$ rpki-client -vvf rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft File: 096E75D80B559B9824609BA61681D845A0CB0F77.mft (raw, json) Hash identifier: fHir4FUudt6Q2xZ6f/6T3VIG+DgYVVEoX38LNX6HHaM= Subject key identifier: 41:F0:78:CA:D8:3A:55:AE:5D:81:9E:A3:A7:1F:92:44:7A:B5:39:65 Authority key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 Certificate issuer: /CN=096E75D80B559B9824609BA61681D845A0CB0F77 Certificate serial: 10632F9B0403216F98D75932CBE96C73BC90B7A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 09:02:30 +0000 Manifest this update: Mon 20 Jul 2026 08:57:30 +0000 Manifest next update: Tue 21 Jul 2026 12:50:30 +0000 Files and hashes: 1: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: 0yluROs0GMVlDuEEaLUkv4SFh8PCi14+YfNxdsvSrjw=) 2: 096E75D80B559B9824609BA61681D845A0CB0F77.crl (hash: nHMUz3qIghtTrLIqGSmeQeWmx3LmKRijniR9CTU8dUY=) 3: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: 6XmdhHpwmPbSLXc9MObJukxUpYpgVWG679zPioXW/jI=) 4: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: 0malPwz+RTtf0zfQa5ZCgjL04DU4eZWwOeTz+IpVOtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 12:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:63:2f:9b:04:03:21:6f:98:d7:59:32:cb:e9:6c:73:bc:90:b7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096E75D80B559B9824609BA61681D845A0CB0F77 Validity Not Before: Jul 20 08:57:30 2026 GMT Not After : Jul 21 12:50:30 2026 GMT Subject: CN=41F078CAD83A55AE5D819EA3A71F92447AB53965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9a:bf:5e:16:5c:9b:a9:c7:1f:d8:e8:12:2f: 68:7c:0f:02:fb:9d:1d:05:ca:e0:f5:dd:07:5d:47: 6a:95:73:10:e2:f0:1a:7b:49:11:72:6b:17:7f:b5: b8:a7:ed:5d:80:3c:26:cd:6f:b2:8a:c7:9a:63:c9: df:a7:59:5b:7c:31:b2:fa:18:9f:8b:9c:aa:52:9a: 74:ae:e1:27:2c:db:38:45:87:f7:50:11:69:cf:16: 82:7e:23:11:2e:a3:cf:82:34:71:6f:f9:86:51:74: f8:48:68:51:f5:18:35:e8:05:c0:01:a0:7b:11:d6: 71:bb:fc:65:1c:5a:5b:e9:b8:8c:29:2d:16:83:f4: 14:04:52:7c:a2:d1:90:c8:40:85:5b:6a:17:c2:be: dd:cb:c4:52:d2:7e:4f:19:d7:a7:aa:4b:c6:f8:30: 38:fe:a5:c3:bc:7c:f3:b8:7c:b1:b9:6b:d5:08:83: c6:63:e8:a8:21:65:dd:ba:90:88:46:a2:e0:1a:b8: c6:cc:4b:fd:e7:fb:64:49:36:6f:4e:a1:d3:31:f5: 0d:e7:25:dd:8c:b1:91:eb:a0:7f:ef:d7:96:50:05: 95:84:d8:0b:a5:ca:d9:b5:80:11:df:2a:c7:45:3a: 37:76:ea:4f:62:b7:bb:2c:e4:54:5a:d9:ec:81:71: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F0:78:CA:D8:3A:55:AE:5D:81:9E:A3:A7:1F:92:44:7A:B5:39:65 X509v3 Authority Key Identifier: keyid:09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a8:ab:ab:8d:20:67:b2:20:80:ef:8b:62:31:ea:fd:8a:06: 91:03:a4:9e:09:76:8e:47:95:11:1c:9f:85:20:db:3a:d2:f9: c8:79:9f:3d:b4:ef:46:f7:c7:76:06:78:2a:75:3d:fa:a2:8b: 97:4d:13:17:a5:4c:11:b7:34:59:c5:7e:47:e7:93:8b:f9:16: 2a:4a:86:29:f5:aa:e4:85:30:f8:36:22:9e:b1:5f:13:9c:ef: 3b:5f:fe:7c:da:84:6e:d4:aa:c5:85:20:9e:f1:c4:0f:38:3f: f3:30:d2:d5:b2:df:0f:45:00:be:d9:d3:1a:19:e9:a3:a7:df: e2:7d:5a:0a:75:0c:6d:e0:e9:ac:39:f8:c0:d2:91:54:e4:19: b2:05:4c:a7:6b:98:a2:6c:0e:4f:cd:31:7f:2c:45:30:d9:f2: 52:fe:e2:f5:40:f2:c8:b2:b7:1e:4a:03:3a:33:3d:12:ab:0f: 98:f8:f0:7e:6b:17:4f:18:a3:fc:3f:f7:a4:45:56:af:d9:ae: 75:87:17:a4:50:1d:2a:7c:42:66:80:10:78:13:ed:47:e1:35: eb:c7:59:35:06:e1:71:09:f7:32:bb:6c:68:ad:cb:1f:da:f3: d4:0b:98:3f:1d:e8:7d:32:3d:44:63:56:95:6d:74:45:d1:74: f6:3b:01:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGMvmwQDIW+Y11kyy+lsc7yQt6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVB MENCMEY3NzAeFw0yNjA3MjAwODU3MzBaFw0yNjA3MjExMjUwMzBaMDMxMTAvBgNV BAMTKDQxRjA3OENBRDgzQTU1QUU1RDgxOUVBM0E3MUY5MjQ0N0FCNTM5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfmr9eFlybqccf2OgSL2h8DwL7 nR0FyuD13QddR2qVcxDi8Bp7SRFyaxd/tbin7V2APCbNb7KKx5pjyd+nWVt8MbL6 GJ+LnKpSmnSu4Scs2zhFh/dQEWnPFoJ+IxEuo8+CNHFv+YZRdPhIaFH1GDXoBcAB oHsR1nG7/GUcWlvpuIwpLRaD9BQEUnyi0ZDIQIVbahfCvt3LxFLSfk8Z16eqS8b4 MDj+pcO8fPO4fLG5a9UIg8Zj6KghZd26kIhGouAauMbMS/3n+2RJNm9OodMx9Q3n Jd2MsZHroH/v15ZQBZWE2Aulytm1gBHfKsdFOjd26k9it7ss5FRa2eyBcU2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQfB4ytg6Va5dgZ6jpx+SRHq1OWUwHwYDVR0j BBgwFoAUCW512AtVm5gkYJumFoHYRaDLD3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRmMTM3MmMtNDNhNi00ZmRhLWI1MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgw QjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVBMENCMEY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTZFNzVEODBCNTU5Qjk4MjQ2MDlCQTYxNjgxRDg0NUEwQ0Iw Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRmMTM3MmMtNDNhNi00ZmRhLWI1 MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4 NDVBMENCMEY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGoq6uNIGeyIIDvi2Ix6v2KBpEDpJ4Jdo5H lREcn4Ug2zrS+ch5nz2070b3x3YGeCp1Pfqii5dNExelTBG3NFnFfkfnk4v5FipK hin1quSFMPg2Ip6xXxOc7ztf/nzahG7UqsWFIJ7xxA84P/Mw0tWy3w9FAL7Z0xoZ 6aOn3+J9Wgp1DG3g6aw5+MDSkVTkGbIFTKdrmKJsDk/NMX8sRTDZ8lL+4vVA8siy tx5KAzozPRKrD5j48H5rF08Yo/w/96RFVq/ZrnWHF6RQHSp8QmaAEHgT7UfhNevH WTUG4XEJ9zK7bGityx/a89QLmD8d6H0yPURjVpVtdEXRdPY7AQc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:16:37 2026 by rpki-client