$ rpki-client -vvf rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft File: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft (raw, json) Hash identifier: 8o5hICLvkkiuAbPZxX29cdC8VNAimfg3KZcR/qLO7o4= Subject key identifier: 8C:33:20:B5:14:8B:36:82:E0:DC:CB:18:2E:BD:3B:02:FF:90:1C:A1 Authority key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C Certificate issuer: /CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Certificate serial: 1F7412DDB6F23764972F2CA44E9C89797D486B8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:15:57 +0000 Manifest this update: Fri 24 Jul 2026 05:10:57 +0000 Manifest next update: Sat 25 Jul 2026 07:01:57 +0000 Files and hashes: 1: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl (hash: iMrBTMmanssRVbJeAkN4k/mhK1aqksGkkjQIqNk0uTk=) 2: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: 2NisVTWE+HRD9wRpvxBcr4vnaVycZuCJLBHWrwbnEQ8=) 3: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: /BgEs0X95g+IDSnEOlX/MgvWY3v0qZzbss60jPNLBe0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:74:12:dd:b6:f2:37:64:97:2f:2c:a4:4e:9c:89:79:7d:48:6b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Validity Not Before: Jul 24 05:10:57 2026 GMT Not After : Jul 25 07:01:57 2026 GMT Subject: CN=8C3320B5148B3682E0DCCB182EBD3B02FF901CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:2f:67:38:e7:6f:38:2c:5a:d7:e7:9b:5b: 49:a5:24:53:d7:0e:4e:00:b9:7d:d7:84:76:0a:51: 04:b1:7b:51:b2:77:2a:71:dd:37:6c:c6:52:5a:5f: a9:00:e5:0b:ce:d7:e8:22:4b:c4:2e:96:43:91:67: e7:1d:4c:fc:28:dc:20:7f:74:a7:58:65:bb:28:c9: 93:6c:b5:c5:ac:60:44:f5:61:ec:50:68:c2:1a:66: 37:39:9f:f8:44:5b:88:b5:1d:5b:54:88:99:d7:89: ed:03:61:b3:f7:c2:f9:57:7b:c9:e2:1b:4b:f0:95: 5f:5b:ec:db:4e:65:9b:0c:91:68:7a:69:01:33:8e: 0b:9d:cc:0f:6a:e2:25:9a:e1:b6:09:f4:16:14:c1: f9:d0:99:f2:1c:70:3a:b1:d8:f6:7e:b0:b6:28:6d: 1e:4f:d4:7c:3f:e2:bc:04:31:2f:00:1f:70:cb:5b: 2b:4b:d9:1f:ca:c0:54:c8:9a:c7:b7:2b:72:a2:d7: ed:a5:c6:9b:9b:10:d8:8c:0b:b1:e2:8e:db:3b:99: cd:55:a0:ea:31:00:0f:dc:c5:4c:38:ae:dc:06:8d: 2b:a4:bb:95:25:14:81:6f:a9:42:c6:3b:ad:17:7d: 34:69:7a:07:aa:fe:db:5d:31:f2:73:35:75:8b:cd: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:33:20:B5:14:8B:36:82:E0:DC:CB:18:2E:BD:3B:02:FF:90:1C:A1 X509v3 Authority Key Identifier: keyid:96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:85:93:50:80:c7:63:e8:75:20:a0:b7:c1:bd:14:87:b6:01: a2:41:b1:6f:7e:4d:c5:72:d7:bd:b8:63:a4:7a:87:38:a9:68: 20:be:66:f1:75:b7:29:22:47:e1:45:56:85:ed:08:ea:99:1f: c8:fb:92:85:22:59:c9:fd:73:66:51:e2:f7:7a:82:d5:44:0f: 0c:53:8d:e3:a5:b3:62:b8:15:32:97:39:e2:0a:8f:2f:21:9a: 2c:9a:1b:04:3b:bc:11:ef:48:05:60:c8:6c:fe:e7:76:f6:10: a0:3a:66:63:0e:4b:62:09:26:d5:b4:96:ab:e3:37:1a:72:c1: 8f:b1:99:66:d6:95:ae:f6:8b:e4:cc:2d:59:f7:67:f4:01:80: bc:3c:f6:56:9c:cb:f0:2b:d6:9c:58:2e:4c:fe:f1:3e:24:12: 2a:aa:e9:67:4e:dd:a7:5d:6c:9e:2d:b1:c5:a2:b6:76:df:7d: 6a:c8:ad:93:7c:b2:54:b6:90:a6:d7:0d:43:d8:0a:34:a5:5e: 72:9a:28:2e:62:9e:ac:12:01:87:89:22:99:5a:61:86:f6:e2: 44:3d:14:75:8e:60:b0:81:6c:b8:fb:95:cb:5d:3c:bd:31:a6: 4f:0c:0e:44:21:17:97:76:d9:dc:07:e6:d4:08:bc:ff:17:97: 58:8b:22:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3QS3bbyN2SXLyykTpyJeX1Ia4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0MwNjA2 RUM3NzM0QzAeFw0yNjA3MjQwNTEwNTdaFw0yNjA3MjUwNzAxNTdaMDMxMTAvBgNV BAMTKDhDMzMyMEI1MTQ4QjM2ODJFMERDQ0IxODJFQkQzQjAyRkY5MDFDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcS9nOOdvOCxa1+ebW0mlJFPX Dk4AuX3XhHYKUQSxe1Gydypx3TdsxlJaX6kA5QvO1+giS8QulkORZ+cdTPwo3CB/ dKdYZbsoyZNstcWsYET1YexQaMIaZjc5n/hEW4i1HVtUiJnXie0DYbP3wvlXe8ni G0vwlV9b7NtOZZsMkWh6aQEzjgudzA9q4iWa4bYJ9BYUwfnQmfIccDqx2PZ+sLYo bR5P1Hw/4rwEMS8AH3DLWytL2R/KwFTImse3K3Ki1+2lxpubENiMC7Hijts7mc1V oOoxAA/cxUw4rtwGjSuku5UlFIFvqULGO60XfTRpegeq/ttdMfJzNXWLzbnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjDMgtRSLNoLg3MsYLr07Av+QHKEwHwYDVR0j BBgwFoAUlr5tN9YjGySvrcl83GfAYG7Hc0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU3OTk2ZjUtYTkzNC00YjQ0LTg1NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdE NjIzMUIyNEFGQURDOTdDREM2N0MwNjA2RUM3NzM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkJFNkQzN0Q2MjMxQjI0QUZBREM5N0NEQzY3QzA2MDZFQzc3 MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1 NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0Mw NjA2RUM3NzM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCFk1CAx2PodSCgt8G9FIe2AaJBsW9+TcVy 1724Y6R6hzipaCC+ZvF1tykiR+FFVoXtCOqZH8j7koUiWcn9c2ZR4vd6gtVEDwxT jeOls2K4FTKXOeIKjy8hmiyaGwQ7vBHvSAVgyGz+53b2EKA6ZmMOS2IJJtW0lqvj NxpywY+xmWbWla72i+TMLVn3Z/QBgLw89lacy/Ar1pxYLkz+8T4kEiqq6WdO3add bJ4tscWitnbffWrIrZN8slS2kKbXDUPYCjSlXnKaKC5inqwSAYeJIplaYYb24kQ9 FHWOYLCBbLj7lctdPL0xpk8MDkQhF5d22dwH5tQIvP8Xl1iLIjc= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:08 2026 by rpki-client