$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: z8bKl12hc3HZB1Wp47mHDp1vsmPopzR4o+BKMuz49sU= Subject key identifier: 7B:7C:D5:4E:2B:5F:6F:63:89:F5:1E:B5:B1:C1:47:42:02:8C:31:F2 Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 5BC383B762322D175AAA38AF8EFA04EEB7D14DAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 56 Signing time: Sat 28 Jun 2025 16:52:12 +0000 Manifest this update: Sat 28 Jun 2025 16:47:12 +0000 Manifest next update: Tue 01 Jul 2025 23:21:12 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: JTjpWHDdoUJP6qkFYonDOE671XXd8DzyWieSGdRZWzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c3:83:b7:62:32:2d:17:5a:aa:38:af:8e:fa:04:ee:b7:d1:4d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Jun 28 16:47:12 2025 GMT Not After : Jul 1 23:21:12 2025 GMT Subject: CN=7B7CD54E2B5F6F6389F51EB5B1C14742028C31F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:9c:3c:10:65:7a:c7:dc:50:fb:42:47:bc: 75:4b:a5:33:94:f9:6f:43:7f:f4:f4:2d:4b:f3:30: 1a:fc:d1:7d:62:ae:a9:ce:ad:ac:ba:db:da:0d:69: a4:f5:66:23:d9:aa:59:f4:74:a0:4c:e8:b3:73:ae: b1:83:c3:e7:4c:d1:7c:8d:c7:b8:42:86:9e:7e:cb: 2c:d9:24:80:ea:ca:6b:50:72:a5:30:b3:bd:bd:96: 6d:5c:40:d0:4c:d5:d4:ac:ba:31:bb:4e:12:3f:89: 81:eb:b0:82:36:61:f0:d0:29:3c:d8:b1:b1:a3:57: ca:9a:c0:dd:0b:72:0e:3e:39:48:61:a7:47:e2:14: 0d:67:5f:2d:92:b6:1a:05:4a:d6:97:8c:3a:32:4b: 5c:91:5f:5b:1e:65:21:ce:d8:18:c1:a1:7a:65:07: 7d:34:29:54:d7:f7:5a:32:4c:cb:3f:72:6a:2b:f4: 5f:21:81:7f:55:3d:95:6c:22:26:18:4a:ed:77:6c: 4b:d7:34:e1:a6:d7:9b:f2:19:61:7e:c2:f3:be:29: 78:49:12:b0:45:52:b3:20:4e:b2:03:97:94:14:39: ca:2c:bf:72:a8:b7:98:77:0c:50:09:26:6e:18:01: 44:39:80:8a:1e:1f:7f:ae:b8:33:ec:88:a7:37:e5: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7C:D5:4E:2B:5F:6F:63:89:F5:1E:B5:B1:C1:47:42:02:8C:31:F2 X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:11:6f:fb:d6:b4:3b:a9:6f:10:22:5b:5b:e1:a1:ee:df:40: 0f:0a:66:9e:7f:5c:1a:0b:a1:90:bc:a4:72:ca:7f:66:a2:7d: b1:1d:c4:f9:a6:c9:1e:2b:f4:d8:7b:9d:49:28:0e:18:b5:0e: d0:e8:a0:79:54:9a:7e:0d:03:2d:d0:7e:c3:9f:40:ca:07:6d: c5:b5:23:fa:8f:38:ae:e0:fb:36:46:15:2f:0a:fc:ef:c8:2e: 76:e3:67:88:27:83:8f:be:8d:8b:5f:19:c8:9f:5d:79:c4:29: 75:38:69:b2:5f:26:2b:58:6a:94:c2:5a:0c:75:05:95:5f:98: e1:08:f2:3a:af:c9:af:2a:4c:0d:f3:42:ed:61:79:19:1d:80: 8b:23:50:84:24:3f:db:75:21:91:93:d3:2c:33:ac:c6:f2:d9: 9a:0c:a2:b4:eb:58:38:11:12:d0:14:75:b7:a1:e4:06:d4:54: cc:a5:a3:a4:3c:5c:38:49:bc:75:91:50:f4:90:22:b3:cb:83: f1:a5:ee:33:68:3d:60:58:81:3f:66:17:a5:94:ee:04:60:ab: 86:90:85:f3:22:2b:e1:b5:9b:60:17:bc:bd:4a:ad:30:8f:0d: 0d:7c:d6:10:88:ac:9a:11:a1:f6:c2:79:ac:86:5c:11:e1:94: f4:c7:33:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8ODt2IyLRdaqjivjvoE7rfRTa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA2MjgxNjQ3MTJaFw0yNTA3MDEyMzIxMTJaMDMxMTAvBgNV BAMTKDdCN0NENTRFMkI1RjZGNjM4OUY1MUVCNUIxQzE0NzQyMDI4QzMxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLJw8EGV6x9xQ+0JHvHVLpTOU +W9Df/T0LUvzMBr80X1irqnOray629oNaaT1ZiPZqln0dKBM6LNzrrGDw+dM0XyN x7hChp5+yyzZJIDqymtQcqUws729lm1cQNBM1dSsujG7ThI/iYHrsII2YfDQKTzY sbGjV8qawN0Lcg4+OUhhp0fiFA1nXy2SthoFStaXjDoyS1yRX1seZSHO2BjBoXpl B300KVTX91oyTMs/cmor9F8hgX9VPZVsIiYYSu13bEvXNOGm15vyGWF+wvO+KXhJ ErBFUrMgTrIDl5QUOcosv3Kot5h3DFAJJm4YAUQ5gIoeH3+uuDPsiKc35dKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe3zVTitfb2OJ9R61scFHQgKMMfIwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAARb/vWtDupbxAiW1vhoe7fQA8KZp5/XBoL oZC8pHLKf2aifbEdxPmmyR4r9Nh7nUkoDhi1DtDooHlUmn4NAy3QfsOfQMoHbcW1 I/qPOK7g+zZGFS8K/O/ILnbjZ4gng4++jYtfGcifXXnEKXU4abJfJitYapTCWgx1 BZVfmOEI8jqvya8qTA3zQu1heRkdgIsjUIQkP9t1IZGT0ywzrMby2ZoMorTrWDgR EtAUdbeh5AbUVMylo6Q8XDhJvHWRUPSQIrPLg/Gl7jNoPWBYgT9mF6WU7gRgq4aQ hfMiK+G1m2AXvL1KrTCPDQ181hCIrJoRofbCeayGXBHhlPTHM+s= -----END CERTIFICATE-----Generated at Mon Jun 30 13:14:14 2025 by rpki-client