$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft File: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft (raw, json) Hash identifier: 0pa8IkqG5mxjNSebQyOE6EkxNNC3Q6ZviMJBFQgPtxo= Subject key identifier: 3C:A3:80:08:77:5C:B4:B6:5D:23:C7:3E:13:C5:DF:6E:A8:D7:96:B2 Authority key identifier: 96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 Certificate issuer: /CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Certificate serial: 4846C7C27AF1127CA4B2DD63E6543B59F4214D47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 21:52:37 +0000 Manifest this update: Thu 24 Sep 2026 21:47:37 +0000 Manifest next update: Sat 26 Sep 2026 00:11:37 +0000 Files and hashes: 1: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl (hash: /lUfgvHPcdSCNbl4scauToXq9fQtPlNjIuNDXT2FLno=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: O7VzOc1QQXPH4ovFqaeUilVVeRWPbXN3yznnumHTcH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:46:c7:c2:7a:f1:12:7c:a4:b2:dd:63:e6:54:3b:59:f4:21:4d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Validity Not Before: Sep 24 21:47:37 2026 GMT Not After : Sep 26 00:11:37 2026 GMT Subject: CN=3CA38008775CB4B65D23C73E13C5DF6EA8D796B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:0f:5b:c0:0c:cc:32:fd:2c:17:a4:d1:85: 00:46:4b:42:44:4f:65:0e:c7:dc:79:b9:00:92:10: f1:b0:6c:55:18:ce:8b:b1:91:b0:b1:1f:0c:71:dd: c9:64:e7:16:84:b5:73:4d:df:06:ff:e6:56:8a:79: c3:d1:76:2e:7a:14:66:e7:32:27:9e:56:e5:17:3f: cd:73:ae:d2:f3:8e:c4:02:00:7b:a3:3e:d0:96:b4: 32:1f:eb:e7:58:ca:1c:00:f4:3b:0c:d9:f5:f2:ed: 53:8f:4d:3d:29:17:41:78:a4:78:5e:6e:ea:57:ec: 52:61:83:82:13:4e:cc:51:8b:7a:17:eb:49:82:1c: 03:8e:5b:a3:29:b0:65:83:7a:9e:6f:4d:2b:3a:20: 0b:eb:91:19:5c:12:b5:14:6a:be:3f:3f:6a:23:18: d8:18:72:10:e3:58:ce:0d:f6:b3:c1:69:7c:ea:70: 65:84:f2:63:a1:08:a9:5f:3b:f6:83:30:9f:6c:c1: 11:d2:f9:e7:db:3b:35:4f:22:49:b6:a6:96:b3:1f: 87:d6:6e:e4:23:d8:98:a8:3f:66:5a:97:45:ef:3f: 71:97:c4:ce:11:1f:88:36:d2:10:38:37:92:12:11: 55:e1:70:65:bd:7a:35:ec:60:b7:b6:4d:06:e2:63: f6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A3:80:08:77:5C:B4:B6:5D:23:C7:3E:13:C5:DF:6E:A8:D7:96:B2 X509v3 Authority Key Identifier: keyid:96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:43:03:60:54:64:d3:99:10:d3:4d:66:fa:5b:72:e8:6c:db: 74:30:21:74:89:ee:07:b5:57:30:dd:e9:3f:8b:ab:48:09:29: dc:fc:ae:46:23:3c:82:fa:59:31:94:47:f8:01:ff:a0:f2:83: 14:48:c7:fd:1b:ae:c3:dd:7e:0a:30:a9:15:12:b2:06:13:b2: 48:23:d2:ac:33:63:f7:c1:35:4b:20:1c:8c:f8:fc:73:ce:ba: 35:c3:9d:80:78:a3:7f:97:95:41:e9:f1:1f:61:24:67:23:50: 37:78:67:be:68:ee:d4:05:d0:8a:b3:e7:00:f0:14:f7:e7:c4: 28:20:82:73:ae:27:3e:96:09:d7:6f:2f:ff:cd:8c:ae:74:8a: 4b:03:89:45:3d:32:51:79:40:69:27:34:8e:d8:8e:4b:9c:7a: 92:b2:e9:ab:66:f2:6e:f8:37:8e:2a:96:44:fd:21:0d:11:53: 4f:aa:bd:c9:42:90:3a:93:aa:cf:47:83:96:20:d7:53:3f:33: a1:78:b0:72:1d:02:80:bb:81:35:ab:c3:32:2d:aa:56:a3:b1: be:cc:91:13:bc:06:bf:ef:dc:54:db:86:3c:0f:ff:c6:e2:d0: 3f:b9:16:da:b3:1c:97:14:26:a7:5b:b8:63:c3:d1:32:94:01: f4:41:27:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEbHwnrxEnykst1j5lQ7WfQhTUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2 QkZBOTI3MTAeFw0yNjA5MjQyMTQ3MzdaFw0yNjA5MjYwMDExMzdaMDMxMTAvBgNV BAMTKDNDQTM4MDA4Nzc1Q0I0QjY1RDIzQzczRTEzQzVERjZFQThENzk2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAQ9bwAzMMv0sF6TRhQBGS0JE T2UOx9x5uQCSEPGwbFUYzouxkbCxHwxx3clk5xaEtXNN3wb/5laKecPRdi56FGbn MieeVuUXP81zrtLzjsQCAHujPtCWtDIf6+dYyhwA9DsM2fXy7VOPTT0pF0F4pHhe bupX7FJhg4ITTsxRi3oX60mCHAOOW6MpsGWDep5vTSs6IAvrkRlcErUUar4/P2oj GNgYchDjWM4N9rPBaXzqcGWE8mOhCKlfO/aDMJ9swRHS+efbOzVPIkm2ppazH4fW buQj2JioP2Zal0XvP3GXxM4RH4g20hA4N5ISEVXhcGW9ejXsYLe2TQbiY/YVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPKOACHdctLZdI8c+E8XfbqjXlrIwHwYDVR0j BBgwFoAUlveIW49KAWfIbjCD9jD/omv6knEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmZhMGRkZWQtMWFjZi00NDJkLTk2NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4 RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2QkZBOTI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkY3ODg1QjhGNEEwMTY3Qzg2RTMwODNGNjMwRkZBMjZCRkE5 MjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZG QTI2QkZBOTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVDA2BUZNOZENNNZvpbcuhs23QwIXSJ7ge1 VzDd6T+Lq0gJKdz8rkYjPIL6WTGUR/gB/6DygxRIx/0brsPdfgowqRUSsgYTskgj 0qwzY/fBNUsgHIz4/HPOujXDnYB4o3+XlUHp8R9hJGcjUDd4Z75o7tQF0Iqz5wDw FPfnxCgggnOuJz6WCddvL//NjK50iksDiUU9MlF5QGknNI7YjkucepKy6atm8m74 N44qlkT9IQ0RU0+qvclCkDqTqs9Hg5Yg11M/M6F4sHIdAoC7gTWrwzItqlajsb7M kRO8Br/v3FTbhjwP/8bi0D+5FtqzHJcUJqdbuGPD0TKUAfRBJ1A= -----END CERTIFICATE-----Generated at Fri Sep 25 02:48:17 2026 by rpki-client