
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
File: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft (raw, json)
Hash identifier: Gg2QpKBlbJpTra8prUn4Gd40ZRXxOxC+h3eCD1OK/jk=
Subject key identifier: 53:25:5B:6E:74:23:10:D3:58:03:A7:BC:35:1B:56:E5:B4:37:A9:D6
Authority key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C
Certificate issuer: /CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C
Certificate serial: 67F09AA4E5569BA2B6241A87436CE3A883546686
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 17:58:09 +0000
Manifest this update: Wed 23 Sep 2026 17:53:09 +0000
Manifest next update: Thu 24 Sep 2026 18:56:09 +0000
Files and hashes: 1: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: /BgEs0X95g+IDSnEOlX/MgvWY3v0qZzbss60jPNLBe0=)
2: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl (hash: kmaaXY/t/3wKO+AUPwcOkYmKdcqWWam/t2pkCvswauo=)
3: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: 2NisVTWE+HRD9wRpvxBcr4vnaVycZuCJLBHWrwbnEQ8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl
rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 18:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f0:9a:a4:e5:56:9b:a2:b6:24:1a:87:43:6c:e3:a8:83:54:66:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C
Validity
Not Before: Sep 23 17:53:09 2026 GMT
Not After : Sep 24 18:56:09 2026 GMT
Subject: CN=53255B6E742310D35803A7BC351B56E5B437A9D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:86:bd:7c:f1:98:e1:44:4a:54:e9:65:0f:34:
dc:d8:d6:e7:63:6d:98:b2:3a:4f:67:dd:71:ed:06:
b6:96:59:16:8f:cf:07:a2:eb:c5:32:41:83:a5:92:
e8:d0:42:0e:a4:cc:91:c0:ca:b1:44:ae:a2:76:da:
0b:62:75:de:a6:0c:5a:cd:60:a3:0e:d4:49:48:cd:
9c:80:8e:e5:1a:04:1b:f6:83:ac:44:b7:6b:3c:31:
93:24:23:a3:42:a3:15:41:d0:62:5d:02:ce:4d:e9:
f1:06:d0:39:64:55:22:74:f1:15:ad:52:86:0f:dc:
da:03:a6:2e:8e:b0:a6:49:ef:06:64:84:d7:94:66:
91:5f:44:f8:b2:c8:33:e5:af:e3:1b:f8:6e:cf:4b:
1e:5c:89:83:10:8d:37:98:92:87:3d:4a:4b:85:4f:
96:34:ec:eb:fb:c0:1e:a5:47:e7:0b:d6:73:a1:76:
cc:d9:cf:45:d2:6d:39:fa:58:e5:5b:82:4d:f5:c7:
5c:32:f9:8a:a8:6b:29:85:8c:30:95:c1:0d:8a:7e:
bf:89:a1:36:f7:2d:9f:2a:5a:d9:58:32:76:a7:48:
c4:a6:3e:ac:f3:7f:fe:23:4a:47:94:63:17:a2:ec:
be:d4:4d:16:bf:2c:09:9e:23:2b:72:0e:13:82:f1:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:25:5B:6E:74:23:10:D3:58:03:A7:BC:35:1B:56:E5:B4:37:A9:D6
X509v3 Authority Key Identifier:
keyid:96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a0:5b:09:30:4e:ba:70:b4:f0:5f:6b:7d:24:6c:f7:1e:0c:
47:f3:74:b7:7d:3f:0a:0b:ff:b1:e3:21:44:fa:53:b8:7e:cd:
27:a2:54:e2:04:96:1d:88:e5:44:35:16:62:89:7c:5e:f4:81:
88:e8:cd:ba:c2:a0:54:96:12:18:9f:94:53:9f:68:90:0b:8b:
9b:d6:26:6c:6b:08:61:6c:08:0c:28:b6:8d:e6:06:b7:1a:ff:
8d:4e:5f:09:91:01:ab:0d:24:66:b6:7f:4e:b5:0d:1a:57:d3:
f5:ff:96:95:48:3a:36:87:c4:c6:fa:f3:44:0d:0a:6b:b5:1e:
c2:40:70:c6:8b:a2:a5:d9:1d:e2:1d:4f:76:73:96:3e:49:f6:
bf:71:39:93:75:00:20:8e:ac:5b:e8:4a:16:2c:59:2c:90:69:
15:9d:39:33:eb:38:53:92:9c:37:cd:5d:d6:04:01:f8:7b:59:
99:5e:82:50:51:4e:4a:a3:e1:4a:f4:ae:53:a8:dc:e3:37:51:
10:de:b5:74:7f:91:58:ca:3d:bb:7d:28:fb:bf:2e:61:12:b5:
9b:f3:11:3d:33:2d:dc:ab:e3:fb:19:6a:07:22:6f:5f:47:17:
9c:bb:1a:db:8b:d0:fd:6f:68:03:99:ff:3c:35:e9:b5:d8:13:
13:b5:65:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:38:58 2026 by rpki-client