
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
File: 096E75D80B559B9824609BA61681D845A0CB0F77.mft (raw, json)
Hash identifier: b3AgbSlPQ7A+3HPncZ6v9BLjrte55LXhB/9GgXUyeeY=
Subject key identifier: 84:A8:94:FB:22:84:EB:97:B3:9B:89:3B:CA:E3:CD:64:3E:58:B3:5E
Authority key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77
Certificate issuer: /CN=096E75D80B559B9824609BA61681D845A0CB0F77
Certificate serial: 1303BD3A6C63C2BE85627756121F1DFFF521B4B1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 17:22:09 +0000
Manifest this update: Thu 24 Sep 2026 17:17:09 +0000
Manifest next update: Fri 25 Sep 2026 20:29:09 +0000
Files and hashes: 1: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: 0malPwz+RTtf0zfQa5ZCgjL04DU4eZWwOeTz+IpVOtc=)
2: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: 6XmdhHpwmPbSLXc9MObJukxUpYpgVWG679zPioXW/jI=)
3: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: 0yluROs0GMVlDuEEaLUkv4SFh8PCi14+YfNxdsvSrjw=)
4: 096E75D80B559B9824609BA61681D845A0CB0F77.crl (hash: GiIQdj1IrB8GrvUaO24zXBTkcG4ecLNE35pVFBYBLsk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl
rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 20:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:03:bd:3a:6c:63:c2:be:85:62:77:56:12:1f:1d:ff:f5:21:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096E75D80B559B9824609BA61681D845A0CB0F77
Validity
Not Before: Sep 24 17:17:09 2026 GMT
Not After : Sep 25 20:29:09 2026 GMT
Subject: CN=84A894FB2284EB97B39B893BCAE3CD643E58B35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:23:37:fa:84:09:4e:4d:60:e6:2f:9f:39:
5b:dd:0d:8a:72:38:14:2f:10:c2:e5:07:71:fd:36:
e1:2b:38:0b:a1:12:d0:8f:1f:bb:b9:9c:85:f7:85:
8d:35:95:43:f4:bb:d6:57:2b:dc:ac:6e:20:c1:7a:
34:76:d3:f9:11:ef:70:9d:70:ee:80:0e:b3:ff:9f:
2e:13:29:2e:e3:7f:b7:ae:de:46:31:62:8b:e9:78:
d5:ed:25:83:39:d3:16:64:77:5f:26:9d:2f:32:03:
06:22:54:18:d8:c8:08:9d:bd:74:bd:65:2b:ec:08:
99:f5:ff:ee:e1:a7:04:6c:f5:d4:73:0f:78:56:e8:
06:f3:ac:85:87:73:b3:ba:bd:e8:81:00:c9:1b:ab:
8a:a6:3c:c3:ca:55:fd:ec:6d:b4:9b:46:86:c7:da:
21:44:58:25:67:e2:64:9e:eb:21:3d:c6:a4:4f:b5:
98:c1:1e:cc:e7:31:10:ac:27:40:9f:4e:9d:5d:aa:
03:22:b1:66:49:ba:ea:a3:d3:e4:45:51:b0:c2:46:
fd:40:40:33:39:63:c2:9c:f3:c2:ca:91:6d:0a:c5:
fc:07:51:4f:2b:ae:0c:a6:35:38:db:50:f9:86:bd:
23:5b:91:fa:be:39:29:a5:e8:08:80:ad:72:41:1d:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:94:FB:22:84:EB:97:B3:9B:89:3B:CA:E3:CD:64:3E:58:B3:5E
X509v3 Authority Key Identifier:
keyid:09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:40:42:a3:13:37:c4:f5:3c:52:ce:8f:1f:1b:07:7e:f4:80:
fb:fa:4f:ea:dc:89:c1:1a:da:52:3c:6e:eb:52:d2:b3:82:11:
3b:b4:d6:0c:89:48:18:04:c2:fe:cb:f7:95:29:8d:be:14:0a:
b3:5d:80:e2:ce:09:57:37:87:01:b8:4c:fd:77:2a:a8:6b:c6:
88:85:28:84:97:76:84:6f:be:a9:e6:5d:ee:f5:42:cd:56:22:
56:a4:5e:d5:d4:81:30:43:73:27:c7:62:50:5b:2c:9e:9c:02:
46:f1:0e:88:b7:f8:80:3a:96:78:c4:f7:60:29:d1:23:23:32:
f4:c2:4b:c8:11:45:0a:82:79:93:30:08:37:a5:b2:fe:c4:e9:
ff:af:59:e3:dc:91:1b:e0:0d:0c:8e:03:26:ee:1b:62:f7:b0:
6b:06:c0:7b:82:20:47:5a:78:2b:8f:57:d7:be:a2:cd:35:87:
ab:bc:53:22:33:29:bb:f8:c1:1d:2e:1b:39:a6:d0:8c:ab:88:
7f:40:00:5a:4c:8e:b8:05:ac:ae:9f:bd:f0:56:c3:2f:81:af:
63:84:7e:10:7c:eb:1b:aa:a2:cb:57:38:46:ba:7d:e4:0f:2b:
1c:c8:06:73:4b:c2:ff:8e:78:4f:35:a2:a2:76:a3:06:24:8b:
65:d8:df:d2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEwO9Omxjwr6FYndWEh8d//UhtLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVB
MENCMEY3NzAeFw0yNjA5MjQxNzE3MDlaFw0yNjA5MjUyMDI5MDlaMDMxMTAvBgNV
BAMTKDg0QTg5NEZCMjI4NEVCOTdCMzlCODkzQkNBRTNDRDY0M0U1OEIzNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6yM3+oQJTk1g5i+fOVvdDYpy
OBQvEMLlB3H9NuErOAuhEtCPH7u5nIX3hY01lUP0u9ZXK9ysbiDBejR20/kR73Cd
cO6ADrP/ny4TKS7jf7eu3kYxYovpeNXtJYM50xZkd18mnS8yAwYiVBjYyAidvXS9
ZSvsCJn1/+7hpwRs9dRzD3hW6AbzrIWHc7O6veiBAMkbq4qmPMPKVf3sbbSbRobH
2iFEWCVn4mSe6yE9xqRPtZjBHsznMRCsJ0CfTp1dqgMisWZJuuqj0+RFUbDCRv1A
QDM5Y8Kc88LKkW0KxfwHUU8rrgymNTjbUPmGvSNbkfq+OSml6AiArXJBHeeNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhKiU+yKE65ezm4k7yuPNZD5Ys14wHwYDVR0j
BBgwFoAUCW512AtVm5gkYJumFoHYRaDLD3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTRmMTM3MmMtNDNhNi00ZmRhLWI1MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgw
QjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVBMENCMEY3Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOTZFNzVEODBCNTU5Qjk4MjQ2MDlCQTYxNjgxRDg0NUEwQ0Iw
Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRmMTM3MmMtNDNhNi00ZmRhLWI1
MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4
NDVBMENCMEY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAJAQqMTN8T1PFLOjx8bB370gPv6T+rcicEa
2lI8butS0rOCETu01gyJSBgEwv7L95Upjb4UCrNdgOLOCVc3hwG4TP13KqhrxoiF
KISXdoRvvqnmXe71Qs1WIlakXtXUgTBDcyfHYlBbLJ6cAkbxDoi3+IA6lnjE92Ap
0SMjMvTCS8gRRQqCeZMwCDelsv7E6f+vWePckRvgDQyOAybuG2L3sGsGwHuCIEda
eCuPV9e+os01h6u8UyIzKbv4wR0uGzmm0IyriH9AAFpMjrgFrK6fvfBWwy+Br2OE
fhB86xuqostXOEa6feQPKxzIBnNLwv+OeE81oqJ2owYki2XY39I=
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:58:51 2026 by rpki-client