$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft File: 96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft (raw, json) Hash identifier: Prv791i25O2kcC7X/r0TYaPK0Yu6AtJzPE461eBAGz4= Subject key identifier: 8E:20:D4:C9:4C:2A:48:A7:71:5B:16:4C:A6:48:03:29:96:2A:85:1D Authority key identifier: 96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65 Certificate issuer: /CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65 Certificate serial: 39F4BF63046D9B4C556D38A030ED598F870AA103 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 08:30:14 +0000 Manifest this update: Thu 23 Jul 2026 08:25:14 +0000 Manifest next update: Fri 24 Jul 2026 11:20:14 +0000 Files and hashes: 1: 96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl (hash: aNjMf9fJk749TqsOsE8UxRTCsv9XCAy7LGyRHuxcYRk=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: qwEnHxrWVyiK94N8U1nG/pG5hFflP0C0qwS5eIrzLng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f4:bf:63:04:6d:9b:4c:55:6d:38:a0:30:ed:59:8f:87:0a:a1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65 Validity Not Before: Jul 23 08:25:14 2026 GMT Not After : Jul 24 11:20:14 2026 GMT Subject: CN=8E20D4C94C2A48A7715B164CA6480329962A851D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:ff:8b:89:2d:31:e6:f6:f4:4e:22:55:41: 6d:5b:47:f7:d5:a8:60:ef:7e:c8:d8:a6:c0:9a:af: 17:f7:74:00:7b:ec:4f:fc:b0:c6:b7:6a:e2:b6:49: 85:61:81:3a:f3:5b:4a:3a:3d:a9:2d:dc:da:43:90: b3:26:29:0c:45:92:31:7c:7f:93:c7:2b:9b:f6:60: 36:4e:76:08:2b:2c:8e:eb:90:ce:54:0b:95:2e:df: 28:b6:12:e9:e3:5b:32:2a:3b:52:21:ad:8a:af:bf: d2:8d:a5:84:72:eb:b8:69:a8:3e:0a:17:7f:29:84: f7:67:c4:ff:1d:25:22:39:0b:61:92:f6:4d:73:f1: 94:9c:a8:8a:c1:b6:43:97:c4:3d:0c:13:fc:97:c1: 2f:b3:e5:50:eb:95:4f:b5:f1:c5:68:a8:d5:19:87: 53:c3:21:e8:01:c4:67:20:81:88:25:44:10:23:80: d9:50:f4:9e:20:5e:29:d4:a9:d0:4e:ae:65:0a:76: 85:74:d4:8d:72:7a:72:c8:dc:ff:c9:65:8a:16:c7: ff:47:1b:b8:71:52:bc:b7:cb:b3:ab:18:1a:b2:f3: 75:60:9b:6b:48:1f:b7:17:79:a3:29:44:83:6d:59: 93:b6:4f:bd:22:36:ae:3a:df:01:31:ec:d7:8f:83: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:20:D4:C9:4C:2A:48:A7:71:5B:16:4C:A6:48:03:29:96:2A:85:1D X509v3 Authority Key Identifier: keyid:96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:69:2c:46:77:ce:0d:c5:56:a1:41:0a:47:cd:40:57:b8:98: 73:4d:ca:00:4b:c7:42:7e:2c:ef:8a:01:64:26:f4:a8:db:d2: a5:6e:7d:f4:3b:2b:34:d9:04:9a:e2:d0:ba:23:78:37:92:47: f6:77:b6:9e:1c:3d:14:e8:56:f7:96:f7:c7:9e:5f:5f:53:43: df:3e:0b:e6:13:f2:1c:30:27:b9:17:84:fd:39:97:59:74:2f: 52:ac:52:c7:b0:61:36:50:53:7f:39:34:40:52:f4:fe:c1:31: b9:da:41:8c:d5:31:9a:12:b4:2a:e8:b3:53:85:ef:76:1d:98: 22:ad:80:0a:ef:4b:51:f6:30:55:51:38:ef:9d:50:ad:cd:9d: 39:23:fe:e6:53:88:4e:ce:19:a9:9a:b7:a6:41:9f:cd:8f:25: 89:83:06:cf:41:aa:cf:14:3a:6a:9d:6c:6c:73:06:af:fa:54: 6f:ac:98:b1:45:07:9d:75:76:1f:fc:c8:43:e1:9d:6b:7c:ec: 23:aa:2c:77:b6:9d:cd:36:ff:df:7e:6c:2f:2d:84:f7:ef:d6: 87:7f:d3:74:c3:97:5e:cc:a1:3d:80:a3:fb:19:b6:6c:31:cc: 9d:06:49:e5:5d:3e:e5:7e:e5:99:22:3a:06:18:41:ce:04:42: 53:32:40:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOfS/YwRtm0xVbTigMO1Zj4cKoQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCMEYwN0NFQzg3RDM5RkU2RDZDRjAyNzcxMDlFMEM0 NkI1MEY2NTAeFw0yNjA3MjMwODI1MTRaFw0yNjA3MjQxMTIwMTRaMDMxMTAvBgNV BAMTKDhFMjBENEM5NEMyQTQ4QTc3MTVCMTY0Q0E2NDgwMzI5OTYyQTg1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tv+LiS0x5vb0TiJVQW1bR/fV qGDvfsjYpsCarxf3dAB77E/8sMa3auK2SYVhgTrzW0o6Pakt3NpDkLMmKQxFkjF8 f5PHK5v2YDZOdggrLI7rkM5UC5Uu3yi2EunjWzIqO1IhrYqvv9KNpYRy67hpqD4K F38phPdnxP8dJSI5C2GS9k1z8ZScqIrBtkOXxD0ME/yXwS+z5VDrlU+18cVoqNUZ h1PDIegBxGcggYglRBAjgNlQ9J4gXinUqdBOrmUKdoV01I1yenLI3P/JZYoWx/9H G7hxUry3y7OrGBqy83Vgm2tIH7cXeaMpRINtWZO2T70iNq463wEx7NePgxpZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjiDUyUwqSKdxWxZMpkgDKZYqhR0wHwYDVR0j BBgwFoAUlrDwfOyH05/m1s8CdxCeDEa1D2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEyMzhhNjItNmE5Ni00M2JjLTg3YWYtMDJkYjY0MWY3MTA5LzAvOTZCMEYwN0NF Qzg3RDM5RkU2RDZDRjAyNzcxMDlFMEM0NkI1MEY2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkIwRjA3Q0VDODdEMzlGRTZENkNGMDI3NzEwOUUwQzQ2QjUw RjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvOTZCMEYwN0NFQzg3RDM5RkU2RDZDRjAyNzcxMDlF MEM0NkI1MEY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhpLEZ3zg3FVqFBCkfNQFe4mHNNygBLx0J+ LO+KAWQm9Kjb0qVuffQ7KzTZBJri0LojeDeSR/Z3tp4cPRToVveW98eeX19TQ98+ C+YT8hwwJ7kXhP05l1l0L1KsUsewYTZQU385NEBS9P7BMbnaQYzVMZoStCros1OF 73YdmCKtgArvS1H2MFVROO+dUK3NnTkj/uZTiE7OGamat6ZBn82PJYmDBs9Bqs8U OmqdbGxzBq/6VG+smLFFB511dh/8yEPhnWt87COqLHe2nc02/99+bC8thPfv1od/ 03TDl17MoT2Ao/sZtmwxzJ0GSeVdPuV+5ZkiOgYYQc4EQlMyQGE= -----END CERTIFICATE-----Generated at Fri Jul 24 01:49:50 2026 by rpki-client