$ rpki-client -vvf rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft File: 096E75D80B559B9824609BA61681D845A0CB0F77.mft (raw, json) Hash identifier: +jywBSvm2iPxB/zUtYrOvEEMQPTEq7SAUpQoq0eA/58= Subject key identifier: 30:FB:31:47:09:59:AD:5F:70:FE:ED:50:C6:18:AE:84:08:A4:BD:B8 Authority key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 Certificate issuer: /CN=096E75D80B559B9824609BA61681D845A0CB0F77 Certificate serial: 1CFCFC49A28DE4A628B86722F31DC9F5E5053DD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:10:02 +0000 Manifest this update: Tue 02 Jun 2026 12:05:02 +0000 Manifest next update: Wed 03 Jun 2026 12:56:02 +0000 Files and hashes: 1: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: 0yluROs0GMVlDuEEaLUkv4SFh8PCi14+YfNxdsvSrjw=) 2: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: 6XmdhHpwmPbSLXc9MObJukxUpYpgVWG679zPioXW/jI=) 3: 096E75D80B559B9824609BA61681D845A0CB0F77.crl (hash: XkezRm290rIRAhp5RqOMHRXfh4w9Rd8HW/AO0NhwgkA=) 4: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: 0malPwz+RTtf0zfQa5ZCgjL04DU4eZWwOeTz+IpVOtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fc:fc:49:a2:8d:e4:a6:28:b8:67:22:f3:1d:c9:f5:e5:05:3d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096E75D80B559B9824609BA61681D845A0CB0F77 Validity Not Before: Jun 2 12:05:02 2026 GMT Not After : Jun 3 12:56:02 2026 GMT Subject: CN=30FB31470959AD5F70FEED50C618AE8408A4BDB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1e:73:c0:b3:7d:f5:cc:ea:27:77:fb:39:0a: f3:ec:09:53:72:e6:08:5d:9e:68:ce:d9:49:f2:40: ba:48:45:ce:de:74:99:4b:a4:e7:78:94:32:dc:0f: 73:9a:13:24:49:c3:da:45:dc:d6:b7:1c:03:3b:ad: 96:ad:04:32:1d:0e:a1:f5:21:0b:24:57:45:a1:69: a3:69:c6:eb:79:ab:31:6d:37:2e:46:20:37:2e:b3: 39:f2:ea:c0:45:5d:c0:ee:72:1e:ee:d8:4b:ca:cc: 85:0f:e9:20:a3:69:f8:73:f1:a8:25:48:e4:82:34: 31:71:63:31:84:85:c4:ea:01:8e:f7:14:ca:9d:1a: 87:d4:28:82:4a:84:cd:80:94:bd:d2:24:81:73:9a: 1e:91:34:66:13:64:a4:2a:07:de:ca:b7:a4:93:90: 49:f2:e3:e4:ab:91:a8:e9:b6:07:b5:47:44:7a:6d: fb:02:5f:20:9f:a3:1f:a2:9a:04:3c:92:f5:25:a4: 91:e2:62:c4:bf:63:a5:8a:de:d3:2c:03:9d:23:a9: 71:b0:0d:a1:03:e2:3f:f9:2f:6a:8c:99:f5:ed:83: ee:69:b6:19:d9:9f:58:34:14:39:7d:d8:c9:3c:77: f4:8f:6c:05:d3:8c:2b:a9:90:97:77:fd:25:91:d9: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FB:31:47:09:59:AD:5F:70:FE:ED:50:C6:18:AE:84:08:A4:BD:B8 X509v3 Authority Key Identifier: keyid:09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c2:1f:d1:91:2f:a0:b2:15:c0:a4:4d:f2:46:44:6b:bc:6f: e9:75:4d:6e:9a:9e:e4:d9:e1:4a:e0:02:65:c8:0d:ea:4a:71: 7f:5d:07:ed:6c:0b:b4:21:93:45:ff:ce:92:a5:95:64:0c:36: e6:a3:87:1e:db:65:4e:a4:7d:72:aa:d0:1d:5c:f7:18:32:1a: 88:18:95:b9:ca:a3:6c:bd:ae:f8:22:58:66:5b:92:31:49:eb: 59:bb:8d:37:83:85:51:b8:a9:47:6f:9e:17:ed:37:15:d3:df: c0:1b:02:8f:f6:aa:ae:37:83:2b:4a:eb:59:5d:94:fa:4a:a1: 92:c8:ed:c7:2e:71:ed:6b:59:07:18:33:7d:a4:0a:d3:57:8a: e5:44:26:d3:59:78:de:ca:b6:d3:43:b7:c3:c8:d3:26:50:0b: 45:b6:86:78:2b:43:a2:7b:43:65:c1:f9:48:ae:1c:90:8b:ac: 68:28:50:30:c2:89:e5:22:cf:62:5f:f5:a2:2b:4b:ae:f3:eb: d9:c1:e7:df:8e:98:b3:de:29:fa:24:f3:b0:3c:f8:75:ca:70: 99:68:ed:a6:73:c6:d0:63:48:23:23:aa:61:e3:dd:0e:4d:55: 35:2e:9c:cd:db:5b:b4:b7:81:1b:9b:75:bc:58:3c:15:ce:db: 2a:1c:29:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPz8SaKN5KYouGci8x3J9eUFPdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVB MENCMEY3NzAeFw0yNjA2MDIxMjA1MDJaFw0yNjA2MDMxMjU2MDJaMDMxMTAvBgNV BAMTKDMwRkIzMTQ3MDk1OUFENUY3MEZFRUQ1MEM2MThBRTg0MDhBNEJEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtHnPAs331zOond/s5CvPsCVNy 5ghdnmjO2UnyQLpIRc7edJlLpOd4lDLcD3OaEyRJw9pF3Na3HAM7rZatBDIdDqH1 IQskV0WhaaNpxut5qzFtNy5GIDcuszny6sBFXcDuch7u2EvKzIUP6SCjafhz8agl SOSCNDFxYzGEhcTqAY73FMqdGofUKIJKhM2AlL3SJIFzmh6RNGYTZKQqB97Kt6ST kEny4+Srkajptge1R0R6bfsCXyCfox+imgQ8kvUlpJHiYsS/Y6WK3tMsA50jqXGw DaED4j/5L2qMmfXtg+5pthnZn1g0FDl92Mk8d/SPbAXTjCupkJd3/SWR2XHJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMPsxRwlZrV9w/u1QxhiuhAikvbgwHwYDVR0j BBgwFoAUCW512AtVm5gkYJumFoHYRaDLD3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRmMTM3MmMtNDNhNi00ZmRhLWI1MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgw QjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVBMENCMEY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTZFNzVEODBCNTU5Qjk4MjQ2MDlCQTYxNjgxRDg0NUEwQ0Iw Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRmMTM3MmMtNDNhNi00ZmRhLWI1 MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4 NDVBMENCMEY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXCH9GRL6CyFcCkTfJGRGu8b+l1TW6anuTZ 4UrgAmXIDepKcX9dB+1sC7Qhk0X/zpKllWQMNuajhx7bZU6kfXKq0B1c9xgyGogY lbnKo2y9rvgiWGZbkjFJ61m7jTeDhVG4qUdvnhftNxXT38AbAo/2qq43gytK61ld lPpKoZLI7ccuce1rWQcYM32kCtNXiuVEJtNZeN7KttNDt8PI0yZQC0W2hngrQ6J7 Q2XB+UiuHJCLrGgoUDDCieUiz2Jf9aIrS67z69nB59+OmLPeKfok87A8+HXKcJlo 7aZzxtBjSCMjqmHj3Q5NVTUunM3bW7S3gRubdbxYPBXO2yocKb0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:41:16 2026 by rpki-client