$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: eTwJ4gJvtR2SWm3Bzdt6o+QLNlEqD5LpnJOfrBTblEU= Subject key identifier: 58:14:A3:72:ED:86:21:6F:B7:66:FA:8C:F8:E8:62:7E:F9:BA:2D:3A Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 3311B86AF490685D731AC6CAF7627DFFFA4F5EF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: CE Signing time: Wed 25 Mar 2026 23:22:34 +0000 Manifest this update: Wed 25 Mar 2026 23:17:34 +0000 Manifest next update: Sun 29 Mar 2026 09:01:34 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: FC4ppeQDAsdbbmtUjPtSsp/dejkSM9F2rQ/TEQ5dNdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:11:b8:6a:f4:90:68:5d:73:1a:c6:ca:f7:62:7d:ff:fa:4f:5e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Mar 25 23:17:34 2026 GMT Not After : Mar 29 09:01:34 2026 GMT Subject: CN=5814A372ED86216FB766FA8CF8E8627EF9BA2D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cf:94:7b:27:a1:da:ac:1f:f3:81:0d:f1:3d: a9:b5:68:3e:5c:39:2a:cc:e3:03:02:73:09:54:14: a3:df:a1:fb:74:1c:d9:c7:98:97:54:b1:10:eb:c7: c7:f7:fc:19:61:50:3f:0a:45:a0:8e:fa:00:2c:2d: 6b:5f:f8:5d:22:4d:ff:7c:f5:eb:34:29:39:74:70: ae:7f:3e:31:fa:f7:a0:b8:9c:c1:40:0a:a3:bf:f0: 88:e7:60:6d:44:e8:8d:af:1e:42:22:e6:13:8d:47: 8a:3b:95:7d:d2:aa:10:c3:e6:5e:e8:b8:a5:ae:bf: 18:20:99:df:fe:5e:43:1f:38:78:49:cf:5d:3a:4d: 15:7d:ea:4d:71:75:bf:7d:6c:db:68:80:88:d3:6f: bf:97:88:bb:1f:b0:5f:0c:7f:0c:17:c2:5c:36:6d: 39:c3:65:c6:37:65:86:fd:86:96:68:11:d4:30:5c: 0b:2b:4c:31:4e:02:6f:30:2c:e9:56:d7:fe:bc:c8: f1:ab:c9:be:89:11:94:11:99:fd:2a:5a:df:69:bd: 85:6a:5d:36:f0:cf:c1:3f:ff:38:5d:e7:5d:f9:af: 49:4b:82:ce:c4:32:07:39:99:39:c7:18:58:91:f2: 10:6f:23:2f:e4:dc:aa:7f:e6:c4:78:11:9d:7c:0e: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:14:A3:72:ED:86:21:6F:B7:66:FA:8C:F8:E8:62:7E:F9:BA:2D:3A X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f3:5e:0e:84:28:37:68:11:d1:9a:46:ba:d6:d3:e2:92:03: e2:24:cc:d3:8e:e1:34:79:80:59:8a:08:b6:97:13:5c:99:a1: 53:39:14:36:87:a7:ee:5c:d1:3c:57:0c:62:1b:b5:aa:e9:e0: 51:8f:b7:dd:1a:75:fd:59:52:56:52:90:51:33:a0:3e:b3:c9: e3:f8:59:b8:6a:6c:78:95:11:89:0f:05:e5:37:c9:3b:f8:3c: a0:df:79:01:ef:04:73:11:da:72:fe:58:76:11:19:bd:00:d2: 91:40:fd:17:85:e7:0b:4a:97:53:a0:a5:f3:98:55:a0:fc:74: dd:bc:7a:62:b4:1f:71:64:54:bb:39:b4:f0:8b:42:cf:40:95: 7b:50:85:02:50:0b:53:65:9e:cd:3c:7a:d6:b8:55:19:72:fc: 48:04:4b:11:b2:35:13:cb:31:70:89:d8:d9:ed:f2:b6:5f:71: 68:81:a2:85:96:dd:48:5c:44:a1:f6:08:45:0d:96:43:58:10: 01:ba:6a:55:b1:37:4f:41:a9:f4:4a:33:a3:c7:1e:83:e7:6d: 9c:bf:1e:f2:c6:1a:90:c6:3c:6b:fd:9f:11:4f:4e:68:1b:ca: 0b:4e:b9:d0:86:44:84:8d:18:26:00:89:db:f4:f7:ee:08:df: 00:37:dd:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxG4avSQaF1zGsbK92J9//pPXvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNjAzMjUyMzE3MzRaFw0yNjAzMjkwOTAxMzRaMDMxMTAvBgNV BAMTKDU4MTRBMzcyRUQ4NjIxNkZCNzY2RkE4Q0Y4RTg2MjdFRjlCQTJEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnz5R7J6HarB/zgQ3xPam1aD5c OSrM4wMCcwlUFKPfoft0HNnHmJdUsRDrx8f3/BlhUD8KRaCO+gAsLWtf+F0iTf98 9es0KTl0cK5/PjH696C4nMFACqO/8IjnYG1E6I2vHkIi5hONR4o7lX3SqhDD5l7o uKWuvxggmd/+XkMfOHhJz106TRV96k1xdb99bNtogIjTb7+XiLsfsF8MfwwXwlw2 bTnDZcY3ZYb9hpZoEdQwXAsrTDFOAm8wLOlW1/68yPGryb6JEZQRmf0qWt9pvYVq XTbwz8E//zhd5135r0lLgs7EMgc5mTnHGFiR8hBvIy/k3Kp/5sR4EZ18DmTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWBSjcu2GIW+3ZvqM+Ohifvm6LTowHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/zXg6EKDdoEdGaRrrW0+KSA+IkzNOO4TR5 gFmKCLaXE1yZoVM5FDaHp+5c0TxXDGIbtarp4FGPt90adf1ZUlZSkFEzoD6zyeP4 WbhqbHiVEYkPBeU3yTv4PKDfeQHvBHMR2nL+WHYRGb0A0pFA/ReF5wtKl1OgpfOY VaD8dN28emK0H3FkVLs5tPCLQs9AlXtQhQJQC1Nlns08eta4VRly/EgESxGyNRPL MXCJ2Nnt8rZfcWiBooWW3UhcRKH2CEUNlkNYEAG6alWxN09BqfRKM6PHHoPnbZy/ HvLGGpDGPGv9nxFPTmgbygtOudCGRISNGCYAidv09+4I3wA33Vs= -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:59 2026 by rpki-client