$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: BOWCTpyxOvaEEyyHoWRKMwt1/XREYUFKYhzjq9K67eA= Subject key identifier: 4F:05:32:87:7D:DF:4E:E0:24:CC:D6:A4:9F:53:DB:05:21:04:DF:98 Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 48C6245D331E387371D669295E650DFCFFEE41C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 67 Signing time: Tue 05 Aug 2025 19:42:22 +0000 Manifest this update: Tue 05 Aug 2025 19:37:22 +0000 Manifest next update: Sat 09 Aug 2025 03:55:22 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: yMZm7qXEAMQq/ZdGYaf3P16AV7QnTpoHyoFTHj+XTFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c6:24:5d:33:1e:38:73:71:d6:69:29:5e:65:0d:fc:ff:ee:41:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Aug 5 19:37:22 2025 GMT Not After : Aug 9 03:55:22 2025 GMT Subject: CN=4F0532877DDF4EE024CCD6A49F53DB052104DF98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:54:ed:c2:36:2a:64:53:7e:8f:f5:69:20: 5c:60:cf:c1:b8:7e:9c:8e:f5:6d:e9:65:bb:ca:44: fc:16:a5:05:ea:07:87:79:f7:f2:f2:8c:9b:ea:eb: 8d:a6:aa:ec:2e:64:f1:02:97:72:3a:ac:31:49:48: 7f:2c:0d:3e:ee:6f:e4:37:06:ec:0e:0d:46:d9:00: f0:0f:8a:9a:9d:bc:19:73:ac:5a:b0:30:12:fb:a5: c8:e2:8e:86:cb:3e:f1:65:d7:7c:f7:0f:03:84:5b: 12:d8:05:00:76:e5:74:81:6a:7e:3b:89:24:0b:c9: 65:49:0d:17:d2:e1:3f:0f:33:26:da:ee:93:4c:3b: b0:32:d3:05:b7:c4:7a:ce:b3:ee:e5:3c:56:d2:33: 74:17:c5:d6:36:73:1d:3e:18:01:32:84:19:8e:a1: b2:26:31:40:15:80:68:48:86:61:9d:7d:98:01:9f: fb:da:ca:9f:8d:c7:c2:e6:0a:9c:2a:fd:e4:3c:e7: b9:ee:6f:d9:97:c6:3d:2d:25:39:f6:03:66:30:b4: 89:a6:b9:20:6f:a3:02:c9:14:6b:06:8b:fa:83:ab: d1:c7:29:96:ed:f9:aa:e4:25:e2:47:59:92:1f:8d: 6b:1e:a8:16:ce:8f:fa:8d:f5:c2:c5:43:3f:ec:9c: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:05:32:87:7D:DF:4E:E0:24:CC:D6:A4:9F:53:DB:05:21:04:DF:98 X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:4c:48:4f:5b:ca:33:81:0f:01:0a:22:bb:78:dd:bd:a6:8a: e6:a8:ca:e7:56:3e:f9:64:f2:38:ad:02:b0:2e:b3:79:f4:32: 0c:27:14:32:3c:2c:ce:ed:e0:e0:7b:67:08:7a:c6:b5:8b:88: 4e:4b:e8:11:45:b9:20:f2:bf:16:d2:d3:4d:bd:d0:91:ed:0d: 67:84:05:60:7e:e3:5c:ea:ae:4f:b2:b5:81:3a:aa:1e:a6:94: f9:f4:c0:90:03:eb:01:62:de:13:8e:32:c7:44:c9:04:29:71: 99:0f:0e:85:d9:2b:e1:62:05:99:6e:18:31:da:e8:33:f1:4c: 8a:e4:a4:b6:7a:ec:63:38:a1:98:f1:b8:f9:ee:ad:0a:78:27: ba:f1:54:c2:48:6d:32:1b:26:6a:86:d0:b9:23:4d:9c:e3:bc: 91:51:26:bf:6c:57:22:6d:75:12:fa:21:5a:1d:83:2c:59:95: d9:41:47:65:f1:48:6c:5b:2b:84:6d:78:ba:9c:7e:cb:ff:54: 54:d9:a6:56:0f:ed:31:d2:63:e0:62:83:63:b0:b0:46:37:02: 5b:b6:78:d2:cd:ac:59:8a:e9:fe:7e:b8:87:9b:bb:21:85:42: 56:b7:0a:82:e0:37:e0:a0:72:b8:bc:58:db:66:f7:79:fb:95: 38:a6:4a:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSMYkXTMeOHNx1mkpXmUN/P/uQckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA4MDUxOTM3MjJaFw0yNTA4MDkwMzU1MjJaMDMxMTAvBgNV BAMTKDRGMDUzMjg3N0RERjRFRTAyNENDRDZBNDlGNTNEQjA1MjEwNERGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoK1TtwjYqZFN+j/VpIFxgz8G4 fpyO9W3pZbvKRPwWpQXqB4d59/LyjJvq642mquwuZPECl3I6rDFJSH8sDT7ub+Q3 BuwODUbZAPAPipqdvBlzrFqwMBL7pcjijobLPvFl13z3DwOEWxLYBQB25XSBan47 iSQLyWVJDRfS4T8PMyba7pNMO7Ay0wW3xHrOs+7lPFbSM3QXxdY2cx0+GAEyhBmO obImMUAVgGhIhmGdfZgBn/vayp+Nx8LmCpwq/eQ857nub9mXxj0tJTn2A2YwtImm uSBvowLJFGsGi/qDq9HHKZbt+arkJeJHWZIfjWseqBbOj/qN9cLFQz/snMXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTwUyh33fTuAkzNakn1PbBSEE35gwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNMSE9byjOBDwEKIrt43b2miuaoyudWPvlk 8jitArAus3n0MgwnFDI8LM7t4OB7Zwh6xrWLiE5L6BFFuSDyvxbS00290JHtDWeE BWB+41zqrk+ytYE6qh6mlPn0wJAD6wFi3hOOMsdEyQQpcZkPDoXZK+FiBZluGDHa 6DPxTIrkpLZ67GM4oZjxuPnurQp4J7rxVMJIbTIbJmqG0LkjTZzjvJFRJr9sVyJt dRL6IVodgyxZldlBR2XxSGxbK4RteLqcfsv/VFTZplYP7THSY+Big2OwsEY3Alu2 eNLNrFmK6f5+uIebuyGFQla3CoLgN+Cgcri8WNtm93n7lTimShI= -----END CERTIFICATE-----Generated at Wed Aug 6 12:28:40 2025 by rpki-client