
$ rpki-client -vvf rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
File: 096E75D80B559B9824609BA61681D845A0CB0F77.mft (raw, json)
Hash identifier: /D9nsH7/oDDdItOwLicX4bkBUWqdkZ59Hy2lOf/TP74=
Subject key identifier: 4B:EC:B3:19:CC:00:55:B0:CF:77:6B:F1:D2:58:4F:5D:7F:30:AB:55
Authority key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77
Certificate issuer: /CN=096E75D80B559B9824609BA61681D845A0CB0F77
Certificate serial: 23E4A1C66AD6B0D1750E4E48ADC9F5DE483F9FFE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 13:46:51 +0000
Manifest this update: Thu 23 Jul 2026 13:41:51 +0000
Manifest next update: Fri 24 Jul 2026 15:07:51 +0000
Files and hashes: 1: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: 6XmdhHpwmPbSLXc9MObJukxUpYpgVWG679zPioXW/jI=)
2: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: 0malPwz+RTtf0zfQa5ZCgjL04DU4eZWwOeTz+IpVOtc=)
3: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: 0yluROs0GMVlDuEEaLUkv4SFh8PCi14+YfNxdsvSrjw=)
4: 096E75D80B559B9824609BA61681D845A0CB0F77.crl (hash: WBBqflFgfCAMjDiXZ+sOraYWP9kJ/lST+Bj9ghNGj6o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl
rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e4:a1:c6:6a:d6:b0:d1:75:0e:4e:48:ad:c9:f5:de:48:3f:9f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096E75D80B559B9824609BA61681D845A0CB0F77
Validity
Not Before: Jul 23 13:41:51 2026 GMT
Not After : Jul 24 15:07:51 2026 GMT
Subject: CN=4BECB319CC0055B0CF776BF1D2584F5D7F30AB55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:95:f9:ac:5a:ee:26:87:61:59:72:9c:c8:
74:27:4c:53:a3:f5:32:bd:88:ae:af:3d:00:95:fe:
8a:48:23:39:0a:13:85:05:15:8b:27:2e:44:69:12:
70:25:48:59:02:bc:68:e8:09:0a:ca:a5:cc:0a:5e:
48:ee:56:7d:dc:fb:1b:5a:39:87:31:f9:49:fe:c1:
30:94:d5:96:38:3d:53:f8:30:a3:5a:97:39:66:7b:
3f:c4:1a:56:20:81:d5:81:f1:27:10:85:be:6b:b3:
44:c7:7c:46:24:78:7f:2c:33:37:1c:8f:20:a8:a7:
fc:fb:1f:fe:47:47:ea:76:6f:60:a2:d9:62:c6:3e:
53:f1:44:5f:53:ac:78:75:7d:83:69:58:4f:f7:f4:
27:59:cb:af:d4:57:57:a1:7e:e0:d2:b2:1f:65:5b:
d6:d6:1d:03:42:08:6d:fc:28:43:05:50:13:70:46:
84:f4:5a:fd:f0:96:aa:64:83:b3:0e:83:fc:09:0f:
04:6c:44:4a:79:19:ba:8e:8b:d2:a1:72:ea:0b:7d:
cb:e7:55:1d:d6:16:74:fe:5d:a2:0a:3c:4c:e3:f0:
13:d6:14:7b:b0:45:2e:ed:76:cc:5a:20:d0:96:eb:
7c:5e:2f:be:51:f2:03:4d:3f:b6:59:d2:88:28:a6:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:B3:19:CC:00:55:B0:CF:77:6B:F1:D2:58:4F:5D:7F:30:AB:55
X509v3 Authority Key Identifier:
keyid:09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:d8:8b:fd:92:2b:80:63:42:e9:f2:5a:9f:e6:9a:73:ac:
2c:f6:c2:7a:a8:7a:bc:d2:d0:1e:d6:86:1e:16:59:78:cf:1b:
81:e4:e9:e2:fb:5c:9e:67:96:13:2f:6c:4a:ed:ca:d2:0d:66:
e2:17:6f:95:a3:58:13:e2:21:5a:e3:17:a9:77:97:bd:98:25:
7b:65:a0:f0:06:0e:40:fe:9a:b3:1f:e6:22:b5:98:7b:c5:26:
21:e5:df:b8:5e:f6:e3:3a:1f:7b:4d:97:24:d4:0a:70:61:98:
d0:43:c2:44:3a:3b:5f:f0:f2:9d:cf:51:a3:f4:55:f3:9e:49:
ba:e6:be:14:21:7a:03:64:86:c1:8e:42:ac:48:db:db:72:f2:
5d:f5:1e:80:34:8b:40:7a:8a:87:04:37:ad:92:35:ce:a2:40:
26:72:c9:4b:53:a9:95:c3:96:ac:e0:61:f5:3f:b5:fa:58:f9:
f8:a6:a6:ee:5a:2d:a0:cb:be:7e:e2:b1:0a:08:d2:6a:23:0a:
40:a9:d4:0a:48:e9:90:3f:24:d2:2f:e5:7a:5d:bf:da:79:be:
a4:a2:f9:cc:9c:b8:9f:91:03:da:47:80:b1:88:0f:d0:a8:33:
61:82:b8:41:06:6c:ad:77:e5:8f:34:b5:7e:40:8f:68:d0:5d:
ac:af:85:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:24 2026 by rpki-client