$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: 9g7QvkBmZ51gkY2TfZ/fsyvOzCZodIwm0zszKp3UNQM= Subject key identifier: 03:53:53:23:BF:61:BE:98:DF:62:BC:58:8A:81:00:39:1D:9F:42:40 Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 3C16C0873713980C9459C0ED54689DA76B9621EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 019A Signing time: Fri 22 Aug 2025 03:51:18 +0000 Manifest this update: Fri 22 Aug 2025 03:46:18 +0000 Manifest next update: Mon 25 Aug 2025 15:30:18 +0000 Files and hashes: 1: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: OGejiG7ww/4ANM9WMGVqk5ky5j5O+TRQ9Z18Ia9TOUM=) 2: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: 2u7d4ggUjD5hjRuTCub2Ntp0+jgIEJ9YN0r6zNpAKqE=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d3VfPkAv0Y7wZUXEtDA5/M8jwR4+SgensuDndKBOuNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:16:c0:87:37:13:98:0c:94:59:c0:ed:54:68:9d:a7:6b:96:21:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Aug 22 03:46:18 2025 GMT Not After : Aug 25 15:30:18 2025 GMT Subject: CN=03535323BF61BE98DF62BC588A8100391D9F4240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:68:e7:a1:72:e8:38:df:c3:4f:47:86:e4: 75:b2:4e:b6:f7:c2:3b:0b:6a:f2:f6:f1:f0:78:8b: fc:cb:a0:88:0d:1b:21:83:6c:a7:2d:57:f4:d6:b0: 9b:d5:f5:51:a8:0e:97:e0:61:a9:d9:04:b8:78:4e: 92:39:c5:0c:8a:6b:0d:57:85:35:d2:47:b5:e0:12: 9e:60:70:7c:4c:d4:b2:c5:6e:db:ae:3d:d4:cd:2c: 09:25:c7:81:f2:a5:d7:14:bf:ee:50:d8:72:1a:59: 68:4c:71:9f:13:22:a7:bf:3f:07:e9:70:4b:28:02: bd:b5:62:2b:27:4c:31:03:1a:55:6e:e7:e3:87:06: 98:2c:fb:86:1b:27:46:5c:3d:3c:95:be:db:54:f3: 31:6a:15:15:76:ca:1b:9b:dd:1a:a6:58:c1:dd:59: d6:09:73:fb:13:b9:80:07:6c:26:2f:81:ec:9c:f3: 5d:ca:21:03:20:fc:cf:03:60:f6:34:fb:e2:f4:e6: dd:81:28:a3:0f:9c:7a:29:5e:07:c7:de:ad:9a:9c: ca:6d:22:f3:b5:40:64:53:93:4b:9a:10:29:f0:d7: 12:21:a0:ff:43:d1:6c:a5:95:d4:f0:83:cb:0a:2e: d2:64:d6:80:89:e4:a3:e3:a7:3a:b4:72:42:c2:c4: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:53:53:23:BF:61:BE:98:DF:62:BC:58:8A:81:00:39:1D:9F:42:40 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f5:c4:a3:0f:15:d4:9f:be:69:3e:14:02:64:4b:45:4c:d4: 21:8b:03:93:af:ff:13:96:98:02:c4:08:f2:91:e9:80:e9:6e: 5d:51:ad:5a:dc:50:e2:c1:ac:b1:f7:58:f3:be:1c:f1:62:1c: 6f:67:e3:ff:6e:74:10:76:82:8d:b0:29:97:b8:b9:c3:6b:0c: 23:79:6d:43:a3:5f:20:ef:27:ce:11:6d:55:23:40:f1:53:4c: 31:b1:ab:ba:e1:20:17:e8:1e:f8:3e:a8:7b:52:b0:07:bf:62: 43:b0:4e:68:0b:df:0f:0c:75:0f:b0:b3:22:83:d1:56:20:fc: c3:ad:a1:52:1c:d7:19:50:f9:3f:59:54:97:ae:a0:f6:ec:95: f2:43:4a:6e:33:c3:41:e6:75:37:01:4b:61:4b:aa:c7:df:94: a3:b4:27:c7:8f:eb:bb:93:3e:ff:89:a7:1c:4d:23:af:3c:47: b8:36:67:f9:75:08:27:05:3f:2f:16:40:9d:57:6c:3b:c0:5b: 18:c2:bb:4b:b5:82:db:bd:b6:e8:6d:d3:d8:1e:b9:6d:78:37: 6e:40:61:ab:3d:09:b4:d8:e3:1a:97:32:30:8e:01:d2:63:bb: 84:2e:2c:bf:8e:74:ad:e2:2e:fb:f6:5b:aa:4a:f2:b8:ef:f4: 22:13:23:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBbAhzcTmAyUWcDtVGidp2uWIe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNTA4MjIwMzQ2MThaFw0yNTA4MjUxNTMwMThaMDMxMTAvBgNV BAMTKDAzNTM1MzIzQkY2MUJFOThERjYyQkM1ODhBODEwMDM5MUQ5RjQyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5mjnoXLoON/DT0eG5HWyTrb3 wjsLavL28fB4i/zLoIgNGyGDbKctV/TWsJvV9VGoDpfgYanZBLh4TpI5xQyKaw1X hTXSR7XgEp5gcHxM1LLFbtuuPdTNLAklx4HypdcUv+5Q2HIaWWhMcZ8TIqe/Pwfp cEsoAr21YisnTDEDGlVu5+OHBpgs+4YbJ0ZcPTyVvttU8zFqFRV2yhub3RqmWMHd WdYJc/sTuYAHbCYvgeyc813KIQMg/M8DYPY0++L05t2BKKMPnHopXgfH3q2anMpt IvO1QGRTk0uaECnw1xIhoP9D0WylldTwg8sKLtJk1oCJ5KPjpzq0ckLCxDDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA1NTI79hvpjfYrxYioEAOR2fQkAwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGH1xKMPFdSfvmk+FAJkS0VM1CGLA5Ov/xOW mALECPKR6YDpbl1RrVrcUOLBrLH3WPO+HPFiHG9n4/9udBB2go2wKZe4ucNrDCN5 bUOjXyDvJ84RbVUjQPFTTDGxq7rhIBfoHvg+qHtSsAe/YkOwTmgL3w8MdQ+wsyKD 0VYg/MOtoVIc1xlQ+T9ZVJeuoPbslfJDSm4zw0HmdTcBS2FLqsfflKO0J8eP67uT Pv+JpxxNI688R7g2Z/l1CCcFPy8WQJ1XbDvAWxjCu0u1gtu9tuht09geuW14N25A Yas9CbTY4xqXMjCOAdJju4QuLL+OdK3iLvv2W6pK8rjv9CITIxk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:54:09 2025 by rpki-client