$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: xFXTifiV1qeW9Gn7a0RISNcbgdDvBoomtCehPBGTWgU= Subject key identifier: 05:69:F3:74:F1:F1:BB:44:A4:1E:76:EC:DE:1D:18:1C:54:D5:01:2F Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 574AD269E9F0A53280ADFD4E30A094C46EF95010 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: D7 Signing time: Thu 16 Apr 2026 12:02:40 +0000 Manifest this update: Thu 16 Apr 2026 11:57:40 +0000 Manifest next update: Sun 19 Apr 2026 21:56:40 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: hA/3GEPEsOwlZovr61R6FF/bhHch9qVSOFXBoQIZ0TY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 21:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4a:d2:69:e9:f0:a5:32:80:ad:fd:4e:30:a0:94:c4:6e:f9:50:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Apr 16 11:57:40 2026 GMT Not After : Apr 19 21:56:40 2026 GMT Subject: CN=0569F374F1F1BB44A41E76ECDE1D181C54D5012F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c2:aa:13:51:08:61:75:95:06:94:50:a4:bc: 7a:65:66:5f:8e:6e:3e:16:7b:07:a7:2a:f0:3b:ed: c3:a0:46:cb:2a:4f:0a:7a:25:fe:c1:fa:64:fd:d0: 67:5d:bf:cd:6a:d5:f4:75:73:d8:b9:5c:73:fc:25: 81:ee:36:c0:56:14:ff:d6:9f:7c:ef:38:c5:25:fd: 05:ef:ef:e7:cf:88:b7:58:32:ac:c3:f0:0c:20:f0: 23:ec:f5:9f:92:25:e3:48:ec:97:6a:6b:e0:ad:09: 99:57:c0:fe:43:3e:9e:f5:30:5e:4d:0c:33:96:1e: 94:3e:1f:d6:ae:f0:c2:65:33:8a:78:6f:d0:89:95: c2:5d:ad:8f:40:0a:06:ff:b9:88:29:8a:07:0d:c0: 66:8a:e5:d7:95:29:46:f6:25:77:51:a1:2b:41:a1: c8:74:f7:99:9a:ec:cc:74:2f:7a:dc:c3:f2:fb:e6: b8:9f:8b:e4:e4:a9:92:00:5c:0c:fa:a0:78:f7:de: fa:e7:df:92:2a:8c:ae:78:8a:5a:1b:f4:dd:4a:85: d5:e4:cc:33:e1:1d:c9:f8:ae:09:20:98:f4:8b:a2: f7:74:b5:82:c8:db:3a:04:dd:e9:db:86:69:2f:e1: f9:62:11:7e:44:ad:0e:1b:27:db:ec:bc:1d:57:de: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:69:F3:74:F1:F1:BB:44:A4:1E:76:EC:DE:1D:18:1C:54:D5:01:2F X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e5:21:3f:e2:a7:5f:a1:80:f6:9a:35:81:6e:e2:16:67:5b: a9:2e:85:93:06:f5:7e:88:fb:1a:0d:aa:96:71:0b:b1:cd:1c: b8:af:6d:af:ff:b2:21:6d:2a:26:5e:f2:f2:5e:c1:35:bf:07: 21:e0:4a:04:a5:ee:53:d6:64:92:53:a5:7e:c1:03:50:40:86: 1c:b0:76:46:22:d9:ce:70:f3:4d:58:e7:b6:a7:9d:0f:72:e5: 30:d3:fe:8b:3b:78:a5:8d:84:ab:b1:5e:5b:ae:d0:74:8c:da: b7:db:b9:0d:d4:db:85:ee:2f:50:0e:5c:d4:c5:f3:8d:10:f3: 76:a3:cc:d6:e9:fd:97:5a:04:89:ad:de:e7:cd:a4:e3:bc:0d: 20:b4:bb:7c:ef:56:7b:e3:9d:1b:57:a1:f0:bf:1b:32:9c:98: 1a:9c:7f:31:a6:31:e6:8e:a5:19:8a:9d:c1:cd:d0:49:35:ee: 66:56:0f:6b:75:ab:aa:0d:e1:b2:89:ca:ba:4e:0a:59:49:e6: 1a:98:ac:9b:90:9a:72:f9:13:a0:19:98:64:7e:e1:67:20:df: b5:29:98:21:9a:56:3f:60:7a:b6:5d:c5:a6:e1:18:cd:3d:46: 22:1a:31:8e:e2:23:4d:37:4d:11:ba:6a:50:d1:8e:aa:da:ff: ef:07:9a:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0rSaenwpTKArf1OMKCUxG75UBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNjA0MTYxMTU3NDBaFw0yNjA0MTkyMTU2NDBaMDMxMTAvBgNV BAMTKDA1NjlGMzc0RjFGMUJCNDRBNDFFNzZFQ0RFMUQxODFDNTRENTAxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmwqoTUQhhdZUGlFCkvHplZl+O bj4WewenKvA77cOgRssqTwp6Jf7B+mT90Gddv81q1fR1c9i5XHP8JYHuNsBWFP/W n3zvOMUl/QXv7+fPiLdYMqzD8Awg8CPs9Z+SJeNI7Jdqa+CtCZlXwP5DPp71MF5N DDOWHpQ+H9au8MJlM4p4b9CJlcJdrY9ACgb/uYgpigcNwGaK5deVKUb2JXdRoStB och095ma7Mx0L3rcw/L75rifi+TkqZIAXAz6oHj33vrn35IqjK54ilob9N1KhdXk zDPhHcn4rgkgmPSLovd0tYLI2zoE3enbhmkv4fliEX5ErQ4bJ9vsvB1X3p5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBWnzdPHxu0SkHnbs3h0YHFTVAS8wHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHlIT/ip1+hgPaaNYFu4hZnW6kuhZMG9X6I +xoNqpZxC7HNHLivba//siFtKiZe8vJewTW/ByHgSgSl7lPWZJJTpX7BA1BAhhyw dkYi2c5w801Y57annQ9y5TDT/os7eKWNhKuxXluu0HSM2rfbuQ3U24XuL1AOXNTF 840Q83ajzNbp/ZdaBImt3ufNpOO8DSC0u3zvVnvjnRtXofC/GzKcmBqcfzGmMeaO pRmKncHN0Ek17mZWD2t1q6oN4bKJyrpOCllJ5hqYrJuQmnL5E6AZmGR+4Wcg37Up mCGaVj9gerZdxabhGM09RiIaMY7iI003TRG6alDRjqra/+8Hmt4= -----END CERTIFICATE-----Generated at Fri Apr 17 21:18:01 2026 by rpki-client