$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: 14ltbIfidIVM/VCvJm1+y0dkJ6WTXrjjpDlLScb9xiE= Subject key identifier: 71:F1:F4:87:0A:BF:C7:66:F6:FE:10:0B:E8:CA:F9:96:EE:95:19:53 Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 64BAD6D7872C922580EAD1349A6A3C8D4FD1CEEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 6E Signing time: Fri 22 Aug 2025 02:52:21 +0000 Manifest this update: Fri 22 Aug 2025 02:47:21 +0000 Manifest next update: Mon 25 Aug 2025 14:03:21 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: 85QR02BmTX+9J6RY/x03ajxk3Xzp+HUcp4/44jM1nOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ba:d6:d7:87:2c:92:25:80:ea:d1:34:9a:6a:3c:8d:4f:d1:ce:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Aug 22 02:47:21 2025 GMT Not After : Aug 25 14:03:21 2025 GMT Subject: CN=71F1F4870ABFC766F6FE100BE8CAF996EE951953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e0:e5:ee:2b:37:43:3c:34:35:09:df:80:63: 2f:c8:b8:b1:f7:03:22:07:9b:f0:09:38:8e:13:f1: 8e:32:ec:ec:b0:43:72:47:ba:fd:ca:c5:57:13:75: 02:17:a7:45:08:c2:9a:8f:4d:5e:2e:2c:07:fe:3f: f7:04:ea:a7:db:d3:ce:0b:4e:97:fb:27:99:cf:84: 3d:2b:74:39:ab:b3:f1:c1:bd:0b:f2:07:fe:d1:af: ea:c4:9c:eb:86:3c:85:17:79:b9:81:7c:a7:58:f1: a9:68:fc:cc:d4:09:da:dc:ab:3f:64:6c:4d:7c:9f: 6c:44:0b:eb:26:de:5c:14:88:dc:88:63:5c:7e:ba: 1c:3e:15:c0:61:2e:fe:5a:8b:a6:13:43:71:6c:b6: 5c:0e:73:cb:28:52:66:bf:69:76:b3:0f:42:6b:c6: e2:5b:dd:f1:7f:18:04:5a:9e:a0:84:37:4d:6b:fb: 35:cf:8b:41:22:fe:ab:11:0d:97:79:9a:d2:0d:11: 5c:81:b1:4b:dc:6a:ad:f9:05:cb:a2:44:c5:39:5f: 48:12:8e:be:91:48:67:9a:43:67:fd:46:93:7b:e4: da:7c:cf:07:1f:af:72:4a:11:18:cc:70:cb:80:1c: 98:29:df:f7:54:35:31:18:ce:06:1e:bf:24:0d:ed: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:F4:87:0A:BF:C7:66:F6:FE:10:0B:E8:CA:F9:96:EE:95:19:53 X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b0:d4:2e:9d:0a:d4:2c:21:3b:a3:92:75:b0:4e:75:f3:52: 57:06:75:8b:13:e3:d6:01:49:69:b9:b3:b1:e6:23:f9:80:a3: b6:de:75:21:a8:4a:4f:57:f0:69:4f:63:87:c3:74:78:be:b1: 29:42:60:38:e8:1c:11:b6:8c:23:e7:1f:03:89:db:81:5a:c7: c1:96:99:73:94:b1:a8:5e:7c:9c:e3:ed:89:b6:93:c9:77:32: 7a:d6:43:42:cf:5b:1f:d9:9c:7b:35:f9:48:eb:a1:64:21:dc: 78:f8:6f:e2:84:5e:7d:e6:36:b3:7b:a0:f3:7d:4f:7e:c6:1a: 99:28:fd:d4:32:71:81:f3:4f:08:b7:3b:1f:c0:28:23:ea:4b: 66:56:2f:55:44:63:5c:a8:13:2c:cd:8c:fb:ee:e7:a8:02:e0: 6e:69:58:9c:d1:e1:51:23:4e:1b:36:58:02:91:ab:c2:a5:01: e3:65:ce:e3:6e:b9:94:91:27:27:a5:e1:37:c3:3f:c6:24:0a: 3d:5f:17:a6:be:d3:de:ec:20:d2:bd:f9:58:24:43:6e:71:de: d7:50:94:fb:4d:77:28:2a:0a:27:b0:50:6b:a7:41:3a:bb:3a: 73:aa:76:1a:c0:b1:3a:d4:07:30:00:6f:38:c8:5b:ca:c5:df: 2e:ca:12:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLrW14cskiWA6tE0mmo8jU/Rzu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA4MjIwMjQ3MjFaFw0yNTA4MjUxNDAzMjFaMDMxMTAvBgNV BAMTKDcxRjFGNDg3MEFCRkM3NjZGNkZFMTAwQkU4Q0FGOTk2RUU5NTE5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44OXuKzdDPDQ1Cd+AYy/IuLH3 AyIHm/AJOI4T8Y4y7OywQ3JHuv3KxVcTdQIXp0UIwpqPTV4uLAf+P/cE6qfb084L Tpf7J5nPhD0rdDmrs/HBvQvyB/7Rr+rEnOuGPIUXebmBfKdY8alo/MzUCdrcqz9k bE18n2xEC+sm3lwUiNyIY1x+uhw+FcBhLv5ai6YTQ3FstlwOc8soUma/aXazD0Jr xuJb3fF/GARanqCEN01r+zXPi0Ei/qsRDZd5mtINEVyBsUvcaq35BcuiRMU5X0gS jr6RSGeaQ2f9RpN75Np8zwcfr3JKERjMcMuAHJgp3/dUNTEYzgYevyQN7f3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcfH0hwq/x2b2/hAL6Mr5lu6VGVMwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2w1C6dCtQsITujknWwTnXzUlcGdYsT49YB SWm5s7HmI/mAo7bedSGoSk9X8GlPY4fDdHi+sSlCYDjoHBG2jCPnHwOJ24Fax8GW mXOUsahefJzj7Ym2k8l3MnrWQ0LPWx/ZnHs1+UjroWQh3Hj4b+KEXn3mNrN7oPN9 T37GGpko/dQycYHzTwi3Ox/AKCPqS2ZWL1VEY1yoEyzNjPvu56gC4G5pWJzR4VEj Ths2WAKRq8KlAeNlzuNuuZSRJyel4TfDP8YkCj1fF6a+097sINK9+VgkQ25x3tdQ lPtNdygqCiewUGunQTq7OnOqdhrAsTrUBzAAbzjIW8rF3y7KElY= -----END CERTIFICATE-----Generated at Sat Aug 23 19:46:12 2025 by rpki-client