$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: UBfnKxwAKQ0B9a1BzMprrVcDDKKVqiTVHJC1tmJbWAo= Subject key identifier: DA:6C:40:C6:47:AF:E5:C6:57:6E:5F:55:6E:17:5B:C2:D3:87:17:B0 Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 0A3EFDE019017DCA16FDCB673625E8C720FE65FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 01FB Signing time: Wed 25 Mar 2026 04:11:27 +0000 Manifest this update: Wed 25 Mar 2026 04:06:27 +0000 Manifest next update: Sat 28 Mar 2026 11:14:27 +0000 Files and hashes: 1: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: i1JcJ0Nnn7iJnYPYWgo+ev1kqnU11fQiK1+QM3GQ61c=) 2: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d/oqyDi4sv5f7bgdGzOv2LunD1qLNy94sxilYJ9cVe0=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: wlFQ0Mhp/1XnwwUvAj+JZIZYp8c/czLKraMQXNmD1R0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3e:fd:e0:19:01:7d:ca:16:fd:cb:67:36:25:e8:c7:20:fe:65:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Mar 25 04:06:27 2026 GMT Not After : Mar 28 11:14:27 2026 GMT Subject: CN=DA6C40C647AFE5C6576E5F556E175BC2D38717B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:2a:0e:fa:35:d9:5d:ea:3a:5c:59:8a:a5: 7a:c3:0d:be:15:69:2c:d2:b9:7b:bb:df:31:c9:fa: 51:b1:21:c7:b9:6a:e4:68:96:21:8e:b6:72:db:68: 06:dc:8b:63:bc:09:4a:e4:54:75:cf:51:d9:07:46: 50:6c:8c:93:d6:ec:72:e3:1f:62:77:5d:57:1d:99: 17:cb:f4:56:55:90:11:54:3b:06:da:ae:1d:69:e4: d1:94:be:89:12:bb:0e:a8:92:e1:bd:33:30:73:96: 98:a1:98:ec:49:34:21:76:83:3f:49:3e:d5:9c:a6: 6f:c8:e6:c5:e9:19:7f:51:62:8c:f4:45:24:64:a0: d0:f4:f6:44:27:1e:db:ad:79:89:c4:c1:6c:87:85: 86:c6:0f:e7:12:67:4e:7b:ec:60:27:d3:5e:b0:c1: 4f:63:4e:3a:b7:a8:0d:64:af:c8:b6:56:bc:5c:a2: 0d:a5:7e:19:a5:50:21:90:6a:25:62:c7:f5:ad:00: 9c:4e:cf:8d:00:5e:36:da:b4:06:26:29:86:2a:9f: 7d:4b:03:f6:51:cf:c2:bf:59:2a:27:15:27:c2:e9: eb:c8:06:b2:77:de:2e:65:2d:f8:a6:5a:c2:88:00: 09:ca:f3:fd:53:a4:03:76:2f:0b:20:49:e4:54:04: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6C:40:C6:47:AF:E5:C6:57:6E:5F:55:6E:17:5B:C2:D3:87:17:B0 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:30:e2:03:2a:28:90:41:68:ce:16:39:0b:1a:8a:8e:67:e5: de:a9:26:4c:c2:93:6d:8f:38:5b:74:b4:68:05:e5:5a:d9:dc: 0c:47:47:e5:43:05:3e:a2:e9:bb:ca:e3:94:a3:8e:03:22:24: 33:52:75:ec:c7:77:b4:35:7f:a2:7f:d8:53:b3:93:cc:49:af: 01:3b:75:a1:00:56:4c:b1:81:1b:ea:f7:e4:74:9e:8c:ea:22: ab:59:01:a7:0b:7e:00:3c:52:34:b2:a2:2a:7e:e0:f5:42:e9: c1:63:39:3b:1f:dc:41:4f:f7:eb:07:fd:cb:db:31:69:66:0a: 20:05:ac:c2:6d:eb:84:ec:9b:57:96:87:0f:60:26:b0:49:65: d1:e4:c6:c0:0b:ea:d5:a4:89:3f:64:1c:9e:e6:46:49:1c:b7: a9:10:45:65:1a:4f:bd:75:6d:10:b9:ca:d2:79:0b:50:45:c1: 8e:21:7c:bd:4b:12:a4:a9:07:c9:e6:9c:a0:0f:88:ed:e1:61: 54:ab:19:31:32:6c:5c:73:de:47:90:71:6c:d8:b4:90:82:e3: e3:c9:74:02:8e:d6:a1:56:c9:8c:73:7a:31:bd:76:3a:dc:a8: 48:cf:c0:40:35:8d:d7:9b:0b:d2:e8:48:e5:08:47:82:64:2b: 1a:4c:33:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCj794BkBfcoW/ctnNiXoxyD+ZfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNjAzMjUwNDA2MjdaFw0yNjAzMjgxMTE0MjdaMDMxMTAvBgNV BAMTKERBNkM0MEM2NDdBRkU1QzY1NzZFNUY1NTZFMTc1QkMyRDM4NzE3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkICoO+jXZXeo6XFmKpXrDDb4V aSzSuXu73zHJ+lGxIce5auRoliGOtnLbaAbci2O8CUrkVHXPUdkHRlBsjJPW7HLj H2J3XVcdmRfL9FZVkBFUOwbarh1p5NGUvokSuw6okuG9MzBzlpihmOxJNCF2gz9J PtWcpm/I5sXpGX9RYoz0RSRkoND09kQnHtuteYnEwWyHhYbGD+cSZ0577GAn016w wU9jTjq3qA1kr8i2Vrxcog2lfhmlUCGQaiVix/WtAJxOz40AXjbatAYmKYYqn31L A/ZRz8K/WSonFSfC6evIBrJ33i5lLfimWsKIAAnK8/1TpAN2LwsgSeRUBM8hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2mxAxkev5cZXbl9VbhdbwtOHF7AwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMw4gMqKJBBaM4WOQsaio5n5d6pJkzCk22P OFt0tGgF5VrZ3AxHR+VDBT6i6bvK45SjjgMiJDNSdezHd7Q1f6J/2FOzk8xJrwE7 daEAVkyxgRvq9+R0nozqIqtZAacLfgA8UjSyoip+4PVC6cFjOTsf3EFP9+sH/cvb MWlmCiAFrMJt64Tsm1eWhw9gJrBJZdHkxsAL6tWkiT9kHJ7mRkkct6kQRWUaT711 bRC5ytJ5C1BFwY4hfL1LEqSpB8nmnKAPiO3hYVSrGTEybFxz3keQcWzYtJCC4+PJ dAKO1qFWyYxzejG9djrcqEjPwEA1jdebC9LoSOUIR4JkKxpMM0k= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:31 2026 by rpki-client