
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.mft
File: 96724AF35F57C1F59A824F909E2522BAC6560A6D.mft (raw, json)
Hash identifier: jHpsFpbZfDspF2fjflpqEQMBe7AXLnK1uTrCgX6HxdY=
Subject key identifier: 3D:A1:52:E9:37:C4:8E:66:F4:7C:86:6F:6F:17:18:16:73:95:CE:C5
Authority key identifier: 96:72:4A:F3:5F:57:C1:F5:9A:82:4F:90:9E:25:22:BA:C6:56:0A:6D
Certificate issuer: /CN=96724AF35F57C1F59A824F909E2522BAC6560A6D
Certificate serial: 3940A679012CBD4B3EC1E91E80D699C99986C6B7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96724AF35F57C1F59A824F909E2522BAC6560A6D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 05:48:52 +0000
Manifest this update: Mon 21 Sep 2026 05:43:52 +0000
Manifest next update: Tue 22 Sep 2026 06:16:52 +0000
Files and hashes: 1: 96724AF35F57C1F59A824F909E2522BAC6560A6D.crl (hash: xSASbHKb8qiFk6AeFiiAaF39n32+2upAUae8xFbDUtY=)
2: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: Gw/ouM+79fWgaC67VfYoogoQzL2GG+1ni52ruiFVvNU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.crl
rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96724AF35F57C1F59A824F909E2522BAC6560A6D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:40:a6:79:01:2c:bd:4b:3e:c1:e9:1e:80:d6:99:c9:99:86:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96724AF35F57C1F59A824F909E2522BAC6560A6D
Validity
Not Before: Sep 21 05:43:52 2026 GMT
Not After : Sep 22 06:16:52 2026 GMT
Subject: CN=3DA152E937C48E66F47C866F6F1718167395CEC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:f2:ad:1f:2c:f2:78:0c:40:eb:a5:fb:68:
62:c8:a2:89:f5:29:c2:52:44:96:66:03:e6:ff:13:
f1:5c:82:a8:14:fe:f5:85:42:92:ae:89:bb:5c:57:
03:5a:c1:c5:73:f3:48:9a:73:be:af:0b:db:b6:16:
7c:78:98:f0:a6:fb:7f:8b:f4:bb:6a:69:1b:41:7a:
fe:dc:72:a4:e0:71:74:e9:bd:0f:64:db:56:c5:7d:
62:d0:6e:40:3e:2b:49:bd:88:ae:a3:23:63:4e:1e:
fe:b9:98:c8:4d:43:9a:ee:d4:b5:a8:29:9b:32:73:
30:07:1c:8c:9c:db:ac:cf:45:6b:05:1b:ec:ba:c7:
87:1a:b4:30:31:06:f3:c6:af:5a:c8:52:43:41:2e:
d3:eb:49:6b:6e:31:bb:33:85:a3:9a:33:cc:d9:c5:
2d:5f:a7:54:0c:b8:4e:52:5a:2c:8e:d2:06:4a:f4:
74:32:8b:88:4b:e5:8c:9f:73:e2:52:90:d0:d5:b6:
e5:6d:1e:62:d2:1d:29:d1:79:2e:8e:d6:b7:69:8e:
a5:5f:8d:c3:93:14:eb:8f:66:34:8f:a5:b1:2a:2a:
2d:1e:fa:8e:36:15:de:5c:cb:a4:89:f2:1d:c3:93:
93:34:75:d6:b1:16:0b:2d:0a:52:d7:9b:b6:c0:86:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A1:52:E9:37:C4:8E:66:F4:7C:86:6F:6F:17:18:16:73:95:CE:C5
X509v3 Authority Key Identifier:
keyid:96:72:4A:F3:5F:57:C1:F5:9A:82:4F:90:9E:25:22:BA:C6:56:0A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96724AF35F57C1F59A824F909E2522BAC6560A6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7d:49:e8:53:98:6a:0a:15:3c:2f:d7:79:16:ed:1c:5f:1d:
0b:65:bd:1b:7d:2a:10:ee:72:c4:84:92:f3:87:62:2a:4d:a8:
fa:91:5e:bb:23:80:75:e9:fb:39:19:2d:fd:37:38:9b:20:77:
45:d6:82:65:de:39:8c:8b:77:22:87:ba:e5:9b:7d:9f:54:51:
fe:3a:e8:e9:44:f0:ce:a5:31:ff:77:c5:6f:2f:fc:ea:e1:3b:
e6:7f:c3:12:cf:e8:12:79:57:6a:83:ff:4e:98:c8:e4:20:cc:
26:99:98:8c:0c:0f:dc:13:6c:ee:f4:02:b2:2f:41:c6:d2:83:
b5:ab:d2:53:5e:e8:6f:cf:58:d4:3b:a2:04:52:ea:76:b6:bc:
7b:87:ce:23:1a:b9:f7:d6:b3:3b:f7:f2:9c:3b:28:d5:52:4e:
90:22:e5:27:54:8b:2f:1f:85:bf:76:9b:92:79:38:95:fc:2a:
0b:8c:18:aa:81:25:f5:51:37:bb:aa:f4:8e:e0:85:5e:1d:93:
cc:c3:e7:b9:31:a7:44:71:c2:e0:5c:23:d3:8e:65:de:f6:16:
43:40:d3:fd:3a:e3:6a:e5:46:b2:44:77:c2:c1:2e:ad:b2:f9:
07:73:19:18:66:8f:ed:eb:18:4f:3d:76:e2:07:26:8a:9f:98:
85:b8:21:e1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOUCmeQEsvUs+wekegNaZyZmGxrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY3MjRBRjM1RjU3QzFGNTlBODI0RjkwOUUyNTIyQkFD
NjU2MEE2RDAeFw0yNjA5MjEwNTQzNTJaFw0yNjA5MjIwNjE2NTJaMDMxMTAvBgNV
BAMTKDNEQTE1MkU5MzdDNDhFNjZGNDdDODY2RjZGMTcxODE2NzM5NUNFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHPKtHyzyeAxA66X7aGLIoon1
KcJSRJZmA+b/E/FcgqgU/vWFQpKuibtcVwNawcVz80iac76vC9u2Fnx4mPCm+3+L
9LtqaRtBev7ccqTgcXTpvQ9k21bFfWLQbkA+K0m9iK6jI2NOHv65mMhNQ5ru1LWo
KZsyczAHHIyc26zPRWsFG+y6x4catDAxBvPGr1rIUkNBLtPrSWtuMbszhaOaM8zZ
xS1fp1QMuE5SWiyO0gZK9HQyi4hL5Yyfc+JSkNDVtuVtHmLSHSnReS6O1rdpjqVf
jcOTFOuPZjSPpbEqKi0e+o42Fd5cy6SJ8h3Dk5M0ddaxFgstClLXm7bAhgIdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPaFS6TfEjmb0fIZvbxcYFnOVzsUwHwYDVR0j
BBgwFoAUlnJK819XwfWagk+QniUiusZWCm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDU1OTM0NDUtYTI1ZC00OGUwLWFiYzItYWIwNWUwNjUwNjU1LzAvOTY3MjRBRjM1
RjU3QzFGNTlBODI0RjkwOUUyNTIyQkFDNjU2MEE2RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NjcyNEFGMzVGNTdDMUY1OUE4MjRGOTA5RTI1MjJCQUM2NTYw
QTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU1OTM0NDUtYTI1ZC00OGUwLWFi
YzItYWIwNWUwNjUwNjU1LzAvOTY3MjRBRjM1RjU3QzFGNTlBODI0RjkwOUUyNTIy
QkFDNjU2MEE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEN9SehTmGoKFTwv13kW7RxfHQtlvRt9KhDu
csSEkvOHYipNqPqRXrsjgHXp+zkZLf03OJsgd0XWgmXeOYyLdyKHuuWbfZ9UUf46
6OlE8M6lMf93xW8v/OrhO+Z/wxLP6BJ5V2qD/06YyOQgzCaZmIwMD9wTbO70ArIv
QcbSg7Wr0lNe6G/PWNQ7ogRS6na2vHuHziMauffWszv38pw7KNVSTpAi5SdUiy8f
hb92m5J5OJX8KguMGKqBJfVRN7uq9I7ghV4dk8zD57kxp0RxwuBcI9OOZd72FkNA
0/0642rlRrJEd8LBLq2y+QdzGRhmj+3rGE89duIHJoqfmIW4IeE=
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:15:16 2026 by rpki-client