
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
File: 096782C6E108EAAEE59692E8A1E468AA698658F3.mft (raw, json)
Hash identifier: 0ZX+IBYOTxO+3ZelNyTIsr/5jokiRD705kruS+iCkjs=
Subject key identifier: 04:F4:E6:6C:5C:95:E1:69:CC:C2:8A:DC:3E:73:4C:38:72:E3:7A:60
Authority key identifier: 09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3
Certificate issuer: /CN=096782C6E108EAAEE59692E8A1E468AA698658F3
Certificate serial: 69748B53758D8AEA668F8D34DE8945A46453FBBD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 00:50:06 +0000
Manifest this update: Fri 24 Jul 2026 00:45:06 +0000
Manifest next update: Sat 25 Jul 2026 04:37:06 +0000
Files and hashes: 1: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: MoX5ilaIoQNT0YRgbynks7+fFHyOxX0urPfftQqHjU8=)
2: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: tMpre+MZxLR5ON6NNmXKYRn2JHOCOghwsK548yy7sUU=)
3: 096782C6E108EAAEE59692E8A1E468AA698658F3.crl (hash: F5iiPB7Fy5Fl3fdZg4umcrqmBo4F7f0d1omm33Bl10c=)
4: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 2fUOKnvs8nbAYX5IeKT2gpYQH5FYCwB7JlXdvrKSoYU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl
rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:74:8b:53:75:8d:8a:ea:66:8f:8d:34:de:89:45:a4:64:53:fb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096782C6E108EAAEE59692E8A1E468AA698658F3
Validity
Not Before: Jul 24 00:45:06 2026 GMT
Not After : Jul 25 04:37:06 2026 GMT
Subject: CN=04F4E66C5C95E169CCC28ADC3E734C3872E37A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:c5:50:96:ce:f1:35:ee:5c:a3:17:fd:20:
50:70:ce:27:58:1d:5b:a5:cc:78:27:e6:ea:bb:55:
64:7e:e6:68:a6:4a:42:e1:09:60:0d:8f:39:7d:75:
4a:14:cd:6e:88:5a:c0:de:24:7f:97:32:58:94:9a:
3a:a1:08:88:ba:46:da:6a:a0:47:04:d6:24:16:97:
2b:b9:3a:45:27:b9:92:67:46:a4:3f:76:49:88:f8:
d7:47:f9:d6:69:20:09:07:bf:32:2d:fd:e9:97:ed:
cb:aa:84:8f:2b:23:9d:60:5f:6d:56:c6:13:6b:16:
5e:b8:4e:3e:12:30:1d:4b:7d:37:f6:57:fc:2d:85:
50:87:a6:d4:1c:d7:1b:82:e8:dd:1a:b8:1f:86:81:
99:81:44:d0:2e:09:95:4b:a9:ed:93:a3:01:3b:de:
6f:1b:ed:e6:9f:0f:d4:26:4d:4c:10:12:42:67:5d:
4f:93:0f:f7:22:21:5f:4a:53:fb:ad:11:6e:c3:4f:
b1:71:f0:d1:02:8b:c4:e4:0e:d4:28:68:81:6e:7e:
df:b0:96:d9:03:a5:a9:5e:e9:83:2f:d3:b5:20:e9:
ff:dc:a4:e0:6f:53:c6:71:20:e3:63:b5:0c:9d:5a:
13:27:0d:eb:24:37:74:59:23:f9:23:89:ea:64:d6:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:E6:6C:5C:95:E1:69:CC:C2:8A:DC:3E:73:4C:38:72:E3:7A:60
X509v3 Authority Key Identifier:
keyid:09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:b5:df:cb:62:bb:35:ab:ca:fc:6a:89:e5:ab:63:d0:49:
24:e1:10:01:84:54:b9:cc:ce:3e:6b:a3:21:65:8b:7a:e7:17:
e2:46:8e:0d:56:6c:a4:ba:8a:c2:12:00:c3:d5:06:c7:2c:ba:
a3:8f:bb:8a:c3:84:73:95:d4:4d:b8:30:c7:fa:a6:ae:c2:e0:
10:12:10:8f:96:a3:19:67:89:da:54:ec:76:52:b1:ff:9d:d6:
f3:ba:88:fa:e6:85:c6:e4:ec:52:6d:dd:50:f7:4a:8b:1b:6d:
36:f4:5c:12:7b:e0:65:50:c3:cd:29:0c:9b:41:62:ef:db:bb:
9d:c6:3c:c2:47:36:b4:e2:29:a0:80:c7:47:8a:bb:e5:1e:33:
fa:04:6b:80:7d:9a:cd:70:28:67:50:a3:4d:9d:85:34:e8:eb:
46:2d:07:7d:c3:fe:34:76:8e:ae:33:64:46:1d:02:2e:88:43:
fb:4f:ba:98:7d:44:54:6b:2d:83:fd:e7:40:00:f6:6c:61:82:
bf:c2:e6:e4:cb:bf:19:9c:f7:14:7b:3b:e5:1b:bf:91:05:9b:
02:b9:db:69:96:12:d3:2e:e1:df:c5:53:0e:39:e2:8c:37:4c:
a3:b0:8d:93:e0:b3:6a:c1:81:ab:4d:f8:c1:2a:8a:b2:ba:49:
1f:0e:48:50
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaXSLU3WNiupmj4003olFpGRT+70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2NzgyQzZFMTA4RUFBRUU1OTY5MkU4QTFFNDY4QUE2
OTg2NThGMzAeFw0yNjA3MjQwMDQ1MDZaFw0yNjA3MjUwNDM3MDZaMDMxMTAvBgNV
BAMTKDA0RjRFNjZDNUM5NUUxNjlDQ0MyOEFEQzNFNzM0QzM4NzJFMzdBNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXMVQls7xNe5coxf9IFBwzidY
HVulzHgn5uq7VWR+5mimSkLhCWANjzl9dUoUzW6IWsDeJH+XMliUmjqhCIi6Rtpq
oEcE1iQWlyu5OkUnuZJnRqQ/dkmI+NdH+dZpIAkHvzIt/emX7cuqhI8rI51gX21W
xhNrFl64Tj4SMB1LfTf2V/wthVCHptQc1xuC6N0auB+GgZmBRNAuCZVLqe2TowE7
3m8b7eafD9QmTUwQEkJnXU+TD/ciIV9KU/utEW7DT7Fx8NECi8TkDtQoaIFuft+w
ltkDpale6YMv07Ug6f/cpOBvU8ZxIONjtQydWhMnDeskN3RZI/kjiepk1jgvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBPTmbFyV4WnMworcPnNMOHLjemAwHwYDVR0j
BBgwFoAUCWeCxuEI6q7llpLooeRoqmmGWPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWI1MGJhYzQtYTZhNy00NTZjLTg1MGYtNjBkY2RlNjdiNDk5LzAvMDk2NzgyQzZF
MTA4RUFBRUU1OTY5MkU4QTFFNDY4QUE2OTg2NThGMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOTY3ODJDNkUxMDhFQUFFRTU5NjkyRThBMUU0NjhBQTY5ODY1
OEYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1
MGYtNjBkY2RlNjdiNDk5LzAvMDk2NzgyQzZFMTA4RUFBRUU1OTY5MkU4QTFFNDY4
QUE2OTg2NThGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFg9td/LYrs1q8r8aonlq2PQSSThEAGEVLnM
zj5royFli3rnF+JGjg1WbKS6isISAMPVBscsuqOPu4rDhHOV1E24MMf6pq7C4BAS
EI+WoxlnidpU7HZSsf+d1vO6iPrmhcbk7FJt3VD3SosbbTb0XBJ74GVQw80pDJtB
Yu/bu53GPMJHNrTiKaCAx0eKu+UeM/oEa4B9ms1wKGdQo02dhTTo60YtB33D/jR2
jq4zZEYdAi6IQ/tPuph9RFRrLYP950AA9mxhgr/C5uTLvxmc9xR7O+Ubv5EFmwK5
22mWEtMu4d/FUw454ow3TKOwjZPgs2rBgatN+MEqirK6SR8OSFA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:04 2026 by rpki-client