$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft File: 96A5BEF01619313B13000152FF7D9849B080E6AD.mft (raw, json) Hash identifier: YMnS4SBGeXn44EGNSFAQ8kDwyNg+sacE1aRb1Kwoaek= Subject key identifier: FD:89:18:9A:4F:BB:14:05:7C:29:33:35:24:29:2E:F7:BA:B8:D3:1F Authority key identifier: 96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD Certificate issuer: /CN=96A5BEF01619313B13000152FF7D9849B080E6AD Certificate serial: 4858348CA049118FBD022A3C2A0522267A708F84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:06:59 +0000 Manifest this update: Thu 24 Sep 2026 05:01:59 +0000 Manifest next update: Fri 25 Sep 2026 06:36:59 +0000 Files and hashes: 1: 96A5BEF01619313B13000152FF7D9849B080E6AD.crl (hash: 3QGF4k7p4+DAdnaXxnP2NaioJFb7QaSVkZZrLwlZOds=) 2: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: RDa+Zhnigfqo7biWFi13W+chpPOznuVZnbRPHv7vJrE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:58:34:8c:a0:49:11:8f:bd:02:2a:3c:2a:05:22:26:7a:70:8f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96A5BEF01619313B13000152FF7D9849B080E6AD Validity Not Before: Sep 24 05:01:59 2026 GMT Not After : Sep 25 06:36:59 2026 GMT Subject: CN=FD89189A4FBB14057C29333524292EF7BAB8D31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:46:22:8b:5d:ee:38:56:1c:e7:f6:a2:61: 96:32:ca:64:6a:06:41:ee:f4:83:bc:54:7c:94:48: 2c:f5:22:4a:c6:92:77:90:f0:ed:77:c0:42:0f:f8: 96:06:b7:01:9c:db:b9:17:1c:01:83:24:37:c6:12: 40:c5:6e:1d:c6:2a:d1:a5:60:f7:fe:5e:8e:4c:b3: 2c:39:63:14:20:3c:60:90:ff:49:53:59:e1:da:02: e5:8e:f4:98:e9:86:59:38:30:01:60:a6:fd:67:aa: 25:bf:5c:5b:c8:68:bd:ce:1c:38:5e:12:ec:af:4b: 91:df:78:ba:86:98:e6:f9:d2:4c:89:bc:8c:14:be: d5:f0:f8:00:36:b3:94:d2:5c:3d:f2:2c:83:7a:d7: 79:df:4b:01:84:98:8a:f1:0c:75:34:fd:33:01:78: 47:e0:02:54:d5:6c:d6:5d:cd:b1:60:c0:a0:9a:cb: b8:83:3e:a9:be:7c:87:81:c8:31:ef:83:7e:2b:23: f9:55:9b:60:e2:1b:23:7f:f0:d5:3a:ac:38:05:90: dd:66:e9:84:9d:70:04:7a:08:be:93:40:ea:ea:69: 74:ba:7b:34:d4:09:21:95:82:20:c1:f5:a6:39:ae: cd:b3:0f:d4:b5:2a:f5:82:b4:ab:8d:0f:5e:72:41: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:89:18:9A:4F:BB:14:05:7C:29:33:35:24:29:2E:F7:BA:B8:D3:1F X509v3 Authority Key Identifier: keyid:96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:60:ab:b3:cf:e4:c1:0f:d3:77:c4:4f:a7:55:c5:8c:de:a9: ef:6f:a4:56:e7:f0:e5:42:1b:e7:3b:99:c6:7e:fc:12:86:be: a2:87:be:4f:82:c3:ba:4f:18:d7:b5:d1:1d:1e:1f:24:b0:ce: 31:22:3f:cd:fb:bc:44:ea:ab:0b:b8:00:61:14:68:9a:e1:fa: fd:5e:09:ed:dd:b4:6b:f2:9e:2e:99:9f:91:76:3a:04:e9:b5: 53:67:7c:ef:1d:a5:68:13:06:18:62:e2:58:72:1d:3b:05:d0: 22:fe:a6:d1:d1:03:13:b5:eb:c3:7a:42:5c:16:af:b8:c4:90: 87:6a:84:95:11:be:5d:8f:25:e0:ae:cb:30:f7:3d:bd:1e:fa: e6:30:cd:6d:65:bf:b5:5f:0b:b2:c2:7d:95:8e:e6:65:c9:55: fa:36:05:34:32:9d:97:32:06:5b:53:79:bd:1a:c9:b0:38:60: 3a:ae:c1:48:ee:fe:a9:f5:44:e9:4a:38:ea:c8:36:8b:3e:c7: 5d:d4:85:e8:47:32:e0:7d:e9:45:2d:0b:7f:37:37:1b:51:e8: c4:ba:c3:3c:11:92:4b:2b:17:70:48:20:09:4b:64:8f:d4:d5: 7f:f0:c7:9e:ca:0c:03:4f:9e:bb:de:4d:4c:04:e8:68:fe:58: a2:90:5d:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFg0jKBJEY+9Aio8KgUiJnpwj4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZBNUJFRjAxNjE5MzEzQjEzMDAwMTUyRkY3RDk4NDlC MDgwRTZBRDAeFw0yNjA5MjQwNTAxNTlaFw0yNjA5MjUwNjM2NTlaMDMxMTAvBgNV BAMTKEZEODkxODlBNEZCQjE0MDU3QzI5MzMzNTI0MjkyRUY3QkFCOEQzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTIkYii13uOFYc5/aiYZYyymRq BkHu9IO8VHyUSCz1IkrGkneQ8O13wEIP+JYGtwGc27kXHAGDJDfGEkDFbh3GKtGl YPf+Xo5Msyw5YxQgPGCQ/0lTWeHaAuWO9Jjphlk4MAFgpv1nqiW/XFvIaL3OHDhe EuyvS5HfeLqGmOb50kyJvIwUvtXw+AA2s5TSXD3yLIN613nfSwGEmIrxDHU0/TMB eEfgAlTVbNZdzbFgwKCay7iDPqm+fIeByDHvg34rI/lVm2DiGyN/8NU6rDgFkN1m 6YSdcAR6CL6TQOrqaXS6ezTUCSGVgiDB9aY5rs2zD9S1KvWCtKuND15yQUpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/YkYmk+7FAV8KTM1JCku97q40x8wHwYDVR0j BBgwFoAUlqW+8BYZMTsTAAFS/32YSbCA5q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlMmEyZTEtMWIyZC00OGNjLTlkYjMtNjdhODFhZjY3MDYyLzAvOTZBNUJFRjAx NjE5MzEzQjEzMDAwMTUyRkY3RDk4NDlCMDgwRTZBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkE1QkVGMDE2MTkzMTNCMTMwMDAxNTJGRjdEOTg0OUIwODBF NkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvOTZBNUJFRjAxNjE5MzEzQjEzMDAwMTUyRkY3RDk4 NDlCMDgwRTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtgq7PP5MEP03fET6dVxYzeqe9vpFbn8OVC G+c7mcZ+/BKGvqKHvk+Cw7pPGNe10R0eHySwzjEiP837vETqqwu4AGEUaJrh+v1e Ce3dtGvyni6Zn5F2OgTptVNnfO8dpWgTBhhi4lhyHTsF0CL+ptHRAxO168N6QlwW r7jEkIdqhJURvl2PJeCuyzD3Pb0e+uYwzW1lv7VfC7LCfZWO5mXJVfo2BTQynZcy BltTeb0aybA4YDquwUju/qn1ROlKOOrINos+x13UhehHMuB96UUtC383NxtR6MS6 wzwRkksrF3BIIAlLZI/U1X/wx57KDANPnrveTUwE6Gj+WKKQXd0= -----END CERTIFICATE-----Generated at Thu Sep 24 22:35:05 2026 by rpki-client