$ rpki-client -vvf rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft File: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft (raw, json) Hash identifier: 7jfHdW88Xw9Ezhvxeet4Vqa3I3OHW1R1D3MggekmWok= Subject key identifier: 33:7F:3D:40:C9:BD:97:EE:C1:37:55:2C:17:98:D6:CB:60:4F:C0:F3 Authority key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C Certificate issuer: /CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Certificate serial: 0569375FA8501F003F3AC1AA9A534088C63D71AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:22:33 +0000 Manifest this update: Tue 16 Jun 2026 19:17:33 +0000 Manifest next update: Wed 17 Jun 2026 21:12:33 +0000 Files and hashes: 1: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl (hash: KCV+2WZjBKfFlfWZLZVlcieDW4nFeShxk9uYIpT/zKw=) 2: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: 2NisVTWE+HRD9wRpvxBcr4vnaVycZuCJLBHWrwbnEQ8=) 3: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: /BgEs0X95g+IDSnEOlX/MgvWY3v0qZzbss60jPNLBe0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:69:37:5f:a8:50:1f:00:3f:3a:c1:aa:9a:53:40:88:c6:3d:71:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Validity Not Before: Jun 16 19:17:33 2026 GMT Not After : Jun 17 21:12:33 2026 GMT Subject: CN=337F3D40C9BD97EEC137552C1798D6CB604FC0F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a6:dc:54:d1:17:f8:fe:f8:b3:3a:22:43:bd: 5f:71:8b:c7:9f:cf:8b:47:85:b9:9c:66:ac:53:9c: 90:2e:3c:c6:7c:d5:a8:61:af:7d:3b:15:1a:ac:55: 69:d6:de:06:22:9d:67:3c:41:5b:f8:b2:e9:f6:5c: 8c:31:a4:39:27:f4:90:35:86:23:50:8f:1e:f3:26: c4:97:2d:58:e5:88:6e:ff:7f:ce:19:2a:50:8c:fe: bc:df:7f:5f:e5:bd:71:c1:46:b4:f2:75:15:be:73: 44:73:4b:6a:d5:b6:20:c1:82:b7:27:f7:e0:ba:9a: 9c:39:fa:7e:42:d2:28:25:8f:09:01:77:1e:9f:d0: fd:9f:c1:e1:52:7a:16:9b:16:b4:8f:b2:75:fc:85: 7c:15:c1:f5:af:fb:9e:e5:e2:5f:9f:d5:91:15:35: d2:8f:a5:1d:64:b4:5d:c4:7a:2e:e1:b2:c7:b9:6f: 82:95:4e:b4:76:ed:b5:07:3b:37:e6:a3:de:ca:bc: ea:63:4e:af:b8:97:fe:9d:62:87:9b:5d:c3:23:0e: 37:65:63:b8:79:a4:ac:4e:04:d4:2e:1d:79:66:98: bc:66:06:c0:81:2c:49:dd:7e:86:ab:9b:d3:e4:28: a8:c2:ae:f0:da:74:1d:81:12:7d:cb:1a:05:b0:de: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:3D:40:C9:BD:97:EE:C1:37:55:2C:17:98:D6:CB:60:4F:C0:F3 X509v3 Authority Key Identifier: keyid:96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ed:ba:73:40:8f:57:59:ec:d5:42:5b:38:74:46:71:8d:5e: 47:da:83:ec:e9:9b:e8:79:06:a5:c3:fc:39:3d:8c:10:fa:d2: 7c:48:4e:30:fd:99:cd:67:73:82:fc:62:30:e7:8c:6a:cc:41: c6:ff:0a:ad:02:8b:05:2d:ec:11:4d:cf:a7:e4:ce:02:87:4b: da:50:48:1d:f5:40:a0:eb:50:06:bd:43:5f:2c:85:2b:83:a7: 75:e2:86:fc:54:87:e5:36:7d:75:28:9a:72:36:ed:37:22:a7: 05:9a:fb:42:38:b4:12:89:32:d2:ac:c3:b4:d8:fa:ab:11:0a: a2:38:d0:1b:10:70:cc:94:c9:8e:b5:cc:ed:ec:ce:4d:e0:af: dd:0f:37:56:f3:b4:e3:3d:be:b7:15:92:52:eb:17:4b:ba:36: b1:9e:3c:a7:f6:c4:bd:28:b9:6a:7a:c6:cc:41:c6:b2:c6:af: 11:af:4f:43:ba:dd:18:11:85:33:4b:40:7e:5b:60:f6:8f:a6: a8:b9:dd:c0:68:11:85:be:70:2f:6b:37:37:1e:9b:74:40:e8: 90:00:91:43:36:b2:7d:1b:29:05:86:bb:09:92:8f:40:7e:d0: f1:99:ad:de:84:58:cf:b8:92:6e:d4:49:a3:26:51:bd:6f:b2: e2:ed:e8:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWk3X6hQHwA/OsGqmlNAiMY9cawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0MwNjA2 RUM3NzM0QzAeFw0yNjA2MTYxOTE3MzNaFw0yNjA2MTcyMTEyMzNaMDMxMTAvBgNV BAMTKDMzN0YzRDQwQzlCRDk3RUVDMTM3NTUyQzE3OThENkNCNjA0RkMwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXptxU0Rf4/vizOiJDvV9xi8ef z4tHhbmcZqxTnJAuPMZ81ahhr307FRqsVWnW3gYinWc8QVv4sun2XIwxpDkn9JA1 hiNQjx7zJsSXLVjliG7/f84ZKlCM/rzff1/lvXHBRrTydRW+c0RzS2rVtiDBgrcn 9+C6mpw5+n5C0igljwkBdx6f0P2fweFSehabFrSPsnX8hXwVwfWv+57l4l+f1ZEV NdKPpR1ktF3Eei7hsse5b4KVTrR27bUHOzfmo97KvOpjTq+4l/6dYoebXcMjDjdl Y7h5pKxOBNQuHXlmmLxmBsCBLEndfoarm9PkKKjCrvDadB2BEn3LGgWw3iGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM389QMm9l+7BN1UsF5jWy2BPwPMwHwYDVR0j BBgwFoAUlr5tN9YjGySvrcl83GfAYG7Hc0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU3OTk2ZjUtYTkzNC00YjQ0LTg1NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdE NjIzMUIyNEFGQURDOTdDREM2N0MwNjA2RUM3NzM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkJFNkQzN0Q2MjMxQjI0QUZBREM5N0NEQzY3QzA2MDZFQzc3 MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1 NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0Mw NjA2RUM3NzM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDtunNAj1dZ7NVCWzh0RnGNXkfag+zpm+h5 BqXD/Dk9jBD60nxITjD9mc1nc4L8YjDnjGrMQcb/Cq0CiwUt7BFNz6fkzgKHS9pQ SB31QKDrUAa9Q18shSuDp3XihvxUh+U2fXUomnI27TcipwWa+0I4tBKJMtKsw7TY +qsRCqI40BsQcMyUyY61zO3szk3gr90PN1bztOM9vrcVklLrF0u6NrGePKf2xL0o uWp6xsxBxrLGrxGvT0O63RgRhTNLQH5bYPaPpqi53cBoEYW+cC9rNzcem3RA6JAA kUM2sn0bKQWGuwmSj0B+0PGZrd6EWM+4km7USaMmUb1vsuLt6Do= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:40 2026 by rpki-client