$ rpki-client -vvf rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft File: 96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft (raw, json) Hash identifier: u94LwTuUN8h+x4psAftWz56u7WM40zU0Dk+mzjiKWx4= Subject key identifier: 18:EC:80:5A:0E:8E:7C:0F:85:B2:3E:4D:E3:13:EB:C3:C5:EA:55:51 Authority key identifier: 96:B1:BF:67:FA:7B:CA:2D:9A:78:22:6A:A8:97:C7:60:C9:E4:5B:8A Certificate issuer: /CN=96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A Certificate serial: 0635F167913D36B9BD485012F59667CA3FF979C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 00:40:37 +0000 Manifest this update: Wed 03 Jun 2026 00:35:37 +0000 Manifest next update: Thu 04 Jun 2026 02:58:37 +0000 Files and hashes: 1: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: /hb9w6eiZKH4CNjyXoKoeSUik7C0W1MiXzGBdpGuKK8=) 2: 96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl (hash: 9eDxfBDEtB3j84UVCHn53nx1t3RjAq7OFNAeHmIz/qU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:35:f1:67:91:3d:36:b9:bd:48:50:12:f5:96:67:ca:3f:f9:79:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A Validity Not Before: Jun 3 00:35:37 2026 GMT Not After : Jun 4 02:58:37 2026 GMT Subject: CN=18EC805A0E8E7C0F85B23E4DE313EBC3C5EA5551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:05:d0:ec:3d:d5:7f:59:56:ab:86:0b:53: ab:54:2b:a4:d4:1e:a0:98:da:5c:7d:d1:7d:a7:65: 12:d2:22:9d:8c:a6:c3:d3:50:a4:13:7b:d8:8b:b1: 77:60:36:d7:11:9e:34:cf:1d:ea:95:60:25:c9:a9: bc:d0:5e:15:1f:3f:12:71:0c:2b:6e:14:b1:11:a8: aa:70:c4:36:14:1a:d7:fe:ed:e8:4b:e9:99:29:d3: 92:1a:dc:f5:00:7d:a3:a9:23:f3:0e:b8:17:ed:26: 8e:ec:64:07:8e:dc:78:ec:5f:0f:8c:51:30:95:f5: f5:a5:99:60:2e:dd:bd:7d:e4:27:9b:8f:fa:57:1d: e0:3e:c0:76:ba:e6:17:b5:78:ae:b1:67:2b:70:cf: 6b:56:c4:31:0b:52:6e:75:c4:b6:8e:4d:52:b8:08: 77:97:c4:e0:7c:1f:47:06:35:02:9c:f1:ee:89:c8: f5:74:9a:e8:c0:47:d2:2a:07:4b:e8:d8:c5:3c:ee: f3:91:1e:0e:c9:ab:8a:fa:1b:c1:dd:e0:7f:c5:cc: 80:59:0f:16:36:2b:80:7d:e2:f8:c7:b0:00:b0:22: e9:ce:47:d5:e0:c8:b7:38:15:32:2f:b9:36:cf:4d: 6d:cd:b1:97:c5:86:b0:bb:de:69:e0:55:bb:b2:a3: af:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EC:80:5A:0E:8E:7C:0F:85:B2:3E:4D:E3:13:EB:C3:C5:EA:55:51 X509v3 Authority Key Identifier: keyid:96:B1:BF:67:FA:7B:CA:2D:9A:78:22:6A:A8:97:C7:60:C9:E4:5B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:88:6e:39:dc:d4:1f:52:37:a6:70:56:56:95:aa:0e:b1:30: be:d6:0d:37:42:1f:f9:7d:2d:d0:a9:f8:10:3f:c3:8b:a9:e3: 3d:2c:80:ba:c2:16:94:ec:02:e8:2c:71:14:be:31:a0:3f:e9: 78:c9:14:3b:e3:65:dc:62:9a:eb:32:a6:a9:4e:40:e4:b2:8f: 91:1e:29:22:85:2d:c6:ee:38:4b:6b:83:26:8a:ff:fe:14:bf: fc:4a:e6:0a:86:00:9f:e9:55:b3:06:9a:a6:e1:24:dc:14:fc: c3:b1:8b:da:8d:7d:bb:41:4b:32:95:5c:e9:42:5b:66:6a:9e: 7e:9c:19:a8:9d:e7:9e:1b:7a:19:eb:b3:62:61:aa:07:3a:3e: 61:05:ca:64:2d:c3:62:b7:3d:a4:ef:f5:5c:3b:4e:b0:e7:e4: 90:2a:3d:40:4b:25:56:61:85:61:35:98:1a:1c:ae:ef:bf:80: 78:45:a8:58:0e:62:2f:62:60:39:d4:2d:f1:68:00:4c:a8:eb: 02:11:e0:8e:46:88:59:aa:09:59:61:89:d3:c4:8e:0a:e4:a6: 6b:a0:f3:fe:b8:b1:d3:eb:f5:1b:16:66:c8:fb:08:71:29:9d: 10:25:f7:40:cb:af:38:bf:5d:1f:a7:7a:24:bc:a2:da:6c:13: fa:4b:56:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjXxZ5E9Nrm9SFAS9ZZnyj/5eccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCMUJGNjdGQTdCQ0EyRDlBNzgyMjZBQTg5N0M3NjBD OUU0NUI4QTAeFw0yNjA2MDMwMDM1MzdaFw0yNjA2MDQwMjU4MzdaMDMxMTAvBgNV BAMTKDE4RUM4MDVBMEU4RTdDMEY4NUIyM0U0REUzMTNFQkMzQzVFQTU1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpugXQ7D3Vf1lWq4YLU6tUK6TU HqCY2lx90X2nZRLSIp2MpsPTUKQTe9iLsXdgNtcRnjTPHeqVYCXJqbzQXhUfPxJx DCtuFLERqKpwxDYUGtf+7ehL6Zkp05Ia3PUAfaOpI/MOuBftJo7sZAeO3HjsXw+M UTCV9fWlmWAu3b195Cebj/pXHeA+wHa65he1eK6xZytwz2tWxDELUm51xLaOTVK4 CHeXxOB8H0cGNQKc8e6JyPV0mujAR9IqB0vo2MU87vORHg7Jq4r6G8Hd4H/FzIBZ DxY2K4B94vjHsACwIunOR9XgyLc4FTIvuTbPTW3NsZfFhrC73mngVbuyo6/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGOyAWg6OfA+Fsj5N4xPrw8XqVVEwHwYDVR0j BBgwFoAUlrG/Z/p7yi2aeCJqqJfHYMnkW4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTVjYWI5ZGYtMDNiNS00OGIzLWE4NzItYTBmZTEyYTY3NDI2LzAvOTZCMUJGNjdG QTdCQ0EyRDlBNzgyMjZBQTg5N0M3NjBDOUU0NUI4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkIxQkY2N0ZBN0JDQTJEOUE3ODIyNkFBODk3Qzc2MEM5RTQ1 QjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4 NzItYTBmZTEyYTY3NDI2LzAvOTZCMUJGNjdGQTdCQ0EyRDlBNzgyMjZBQTg5N0M3 NjBDOUU0NUI4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuIbjnc1B9SN6ZwVlaVqg6xML7WDTdCH/l9 LdCp+BA/w4up4z0sgLrCFpTsAugscRS+MaA/6XjJFDvjZdximusypqlOQOSyj5Ee KSKFLcbuOEtrgyaK//4Uv/xK5gqGAJ/pVbMGmqbhJNwU/MOxi9qNfbtBSzKVXOlC W2Zqnn6cGaid554behnrs2Jhqgc6PmEFymQtw2K3PaTv9Vw7TrDn5JAqPUBLJVZh hWE1mBocru+/gHhFqFgOYi9iYDnULfFoAEyo6wIR4I5GiFmqCVlhidPEjgrkpmug 8/64sdPr9RsWZsj7CHEpnRAl90DLrzi/XR+neiS8otpsE/pLVq4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:03 2026 by rpki-client