$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: viQDcaCe3pQSr5xvDmjjQgJXh4wwsuw8Xviwu6DErwE= Subject key identifier: 6D:1D:B7:A7:FC:65:71:CE:AA:8C:50:AC:6D:4C:23:43:31:6A:81:4E Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 7C6D2CEE681FC121DB67C0567E66DCB9D5EF5063 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 01B4 Signing time: Sun 19 Oct 2025 00:11:17 +0000 Manifest this update: Sun 19 Oct 2025 00:06:17 +0000 Manifest next update: Wed 22 Oct 2025 09:54:17 +0000 Files and hashes: 1: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d3VfPkAv0Y7wZUXEtDA5/M8jwR4+SgensuDndKBOuNg=) 2: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: mZAzMnGhGQGOm5zgc9e1CjUI6b1teAb095np/aleKtQ=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: OGejiG7ww/4ANM9WMGVqk5ky5j5O+TRQ9Z18Ia9TOUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6d:2c:ee:68:1f:c1:21:db:67:c0:56:7e:66:dc:b9:d5:ef:50:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Oct 19 00:06:17 2025 GMT Not After : Oct 22 09:54:17 2025 GMT Subject: CN=6D1DB7A7FC6571CEAA8C50AC6D4C2343316A814E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:ee:12:ef:d5:1c:af:33:e7:98:59:fe:07: f8:a2:df:35:95:e7:3a:1a:fd:aa:89:a7:89:a1:7b: 1e:2b:47:8f:3a:23:1f:f0:dd:32:9c:1b:2e:19:9c: 63:15:65:60:27:fb:58:fd:4a:02:40:40:ac:8e:d6: 72:09:81:84:6e:90:f4:1e:ba:ed:f7:4e:e7:8d:d0: 15:3d:60:6b:48:72:ea:25:cd:31:7e:8d:64:08:6f: 57:f3:54:41:0b:29:eb:df:1a:b7:c2:b3:9b:ba:19: e0:b7:10:77:4a:77:4c:4d:58:bc:a5:68:14:02:07: 8e:0c:71:f4:75:c1:27:57:77:88:01:c5:73:6a:06: 8a:9b:6e:89:b8:29:d1:80:5d:fb:3d:97:87:b8:4c: aa:57:51:2c:e9:be:25:1b:c4:cf:59:76:f8:c8:94: fd:4a:9a:7c:95:71:97:bd:f5:71:6e:af:81:ed:d3: 1d:ca:c2:a3:f2:53:92:07:d7:19:63:7e:ad:78:20: 4c:6f:34:bd:9d:1a:2d:57:1e:21:fe:ad:00:4e:8c: 0c:f9:65:14:9a:fd:29:bc:e5:05:d6:f2:29:7b:c3: 97:fb:5b:b5:25:c4:1a:a4:0a:90:56:ed:0d:c1:58: 91:7f:d9:ca:92:e7:4f:ca:6d:73:34:3c:b4:e6:42: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1D:B7:A7:FC:65:71:CE:AA:8C:50:AC:6D:4C:23:43:31:6A:81:4E X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ab:40:2f:ae:a7:66:19:c7:7b:94:a5:28:5e:b7:54:e0:aa: 82:47:6a:bd:1c:44:e7:1c:93:a1:e1:d3:ed:53:10:f4:e6:23: d3:47:94:07:c9:3b:d8:eb:4c:0d:91:ae:9e:77:ab:88:e9:f3: b2:26:26:e9:ea:25:d1:58:a2:3a:c1:a0:96:21:17:0d:ee:c9: f6:18:c5:a1:29:a2:7d:e5:d3:95:78:62:aa:83:ee:83:17:87: 17:88:fc:7b:2c:87:5d:7d:6f:5a:6c:01:e4:a5:8b:e2:ce:95: 2b:30:0a:a6:2d:c5:6a:c9:1b:57:f6:14:dc:4b:33:b8:fd:f6: 7f:18:fc:ce:d1:c5:93:ac:1c:61:03:ef:27:d6:4e:68:02:cf: 9f:ae:80:11:e6:54:97:2a:d2:cb:50:26:38:cd:e5:cc:79:40: 47:2e:be:9f:74:c2:40:7d:da:df:aa:a0:a1:bc:1b:ec:32:78: 92:6e:52:19:6f:21:16:66:a7:3b:79:b9:b0:86:4c:cd:a2:ff: c2:8a:c2:c8:dd:bd:56:52:95:de:f5:a1:c3:2a:89:6b:37:b6: f5:34:74:11:8c:15:45:2d:fb:57:7c:b2:62:de:34:1f:37:66: ea:40:4a:f8:72:ee:ea:53:f5:a1:d7:13:f8:8f:95:16:2d:24: e1:cf:98:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfG0s7mgfwSHbZ8BWfmbcudXvUGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNTEwMTkwMDA2MTdaFw0yNTEwMjIwOTU0MTdaMDMxMTAvBgNV BAMTKDZEMURCN0E3RkM2NTcxQ0VBQThDNTBBQzZENEMyMzQzMzE2QTgxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+W+4S79UcrzPnmFn+B/ii3zWV 5zoa/aqJp4mhex4rR486Ix/w3TKcGy4ZnGMVZWAn+1j9SgJAQKyO1nIJgYRukPQe uu33TueN0BU9YGtIcuolzTF+jWQIb1fzVEELKevfGrfCs5u6GeC3EHdKd0xNWLyl aBQCB44McfR1wSdXd4gBxXNqBoqbbom4KdGAXfs9l4e4TKpXUSzpviUbxM9ZdvjI lP1KmnyVcZe99XFur4Ht0x3KwqPyU5IH1xljfq14IExvNL2dGi1XHiH+rQBOjAz5 ZRSa/Sm85QXW8il7w5f7W7UlxBqkCpBW7Q3BWJF/2cqS50/KbXM0PLTmQjTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbR23p/xlcc6qjFCsbUwjQzFqgU4wHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmrQC+up2YZx3uUpShet1TgqoJHar0cROcc k6Hh0+1TEPTmI9NHlAfJO9jrTA2Rrp53q4jp87ImJunqJdFYojrBoJYhFw3uyfYY xaEpon3l05V4YqqD7oMXhxeI/Hssh119b1psAeSli+LOlSswCqYtxWrJG1f2FNxL M7j99n8Y/M7RxZOsHGED7yfWTmgCz5+ugBHmVJcq0stQJjjN5cx5QEcuvp90wkB9 2t+qoKG8G+wyeJJuUhlvIRZmpzt5ubCGTM2i/8KKwsjdvVZSld71ocMqiWs3tvU0 dBGMFUUt+1d8smLeNB83ZupASvhy7upT9aHXE/iPlRYtJOHPmCw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:05:03 2025 by rpki-client