$ rpki-client -vvf rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft File: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft (raw, json) Hash identifier: 1gFDOE+c6R2a7DTfIQgGwcIV3vznz1ogJ5vO6XohkzM= Subject key identifier: FE:7C:B7:FE:04:31:AA:7E:03:89:CC:74:8F:AD:5F:F3:3B:FE:26:D1 Authority key identifier: 96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 Certificate issuer: /CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Certificate serial: 187E60484C5ACD1A79F1A6E0E1B5927277836EFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 16:45:23 +0000 Manifest this update: Thu 23 Jul 2026 16:40:23 +0000 Manifest next update: Fri 24 Jul 2026 20:03:23 +0000 Files and hashes: 1: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl (hash: v5cr9vVwhj+Yh1zIFp1DLpGo0mSKYn35lYLajOQzR94=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: O7VzOc1QQXPH4ovFqaeUilVVeRWPbXN3yznnumHTcH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7e:60:48:4c:5a:cd:1a:79:f1:a6:e0:e1:b5:92:72:77:83:6e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Validity Not Before: Jul 23 16:40:23 2026 GMT Not After : Jul 24 20:03:23 2026 GMT Subject: CN=FE7CB7FE0431AA7E0389CC748FAD5FF33BFE26D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:b9:db:2d:9f:54:31:0f:81:72:f0:bd:76: 26:d5:b8:04:57:04:8b:4b:0e:0f:7d:31:ee:2c:e6: 71:4e:14:17:80:6f:ef:d1:8f:a7:9f:5f:89:12:3f: 9f:57:ef:7c:e0:6d:6e:bf:61:78:48:ee:49:24:d3: 17:4e:48:cf:2f:bc:e8:27:55:24:63:79:bf:4e:a0: b6:1f:c6:95:33:aa:48:57:c7:bd:30:20:cb:12:0d: 2a:4e:27:47:cf:36:16:57:98:dd:8d:73:b2:ee:c3: b5:a0:7d:67:1a:81:ec:e6:31:c6:99:44:9a:e5:7f: 95:25:70:12:26:c8:9e:6e:cb:3a:a3:02:20:f3:00: bc:c6:aa:8a:d7:df:72:d2:cc:13:20:4e:b2:62:20: 1d:7a:a7:22:5c:9e:9b:51:0b:18:e9:08:f6:d5:7c: 28:39:68:ac:c5:92:9a:f9:d0:7c:c0:84:17:5b:54: 50:eb:a7:a5:ab:50:79:a4:04:a4:b9:8d:9a:c8:b7: 20:a8:bb:ee:10:64:03:e4:9f:9b:5b:d0:9a:e7:30: f7:b9:bc:73:5d:4e:cd:09:de:10:85:de:da:67:1a: 72:e5:01:bc:de:4f:31:cf:78:22:53:08:4c:e0:6a: ed:51:a5:71:5d:a3:51:3a:8f:fa:31:3b:ac:01:71: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:B7:FE:04:31:AA:7E:03:89:CC:74:8F:AD:5F:F3:3B:FE:26:D1 X509v3 Authority Key Identifier: keyid:96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ca:33:89:13:24:31:93:e6:bd:a0:d9:02:20:c7:0e:5f:5a: 94:db:ef:3e:38:3a:17:66:96:a3:d0:9f:f8:0b:32:70:8c:39: 7a:52:41:14:5d:67:47:a2:5a:d1:c5:d4:69:fe:9d:16:8d:6e: 5d:24:47:38:28:f3:95:e3:24:1e:eb:3a:16:26:42:c0:a5:e1: ad:b7:6b:05:03:e7:0f:67:4f:93:c8:a8:17:85:37:f2:29:58: b0:26:ff:75:3d:4d:63:db:b3:ad:aa:3d:0a:e1:ab:08:27:86: af:3d:08:c5:6a:9e:ed:8d:f2:10:83:e4:c7:ee:ec:61:93:99: 9c:37:f0:2a:bb:7e:d2:3b:6e:12:1e:54:03:e4:a1:14:0b:64: b7:1a:48:a7:c5:c2:7f:17:4d:4c:25:5b:be:06:74:0a:f6:99: a1:f2:14:5a:d0:74:9c:8a:47:1d:4a:99:3f:26:a2:f5:7d:0a: 37:c0:e7:9a:40:94:21:19:be:09:93:81:e7:ee:ad:f4:52:03: 66:d0:29:80:df:a4:ce:0d:84:d1:5b:16:3b:ba:3e:ad:07:ed: af:96:a3:70:74:99:96:4b:e3:62:5a:47:3d:7a:54:b2:fb:21: 80:5f:70:87:3a:85:8b:32:42:e2:b3:45:c0:ba:43:8a:64:ab: 9c:0c:44:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGH5gSExazRp58abg4bWScneDbvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2 QkZBOTI3MTAeFw0yNjA3MjMxNjQwMjNaFw0yNjA3MjQyMDAzMjNaMDMxMTAvBgNV BAMTKEZFN0NCN0ZFMDQzMUFBN0UwMzg5Q0M3NDhGQUQ1RkYzM0JGRTI2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiF7nbLZ9UMQ+BcvC9dibVuARX BItLDg99Me4s5nFOFBeAb+/Rj6efX4kSP59X73zgbW6/YXhI7kkk0xdOSM8vvOgn VSRjeb9OoLYfxpUzqkhXx70wIMsSDSpOJ0fPNhZXmN2Nc7Luw7WgfWcagezmMcaZ RJrlf5UlcBImyJ5uyzqjAiDzALzGqorX33LSzBMgTrJiIB16pyJcnptRCxjpCPbV fCg5aKzFkpr50HzAhBdbVFDrp6WrUHmkBKS5jZrItyCou+4QZAPkn5tb0JrnMPe5 vHNdTs0J3hCF3tpnGnLlAbzeTzHPeCJTCEzgau1RpXFdo1E6j/oxO6wBcSJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ny3/gQxqn4Dicx0j61f8zv+JtEwHwYDVR0j BBgwFoAUlveIW49KAWfIbjCD9jD/omv6knEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmZhMGRkZWQtMWFjZi00NDJkLTk2NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4 RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2QkZBOTI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkY3ODg1QjhGNEEwMTY3Qzg2RTMwODNGNjMwRkZBMjZCRkE5 MjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZG QTI2QkZBOTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrKM4kTJDGT5r2g2QIgxw5fWpTb7z44Ohdm lqPQn/gLMnCMOXpSQRRdZ0eiWtHF1Gn+nRaNbl0kRzgo85XjJB7rOhYmQsCl4a23 awUD5w9nT5PIqBeFN/IpWLAm/3U9TWPbs62qPQrhqwgnhq89CMVqnu2N8hCD5Mfu 7GGTmZw38Cq7ftI7bhIeVAPkoRQLZLcaSKfFwn8XTUwlW74GdAr2maHyFFrQdJyK Rx1KmT8movV9CjfA55pAlCEZvgmTgefurfRSA2bQKYDfpM4NhNFbFju6Pq0H7a+W o3B0mZZL42JaRz16VLL7IYBfcIc6hYsyQuKzRcC6Q4pkq5wMRAg= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:02 2026 by rpki-client