$ rpki-client -vvvf rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft File: 96348B9579D234769BDF15F375368D3C0BDE1860.mft (raw, json) Hash identifier: dyPqDukpIbaRtOIgyDs4euKY2F1MuIxGtUN42DJPx/c= Subject key identifier: D3:EC:24:66:81:EE:42:DF:DA:F3:43:E1:72:F5:E2:3D:DE:3C:20:F8 Authority key identifier: 96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60 Certificate issuer: /CN=96348B9579D234769BDF15F375368D3C0BDE1860 Certificate serial: 235AFE74FB2BA397703D69CB4B2A57BD447435E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 00:25:44 +0000 Manifest this update: Sat 26 Sep 2026 00:20:44 +0000 Manifest next update: Sun 27 Sep 2026 02:08:44 +0000 Files and hashes: 1: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: NRcKgzAD1aXFV9xSYN/NAX4+lhq8SGmZ0ijJnrN5qYY=) 2: 96348B9579D234769BDF15F375368D3C0BDE1860.crl (hash: mO4Nx5zbKEaFNmig1GEKjTYQTFYiWV6uJ0itB25JSBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5a:fe:74:fb:2b:a3:97:70:3d:69:cb:4b:2a:57:bd:44:74:35:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96348B9579D234769BDF15F375368D3C0BDE1860 Validity Not Before: Sep 26 00:20:44 2026 GMT Not After : Sep 27 02:08:44 2026 GMT Subject: CN=D3EC246681EE42DFDAF343E172F5E23DDE3C20F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:1e:bd:21:0c:bc:cc:c5:df:2e:a4:e5:bd: 61:1c:81:30:b0:bb:05:c4:fd:71:c6:13:df:27:da: 17:59:45:14:e2:36:ae:00:ca:6e:dd:a8:75:42:90: 7b:33:ce:d1:6f:21:6e:07:6c:56:20:d4:63:03:00: 33:f0:46:c3:99:e1:23:c8:79:e9:16:b1:7e:98:9e: db:75:0a:d5:23:3a:18:cc:58:cf:c7:1c:88:a7:c2: 6f:d3:99:20:d3:41:12:b4:91:5a:cd:ea:d7:6b:55: cf:d7:f1:f5:7b:8b:f1:a3:f8:f7:b2:20:c5:1e:2c: ab:de:69:04:03:dd:08:84:3d:1d:71:62:8e:74:a6: 59:a1:ab:15:b0:6d:c4:6e:1f:32:18:1d:94:a6:75: ab:1e:9a:d9:83:63:5c:96:1c:84:af:df:7f:f0:27: dc:24:ca:eb:a0:3a:5b:ec:64:76:de:f5:32:c3:aa: 6d:0a:8c:f9:a4:36:04:4e:68:77:c5:77:1a:d1:74: 8f:01:59:73:6f:77:70:3a:7c:f0:fb:b7:8f:47:bb: 30:bf:4a:f0:24:0b:fb:ba:2e:df:03:78:d5:7c:b6: 14:75:a6:3f:8e:e0:b6:e4:90:8b:22:33:40:43:b3: 3d:c7:ba:8b:07:56:69:6f:e7:87:eb:89:f5:0f:39: fa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EC:24:66:81:EE:42:DF:DA:F3:43:E1:72:F5:E2:3D:DE:3C:20:F8 X509v3 Authority Key Identifier: keyid:96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:61:77:c0:30:56:17:89:af:83:64:72:e2:1f:c9:85:04:b3: 43:0a:52:85:2b:ce:83:05:a0:f1:12:1b:14:50:86:7c:14:b7: 1a:45:11:3a:55:41:68:d2:6a:0b:14:51:10:94:4e:71:9c:d1: 81:d2:bf:84:bf:51:0c:ad:d3:04:03:d9:d6:c8:a2:95:7c:1f: ab:25:61:71:3e:27:0a:d0:82:f9:18:26:f4:37:37:b3:21:87: 40:f8:03:a7:b8:0f:77:97:80:57:74:79:21:5b:1e:a1:60:ba: 86:d0:b2:eb:9c:8e:3b:ec:5f:a1:f5:32:d4:71:2e:6e:9d:85: b4:b3:6a:f5:9f:f5:ee:69:ad:31:5e:52:83:de:70:5d:bd:43: 76:23:c7:08:6d:e6:dc:bc:60:f3:60:8b:f5:92:3f:61:34:f2: d2:0b:6f:27:a7:ac:93:5f:c4:1b:86:1a:aa:3f:d9:a1:8e:37: 17:cf:58:72:13:37:72:c2:d5:76:77:5c:09:78:e5:3b:09:09: 0c:09:39:6c:1d:3f:93:b2:17:a6:af:2a:2d:d9:ba:ec:3d:ee: c0:65:be:46:fa:96:f7:7c:d4:5a:9c:21:15:e7:b5:e1:0f:d2: 8d:f8:9c:60:55:b9:9d:6a:7f:63:05:1b:18:35:61:a1:22:f4: 1a:4f:1c:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1r+dPsro5dwPWnLSypXvUR0NeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYzNDhCOTU3OUQyMzQ3NjlCREYxNUYzNzUzNjhEM0Mw QkRFMTg2MDAeFw0yNjA5MjYwMDIwNDRaFw0yNjA5MjcwMjA4NDRaMDMxMTAvBgNV BAMTKEQzRUMyNDY2ODFFRTQyREZEQUYzNDNFMTcyRjVFMjNEREUzQzIwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+x69IQy8zMXfLqTlvWEcgTCw uwXE/XHGE98n2hdZRRTiNq4Aym7dqHVCkHszztFvIW4HbFYg1GMDADPwRsOZ4SPI eekWsX6Yntt1CtUjOhjMWM/HHIinwm/TmSDTQRK0kVrN6tdrVc/X8fV7i/Gj+Pey IMUeLKveaQQD3QiEPR1xYo50plmhqxWwbcRuHzIYHZSmdasemtmDY1yWHISv33/w J9wkyuugOlvsZHbe9TLDqm0KjPmkNgROaHfFdxrRdI8BWXNvd3A6fPD7t49HuzC/ SvAkC/u6Lt8DeNV8thR1pj+O4LbkkIsiM0BDsz3HuosHVmlv54frifUPOfr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+wkZoHuQt/a80PhcvXiPd48IPgwHwYDVR0j BBgwFoAUljSLlXnSNHab3xXzdTaNPAveGGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRlZTJiZDMtMGY2Ni00ZDQzLWE5ZTctOTY1ZDMzZjEyODUyLzAvOTYzNDhCOTU3 OUQyMzQ3NjlCREYxNUYzNzUzNjhEM0MwQkRFMTg2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjM0OEI5NTc5RDIzNDc2OUJERjE1RjM3NTM2OEQzQzBCREUx ODYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvOTYzNDhCOTU3OUQyMzQ3NjlCREYxNUYzNzUzNjhE M0MwQkRFMTg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFthd8AwVheJr4NkcuIfyYUEs0MKUoUrzoMF oPESGxRQhnwUtxpFETpVQWjSagsUURCUTnGc0YHSv4S/UQyt0wQD2dbIopV8H6sl YXE+JwrQgvkYJvQ3N7Mhh0D4A6e4D3eXgFd0eSFbHqFguobQsuucjjvsX6H1MtRx Lm6dhbSzavWf9e5prTFeUoPecF29Q3Yjxwht5ty8YPNgi/WSP2E08tILbyenrJNf xBuGGqo/2aGONxfPWHITN3LC1XZ3XAl45TsJCQwJOWwdP5OyF6avKi3Zuuw97sBl vkb6lvd81FqcIRXnteEP0o34nGBVuZ1qf2MFGxg1YaEi9BpPHAI= -----END CERTIFICATE-----Generated at Sat Sep 26 03:34:08 2026 by rpki-client