$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft File: 96FDA607CDE580764664CCDAA75B9ECDACB44700.mft (raw, json) Hash identifier: PfuEaSw5F2jvTjaZkD2pLTCK5W2alf5RaQ5Z6vP9fRs= Subject key identifier: 17:2B:0C:9D:EB:98:3C:21:D4:0D:DA:5B:08:C2:1E:E3:B5:DC:5D:21 Authority key identifier: 96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00 Certificate issuer: /CN=96FDA607CDE580764664CCDAA75B9ECDACB44700 Certificate serial: 74DD5EC75A376BDE475AB8C898A2AB9D4002D54D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:35:11 +0000 Manifest this update: Tue 12 May 2026 15:30:11 +0000 Manifest next update: Wed 13 May 2026 18:28:11 +0000 Files and hashes: 1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: Xmk4AKXAk65syZMNokwtsrkCl9OG2CFthVNLs1MeEBs=) 2: 96FDA607CDE580764664CCDAA75B9ECDACB44700.crl (hash: 7SlAKeFQ+0EuhzCQoub35fY+QWmIJnlGm3qWrw9BKWw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dd:5e:c7:5a:37:6b:de:47:5a:b8:c8:98:a2:ab:9d:40:02:d5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FDA607CDE580764664CCDAA75B9ECDACB44700 Validity Not Before: May 12 15:30:11 2026 GMT Not After : May 13 18:28:11 2026 GMT Subject: CN=172B0C9DEB983C21D40DDA5B08C21EE3B5DC5D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:44:4c:59:a6:a5:12:ca:5d:91:f4:bd:ed: ce:57:25:56:ed:dd:c9:c3:37:80:af:a3:13:3e:30: 52:f1:1d:f8:29:7a:d9:7e:0f:46:d3:d2:e0:40:69: 1b:b3:66:ef:78:d2:7a:ee:6b:24:b4:53:67:82:46: b7:91:f5:55:f6:d9:31:66:28:e7:c5:10:aa:2f:a3: c3:d0:ed:60:b4:2f:f2:1c:e9:e6:ab:a5:bf:20:ab: 27:78:b4:71:78:84:62:70:37:df:75:91:1f:8c:0b: ce:cb:76:45:3b:1a:22:8a:0a:fa:f6:1d:31:aa:da: 65:10:0e:25:3c:f2:4a:34:f5:d6:88:0d:a5:66:12: c5:f2:3b:c7:9e:08:15:fa:19:39:84:e2:5a:a7:41: 7b:30:fd:5f:37:ee:3b:db:bc:03:89:69:57:92:b7: 28:45:a6:0d:3f:0c:5e:f3:9e:fd:a4:46:42:dd:ca: 05:37:2e:3e:0f:4f:bf:dd:08:54:17:ec:c3:5c:99: 1a:73:48:5d:b9:e5:44:0f:44:bb:27:03:3f:34:5c: 9e:a6:55:4a:f6:2d:45:63:e4:f6:c3:a7:67:2f:d0: f8:04:67:bf:47:64:e5:58:62:0f:2a:b9:f0:72:f9: 8c:37:f7:80:67:eb:ce:40:fd:e7:a0:06:27:e7:9f: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2B:0C:9D:EB:98:3C:21:D4:0D:DA:5B:08:C2:1E:E3:B5:DC:5D:21 X509v3 Authority Key Identifier: keyid:96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:63:78:10:66:91:a1:4b:bc:4e:5e:fa:9c:60:0c:c3:54:15: 09:14:ce:71:37:23:81:c1:ea:2b:d0:b0:29:63:55:d8:7a:b3: 9e:33:72:5d:34:96:5f:0a:7f:3c:cb:8f:92:cc:35:9d:98:7b: 0c:74:8a:f9:d6:bd:f2:46:83:02:30:54:48:f1:bf:6a:98:c2: c2:b4:3d:45:b8:d7:bc:86:f8:51:cb:b9:fb:21:27:89:8a:cb: 71:dd:78:ad:cd:70:20:6d:2e:50:23:c3:64:39:ef:4b:d6:1b: 70:d7:cb:85:73:01:dd:c2:36:4c:7f:81:75:ef:39:f4:f2:72: 6e:f7:50:17:0a:50:da:af:e7:0c:96:11:53:89:a0:8f:95:35: 39:e8:9e:55:14:ff:28:be:e6:c3:31:8f:cc:cd:76:dd:f5:39: 72:f9:3d:87:46:93:32:59:8e:10:af:6a:f2:2c:dd:92:ce:c0: 65:7b:c6:04:81:e6:40:fc:91:5f:83:4c:e7:17:0d:b7:0c:cd: 6b:fc:43:e7:4b:12:6a:e6:70:e3:87:e9:50:de:81:83:b7:de: 62:51:5f:c6:2b:17:05:0b:37:d6:b3:40:7d:0d:b7:b1:1f:6c: 48:16:8a:fb:93:d8:cc:d0:d9:36:97:0b:98:41:7d:ad:c1:cd: b1:14:a3:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdN1ex1o3a95HWrjImKKrnUAC1U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGREE2MDdDREU1ODA3NjQ2NjRDQ0RBQTc1QjlFQ0RB Q0I0NDcwMDAeFw0yNjA1MTIxNTMwMTFaFw0yNjA1MTMxODI4MTFaMDMxMTAvBgNV BAMTKDE3MkIwQzlERUI5ODNDMjFENDBEREE1QjA4QzIxRUUzQjVEQzVEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZv0RMWaalEspdkfS97c5XJVbt 3cnDN4CvoxM+MFLxHfgpetl+D0bT0uBAaRuzZu940nruayS0U2eCRreR9VX22TFm KOfFEKovo8PQ7WC0L/Ic6earpb8gqyd4tHF4hGJwN991kR+MC87LdkU7GiKKCvr2 HTGq2mUQDiU88ko09daIDaVmEsXyO8eeCBX6GTmE4lqnQXsw/V837jvbvAOJaVeS tyhFpg0/DF7znv2kRkLdygU3Lj4PT7/dCFQX7MNcmRpzSF255UQPRLsnAz80XJ6m VUr2LUVj5PbDp2cv0PgEZ79HZOVYYg8qufBy+Yw394Bn685A/eegBifnnyePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFysMneuYPCHUDdpbCMIe47XcXSEwHwYDVR0j BBgwFoAUlv2mB83lgHZGZMzap1uezay0RwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThmMjg1ZWYtMzQ1My00MTc5LWE1NTMtZjE5NTk3ZGU5ZGVkLzAvOTZGREE2MDdD REU1ODA3NjQ2NjRDQ0RBQTc1QjlFQ0RBQ0I0NDcwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkZEQTYwN0NERTU4MDc2NDY2NENDREFBNzVCOUVDREFDQjQ0 NzAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThmMjg1ZWYtMzQ1My00MTc5LWE1 NTMtZjE5NTk3ZGU5ZGVkLzAvOTZGREE2MDdDREU1ODA3NjQ2NjRDQ0RBQTc1QjlF Q0RBQ0I0NDcwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGljeBBmkaFLvE5e+pxgDMNUFQkUznE3I4HB 6ivQsCljVdh6s54zcl00ll8KfzzLj5LMNZ2Yewx0ivnWvfJGgwIwVEjxv2qYwsK0 PUW417yG+FHLufshJ4mKy3HdeK3NcCBtLlAjw2Q570vWG3DXy4VzAd3CNkx/gXXv OfTycm73UBcKUNqv5wyWEVOJoI+VNTnonlUU/yi+5sMxj8zNdt31OXL5PYdGkzJZ jhCvavIs3ZLOwGV7xgSB5kD8kV+DTOcXDbcMzWv8Q+dLEmrmcOOH6VDegYO33mJR X8YrFwULN9azQH0Nt7EfbEgWivuT2MzQ2TaXC5hBfa3BzbEUo/c= -----END CERTIFICATE-----Generated at Wed May 13 09:57:58 2026 by rpki-client