
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
File: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft (raw, json)
Hash identifier: xXqKi5koUexjQy/E6Yfc3KYZtv7rwGj5KjV8LYRdQLU=
Subject key identifier: 24:3E:AC:C4:1E:63:5E:68:BA:01:60:04:3A:FB:6B:15:8E:44:40:E7
Authority key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C
Certificate issuer: /CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C
Certificate serial: 52EBCCBB7144161F81BB6C708A6DD8572D364E95
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
Manifest number: 0107
Signing time: Sat 14 Nov 2026 22:32:24 +0000
Manifest this update: Sat 14 Nov 2026 22:27:24 +0000
Manifest next update: Mon 16 Nov 2026 01:18:24 +0000
Files and hashes: 1: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: /BgEs0X95g+IDSnEOlX/MgvWY3v0qZzbss60jPNLBe0=)
2: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl (hash: qnGOgPUpSlwo6tbIA0Al+MAa3FnOBp4+6M85JAahSz4=)
3: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: 2NisVTWE+HRD9wRpvxBcr4vnaVycZuCJLBHWrwbnEQ8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl
rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 01:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:eb:cc:bb:71:44:16:1f:81:bb:6c:70:8a:6d:d8:57:2d:36:4e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C
Validity
Not Before: Nov 14 22:27:24 2026 GMT
Not After : Nov 16 01:18:24 2026 GMT
Subject: CN=243EACC41E635E68BA0160043AFB6B158E4440E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:be:1c:84:31:bd:6a:13:cb:0c:96:ed:8a:
ee:c9:2e:16:56:68:60:05:6a:ab:99:76:6a:69:13:
39:ea:84:5b:d6:65:b1:09:e3:3d:9c:e9:aa:46:5c:
1d:e0:d7:24:eb:a7:bc:9f:f5:5e:37:d8:09:9e:3b:
62:e9:24:92:f5:f6:36:ae:a0:15:74:31:92:64:4c:
f8:6e:85:3f:18:26:b0:aa:77:19:43:0f:ce:ea:7d:
ae:b4:0c:e4:3c:20:3e:2b:6b:81:a9:4d:50:1e:64:
22:87:8b:ca:91:44:64:30:83:41:f3:84:22:8c:a5:
78:19:24:f8:6e:09:5f:89:85:fc:48:ba:9f:04:e5:
03:5f:05:7b:91:78:47:0d:f1:c3:25:70:dc:e4:bb:
36:ae:48:6e:dd:46:34:0f:f2:23:81:29:21:8e:0d:
5c:93:80:a4:cb:9b:ea:db:a6:ad:e0:cf:3b:c8:83:
f8:94:a4:96:f5:94:f4:d9:a8:5c:fe:fa:72:aa:2b:
60:f4:2e:8b:a4:0f:60:98:1e:95:a0:57:4f:e8:fb:
ba:39:c1:c4:53:22:ed:09:b7:83:df:13:a4:1b:21:
25:5e:b7:f1:1b:e7:a5:38:6f:9e:f3:c4:9c:c5:9b:
2a:03:36:ab:29:b1:65:f4:d4:75:ba:79:ca:1b:60:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:AC:C4:1E:63:5E:68:BA:01:60:04:3A:FB:6B:15:8E:44:40:E7
X509v3 Authority Key Identifier:
keyid:96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fc:8f:9f:d3:56:2a:31:ec:04:51:53:90:63:15:10:4a:4c:
89:8f:68:1c:86:06:44:9f:cc:f7:30:8d:82:6d:e3:c1:54:f4:
8d:bd:b4:d8:12:47:c0:60:5a:c5:d2:54:a6:b4:74:01:bd:8f:
88:26:20:4b:41:cd:e3:d6:3b:f7:1e:05:48:33:6b:65:71:5f:
20:6a:d6:b7:51:5b:e6:a1:78:bc:f2:eb:1d:80:ea:49:0f:f8:
0e:7d:c3:5f:d8:81:19:5b:73:e9:81:fa:74:dc:66:26:e1:30:
dd:f7:cf:71:3a:70:0c:73:09:b6:7e:8a:c7:e4:1f:1c:81:08:
72:85:15:89:27:88:04:a1:f4:40:2e:4c:dc:97:1f:7e:99:46:
e4:6e:ab:9e:84:da:30:03:ae:36:3a:8b:a1:2a:f8:5a:47:15:
02:14:85:fa:1f:18:63:3f:fd:10:b8:da:21:1d:a3:51:b9:72:
1a:46:df:ad:b0:22:c9:63:7f:cd:0e:8d:76:1f:91:82:70:ce:
52:98:6e:41:55:a5:e6:50:2f:45:aa:aa:60:58:12:e1:81:11:
12:96:a7:d6:e1:41:66:aa:bf:b5:e1:58:62:28:41:61:56:6a:
62:65:b7:ff:9b:58:b7:b9:a6:7c:6e:2d:02:f6:31:d4:3d:7d:
2e:09:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:26 2026 by rpki-client