$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft File: 96A5BEF01619313B13000152FF7D9849B080E6AD.mft (raw, json) Hash identifier: QoQmUrN1g9L4MKbv9VSyp/LO8k1ilZvt9esk4QBzKLU= Subject key identifier: 2C:EA:3C:9B:82:C0:9D:30:9D:0A:9D:07:5B:32:3E:06:A5:C6:82:4D Authority key identifier: 96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD Certificate issuer: /CN=96A5BEF01619313B13000152FF7D9849B080E6AD Certificate serial: 1EDDB1A038923E458FAA7A545329AA6FC8E71E9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 22:38:29 +0000 Manifest this update: Thu 24 Sep 2026 22:33:29 +0000 Manifest next update: Sat 26 Sep 2026 01:15:29 +0000 Files and hashes: 1: 96A5BEF01619313B13000152FF7D9849B080E6AD.crl (hash: 2NhMKSjDAjQLSOnC5XmcY6ItO29xtKTXi8De3ArX3NM=) 2: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: RDa+Zhnigfqo7biWFi13W+chpPOznuVZnbRPHv7vJrE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dd:b1:a0:38:92:3e:45:8f:aa:7a:54:53:29:aa:6f:c8:e7:1e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96A5BEF01619313B13000152FF7D9849B080E6AD Validity Not Before: Sep 24 22:33:29 2026 GMT Not After : Sep 26 01:15:29 2026 GMT Subject: CN=2CEA3C9B82C09D309D0A9D075B323E06A5C6824D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:06:9e:99:e9:cb:b1:60:56:86:e2:35:e8:8f: e0:2d:ef:12:f7:60:fd:34:10:6d:ed:dd:ad:2c:ad: 21:37:c6:12:17:b8:8f:7b:33:91:e8:dd:d7:e6:be: 06:19:1a:37:51:1b:58:62:c3:0d:3f:3e:0d:b9:db: 1f:fa:52:d4:2d:27:f6:aa:5c:5c:89:6a:95:ea:98: e7:59:37:4f:65:a5:a0:a1:29:5f:86:a7:93:7d:0c: 84:2e:2b:ea:6e:01:46:90:b7:65:12:0e:12:48:29: 36:88:6b:9e:09:ad:a4:ae:02:a6:25:cf:04:bb:ac: cb:d5:9f:83:e5:c1:59:f6:15:43:d3:84:fe:b3:78: a5:57:63:68:51:cf:ff:1a:79:26:f9:48:62:7e:79: 3d:09:89:cd:e2:b5:5d:6d:41:15:76:03:f9:7c:49: 70:bf:69:17:e1:d9:9c:12:96:a9:84:de:eb:6e:4b: 86:c1:2d:dd:5f:a8:7d:87:11:fc:28:b9:d9:ec:7f: 26:e6:30:aa:53:42:c4:0d:ec:5d:d0:68:c8:f0:96: 57:af:87:c8:89:46:6e:31:e4:a1:87:6c:59:21:40: ce:98:5e:5d:84:b6:7a:3e:4b:dc:bb:a9:69:0a:9e: 79:2e:f4:68:f8:ba:cb:42:d2:3c:9a:da:5a:95:e8: c1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EA:3C:9B:82:C0:9D:30:9D:0A:9D:07:5B:32:3E:06:A5:C6:82:4D X509v3 Authority Key Identifier: keyid:96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5a:c9:06:16:f5:b8:0d:9c:fd:da:77:a7:2b:65:d0:a5:f7: b4:62:ae:d3:05:0d:32:37:69:0d:36:23:72:5b:b0:3d:0f:7e: 5e:ae:41:12:71:11:aa:d3:55:67:80:ac:08:89:b1:25:91:08: 2b:d5:22:6a:b7:4e:cf:7f:19:4f:a6:01:67:32:b3:f9:4e:16: 14:36:dd:38:38:e2:b0:49:9b:dd:31:ea:95:7c:87:3b:05:aa: 6c:7e:2f:ac:93:4b:04:de:58:04:52:fa:cf:29:08:6c:3a:e6: 03:ee:f3:8a:79:7e:0a:8b:4f:93:19:48:bd:3d:99:bb:d9:05: 56:10:19:f6:b6:31:a6:00:a6:4f:34:34:07:15:f3:ba:9e:77: c9:dd:b0:84:0f:15:2e:eb:90:4f:fb:ff:e9:a6:cd:d4:06:6a: 6f:ed:f4:54:db:d9:dd:8f:ad:65:7b:f6:d2:08:80:1c:fb:7e: 7d:84:d1:7c:21:7b:54:7b:2f:9e:30:cb:86:90:82:bd:a7:be: 36:1d:fe:6e:ba:2f:0f:40:16:08:00:e1:46:9c:c5:8c:32:9c: 4c:78:73:ba:13:5f:d0:b1:ac:66:1f:86:a0:76:08:94:75:7b: f3:3c:c1:32:a6:78:49:54:fa:bc:b1:b5:d8:ba:e6:ef:1f:38: 2e:e7:22:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHt2xoDiSPkWPqnpUUymqb8jnHpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZBNUJFRjAxNjE5MzEzQjEzMDAwMTUyRkY3RDk4NDlC MDgwRTZBRDAeFw0yNjA5MjQyMjMzMjlaFw0yNjA5MjYwMTE1MjlaMDMxMTAvBgNV BAMTKDJDRUEzQzlCODJDMDlEMzA5RDBBOUQwNzVCMzIzRTA2QTVDNjgyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWBp6Z6cuxYFaG4jXoj+At7xL3 YP00EG3t3a0srSE3xhIXuI97M5Ho3dfmvgYZGjdRG1hiww0/Pg252x/6UtQtJ/aq XFyJapXqmOdZN09lpaChKV+Gp5N9DIQuK+puAUaQt2USDhJIKTaIa54JraSuAqYl zwS7rMvVn4PlwVn2FUPThP6zeKVXY2hRz/8aeSb5SGJ+eT0Jic3itV1tQRV2A/l8 SXC/aRfh2ZwSlqmE3utuS4bBLd1fqH2HEfwoudnsfybmMKpTQsQN7F3QaMjwllev h8iJRm4x5KGHbFkhQM6YXl2Etno+S9y7qWkKnnku9Gj4ustC0jya2lqV6MHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULOo8m4LAnTCdCp0HWzI+BqXGgk0wHwYDVR0j BBgwFoAUlqW+8BYZMTsTAAFS/32YSbCA5q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlMmEyZTEtMWIyZC00OGNjLTlkYjMtNjdhODFhZjY3MDYyLzAvOTZBNUJFRjAx NjE5MzEzQjEzMDAwMTUyRkY3RDk4NDlCMDgwRTZBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkE1QkVGMDE2MTkzMTNCMTMwMDAxNTJGRjdEOTg0OUIwODBF NkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvOTZBNUJFRjAxNjE5MzEzQjEzMDAwMTUyRkY3RDk4 NDlCMDgwRTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1ayQYW9bgNnP3ad6crZdCl97RirtMFDTI3 aQ02I3JbsD0Pfl6uQRJxEarTVWeArAiJsSWRCCvVImq3Ts9/GU+mAWcys/lOFhQ2 3Tg44rBJm90x6pV8hzsFqmx+L6yTSwTeWARS+s8pCGw65gPu84p5fgqLT5MZSL09 mbvZBVYQGfa2MaYApk80NAcV87qed8ndsIQPFS7rkE/7/+mmzdQGam/t9FTb2d2P rWV79tIIgBz7fn2E0Xwhe1R7L54wy4aQgr2nvjYd/m66Lw9AFggA4UacxYwynEx4 c7oTX9CxrGYfhqB2CJR1e/M8wTKmeElU+ryxtdi65u8fOC7nInY= -----END CERTIFICATE-----Generated at Fri Sep 25 02:38:33 2026 by rpki-client