
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
File: 96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft (raw, json)
Hash identifier: zK1A3iUq/TrAS2aphhX5EgPZ1ZXjoPmRuGUYjRIvH2U=
Subject key identifier: CD:08:8B:89:75:B4:53:AA:D2:FF:32:58:27:B6:C7:9C:30:53:78:D5
Authority key identifier: 96:B1:BF:67:FA:7B:CA:2D:9A:78:22:6A:A8:97:C7:60:C9:E4:5B:8A
Certificate issuer: /CN=96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A
Certificate serial: 5138B6FE64F971AC98E8CFB9CDA315D6823FBA98
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 10:54:55 +0000
Manifest this update: Mon 21 Sep 2026 10:49:55 +0000
Manifest next update: Tue 22 Sep 2026 12:55:55 +0000
Files and hashes: 1: 96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl (hash: EUYZPrbj6pp4HyDAV6AnviReVOasGQyGF55NB6bWjLU=)
2: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: /hb9w6eiZKH4CNjyXoKoeSUik7C0W1MiXzGBdpGuKK8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl
rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:38:b6:fe:64:f9:71:ac:98:e8:cf:b9:cd:a3:15:d6:82:3f:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A
Validity
Not Before: Sep 21 10:49:55 2026 GMT
Not After : Sep 22 12:55:55 2026 GMT
Subject: CN=CD088B8975B453AAD2FF325827B6C79C305378D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:bc:0a:23:61:8c:d3:fa:16:70:1e:32:4b:
c1:6a:11:89:aa:1e:b9:64:8e:49:2c:7c:71:f1:7e:
6a:fc:87:20:ca:b7:7f:72:2f:f7:8f:ee:b7:8b:7c:
6c:a7:ce:5e:bb:93:bb:fe:94:d2:7c:0a:18:1d:53:
ce:ae:0e:4e:bb:f7:64:7a:04:d9:79:db:ab:23:ab:
15:89:c2:87:6f:63:9a:13:0f:ce:8e:1e:40:1c:01:
a9:1f:86:e5:01:ec:1f:c3:12:c2:5e:7c:cb:6e:44:
77:23:e2:ab:02:35:89:70:f4:8f:d4:63:7b:c7:e2:
b9:13:0e:a1:67:57:99:e6:d5:15:8d:ab:50:53:b2:
1b:6f:a5:13:b6:6b:14:59:f9:48:7c:30:58:f2:dc:
61:26:6b:9c:95:71:73:62:c2:6d:91:c9:b0:ec:70:
e4:4d:6e:46:ed:8c:d2:19:32:6a:52:f2:f2:52:93:
80:46:c3:57:f0:4c:8b:71:fd:78:46:87:7d:03:1e:
60:2f:c2:74:de:2c:95:ab:ba:f0:b6:89:fd:27:93:
f6:31:71:5c:eb:5a:b5:9c:3d:8f:8d:a1:f3:b2:8f:
6e:eb:86:67:35:4c:9e:ee:58:49:f7:d6:c5:dc:17:
82:ef:a4:22:c1:8b:bb:bc:09:04:e5:9e:a1:93:68:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:08:8B:89:75:B4:53:AA:D2:FF:32:58:27:B6:C7:9C:30:53:78:D5
X509v3 Authority Key Identifier:
keyid:96:B1:BF:67:FA:7B:CA:2D:9A:78:22:6A:A8:97:C7:60:C9:E4:5B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:94:86:cf:a0:d3:90:61:a9:bb:4d:fb:fc:de:d7:c6:f1:25:
97:0b:be:c4:1f:8f:65:60:0c:a1:30:5f:f2:83:f6:3c:a7:4a:
bd:01:75:25:c7:d1:f1:83:cf:84:09:10:e2:c9:82:df:38:5e:
84:a5:92:73:9f:38:f6:e9:f5:91:8b:69:39:eb:6c:cf:ff:c8:
98:ba:2b:5d:4f:7b:e2:75:9d:3f:11:cd:30:52:09:8d:e5:de:
91:30:34:77:ea:a3:2b:98:a0:1f:e7:03:3b:53:e0:83:71:df:
88:bc:34:1b:5f:63:46:96:ff:6d:ff:93:c2:db:b5:6b:02:b0:
20:54:27:77:13:06:4e:86:71:c1:2d:b5:e0:3c:77:30:5e:f9:
2f:87:ff:6d:86:b2:5d:a0:49:ef:b6:a3:da:36:9a:e4:64:4f:
3a:01:c5:75:0a:74:ee:a2:c8:2c:8e:e9:d4:13:ce:ba:c8:3c:
b1:79:28:b3:8d:44:ee:9d:a5:47:32:b1:c2:82:85:10:04:43:
a6:52:5a:c9:7d:a9:d4:99:26:7e:14:ad:2d:55:0d:1c:3a:fc:
e6:d6:8c:e2:2a:7d:32:cf:7d:50:8d:b8:64:a5:3a:14:cb:0e:
d4:48:0c:ef:29:0d:39:6b:23:7c:2d:9b:ad:8f:08:9f:2b:62:
01:04:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:14:47 2026 by rpki-client