
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
File: 96A5BEF01619313B13000152FF7D9849B080E6AD.mft (raw, json)
Hash identifier: lyf4j8gzu/rQyY4EeEVUSisLKY6P/DWCgvM0MTQcrhU=
Subject key identifier: ED:22:4B:9F:F8:23:A9:40:E7:54:7F:CC:3C:E1:26:6F:DB:EF:B5:DF
Authority key identifier: 96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD
Certificate issuer: /CN=96A5BEF01619313B13000152FF7D9849B080E6AD
Certificate serial: 130792FC3BF19B062A235789D78EB3011B96D41C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 05:43:42 +0000
Manifest this update: Mon 21 Sep 2026 05:38:42 +0000
Manifest next update: Tue 22 Sep 2026 08:12:42 +0000
Files and hashes: 1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: RDa+Zhnigfqo7biWFi13W+chpPOznuVZnbRPHv7vJrE=)
2: 96A5BEF01619313B13000152FF7D9849B080E6AD.crl (hash: 6JMNq7RyycLIjQ2jDv5LHgaRVRLwQZMgj8/Wj0PLzsQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl
rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:07:92:fc:3b:f1:9b:06:2a:23:57:89:d7:8e:b3:01:1b:96:d4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96A5BEF01619313B13000152FF7D9849B080E6AD
Validity
Not Before: Sep 21 05:38:42 2026 GMT
Not After : Sep 22 08:12:42 2026 GMT
Subject: CN=ED224B9FF823A940E7547FCC3CE1266FDBEFB5DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:ff:10:ec:1a:95:97:4f:0d:a3:5b:02:6f:
8b:15:e4:99:d2:49:19:34:dd:c6:64:e9:f3:2c:7c:
55:47:55:f5:27:1b:11:f1:15:04:99:44:5f:ea:94:
5e:7f:d8:c0:bf:f1:1e:fe:b5:1a:34:dd:95:c6:af:
49:75:1e:d5:6b:c9:bc:6a:57:46:b5:e2:0e:67:1c:
46:86:b5:f6:dc:8f:2a:66:6c:79:74:09:d1:20:61:
2c:85:96:98:65:9f:31:1b:49:1f:f1:d7:fc:da:3e:
41:3e:b6:f0:7b:93:be:9c:a0:b9:83:c2:88:ee:44:
12:50:42:7e:15:64:f3:63:f2:e2:a6:35:30:f7:e1:
bc:c9:f7:45:a7:bd:0a:25:59:24:e4:ec:36:b0:9b:
fb:fe:f0:d2:83:2d:b5:40:41:28:ee:7b:26:1b:3d:
bb:fa:aa:e4:f8:6f:54:31:75:cc:8c:3c:c7:1a:a4:
2a:f5:20:94:62:3a:ad:bc:b5:4c:71:8c:29:b7:26:
20:eb:18:66:71:13:2f:1e:b2:77:9f:f8:27:ed:5e:
b1:0d:af:12:67:6a:f8:80:34:f5:7f:f2:56:04:5e:
cf:97:41:9e:c8:61:cc:80:c8:af:c1:4d:98:28:9f:
17:df:fd:da:db:5b:66:28:da:2f:97:83:7b:ed:89:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:22:4B:9F:F8:23:A9:40:E7:54:7F:CC:3C:E1:26:6F:DB:EF:B5:DF
X509v3 Authority Key Identifier:
keyid:96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f6:f0:88:3c:96:cc:9f:c7:8a:1d:c3:eb:11:83:72:82:29:
a5:a2:70:bf:88:43:be:03:b4:47:a8:23:5b:de:12:a8:37:06:
97:b7:d6:80:e8:bd:9e:d3:58:4f:aa:5d:20:ee:c3:7e:24:38:
96:db:6b:c4:0c:b6:54:76:51:1b:31:6d:bc:2b:89:80:43:92:
f4:99:a8:f1:ef:46:40:fd:a9:65:17:4a:5a:94:69:b9:48:15:
94:85:65:db:7c:1d:22:30:c6:b0:7d:9f:4a:08:0e:c5:1a:e2:
60:64:84:67:bd:7e:bb:2f:b9:52:24:89:cd:10:5d:07:ef:fd:
07:6c:02:2b:ff:9f:ec:75:5c:91:48:a3:8a:d4:c1:0a:a7:42:
33:f2:c5:9b:77:b9:1c:7e:a0:f8:36:0a:4c:76:6a:b6:c8:6e:
8b:1f:ed:9d:ba:60:f9:93:42:52:c4:3d:55:56:41:ae:d7:66:
3e:b0:ee:02:55:91:68:22:71:f7:c7:4c:b5:6d:fa:b5:d6:bd:
94:53:38:54:50:66:10:a6:a0:c6:ff:a8:5d:2e:2a:78:20:2a:
ea:53:7b:6a:8c:75:4a:fd:64:60:a1:2a:73:f1:19:33:79:51:
55:76:83:96:ee:0a:54:ee:f4:98:f0:0d:c8:43:30:b2:3f:fe:
39:d0:c8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:00:56 2026 by rpki-client