$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft File: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft (raw, json) Hash identifier: nkyDGn+TGPGY7qkKZg+/JU6+YAaRLWuifvvOuXcMAhI= Subject key identifier: 54:09:70:87:68:CC:DF:68:29:D9:E1:A2:00:5A:D9:33:DF:2B:F8:BB Authority key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C Certificate issuer: /CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Certificate serial: 53ED136C5E5B84037D40EDF77C1AFA900F5D484F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft Manifest number: BD Signing time: Sun 20 Sep 2026 16:01:50 +0000 Manifest this update: Sun 20 Sep 2026 15:56:50 +0000 Manifest next update: Mon 21 Sep 2026 18:14:50 +0000 Files and hashes: 1: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl (hash: bVyF6HqrDzcFWdLlaV9Ouhg/NyRc3yiaomdyK7YthZ0=) 2: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: /BgEs0X95g+IDSnEOlX/MgvWY3v0qZzbss60jPNLBe0=) 3: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: 2NisVTWE+HRD9wRpvxBcr4vnaVycZuCJLBHWrwbnEQ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ed:13:6c:5e:5b:84:03:7d:40:ed:f7:7c:1a:fa:90:0f:5d:48:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Validity Not Before: Sep 20 15:56:50 2026 GMT Not After : Sep 21 18:14:50 2026 GMT Subject: CN=5409708768CCDF6829D9E1A2005AD933DF2BF8BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:3a:cf:31:29:e8:6f:95:e5:75:37:cf:1f: 82:9b:11:19:bc:9c:28:6f:27:47:49:55:a2:47:21: bc:77:0e:3b:84:b0:ea:e9:2e:f7:6f:fa:28:98:2d: 55:d3:71:37:22:f1:0f:dd:fd:a0:1e:cd:4c:6a:4d: 0b:67:5d:42:3b:16:39:d2:f3:80:cf:89:3e:07:ec: cc:57:66:3a:aa:9f:e5:25:aa:fb:16:3a:c8:fb:2b: 94:ec:0f:d5:5d:f1:f0:31:23:f3:f9:00:36:6c:fc: 96:33:69:df:82:69:36:7f:1a:33:76:f1:9d:66:0b: ad:ef:3d:0b:23:ae:6f:71:aa:7f:69:0c:e2:b4:f8: 86:9e:d8:d9:37:5d:f4:8c:8b:c2:c5:41:40:0d:48: 40:b6:bc:de:70:b6:7c:30:80:bd:ad:2d:8f:5c:f6: 9e:46:ff:c3:99:4b:1d:37:37:7d:c5:cf:d7:22:04: 27:3f:24:13:f0:26:fe:97:b0:dd:37:15:e1:8f:28: c0:4a:f2:18:ae:4e:56:2c:ad:71:b4:30:c1:ca:2b: d2:64:23:ef:38:cc:0c:3a:58:60:a5:c2:ca:0a:67: f7:ee:4a:b0:bb:19:80:e7:7e:11:cd:c5:c0:7d:c6: aa:61:b8:fc:fc:02:84:58:3c:96:01:4a:76:15:de: 6a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:09:70:87:68:CC:DF:68:29:D9:E1:A2:00:5A:D9:33:DF:2B:F8:BB X509v3 Authority Key Identifier: keyid:96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f7:0e:c5:88:b1:d5:b0:7b:10:bf:3d:89:36:d0:22:d3:9f: ce:b4:73:27:0e:ac:d5:92:6e:36:53:86:c9:68:b5:10:5e:84: b8:49:f7:e5:9d:b3:71:a9:87:c2:c2:98:b2:08:ac:47:3d:17: d0:0f:c3:90:08:91:58:12:93:4b:46:09:bc:dc:3f:22:3d:56: 8b:79:8f:cf:37:23:92:73:ff:61:51:d1:9e:24:1d:5f:e3:40: 1e:82:48:d8:a5:68:6c:be:39:6b:e8:f0:f7:91:23:ff:ea:fc: ba:b8:0e:2c:95:71:31:75:23:b5:30:fc:f6:d3:6f:d7:75:a6: 4f:23:25:d7:5e:42:16:35:df:2b:b2:d3:89:1c:55:29:9b:42: af:3e:37:5d:43:b7:17:75:66:90:43:6e:3f:90:25:fb:e7:00: e0:3d:b6:94:5e:29:ac:62:44:c4:a2:35:ff:ad:4c:e0:f6:f8: 22:2c:15:a8:33:8a:13:35:9f:71:21:6c:a5:f6:3f:ed:41:26: 0b:ce:d2:86:97:bf:d2:ef:b1:5d:6a:c1:7c:3e:50:1e:bd:50: 29:20:73:53:ba:82:9c:88:00:8d:d8:61:d4:5a:b5:0b:7b:4d: 59:4a:4e:f0:1a:d2:e8:3e:41:39:c1:a2:0c:34:9b:20:f7:5a: 99:95:97:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+0TbF5bhAN9QO33fBr6kA9dSE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0MwNjA2 RUM3NzM0QzAeFw0yNjA5MjAxNTU2NTBaFw0yNjA5MjExODE0NTBaMDMxMTAvBgNV BAMTKDU0MDk3MDg3NjhDQ0RGNjgyOUQ5RTFBMjAwNUFEOTMzREYyQkY4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoDrPMSnob5XldTfPH4KbERm8 nChvJ0dJVaJHIbx3DjuEsOrpLvdv+iiYLVXTcTci8Q/d/aAezUxqTQtnXUI7FjnS 84DPiT4H7MxXZjqqn+UlqvsWOsj7K5TsD9Vd8fAxI/P5ADZs/JYzad+CaTZ/GjN2 8Z1mC63vPQsjrm9xqn9pDOK0+Iae2Nk3XfSMi8LFQUANSEC2vN5wtnwwgL2tLY9c 9p5G/8OZSx03N33Fz9ciBCc/JBPwJv6XsN03FeGPKMBK8hiuTlYsrXG0MMHKK9Jk I+84zAw6WGClwsoKZ/fuSrC7GYDnfhHNxcB9xqphuPz8AoRYPJYBSnYV3mqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVAlwh2jM32gp2eGiAFrZM98r+LswHwYDVR0j BBgwFoAUlr5tN9YjGySvrcl83GfAYG7Hc0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU3OTk2ZjUtYTkzNC00YjQ0LTg1NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdE NjIzMUIyNEFGQURDOTdDREM2N0MwNjA2RUM3NzM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkJFNkQzN0Q2MjMxQjI0QUZBREM5N0NEQzY3QzA2MDZFQzc3 MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1 NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0Mw NjA2RUM3NzM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACP3DsWIsdWwexC/PYk20CLTn860cycOrNWS bjZThslotRBehLhJ9+Wds3Gph8LCmLIIrEc9F9APw5AIkVgSk0tGCbzcPyI9Vot5 j883I5Jz/2FR0Z4kHV/jQB6CSNilaGy+OWvo8PeRI//q/Lq4DiyVcTF1I7Uw/PbT b9d1pk8jJddeQhY13yuy04kcVSmbQq8+N11Dtxd1ZpBDbj+QJfvnAOA9tpReKaxi RMSiNf+tTOD2+CIsFagzihM1n3EhbKX2P+1BJgvO0oaXv9LvsV1qwXw+UB69UCkg c1O6gpyIAI3YYdRatQt7TVlKTvAa0ug+QTnBogw0myD3WpmVl9c= -----END CERTIFICATE-----Generated at Mon Sep 21 01:20:54 2026 by rpki-client