
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
File: 96FDA607CDE580764664CCDAA75B9ECDACB44700.mft (raw, json)
Hash identifier: 9zS7gWuTIM0GBHcR443pSk8PwlNdCzEO0QZ3+67UoZY=
Subject key identifier: D3:A6:98:51:F9:2D:05:16:9E:E1:2D:62:2D:92:41:F5:84:11:57:A5
Authority key identifier: 96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00
Certificate issuer: /CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
Certificate serial: 5103A6339DA1025696832FD644BC860D27F5A0AB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:51:13 +0000
Manifest this update: Wed 17 Jun 2026 02:46:13 +0000
Manifest next update: Thu 18 Jun 2026 04:01:13 +0000
Files and hashes: 1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: Xmk4AKXAk65syZMNokwtsrkCl9OG2CFthVNLs1MeEBs=)
2: 96FDA607CDE580764664CCDAA75B9ECDACB44700.crl (hash: 6vALl8qH1w0vUqhA+dWnaH0MxBw4fCes7xV4k3UF+0w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl
rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:03:a6:33:9d:a1:02:56:96:83:2f:d6:44:bc:86:0d:27:f5:a0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
Validity
Not Before: Jun 17 02:46:13 2026 GMT
Not After : Jun 18 04:01:13 2026 GMT
Subject: CN=D3A69851F92D05169EE12D622D9241F5841157A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:b5:cd:f6:15:80:72:9c:a2:3c:12:ae:a7:
e3:a7:b2:78:dc:78:c5:c8:0f:e9:67:fe:60:68:68:
c3:60:ba:cd:88:a9:3e:c9:a4:4a:6a:db:03:75:72:
77:a1:87:64:97:81:5c:15:ab:3f:9a:95:07:c9:be:
f0:a1:ce:bc:eb:dd:5d:d9:f6:38:fb:6d:f4:ef:dc:
3b:ad:81:a2:76:77:bd:60:ed:17:fc:55:a3:b1:c3:
d8:92:bb:51:ae:81:d7:ae:14:83:b8:cf:16:ef:c7:
a3:3f:e0:5f:e1:e3:20:eb:e4:a4:15:66:97:41:51:
c5:b6:68:67:93:d1:89:54:86:eb:67:65:f9:d6:bf:
24:7b:19:ba:35:87:72:e0:dd:20:5d:ba:74:a9:8a:
be:e7:3c:4e:4c:69:27:ac:bd:25:cf:79:06:74:c2:
b5:b3:2a:9d:31:fc:a2:e2:08:a7:c8:6f:99:b5:32:
67:65:95:c7:6f:ba:0f:4d:07:97:4b:4f:8c:ec:ca:
20:b0:47:17:de:3e:71:08:61:36:c0:9c:24:4b:0e:
76:53:20:99:7f:fd:7f:18:b8:e8:b0:19:37:c4:7d:
a9:e9:64:66:09:1a:f5:1f:de:03:c8:9c:5c:df:7f:
e7:87:97:d0:ec:be:93:6e:18:a6:55:04:15:ee:bc:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:98:51:F9:2D:05:16:9E:E1:2D:62:2D:92:41:F5:84:11:57:A5
X509v3 Authority Key Identifier:
keyid:96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:64:87:a4:b5:92:7d:8a:ed:2c:08:3b:7c:56:bd:3d:0d:75:
7a:16:83:a8:72:f3:e4:31:da:23:33:5b:0d:91:8f:e3:f3:22:
72:9e:f6:46:98:66:6d:2a:8e:5a:cd:87:f5:e1:0d:35:03:df:
32:b1:f3:15:ac:6d:0c:80:68:fe:d1:3e:cf:3b:ad:76:01:ec:
a4:21:da:7b:bf:1f:51:ad:e7:f7:38:77:2a:59:9a:3b:51:1b:
22:10:24:57:ad:03:1f:65:4a:38:73:74:18:2b:46:6a:41:87:
18:a7:17:1d:02:27:67:33:bb:7f:2e:7c:0b:0e:2b:7e:b6:c2:
d2:c1:46:2a:50:e3:b7:8f:34:08:a9:8e:80:cc:eb:58:52:06:
1a:f2:8b:ee:63:63:1b:b2:27:4e:b3:f9:4c:05:90:ec:f5:90:
9d:03:93:0c:0c:ea:6a:cf:30:46:4c:86:de:2f:69:7e:68:47:
36:21:23:35:e7:c1:ff:95:de:a9:e5:59:5d:08:39:53:03:f3:
d2:f3:38:94:f1:64:4a:85:f9:9c:14:ff:7a:ca:d9:82:77:31:
fa:d2:76:54:70:15:77:3b:56:55:b2:3b:dd:fc:27:6b:d9:38:
72:5d:d4:3e:6e:b1:1c:36:86:22:8b:ae:90:d5:f8:ad:21:11:
3d:61:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:44:43 2026 by rpki-client