$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft File: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft (raw, json) Hash identifier: JbMNPEilA6yDWIZNQwVY9UIIuIPHuNf3TU8FfGkpWPs= Subject key identifier: DA:48:8C:4F:8C:09:0F:92:BC:EE:0D:AF:26:71:8E:D5:B0:97:BD:A6 Authority key identifier: 96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 Certificate issuer: /CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Certificate serial: 7BF7A2E916B75CC15FC00F102D429861A12AD529 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft Manifest number: BF Signing time: Mon 21 Sep 2026 06:14:18 +0000 Manifest this update: Mon 21 Sep 2026 06:09:18 +0000 Manifest next update: Tue 22 Sep 2026 08:38:18 +0000 Files and hashes: 1: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl (hash: Nz5aUhCsk4e+f+BVcrvQddWUbIIFIBlhT28xiIDxTZ4=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: O7VzOc1QQXPH4ovFqaeUilVVeRWPbXN3yznnumHTcH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f7:a2:e9:16:b7:5c:c1:5f:c0:0f:10:2d:42:98:61:a1:2a:d5:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Validity Not Before: Sep 21 06:09:18 2026 GMT Not After : Sep 22 08:38:18 2026 GMT Subject: CN=DA488C4F8C090F92BCEE0DAF26718ED5B097BDA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:19:27:b7:79:fb:30:13:47:6b:09:71:87:7b: e7:9f:89:86:e7:3e:f3:80:c8:d0:05:0f:e2:f3:08: 9c:ef:c5:62:0b:97:97:0a:8e:fa:4b:75:af:e1:3b: 9e:93:18:de:bf:96:8f:74:69:90:3e:b6:f0:8c:8b: ff:15:4e:76:00:54:a8:df:a5:d5:b1:59:f3:b8:fe: 07:42:4e:5b:52:13:32:8f:bd:17:db:88:71:7a:c8: 41:5b:5f:c0:2c:2c:84:7c:8b:a2:42:74:17:37:a7: db:ce:d9:3d:dc:6d:1e:75:d6:6b:78:0f:85:2b:02: 00:0f:33:42:67:1e:60:82:1d:e9:d2:b4:bc:26:32: 96:5b:ae:86:2a:5a:57:08:0d:37:a8:f0:5e:72:72: 72:c8:e4:6d:45:41:e3:81:0a:5b:b2:a0:ff:6f:da: 50:e8:77:c9:85:05:3f:78:e2:1a:f8:fe:0c:e2:37: f7:dc:3a:5f:8a:2a:d2:20:76:50:37:fa:de:df:7b: b1:59:de:f3:32:ca:a6:69:b0:64:52:ea:c5:0b:b9: 49:ea:72:4a:32:7e:66:3a:90:2d:7b:9a:98:94:ad: f0:65:68:17:a4:e1:2b:a4:d5:83:e6:87:b8:b3:32: 0b:0c:a3:91:54:ba:b7:ee:fa:91:48:07:33:2c:2a: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:48:8C:4F:8C:09:0F:92:BC:EE:0D:AF:26:71:8E:D5:B0:97:BD:A6 X509v3 Authority Key Identifier: keyid:96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:59:d8:03:2b:5a:c2:fd:61:07:07:c3:29:ba:69:cf:03:5f: c2:5f:57:95:20:87:23:b6:ad:ad:b6:77:52:ae:c3:ef:af:ba: 55:e7:3b:b2:60:53:2e:e3:20:bf:99:ea:10:50:3e:11:88:ce: 65:00:87:28:56:f1:47:c3:67:64:f1:24:99:31:46:fb:35:d7: b3:b5:7b:9a:7b:65:17:9b:48:32:91:e2:59:d1:fc:02:c6:ad: c3:41:28:37:8e:d4:7d:e8:1a:64:dc:2e:55:54:b1:5f:33:08: 90:cf:ef:0a:89:68:2e:ab:3d:52:ad:58:6c:9a:cc:df:ea:e0: 16:be:75:0d:08:a6:b8:86:8b:9e:0b:bc:05:ac:6e:8c:7f:cf: 58:39:be:9b:ca:ea:f0:c2:46:92:6e:6e:d1:12:ac:1f:c3:15: 7e:15:9f:37:d9:d2:57:51:fa:86:68:85:8a:13:3b:30:0d:8a: 73:08:2e:e7:fa:8c:d6:7c:1f:7d:ca:c3:bc:8e:17:1f:55:bc: 3f:1f:4a:c2:4d:98:b1:43:e4:5f:b1:2a:6b:e5:57:5a:36:e2: fc:5d:7b:db:12:7a:29:23:70:61:d6:61:8c:63:f4:92:2d:6d: 02:0e:d7:f9:1b:3c:cb:b7:a7:b8:c6:05:e1:d4:97:99:76:cc: 29:49:34:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/ei6Ra3XMFfwA8QLUKYYaEq1SkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2 QkZBOTI3MTAeFw0yNjA5MjEwNjA5MThaFw0yNjA5MjIwODM4MThaMDMxMTAvBgNV BAMTKERBNDg4QzRGOEMwOTBGOTJCQ0VFMERBRjI2NzE4RUQ1QjA5N0JEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGSe3efswE0drCXGHe+efiYbn PvOAyNAFD+LzCJzvxWILl5cKjvpLda/hO56TGN6/lo90aZA+tvCMi/8VTnYAVKjf pdWxWfO4/gdCTltSEzKPvRfbiHF6yEFbX8AsLIR8i6JCdBc3p9vO2T3cbR511mt4 D4UrAgAPM0JnHmCCHenStLwmMpZbroYqWlcIDTeo8F5ycnLI5G1FQeOBCluyoP9v 2lDod8mFBT944hr4/gziN/fcOl+KKtIgdlA3+t7fe7FZ3vMyyqZpsGRS6sULuUnq ckoyfmY6kC17mpiUrfBlaBek4Suk1YPmh7izMgsMo5FUurfu+pFIBzMsKgvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2kiMT4wJD5K87g2vJnGO1bCXvaYwHwYDVR0j BBgwFoAUlveIW49KAWfIbjCD9jD/omv6knEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmZhMGRkZWQtMWFjZi00NDJkLTk2NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4 RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2QkZBOTI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkY3ODg1QjhGNEEwMTY3Qzg2RTMwODNGNjMwRkZBMjZCRkE5 MjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZG QTI2QkZBOTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxZ2AMrWsL9YQcHwym6ac8DX8JfV5UghyO2 ra22d1Kuw++vulXnO7JgUy7jIL+Z6hBQPhGIzmUAhyhW8UfDZ2TxJJkxRvs117O1 e5p7ZRebSDKR4lnR/ALGrcNBKDeO1H3oGmTcLlVUsV8zCJDP7wqJaC6rPVKtWGya zN/q4Ba+dQ0IpriGi54LvAWsbox/z1g5vpvK6vDCRpJubtESrB/DFX4VnzfZ0ldR +oZohYoTOzANinMILuf6jNZ8H33Kw7yOFx9VvD8fSsJNmLFD5F+xKmvlV1o24vxd e9sSeikjcGHWYYxj9JItbQIO1/kbPMu3p7jGBeHUl5l2zClJNHs= -----END CERTIFICATE-----Generated at Mon Sep 21 19:24:17 2026 by rpki-client