$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft File: 96A5BEF01619313B13000152FF7D9849B080E6AD.mft (raw, json) Hash identifier: A4awUBYRHFuN10U+Kj3eSDjUs9H5B8lrnX8goe7mn0c= Subject key identifier: 46:37:E0:C4:1E:CC:E9:78:44:5B:49:87:EA:7E:C7:99:46:34:C6:FB Authority key identifier: 96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD Certificate issuer: /CN=96A5BEF01619313B13000152FF7D9849B080E6AD Certificate serial: 6CF12A06CFB256976D587469611AB9E48D94729C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 18:53:08 +0000 Manifest this update: Sat 14 Nov 2026 18:48:08 +0000 Manifest next update: Sun 15 Nov 2026 21:02:08 +0000 Files and hashes: 1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: RDa+Zhnigfqo7biWFi13W+chpPOznuVZnbRPHv7vJrE=) 2: 96A5BEF01619313B13000152FF7D9849B080E6AD.crl (hash: IRRseNuEyZcTEtShvDyOlsgEY+9k1Wf46ZsYH5CSuCI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f1:2a:06:cf:b2:56:97:6d:58:74:69:61:1a:b9:e4:8d:94:72:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96A5BEF01619313B13000152FF7D9849B080E6AD Validity Not Before: Nov 14 18:48:08 2026 GMT Not After : Nov 15 21:02:08 2026 GMT Subject: CN=4637E0C41ECCE978445B4987EA7EC7994634C6FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:18:04:c6:f0:e5:dc:1b:be:bf:26:4d:b8: 3b:c5:ec:bc:60:6b:18:b1:10:d0:15:21:f8:76:f1: 02:8f:81:38:3d:82:78:5a:be:f2:85:9e:79:04:53: 6d:99:16:e1:73:32:6e:2d:9b:7e:ae:0c:10:d0:7b: 16:8f:f9:7d:d6:dc:86:08:03:e4:67:ea:e6:b5:bb: 5f:09:8d:15:47:bb:06:75:d1:25:18:6c:a2:2e:94: b3:8f:2f:0c:78:ee:2a:a7:85:4b:82:b7:47:15:bc: 02:52:62:b1:66:ca:9f:9e:ae:f8:3d:f0:33:11:6b: 8b:0a:28:ea:9b:f2:3c:e2:c6:25:71:a6:ec:58:17: 94:71:4b:fa:a5:9e:75:0d:bd:df:37:4a:9f:26:f6: 31:83:37:35:0b:22:7c:1a:72:51:e3:c5:2e:24:19: ca:47:93:16:52:e6:78:89:a2:59:e5:65:00:66:8c: 06:47:69:4e:44:e9:84:4b:d7:8e:18:fd:bd:96:a0: 08:35:5b:d6:9e:5a:43:13:e9:ff:1e:14:43:88:26: 66:d7:e3:b3:d3:2a:e9:75:57:56:2c:ac:61:43:ba: 99:c1:c4:df:11:75:30:18:eb:43:34:17:11:f6:fa: 1b:dc:bb:9d:7e:03:b9:45:4b:c8:eb:e7:14:f0:dc: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:37:E0:C4:1E:CC:E9:78:44:5B:49:87:EA:7E:C7:99:46:34:C6:FB X509v3 Authority Key Identifier: keyid:96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:25:c7:14:09:1b:56:2d:cd:91:45:16:4e:4e:88:f7:22:f9: 52:4d:d3:a3:69:ff:bd:26:5b:00:bd:e8:da:ca:78:03:4f:1f: 8d:cd:d2:56:e0:d7:a1:24:a8:3b:42:cb:07:70:04:8a:72:8c: bf:a3:98:6e:38:20:5f:5a:d3:27:7d:b9:92:da:24:52:50:b4: 27:b9:6f:9d:df:fe:7a:12:43:e7:32:0c:49:03:06:c2:bf:17: 00:c2:24:f7:e3:55:25:4d:4a:74:21:02:26:c0:4d:97:69:e6: 24:c2:f7:09:b8:fa:86:28:14:a9:ae:f9:34:75:dc:e9:0d:90: fc:d6:a9:06:0d:3c:0a:8e:0e:71:91:1c:10:de:22:62:5a:e2: 1b:33:67:de:93:f4:88:aa:6c:f3:bd:77:65:d8:44:46:e7:0a: 16:1c:cd:1d:5c:78:83:7e:23:c4:07:05:f0:75:97:bb:0a:45: f9:83:2b:fc:52:d2:6d:ae:c5:65:01:1a:01:b7:bd:5c:ae:ee: bb:6d:d1:a3:34:c3:85:d1:c7:7f:62:8e:aa:27:c3:03:26:83: c0:54:6d:19:65:d7:4e:02:c2:70:70:0a:8d:a3:13:0d:d8:51: e5:d8:bd:a3:9d:40:4b:7d:f4:b1:60:dd:48:61:17:de:32:59: 08:9c:77:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPEqBs+yVpdtWHRpYRq55I2UcpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZBNUJFRjAxNjE5MzEzQjEzMDAwMTUyRkY3RDk4NDlC MDgwRTZBRDAeFw0yNjExMTQxODQ4MDhaFw0yNjExMTUyMTAyMDhaMDMxMTAvBgNV BAMTKDQ2MzdFMEM0MUVDQ0U5Nzg0NDVCNDk4N0VBN0VDNzk5NDYzNEM2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZRhgExvDl3Bu+vyZNuDvF7Lxg axixENAVIfh28QKPgTg9gnhavvKFnnkEU22ZFuFzMm4tm36uDBDQexaP+X3W3IYI A+Rn6ua1u18JjRVHuwZ10SUYbKIulLOPLwx47iqnhUuCt0cVvAJSYrFmyp+ervg9 8DMRa4sKKOqb8jzixiVxpuxYF5RxS/qlnnUNvd83Sp8m9jGDNzULInwaclHjxS4k GcpHkxZS5niJolnlZQBmjAZHaU5E6YRL144Y/b2WoAg1W9aeWkMT6f8eFEOIJmbX 47PTKul1V1YsrGFDupnBxN8RdTAY60M0FxH2+hvcu51+A7lFS8jr5xTw3ND/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURjfgxB7M6XhEW0mH6n7HmUY0xvswHwYDVR0j BBgwFoAUlqW+8BYZMTsTAAFS/32YSbCA5q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlMmEyZTEtMWIyZC00OGNjLTlkYjMtNjdhODFhZjY3MDYyLzAvOTZBNUJFRjAx NjE5MzEzQjEzMDAwMTUyRkY3RDk4NDlCMDgwRTZBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkE1QkVGMDE2MTkzMTNCMTMwMDAxNTJGRjdEOTg0OUIwODBF NkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvOTZBNUJFRjAxNjE5MzEzQjEzMDAwMTUyRkY3RDk4 NDlCMDgwRTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIlxxQJG1YtzZFFFk5OiPci+VJN06Np/70m WwC96NrKeANPH43N0lbg16EkqDtCywdwBIpyjL+jmG44IF9a0yd9uZLaJFJQtCe5 b53f/noSQ+cyDEkDBsK/FwDCJPfjVSVNSnQhAibATZdp5iTC9wm4+oYoFKmu+TR1 3OkNkPzWqQYNPAqODnGRHBDeImJa4hszZ96T9IiqbPO9d2XYREbnChYczR1ceIN+ I8QHBfB1l7sKRfmDK/xS0m2uxWUBGgG3vVyu7rtt0aM0w4XRx39ijqonwwMmg8BU bRll104CwnBwCo2jEw3YUeXYvaOdQEt99LFg3UhhF94yWQicd2Y= -----END CERTIFICATE-----Generated at Sun Nov 15 10:05:17 2026 by rpki-client