$ rpki-client -vvf rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft File: 096E75D80B559B9824609BA61681D845A0CB0F77.mft (raw, json) Hash identifier: Dhy7oSMh8IuuRhCM3F4NF3hAUPR7J6KyiACnZhX+Glg= Subject key identifier: 12:EE:04:94:15:A8:D2:E1:35:CB:08:50:10:62:1D:A8:3A:57:C7:B5 Authority key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 Certificate issuer: /CN=096E75D80B559B9824609BA61681D845A0CB0F77 Certificate serial: 74DA2A1D3976D9BA127E1B2689FE4704F7B0ECA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:10 +0000 Manifest this update: Tue 12 May 2026 19:15:10 +0000 Manifest next update: Wed 13 May 2026 22:21:10 +0000 Files and hashes: 1: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: 6XmdhHpwmPbSLXc9MObJukxUpYpgVWG679zPioXW/jI=) 2: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: 0yluROs0GMVlDuEEaLUkv4SFh8PCi14+YfNxdsvSrjw=) 3: 096E75D80B559B9824609BA61681D845A0CB0F77.crl (hash: UdeWzAIO9t4rBfZrE6JZYnPPUR3CJL5OMwKFk7QJR/Q=) 4: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: 0malPwz+RTtf0zfQa5ZCgjL04DU4eZWwOeTz+IpVOtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:da:2a:1d:39:76:d9:ba:12:7e:1b:26:89:fe:47:04:f7:b0:ec:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096E75D80B559B9824609BA61681D845A0CB0F77 Validity Not Before: May 12 19:15:10 2026 GMT Not After : May 13 22:21:10 2026 GMT Subject: CN=12EE049415A8D2E135CB085010621DA83A57C7B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:f5:1c:6d:96:db:05:10:10:26:c6:ed:b5: ba:2a:e8:f5:ba:86:36:59:33:4d:22:27:61:70:2d: f1:c2:2e:4f:de:93:f2:09:05:d7:d4:a7:b3:10:7a: 47:d9:d4:f4:b2:2c:32:eb:af:2d:3f:65:10:9f:db: 57:03:ac:e8:b5:19:a6:e3:0f:69:4c:3a:91:db:e1: bf:e0:68:ba:f6:ac:ca:c3:8d:e2:b8:9b:f3:94:4b: 9b:06:1d:07:9e:e4:b1:6a:fd:7c:db:4f:c5:e0:87: 41:36:05:40:fd:b5:65:47:fe:ca:b4:9e:1b:b2:78: 81:39:ad:28:c4:87:f8:86:cc:8b:c7:f0:6b:42:f3: 2d:da:ff:52:c1:9c:f0:a1:dd:7c:79:04:05:5b:99: d9:41:95:c1:82:f0:7b:48:25:9b:86:5e:56:07:59: ad:3d:27:05:d2:b4:99:53:91:00:43:19:3e:8e:35: 25:ea:e9:cf:58:20:ae:a1:76:d9:69:16:c2:27:11: f2:47:67:e5:5d:28:c4:7a:ad:25:b0:4d:da:bf:2b: 5d:72:5e:a9:b9:f2:5b:da:7f:89:67:81:d4:1d:02: 2d:81:e4:66:d3:44:65:f9:69:84:cf:48:c8:dd:d7: 79:24:03:36:8d:ca:3f:26:0a:fb:cd:91:43:df:15: 9f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EE:04:94:15:A8:D2:E1:35:CB:08:50:10:62:1D:A8:3A:57:C7:B5 X509v3 Authority Key Identifier: keyid:09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b3:2e:43:1a:ea:64:f4:c1:6b:b4:7e:b0:1b:14:3a:d2:d5: b7:40:c0:6a:a4:b9:2d:54:5d:f1:38:f5:5b:8d:76:83:50:56: 77:fe:b6:cd:37:55:36:de:93:54:d7:3f:d4:25:9d:27:48:5c: 5d:05:c2:4b:b4:a5:6f:af:20:4f:5a:d3:63:29:7e:5f:fe:31: 31:95:e0:fb:cc:b2:19:7b:56:7a:e5:51:fa:a9:3f:65:fa:ea: af:c5:c7:9c:96:74:4e:ff:25:21:96:52:d3:1d:6a:09:d3:64: 7e:af:af:de:c9:d8:56:3e:18:90:35:21:a8:24:14:40:b0:90: 72:b1:66:70:fa:bd:62:b4:b6:d4:e2:5e:b1:36:95:bb:a2:9d: 1c:ed:b1:53:db:70:bd:d2:29:ad:6a:b2:f9:66:78:6f:0c:30: 73:5d:0c:76:1a:4c:f5:4d:ca:03:de:61:43:3b:54:2d:2d:65: ea:c6:b1:f2:3c:96:cb:1d:f7:ac:aa:16:4f:ed:59:3d:ee:ba: e2:d8:e0:c2:41:f2:9e:6a:79:43:59:44:f1:5b:7e:95:f7:25: ba:e8:4d:d9:f3:60:c4:4e:69:18:93:85:94:d1:16:be:8d:0f: 2b:60:cb:09:b4:c6:28:fd:f8:4b:66:8c:c5:14:05:dd:9b:09: f9:d5:a5:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNoqHTl22boSfhsmif5HBPew7KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVB MENCMEY3NzAeFw0yNjA1MTIxOTE1MTBaFw0yNjA1MTMyMjIxMTBaMDMxMTAvBgNV BAMTKDEyRUUwNDk0MTVBOEQyRTEzNUNCMDg1MDEwNjIxREE4M0E1N0M3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKB/UcbZbbBRAQJsbttboq6PW6 hjZZM00iJ2FwLfHCLk/ek/IJBdfUp7MQekfZ1PSyLDLrry0/ZRCf21cDrOi1Gabj D2lMOpHb4b/gaLr2rMrDjeK4m/OUS5sGHQee5LFq/XzbT8Xgh0E2BUD9tWVH/sq0 nhuyeIE5rSjEh/iGzIvH8GtC8y3a/1LBnPCh3Xx5BAVbmdlBlcGC8HtIJZuGXlYH Wa09JwXStJlTkQBDGT6ONSXq6c9YIK6hdtlpFsInEfJHZ+VdKMR6rSWwTdq/K11y Xqm58lvaf4lngdQdAi2B5GbTRGX5aYTPSMjd13kkAzaNyj8mCvvNkUPfFZ8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEu4ElBWo0uE1ywhQEGIdqDpXx7UwHwYDVR0j BBgwFoAUCW512AtVm5gkYJumFoHYRaDLD3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRmMTM3MmMtNDNhNi00ZmRhLWI1MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgw QjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVBMENCMEY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTZFNzVEODBCNTU5Qjk4MjQ2MDlCQTYxNjgxRDg0NUEwQ0Iw Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRmMTM3MmMtNDNhNi00ZmRhLWI1 MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4 NDVBMENCMEY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWzLkMa6mT0wWu0frAbFDrS1bdAwGqkuS1U XfE49VuNdoNQVnf+ts03VTbek1TXP9QlnSdIXF0Fwku0pW+vIE9a02Mpfl/+MTGV 4PvMshl7VnrlUfqpP2X66q/Fx5yWdE7/JSGWUtMdagnTZH6vr97J2FY+GJA1Iagk FECwkHKxZnD6vWK0ttTiXrE2lbuinRztsVPbcL3SKa1qsvlmeG8MMHNdDHYaTPVN ygPeYUM7VC0tZerGsfI8lssd96yqFk/tWT3uuuLY4MJB8p5qeUNZRPFbfpX3Jbro TdnzYMROaRiThZTRFr6NDytgywm0xij9+EtmjMUUBd2bCfnVpW4= -----END CERTIFICATE-----Generated at Wed May 13 03:17:07 2026 by rpki-client