$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: SAUSG6+d1IEx0MGh9qkJDVe2rWRAMjGNR/K6/UulsFk= Subject key identifier: B3:43:C2:5C:34:42:76:15:32:E5:1C:82:A5:BC:DA:8F:35:B5:5A:01 Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 0EE5EE71C46D78726A38D8AD6FB4D7ECDE323BF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 88 Signing time: Mon 20 Oct 2025 01:22:13 +0000 Manifest this update: Mon 20 Oct 2025 01:17:13 +0000 Manifest next update: Thu 23 Oct 2025 03:49:13 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: da199CJTGMxkR45X1ajHvHRTHBXjVIrrbWqLK08mYGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e5:ee:71:c4:6d:78:72:6a:38:d8:ad:6f:b4:d7:ec:de:32:3b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Oct 20 01:17:13 2025 GMT Not After : Oct 23 03:49:13 2025 GMT Subject: CN=B343C25C3442761532E51C82A5BCDA8F35B55A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:ed:bf:90:e9:8a:78:32:d6:ee:df:5f:9f: 30:42:84:c1:50:b1:73:3c:0d:f4:93:40:ba:f3:60: ac:b9:79:cd:c7:47:00:74:a6:5d:86:67:9f:af:18: 8d:91:58:e2:e0:35:bd:5b:41:bd:7e:9a:06:b7:7e: bf:98:8d:93:43:f0:22:a7:d0:61:7d:75:ac:f7:00: 71:b4:0f:81:b5:94:0e:20:db:75:24:c5:f9:8d:8b: 98:05:ea:5e:7a:03:1a:ea:7f:24:00:11:44:f1:1e: 3c:f5:12:59:e9:67:8c:0c:d9:dd:d0:ac:c7:54:e9: 8d:c7:3e:79:6f:c9:60:8d:95:d6:4e:7e:b3:1d:e7: 25:b5:a5:90:84:49:9a:26:26:39:7e:d4:d5:85:da: 3d:2d:64:33:fe:39:e0:00:a8:c8:d1:49:cc:55:3e: 76:bd:a4:af:22:5b:a8:6e:83:6b:8f:a8:6f:9d:51: c3:bc:5f:81:1a:94:f3:66:8b:7a:51:03:ab:f9:e7: ec:3e:d2:0f:4e:0a:c2:65:da:dc:c2:10:d7:30:e2: 40:fe:d3:5e:38:f0:53:3d:1a:d0:fe:45:c9:dd:92: 32:c5:5a:d5:c8:9b:89:ea:ab:02:48:22:c3:9d:a7: d2:94:31:b5:44:04:79:8d:af:e3:e7:e2:d1:5a:84: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:43:C2:5C:34:42:76:15:32:E5:1C:82:A5:BC:DA:8F:35:B5:5A:01 X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:73:a2:c3:a1:86:8f:e2:5d:35:bc:f4:57:40:03:47:5b:72: 53:48:17:9f:15:62:a9:23:d1:88:ef:4a:ff:be:d0:66:54:f5: a2:bf:1e:10:a1:bf:f2:ca:4b:f2:75:fc:68:51:4f:58:5e:6a: aa:5e:b4:e7:cd:98:af:09:d9:e2:90:4d:75:f9:77:96:7b:21: 28:16:85:0c:03:62:6b:b6:fe:79:c4:b2:87:a7:30:84:95:16: ea:05:d3:2a:82:e7:34:de:ab:51:1b:71:ac:35:6a:af:66:12: e3:2b:f9:98:c2:53:8d:62:1b:d5:ca:b1:b6:87:aa:72:88:74: f9:0a:e0:95:b5:47:97:68:00:39:bc:69:b6:f9:0e:0e:b8:35: 79:64:78:82:f8:94:6d:4b:66:b5:f8:f1:b2:56:e7:b3:82:d5: aa:b8:20:37:2c:f3:07:9f:57:f6:a5:e5:8b:18:a2:02:9a:a5: bc:e2:fc:93:f8:91:67:48:ed:d2:23:c3:64:a3:63:a3:83:5f: 2b:3e:be:4c:58:f6:0c:a9:e5:5d:f1:ef:46:cb:db:4d:b4:ee: 45:2e:87:67:9c:bb:37:ff:44:0a:fe:ef:06:cc:9e:3d:d2:59: dd:4a:ed:fe:5c:14:d6:41:45:fe:b6:35:83:ce:03:b9:3f:da: 61:10:97:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuXuccRteHJqONitb7TX7N4yO/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTEwMjAwMTE3MTNaFw0yNTEwMjMwMzQ5MTNaMDMxMTAvBgNV BAMTKEIzNDNDMjVDMzQ0Mjc2MTUzMkU1MUM4MkE1QkNEQThGMzVCNTVBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtB+2/kOmKeDLW7t9fnzBChMFQ sXM8DfSTQLrzYKy5ec3HRwB0pl2GZ5+vGI2RWOLgNb1bQb1+mga3fr+YjZND8CKn 0GF9daz3AHG0D4G1lA4g23UkxfmNi5gF6l56AxrqfyQAEUTxHjz1ElnpZ4wM2d3Q rMdU6Y3HPnlvyWCNldZOfrMd5yW1pZCESZomJjl+1NWF2j0tZDP+OeAAqMjRScxV Pna9pK8iW6hug2uPqG+dUcO8X4EalPNmi3pRA6v55+w+0g9OCsJl2tzCENcw4kD+ 01448FM9GtD+RcndkjLFWtXIm4nqqwJIIsOdp9KUMbVEBHmNr+Pn4tFahDDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs0PCXDRCdhUy5RyCpbzajzW1WgEwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRzosOhho/iXTW89FdAA0dbclNIF58VYqkj 0YjvSv++0GZU9aK/HhChv/LKS/J1/GhRT1heaqpetOfNmK8J2eKQTXX5d5Z7ISgW hQwDYmu2/nnEsoenMISVFuoF0yqC5zTeq1Ebcaw1aq9mEuMr+ZjCU41iG9XKsbaH qnKIdPkK4JW1R5doADm8abb5Dg64NXlkeIL4lG1LZrX48bJW57OC1aq4IDcs8wef V/al5YsYogKapbzi/JP4kWdI7dIjw2SjY6ODXys+vkxY9gyp5V3x70bL20207kUu h2ecuzf/RAr+7wbMnj3SWd1K7f5cFNZBRf62NYPOA7k/2mEQl7A= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:41 2025 by rpki-client