
$ rpki-client -vvf rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft
File: 96348B9579D234769BDF15F375368D3C0BDE1860.mft (raw, json)
Hash identifier: 3yug4kibvoZ87f6M3BirDdSXghXafyGdxdMuG7V2fRM=
Subject key identifier: 09:04:FC:06:A3:BC:CD:34:18:DA:92:B3:8C:67:9D:40:E4:A2:C8:3C
Authority key identifier: 96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60
Certificate issuer: /CN=96348B9579D234769BDF15F375368D3C0BDE1860
Certificate serial: 4DCBA6F168FB2102CC07647A391682E4C2846F85
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:49:35 +0000
Manifest this update: Wed 13 May 2026 00:44:35 +0000
Manifest next update: Thu 14 May 2026 04:40:35 +0000
Files and hashes: 1: 96348B9579D234769BDF15F375368D3C0BDE1860.crl (hash: nt7KNSca0dfePzHFSd7m1rmW4dKJjBurw89Jccq36wI=)
2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: NRcKgzAD1aXFV9xSYN/NAX4+lhq8SGmZ0ijJnrN5qYY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl
rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:cb:a6:f1:68:fb:21:02:cc:07:64:7a:39:16:82:e4:c2:84:6f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96348B9579D234769BDF15F375368D3C0BDE1860
Validity
Not Before: May 13 00:44:35 2026 GMT
Not After : May 14 04:40:35 2026 GMT
Subject: CN=0904FC06A3BCCD3418DA92B38C679D40E4A2C83C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:e9:6f:84:92:0a:df:da:b2:1a:0e:2d:3c:
1d:f2:29:80:c0:60:47:b7:8c:0e:37:c6:25:29:74:
26:59:34:99:84:9e:b8:20:1e:65:dc:1a:ba:13:be:
85:29:62:fd:dd:95:67:f0:0d:2a:61:07:7b:72:1c:
40:ed:0a:1b:3f:e9:40:a8:92:c3:3e:9b:af:31:16:
89:01:d0:49:bc:72:a8:d3:21:17:d7:90:86:1c:40:
63:30:26:64:b3:f2:f5:f1:5e:d5:7e:0f:91:27:5f:
1e:45:0f:07:c7:40:4f:66:f8:f1:f3:21:62:b0:95:
39:d7:cb:78:49:e7:3b:50:ea:f0:12:f6:3e:5b:9b:
b2:fa:7f:53:75:c5:c7:41:27:15:87:95:e6:72:38:
39:0a:7d:58:f7:09:d6:96:a2:43:02:ab:8a:6f:4a:
7d:c5:b2:1c:82:90:4b:d2:cb:a7:a7:64:65:4a:07:
5c:68:70:bd:88:79:5d:1b:83:57:c9:ea:97:f6:40:
a7:e7:63:08:5b:ae:76:1d:4f:21:cf:8f:6f:31:b8:
22:41:98:19:c7:b6:80:d2:9c:6f:16:0c:49:cf:d6:
83:cd:c0:65:40:93:89:a9:55:69:30:eb:8d:33:06:
b2:66:ed:0d:c5:e8:d8:ea:82:cc:dc:57:be:28:fd:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:FC:06:A3:BC:CD:34:18:DA:92:B3:8C:67:9D:40:E4:A2:C8:3C
X509v3 Authority Key Identifier:
keyid:96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bf:a4:a0:fd:1a:80:12:fe:98:7d:43:75:f7:9a:47:a9:e9:
6d:70:6e:56:7b:bf:33:2b:df:93:e7:82:fc:6b:71:7c:7c:20:
c1:bd:ff:9d:8f:61:8e:78:2b:0d:b9:49:e6:b9:f0:aa:9a:84:
0e:a0:b0:4b:4c:d3:5c:e9:a9:35:42:b0:9d:52:cc:24:b2:b8:
a7:5f:3d:cf:57:b2:35:6a:b7:d1:7e:f0:18:ef:4e:fd:65:be:
a1:4c:99:b4:92:9b:7c:75:ad:00:a5:2d:e0:ac:34:7a:8c:90:
ca:3b:50:bd:43:88:46:c7:6a:f0:be:7e:dc:88:82:98:59:ea:
f5:6e:cc:09:63:46:1b:a9:41:05:23:4b:1d:d3:8f:51:ee:e9:
e3:71:cc:a1:5e:e7:31:63:66:20:d1:50:ee:af:76:35:f4:52:
e1:dc:86:48:c3:26:a7:22:0d:90:4a:cc:2f:4b:6e:f3:71:5e:
18:aa:01:50:31:b4:e7:2c:33:2a:04:6e:6a:0a:cd:f4:2f:12:
5d:fd:9b:f2:99:14:a2:e6:8d:3b:94:e3:a1:06:62:3e:29:1e:
83:d9:31:ae:bf:1f:99:93:13:0f:75:ec:c9:53:f1:6b:a5:fe:
cb:59:e6:32:43:5a:6f:44:b6:57:21:ee:3d:66:89:b3:80:1a:
bd:9a:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:32 2026 by rpki-client