8:fb:39:0c:e1:14:45:b7:08:9f:1c:e5: 62:d2:22:3b:1f:ee:49:c0:a3:eb:16:fc:0c:61:62: c5:9b:22:dd:06:9f:48:13:ef:a7:d5:e0:d0:dd:77: 7a:c0:e4:fb:73:7b:a9:45:92:d3:27:c4:7d:d6:19: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B6:9C:34:33:71:B5:A0:1D:F1:AA:92:36:F0:61:E8:7D:2C:D6:BA X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:2b:be:29:83:e6:d6:30:e8:e6:ea:84:35:c5:bc:a6:7c:cd: 88:cd:c2:54:91:40:ab:12:d6:f9:40:61:7c:5f:58:24:cb:26: 2e:3e:66:e7:34:a5:df:9a:b1:51:b6:f7:1e:85:10:1b:c9:1b: 7f:c8:33:c0:6c:dc:56:db:63:00:c0:70:54:04:c3:e9:6c:5f: 88:0d:ad:53:fe:9c:4b:90:b5:bb:f1:31:28:9d:96:32:33:c2: 19:7e:6f:c1:86:fa:af:50:7f:93:40:c0:57:57:ec:74:a9:bf: 55:bb:38:a0:33:e5:b5:17:bc:cd:76:e1:98:13:1b:3d:8c:c6: 2c:36:18:b1:42:06:40:2a:10:11:64:86:64:58:4d:2a:c1:5e: 86:84:9f:37:d6:26:b9:50:7b:f4:d0:e4:88:af:ec:86:f9:5f: bb:86:37:02:ff:8a:e7:b2:c2:8c:be:4b:01:db:f3:48:b6:cc: 52:e5:fb:f5:f0:e2:d6:57:65:72:e7:f4:ab:16:9b:91:01:22: 30:88:3e:8a:6a:de:89:f3:b3:51:33:bd:67:ed:6f:91:77:38: 34:b2:aa:c7:c7:63:df:3d:0c:36:79:31:92:75:fd:bb:6f:02: cd:8e:64:f7:a7:5e:68:c4:78:87:a2:61:de:e1:4d:da:5f:0c: 00:24:cf:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVL5zub3F6kDdtQxltYp5tgLWfX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNjAzMDEwMTE3MzJaFw0yNjAzMDQwNTQxMzJaMDMxMTAvBgNV BAMTKDQ4QjY5QzM0MzM3MUI1QTAxREYxQUE5MjM2RjA2MUU4N0QyQ0Q2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+sS3cf6oj7VsJfNC/UwaneZO 0Icwxq7lX94bhxETksHkEqJGkvO78RHi4maj6k3RaQ/laFpsUtxZwpwkSkhp1sDR RHIUKNr8/WpWku5e2l8laEDOUHa6ZgYK/yRY2C4jdLFJZVLUsMrDgrxE0aqr+YB0 CPNRm3rq2ZrOhWfT0LkvRM0NjZMKx4ojE2oLTYbmEg1ImdCQ3k19+zihDEW/uEOt 9f+nec0SQe+NITSRDbpQ6UWU/TaqIk1fVoq9LEVGHf0ZEqj7OQzhFEW3CJ8c5WLS Ijsf7knAo+sW/AxhYsWbIt0Gn0gT76fV4NDdd3rA5Ptze6lFktMnxH3WGewXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSLacNDNxtaAd8aqSNvBh6H0s1rowHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQrvimD5tYw6ObqhDXFvKZ8zYjNwlSRQKsS 1vlAYXxfWCTLJi4+Zuc0pd+asVG29x6FEBvJG3/IM8Bs3FbbYwDAcFQEw+lsX4gN rVP+nEuQtbvxMSidljIzwhl+b8GG+q9Qf5NAwFdX7HSpv1W7OKAz5bUXvM124ZgT Gz2Mxiw2GLFCBkAqEBFkhmRYTSrBXoaEnzfWJrlQe/TQ5Iiv7Ib5X7uGNwL/iuey woy+SwHb80i2zFLl+/Xw4tZXZXLn9KsWm5EBIjCIPopq3onzs1EzvWftb5F3ODSy qsfHY989DDZ5MZJ1/btvAs2OZPenXmjEeIeiYd7hTdpfDAAkz2U= -----END CERTIFICATE-----Generated at Mon Mar 2 13:22:11 2026 by rpki-client