
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft
File: 96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft (raw, json)
Hash identifier: KyTnY4Bj8YMi48J7NViD19Cq/+5SES64OBu1tgC850A=
Subject key identifier: 1F:34:01:9C:69:58:78:58:6C:A4:ED:42:93:F1:D8:31:54:0C:7C:DD
Authority key identifier: 96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65
Certificate issuer: /CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65
Certificate serial: 25F6466C3CFC362DCFF96775387649DAF4CEE4FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft
Manifest number: C6
Signing time: Sat 26 Sep 2026 22:48:13 +0000
Manifest this update: Sat 26 Sep 2026 22:43:13 +0000
Manifest next update: Mon 28 Sep 2026 00:30:13 +0000
Files and hashes: 1: 96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl (hash: IJPDRe7CixaXTlZJ+lTvxqDHxk8jJVoPJuCHvFMa8bQ=)
2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: qwEnHxrWVyiK94N8U1nG/pG5hFflP0C0qwS5eIrzLng=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl
rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f6:46:6c:3c:fc:36:2d:cf:f9:67:75:38:76:49:da:f4:ce:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65
Validity
Not Before: Sep 26 22:43:13 2026 GMT
Not After : Sep 28 00:30:13 2026 GMT
Subject: CN=1F34019C695878586CA4ED4293F1D831540C7CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:5e:9d:a3:8c:43:17:19:ac:c3:ff:3a:d8:
78:f4:95:df:0e:58:18:6a:63:a5:42:70:84:cc:b0:
89:40:92:74:d1:70:a4:f9:87:09:75:02:06:58:80:
7a:05:66:84:c6:94:04:87:03:dc:a2:c5:cc:72:fd:
f5:8e:a4:9b:fe:92:66:e8:b2:f3:b1:8f:20:22:eb:
22:6d:8c:47:92:ce:a8:76:0f:4d:64:cc:ef:63:d5:
c1:a9:e3:7e:d0:f3:3d:ba:a5:cc:39:0f:93:5b:82:
d2:e9:08:e3:54:e2:3c:0a:7a:43:5a:ba:08:3c:f6:
ca:3f:6d:25:18:77:71:0b:b6:64:16:d6:00:43:43:
0d:6d:2f:52:b3:6e:d6:3b:23:1d:50:24:fd:7f:1e:
b2:5d:94:a1:47:1a:a3:2a:bd:c0:37:cd:7d:89:17:
d1:f3:81:7c:94:52:77:49:ff:4c:e7:ff:52:2f:b3:
fd:19:7f:ec:fe:7d:4b:c8:0a:bd:d5:4c:f0:d4:3d:
ab:66:b7:f9:dd:3f:d9:80:58:62:b6:ed:2a:16:fb:
72:53:59:b6:6c:96:45:91:ad:59:56:7c:3c:66:04:
63:63:c4:de:e7:cf:3e:66:5a:9f:01:a6:f1:91:0d:
97:fd:cc:6c:93:b6:08:a4:ca:e4:93:7e:28:f1:6f:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:34:01:9C:69:58:78:58:6C:A4:ED:42:93:F1:D8:31:54:0C:7C:DD
X509v3 Authority Key Identifier:
keyid:96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1d:39:25:66:f5:bd:73:f2:2b:c8:44:f4:66:ea:72:9e:3d:
0b:2c:23:c0:ad:3a:74:27:fb:63:6e:8a:c2:ac:81:13:09:ab:
c7:d5:a5:27:7a:a4:e0:c3:bd:26:bc:77:7a:99:9d:8a:32:be:
cd:d2:ec:1b:10:08:13:e2:94:13:3c:74:37:ed:45:d2:de:06:
ab:3a:28:96:cb:c4:17:f7:0c:e3:b1:e5:ac:cf:3e:6c:b5:16:
75:e8:22:ad:34:5d:c8:85:d5:b5:06:e5:e5:07:45:ff:6a:0f:
6b:2d:1e:e6:09:f7:ec:89:b0:ea:1c:dd:04:5f:e6:da:ee:ae:
58:57:f7:66:fc:ce:29:4e:45:e0:09:91:70:3b:21:e2:90:c8:
26:13:17:7b:c1:7c:24:a8:8d:41:92:5e:68:4a:02:e2:0f:a3:
03:32:09:aa:db:61:cb:e4:fc:1e:d2:1e:cc:82:6e:25:5b:94:
d1:b7:dc:a7:68:36:2f:c8:ee:16:51:36:50:7a:ec:d9:84:fe:
d4:12:1a:3e:d0:f4:02:79:9c:2c:a9:68:bc:47:a6:ee:07:27:
20:2e:30:12:cd:f4:d5:66:e3:0a:40:c8:c3:25:7c:f5:de:fc:
65:8f:22:32:5d:6f:5b:5f:52:97:b4:df:ab:d1:ab:64:54:93:
5f:22:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:56:16 2026 by rpki-client