
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
File: 96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft (raw, json)
Hash identifier: l3E78+1/XwOHeGVhF30LKWL3ujxDDjaIvfMca91uLL0=
Subject key identifier: 93:A4:53:EB:24:1C:55:EA:EF:55:FE:DC:01:D3:A4:5C:7C:E5:F9:73
Authority key identifier: 96:B1:BF:67:FA:7B:CA:2D:9A:78:22:6A:A8:97:C7:60:C9:E4:5B:8A
Certificate issuer: /CN=96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A
Certificate serial: 627ACA17A4217B7E67EE617BA90B96E76FC099CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 08:56:44 +0000
Manifest this update: Thu 24 Sep 2026 08:51:44 +0000
Manifest next update: Fri 25 Sep 2026 12:26:44 +0000
Files and hashes: 1: 96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl (hash: Yfk6PVpYan6WphayxOw75vNn+oWmilSB5daMOPy4Th4=)
2: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: /hb9w6eiZKH4CNjyXoKoeSUik7C0W1MiXzGBdpGuKK8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl
rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:7a:ca:17:a4:21:7b:7e:67:ee:61:7b:a9:0b:96:e7:6f:c0:99:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A
Validity
Not Before: Sep 24 08:51:44 2026 GMT
Not After : Sep 25 12:26:44 2026 GMT
Subject: CN=93A453EB241C55EAEF55FEDC01D3A45C7CE5F973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:bf:84:11:a1:ca:46:d5:cc:ad:a0:91:86:
00:ce:fb:bb:70:40:a9:8a:b4:a8:ca:81:be:6c:e3:
0c:89:13:4f:58:b5:e0:08:45:df:a6:b7:14:8c:e1:
c6:94:f3:ed:94:c5:bd:20:8f:bd:94:b0:16:84:9d:
7b:13:df:fc:16:ba:03:eb:8c:dc:35:35:e8:e0:66:
b5:d3:c4:2e:3a:bd:17:e9:a5:03:95:ae:f7:8c:1b:
35:c5:6a:a8:f9:c6:1c:9b:e5:ce:51:da:4f:8f:24:
be:c3:28:45:9b:10:92:5b:ce:6f:20:0c:cd:07:9f:
d4:61:a8:ac:d8:d2:cb:55:84:32:7b:1d:e3:30:3a:
d3:d8:13:42:5c:f4:c1:28:07:e9:f7:c8:8d:be:b8:
6a:d6:99:67:80:db:35:de:16:08:2b:6b:c3:62:86:
2b:07:60:a8:2f:35:ba:2b:74:34:b6:60:6d:f1:1e:
47:10:62:dd:bc:33:60:84:bd:bf:cc:1c:18:47:1c:
bf:ea:98:9f:09:1a:42:ea:4c:e8:17:a0:f5:3a:53:
2a:75:5b:21:26:2b:4c:69:2e:56:c3:52:80:69:b9:
3f:0d:ce:18:95:97:66:b6:2a:f7:ae:c2:78:1b:2f:
d1:1f:02:1e:01:ce:c4:02:7f:a9:9c:8a:ee:2e:3d:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A4:53:EB:24:1C:55:EA:EF:55:FE:DC:01:D3:A4:5C:7C:E5:F9:73
X509v3 Authority Key Identifier:
keyid:96:B1:BF:67:FA:7B:CA:2D:9A:78:22:6A:A8:97:C7:60:C9:E4:5B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:45:d1:0b:df:45:f1:b4:a9:93:95:af:83:1e:93:a1:d1:4b:
25:9e:4c:e4:70:aa:c3:c7:bf:90:6d:14:dc:a4:9e:63:46:48:
12:80:f6:00:f1:95:06:46:f6:c9:69:87:d0:27:ed:47:49:fa:
41:4e:7f:0b:ca:63:47:e0:72:d8:6c:9d:05:0f:8b:d8:c2:a3:
86:f7:9f:89:1f:b5:09:bb:6f:af:ec:30:db:06:d8:03:06:b5:
19:f8:24:12:a6:b6:ef:77:b6:08:c9:07:a6:31:de:01:10:96:
df:c7:c8:ca:3d:ea:39:7a:ad:c4:e4:89:bb:b8:5d:06:13:59:
bd:c6:f8:87:ca:a0:6f:8e:d0:fd:88:92:16:74:84:c0:cb:d2:
38:83:75:93:f8:7a:dc:2c:88:32:fe:32:bb:19:ed:31:c1:d7:
0f:d0:6f:2e:ca:ed:94:20:f5:55:e7:d5:45:02:7a:cf:e1:1d:
a9:8d:6e:25:38:7b:c6:93:03:8f:51:cf:87:b9:13:63:f6:dc:
62:d3:83:1b:44:5e:e4:c2:a4:aa:a5:a8:d5:6a:03:81:72:4a:
af:d6:79:35:8c:70:f2:c9:56:b7:80:61:74:45:ed:38:2a:ab:
ce:d2:0f:1f:c4:c5:6a:ef:8e:4d:a7:ba:f2:07:09:63:d9:f9:
72:78:58:29
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYnrKF6Qhe35n7mF7qQuW52/Amc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZCMUJGNjdGQTdCQ0EyRDlBNzgyMjZBQTg5N0M3NjBD
OUU0NUI4QTAeFw0yNjA5MjQwODUxNDRaFw0yNjA5MjUxMjI2NDRaMDMxMTAvBgNV
BAMTKDkzQTQ1M0VCMjQxQzU1RUFFRjU1RkVEQzAxRDNBNDVDN0NFNUY5NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgr+EEaHKRtXMraCRhgDO+7tw
QKmKtKjKgb5s4wyJE09YteAIRd+mtxSM4caU8+2Uxb0gj72UsBaEnXsT3/wWugPr
jNw1NejgZrXTxC46vRfppQOVrveMGzXFaqj5xhyb5c5R2k+PJL7DKEWbEJJbzm8g
DM0Hn9RhqKzY0stVhDJ7HeMwOtPYE0Jc9MEoB+n3yI2+uGrWmWeA2zXeFggra8Ni
hisHYKgvNbordDS2YG3xHkcQYt28M2CEvb/MHBhHHL/qmJ8JGkLqTOgXoPU6Uyp1
WyEmK0xpLlbDUoBpuT8NzhiVl2a2KveuwngbL9EfAh4BzsQCf6mciu4uPd15AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUk6RT6yQcVervVf7cAdOkXHzl+XMwHwYDVR0j
BBgwFoAUlrG/Z/p7yi2aeCJqqJfHYMnkW4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTVjYWI5ZGYtMDNiNS00OGIzLWE4NzItYTBmZTEyYTY3NDI2LzAvOTZCMUJGNjdG
QTdCQ0EyRDlBNzgyMjZBQTg5N0M3NjBDOUU0NUI4QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NkIxQkY2N0ZBN0JDQTJEOUE3ODIyNkFBODk3Qzc2MEM5RTQ1
QjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4
NzItYTBmZTEyYTY3NDI2LzAvOTZCMUJGNjdGQTdCQ0EyRDlBNzgyMjZBQTg5N0M3
NjBDOUU0NUI4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIlF0QvfRfG0qZOVr4Mek6HRSyWeTORwqsPH
v5BtFNyknmNGSBKA9gDxlQZG9slph9An7UdJ+kFOfwvKY0fgcthsnQUPi9jCo4b3
n4kftQm7b6/sMNsG2AMGtRn4JBKmtu93tgjJB6Yx3gEQlt/HyMo96jl6rcTkibu4
XQYTWb3G+IfKoG+O0P2IkhZ0hMDL0jiDdZP4etwsiDL+MrsZ7THB1w/Qby7K7ZQg
9VXn1UUCes/hHamNbiU4e8aTA49Rz4e5E2P23GLTgxtEXuTCpKqlqNVqA4FySq/W
eTWMcPLJVreAYXRF7Tgqq87SDx/ExWrvjk2nuvIHCWPZ+XJ4WCk=
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:55:09 2026 by rpki-client