$ rpki-client -vvvf rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft File: 096E75D80B559B9824609BA61681D845A0CB0F77.mft (raw, json) Hash identifier: FDrFHd99irq6/FWH5DtLhC2c8+a7R+dbCTJxddaLtuA= Subject key identifier: CA:0C:A5:DD:B2:D0:7B:F2:BA:BF:01:DC:8B:3F:44:1E:E7:54:E9:CB Authority key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 Certificate issuer: /CN=096E75D80B559B9824609BA61681D845A0CB0F77 Certificate serial: 30791E9209F2453A4B20500E5B93A6AD36BA7E14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft Manifest number: BE Signing time: Mon 21 Sep 2026 17:02:39 +0000 Manifest this update: Mon 21 Sep 2026 16:57:39 +0000 Manifest next update: Tue 22 Sep 2026 18:57:39 +0000 Files and hashes: 1: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: 6XmdhHpwmPbSLXc9MObJukxUpYpgVWG679zPioXW/jI=) 2: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: 0yluROs0GMVlDuEEaLUkv4SFh8PCi14+YfNxdsvSrjw=) 3: 096E75D80B559B9824609BA61681D845A0CB0F77.crl (hash: nGGWI3y3PNJyI5A3yqdKSvBH9/cnCCn7oCpememjaIU=) 4: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: 0malPwz+RTtf0zfQa5ZCgjL04DU4eZWwOeTz+IpVOtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:79:1e:92:09:f2:45:3a:4b:20:50:0e:5b:93:a6:ad:36:ba:7e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096E75D80B559B9824609BA61681D845A0CB0F77 Validity Not Before: Sep 21 16:57:39 2026 GMT Not After : Sep 22 18:57:39 2026 GMT Subject: CN=CA0CA5DDB2D07BF2BABF01DC8B3F441EE754E9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:bc:21:3b:ff:b0:7c:bb:83:cb:71:0c:83: 1b:b2:47:8e:93:7c:4b:a9:8c:87:a7:bd:09:77:40: 98:81:63:5d:a1:70:de:5c:8a:dc:f2:7c:aa:91:1b: 90:0d:e4:41:fe:f0:fe:1f:fe:ea:51:1f:9f:d1:b4: 01:e0:22:a3:93:63:0e:a8:32:af:1a:70:c4:a9:98: 1f:ec:f5:b6:2d:40:c6:6c:24:39:6e:ab:2b:fb:83: 42:4b:be:12:43:2b:f6:57:1e:45:8f:21:13:c5:23: 8a:f2:30:a8:2a:c4:af:63:1e:2a:b2:b2:53:dd:21: e5:8b:dc:ed:9d:5e:af:ca:2c:33:50:3d:33:30:07: 3e:5e:58:61:4e:88:69:55:e3:5a:9c:6f:ef:3b:7b: 82:7d:49:bb:4a:76:bc:5f:23:f9:c9:ec:f5:a0:0a: 4d:d2:15:a2:02:dc:cd:5f:27:59:06:18:98:32:fa: 6a:27:4e:51:a3:e2:91:29:68:de:bf:46:98:b5:76: d6:9b:bd:d9:1c:df:e5:9b:c2:11:d1:1d:55:15:6e: e1:49:5a:5a:38:9a:c7:6b:ed:81:8a:da:a4:14:d2: 7c:c2:3e:42:f5:2a:33:c8:34:f1:13:6c:7f:01:4c: c4:83:40:d7:e3:ef:7d:e0:5d:b2:5f:ee:df:1f:2b: 50:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0C:A5:DD:B2:D0:7B:F2:BA:BF:01:DC:8B:3F:44:1E:E7:54:E9:CB X509v3 Authority Key Identifier: keyid:09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d0:6e:f3:94:bf:07:f5:9f:0d:e5:da:d7:bb:0f:32:6f:4c: 7d:76:ba:05:85:77:e3:3b:67:75:61:fa:e9:3c:5d:b9:68:ec: 07:46:5b:1a:55:04:14:1b:a1:1c:c9:07:09:ee:ab:e4:21:0b: ca:64:e0:60:00:27:4e:df:7e:5c:42:18:8f:87:b5:eb:45:27: ec:dc:d3:46:47:a9:30:06:94:d9:ae:66:f5:9c:6c:9e:4a:63: 03:f3:d4:45:15:b4:3c:f1:ad:e9:9f:6f:e8:8a:79:da:14:1d: 38:2a:7a:12:9c:63:54:3e:7c:39:21:d7:ae:b8:ff:0a:ed:cd: 37:2b:59:40:9c:fd:d3:f9:da:30:6f:82:0f:84:71:6e:2f:fe: b9:17:f6:24:90:30:1a:d6:4b:10:77:6e:31:77:bb:a3:e7:29: c7:14:97:1e:22:43:51:a2:94:8e:e9:91:b8:09:f5:cb:2c:ba: 52:a5:1e:8e:cd:3d:b0:de:6e:1d:36:dd:6f:94:f9:2f:59:a9: 2a:c2:c2:cc:74:02:7c:9e:01:38:38:86:66:87:c3:90:e4:91: c6:e7:09:5f:b0:97:8b:04:59:e0:70:13:a3:d7:1e:66:ee:cd: fd:82:ea:58:c6:77:94:c4:65:01:0d:13:82:a7:95:d0:52:e9: 6a:0e:80:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHkekgnyRTpLIFAOW5OmrTa6fhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVB MENCMEY3NzAeFw0yNjA5MjExNjU3MzlaFw0yNjA5MjIxODU3MzlaMDMxMTAvBgNV BAMTKENBMENBNUREQjJEMDdCRjJCQUJGMDFEQzhCM0Y0NDFFRTc1NEU5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ/rwhO/+wfLuDy3EMgxuyR46T fEupjIenvQl3QJiBY12hcN5citzyfKqRG5AN5EH+8P4f/upRH5/RtAHgIqOTYw6o Mq8acMSpmB/s9bYtQMZsJDluqyv7g0JLvhJDK/ZXHkWPIRPFI4ryMKgqxK9jHiqy slPdIeWL3O2dXq/KLDNQPTMwBz5eWGFOiGlV41qcb+87e4J9SbtKdrxfI/nJ7PWg Ck3SFaIC3M1fJ1kGGJgy+monTlGj4pEpaN6/Rpi1dtabvdkc3+WbwhHRHVUVbuFJ Wlo4msdr7YGK2qQU0nzCPkL1KjPINPETbH8BTMSDQNfj733gXbJf7t8fK1APAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygyl3bLQe/K6vwHciz9EHudU6cswHwYDVR0j BBgwFoAUCW512AtVm5gkYJumFoHYRaDLD3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRmMTM3MmMtNDNhNi00ZmRhLWI1MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgw QjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVBMENCMEY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTZFNzVEODBCNTU5Qjk4MjQ2MDlCQTYxNjgxRDg0NUEwQ0Iw Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRmMTM3MmMtNDNhNi00ZmRhLWI1 MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4 NDVBMENCMEY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnQbvOUvwf1nw3l2te7DzJvTH12ugWFd+M7 Z3Vh+uk8Xblo7AdGWxpVBBQboRzJBwnuq+QhC8pk4GAAJ07fflxCGI+HtetFJ+zc 00ZHqTAGlNmuZvWcbJ5KYwPz1EUVtDzxremfb+iKedoUHTgqehKcY1Q+fDkh1664 /wrtzTcrWUCc/dP52jBvgg+EcW4v/rkX9iSQMBrWSxB3bjF3u6PnKccUlx4iQ1Gi lI7pkbgJ9cssulKlHo7NPbDebh023W+U+S9ZqSrCwsx0AnyeATg4hmaHw5Dkkcbn CV+wl4sEWeBwE6PXHmbuzf2C6ljGd5TEZQENE4KnldBS6WoOgMU= -----END CERTIFICATE-----Generated at Mon Sep 21 23:47:35 2026 by rpki-client