$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: YX79K+ULFM3uoncFqInjGNWQM86YhU97N0AApPDj9/k= Subject key identifier: 31:C1:69:AE:46:BA:2E:B6:AD:6D:44:21:E3:0C:33:B4:FE:C1:57:0B Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 6FDDC97E64A0950DFE353DBD0C6A32B29C566899 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 8F Signing time: Tue 04 Nov 2025 19:42:14 +0000 Manifest this update: Tue 04 Nov 2025 19:37:14 +0000 Manifest next update: Fri 07 Nov 2025 23:41:14 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: V1rnmAGWAyQmeQrw7/OFtM68qhac2MLO7NaO3/9kRVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:dd:c9:7e:64:a0:95:0d:fe:35:3d:bd:0c:6a:32:b2:9c:56:68:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Nov 4 19:37:14 2025 GMT Not After : Nov 7 23:41:14 2025 GMT Subject: CN=31C169AE46BA2EB6AD6D4421E30C33B4FEC1570B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:27:4f:38:43:de:85:c4:3b:d7:48:fc:7c:9e: 96:e0:b2:dc:e2:03:26:27:93:6d:19:36:82:86:2f: 84:92:c9:b9:a1:b0:1b:39:ec:e0:80:e0:fa:44:42: ee:45:a3:a8:c2:08:ab:f0:fc:c1:b7:a0:32:0c:90: 9c:a7:97:e3:e9:a4:dc:9d:67:fb:89:f1:2d:72:76: 9e:8f:fc:ef:e8:8c:9d:e0:fa:fe:d3:90:ed:96:f4: c8:61:0b:76:74:52:cc:0f:1a:65:a0:ad:ef:ea:c7: 66:4c:fb:0b:0f:47:44:95:fd:d3:ab:20:a2:97:df: 50:2f:d7:45:49:11:25:79:5a:a1:eb:ca:bd:94:d9: 11:2f:32:d6:a3:4b:12:e3:c9:3a:59:ee:b0:02:73: 96:a1:7b:e9:e5:f8:16:71:5e:7b:ae:32:50:f1:bb: e5:59:0c:49:f9:a1:11:c2:0b:6c:e1:d3:b8:46:b8: 52:fe:e9:9a:27:48:5a:30:43:a9:a0:39:b0:64:4c: d8:ab:d4:3c:be:43:6e:aa:1a:7e:1a:d4:b5:b0:90: e0:76:7f:1b:1a:3b:25:b7:28:2d:ec:ef:0e:31:d5: e5:e1:b8:76:62:ba:8e:77:24:16:61:9b:51:6f:98: 8b:d5:10:d9:1e:a2:11:ea:67:f6:4a:6a:23:1a:48: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C1:69:AE:46:BA:2E:B6:AD:6D:44:21:E3:0C:33:B4:FE:C1:57:0B X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3a:b9:ba:30:3c:05:a0:6c:69:4f:a1:6d:f2:ce:48:b8:92: fe:b6:a1:22:e8:a4:ff:f0:98:ba:09:2e:a6:16:c0:c2:41:51: dc:1b:c5:8d:d3:8a:c9:bb:35:80:4b:a7:da:a7:ff:e7:b4:df: 4e:1b:67:e4:a1:76:48:9e:93:b3:e5:5e:87:01:48:aa:49:98: 19:9d:42:9a:cb:87:13:02:e6:4e:92:73:03:23:68:b7:a8:8e: a1:20:a2:05:f1:9f:a8:0f:1d:52:47:de:ca:b6:43:e1:e4:d1: aa:fc:3d:a0:bc:aa:83:e2:d7:b4:a5:aa:29:93:61:46:e8:f1: 63:a1:67:0b:85:5c:2c:79:24:be:6f:80:12:4a:8f:80:4c:4c: fd:22:0d:1d:90:ec:c8:e0:74:02:43:06:54:8f:02:91:a4:9e: 06:96:9d:ea:ee:bc:de:d8:55:c9:1f:ab:58:37:ae:fe:81:36: a6:ef:15:bc:62:0d:32:dd:5e:e8:c5:58:26:14:56:3d:d2:4b: 3a:7f:a6:c4:a4:84:3b:66:9c:3b:aa:f6:8d:38:1c:11:fd:da: 13:b0:0d:71:1c:aa:1c:d3:41:5f:84:31:fe:91:0b:88:df:76: 5b:0d:a3:93:c7:15:cb:a7:1a:46:25:ce:04:6e:a1:60:73:a3: e7:c3:93:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb93JfmSglQ3+NT29DGoyspxWaJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTExMDQxOTM3MTRaFw0yNTExMDcyMzQxMTRaMDMxMTAvBgNV BAMTKDMxQzE2OUFFNDZCQTJFQjZBRDZENDQyMUUzMEMzM0I0RkVDMTU3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJ084Q96FxDvXSPx8npbgstzi AyYnk20ZNoKGL4SSybmhsBs57OCA4PpEQu5Fo6jCCKvw/MG3oDIMkJynl+PppNyd Z/uJ8S1ydp6P/O/ojJ3g+v7TkO2W9MhhC3Z0UswPGmWgre/qx2ZM+wsPR0SV/dOr IKKX31Av10VJESV5WqHryr2U2REvMtajSxLjyTpZ7rACc5ahe+nl+BZxXnuuMlDx u+VZDEn5oRHCC2zh07hGuFL+6ZonSFowQ6mgObBkTNir1Dy+Q26qGn4a1LWwkOB2 fxsaOyW3KC3s7w4x1eXhuHZiuo53JBZhm1FvmIvVENkeohHqZ/ZKaiMaSMGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMcFprka6LratbUQh4wwztP7BVwswHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHs6ubowPAWgbGlPoW3yzki4kv62oSLopP/w mLoJLqYWwMJBUdwbxY3Tism7NYBLp9qn/+e0304bZ+Shdkiek7PlXocBSKpJmBmd QprLhxMC5k6ScwMjaLeojqEgogXxn6gPHVJH3sq2Q+Hk0ar8PaC8qoPi17SlqimT YUbo8WOhZwuFXCx5JL5vgBJKj4BMTP0iDR2Q7MjgdAJDBlSPApGkngaWneruvN7Y Vckfq1g3rv6BNqbvFbxiDTLdXujFWCYUVj3SSzp/psSkhDtmnDuq9o04HBH92hOw DXEcqhzTQV+EMf6RC4jfdlsNo5PHFcunGkYlzgRuoWBzo+fDk1E= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:16 2025 by rpki-client