$ rpki-client -vvf rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft File: 96348B9579D234769BDF15F375368D3C0BDE1860.mft (raw, json) Hash identifier: qltZph6wKrg3p1pnJg60p4qN97PBztz140RtX1p3aRI= Subject key identifier: 29:4D:9F:78:A0:B1:A3:62:81:3D:FD:15:91:E6:CE:E3:1D:BB:9D:0B Authority key identifier: 96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60 Certificate issuer: /CN=96348B9579D234769BDF15F375368D3C0BDE1860 Certificate serial: 32841F111A62D3ED7C171A4CFCCDE979F3A4BCD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 03:25:01 +0000 Manifest this update: Tue 21 Jul 2026 03:20:01 +0000 Manifest next update: Wed 22 Jul 2026 07:18:01 +0000 Files and hashes: 1: 96348B9579D234769BDF15F375368D3C0BDE1860.crl (hash: U+IlYO9bC4Ns8zXgzwfSgag36mmX4QMphl65bPurApk=) 2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: NRcKgzAD1aXFV9xSYN/NAX4+lhq8SGmZ0ijJnrN5qYY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:84:1f:11:1a:62:d3:ed:7c:17:1a:4c:fc:cd:e9:79:f3:a4:bc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96348B9579D234769BDF15F375368D3C0BDE1860 Validity Not Before: Jul 21 03:20:01 2026 GMT Not After : Jul 22 07:18:01 2026 GMT Subject: CN=294D9F78A0B1A362813DFD1591E6CEE31DBB9D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:32:95:73:46:bb:74:54:f3:66:df:23:58: 0a:5b:50:e4:6a:8c:d2:b6:2d:bc:8e:81:62:90:52: 3e:78:85:67:9e:b7:6c:4d:af:79:d7:15:ad:46:2d: ad:38:e3:27:49:59:e9:01:fc:43:3d:8c:51:07:8c: 5e:d9:3e:42:c3:3b:7b:7d:7f:42:3e:77:f1:1a:ee: bb:44:6c:e4:5c:0b:61:96:ff:63:7b:fc:af:06:24: 64:e0:79:22:55:04:5f:ad:c0:36:4d:a8:41:0b:2f: 06:4a:c2:f4:a6:a4:d8:12:71:b6:e7:5e:e8:f1:98: f2:c2:72:f3:2a:cd:c8:a6:2a:8f:3f:83:25:f8:a3: 2d:ec:e9:0a:0f:34:2c:f8:d6:6a:70:30:b0:9b:1c: f2:31:3a:c0:d2:61:38:0c:fa:7d:7b:79:63:dd:52: a4:cd:b5:14:58:2d:28:77:d9:b2:bf:0d:0c:53:85: 17:b1:d3:4c:30:64:b9:83:91:d0:1f:9e:f1:08:85: 5e:d1:28:33:b7:a9:02:85:74:e1:11:a7:5a:25:69: 42:7d:34:c1:33:52:63:cf:bc:1d:12:57:c3:60:b1: b3:92:49:e8:08:a1:63:57:72:05:1e:df:24:22:8b: cc:75:6b:d7:d4:19:1d:1c:12:bc:c4:9c:4e:56:36: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4D:9F:78:A0:B1:A3:62:81:3D:FD:15:91:E6:CE:E3:1D:BB:9D:0B X509v3 Authority Key Identifier: keyid:96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:8c:bc:03:63:ed:26:b1:4e:b7:26:91:37:7c:0c:31:90:f5: 0c:d1:8a:79:f4:b0:b6:10:6c:ad:8a:0c:75:f4:13:f7:7f:1e: 10:54:f4:00:ca:84:4a:06:63:c2:49:9c:17:82:55:ad:c6:a0: 9a:97:08:1c:60:c9:d8:79:53:d7:7e:1c:fb:2c:32:bb:f4:63: 31:07:db:da:20:7f:44:ea:8e:4f:16:87:ed:67:72:d7:19:3e: 9d:12:70:a3:b6:ac:10:5c:7a:02:91:0f:50:f7:da:e2:2c:2f: 88:53:19:70:68:4f:8d:08:ff:3d:26:35:2b:9a:ea:7c:36:3a: 49:2b:08:84:67:77:53:1b:66:18:40:ea:be:e1:9e:cc:39:a1: 83:7b:58:21:a2:b9:c8:72:5f:ff:64:d1:39:d7:2f:3a:1d:b4: 79:76:f7:3f:12:d0:9b:75:82:3a:5a:7a:3e:32:a2:87:6f:af: 79:dd:19:8c:e3:a2:e4:63:24:44:2d:9b:a6:03:e4:30:30:45: 9c:92:ef:94:b7:da:7b:a7:f9:1b:77:69:7e:54:7f:ff:f7:70: a7:c6:8a:a8:fb:ea:af:be:95:5d:af:8e:cc:a4:9c:34:ad:95: 3c:ac:d0:2b:e7:34:50:4d:4f:fb:69:27:a4:1e:e0:cc:7c:a9: d1:d6:49:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMoQfERpi0+18FxpM/M3pefOkvNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYzNDhCOTU3OUQyMzQ3NjlCREYxNUYzNzUzNjhEM0Mw QkRFMTg2MDAeFw0yNjA3MjEwMzIwMDFaFw0yNjA3MjIwNzE4MDFaMDMxMTAvBgNV BAMTKDI5NEQ5Rjc4QTBCMUEzNjI4MTNERkQxNTkxRTZDRUUzMURCQjlEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQjKVc0a7dFTzZt8jWApbUORq jNK2LbyOgWKQUj54hWeet2xNr3nXFa1GLa044ydJWekB/EM9jFEHjF7ZPkLDO3t9 f0I+d/Ea7rtEbORcC2GW/2N7/K8GJGTgeSJVBF+twDZNqEELLwZKwvSmpNgScbbn XujxmPLCcvMqzcimKo8/gyX4oy3s6QoPNCz41mpwMLCbHPIxOsDSYTgM+n17eWPd UqTNtRRYLSh32bK/DQxThRex00wwZLmDkdAfnvEIhV7RKDO3qQKFdOERp1olaUJ9 NMEzUmPPvB0SV8NgsbOSSegIoWNXcgUe3yQii8x1a9fUGR0cErzEnE5WNlWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKU2feKCxo2KBPf0VkebO4x27nQswHwYDVR0j BBgwFoAUljSLlXnSNHab3xXzdTaNPAveGGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRlZTJiZDMtMGY2Ni00ZDQzLWE5ZTctOTY1ZDMzZjEyODUyLzAvOTYzNDhCOTU3 OUQyMzQ3NjlCREYxNUYzNzUzNjhEM0MwQkRFMTg2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjM0OEI5NTc5RDIzNDc2OUJERjE1RjM3NTM2OEQzQzBCREUx ODYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvOTYzNDhCOTU3OUQyMzQ3NjlCREYxNUYzNzUzNjhE M0MwQkRFMTg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCMvANj7SaxTrcmkTd8DDGQ9QzRinn0sLYQ bK2KDHX0E/d/HhBU9ADKhEoGY8JJnBeCVa3GoJqXCBxgydh5U9d+HPssMrv0YzEH 29ogf0Tqjk8Wh+1nctcZPp0ScKO2rBBcegKRD1D32uIsL4hTGXBoT40I/z0mNSua 6nw2OkkrCIRnd1MbZhhA6r7hnsw5oYN7WCGiuchyX/9k0TnXLzodtHl29z8S0Jt1 gjpaej4yoodvr3ndGYzjouRjJEQtm6YD5DAwRZyS75S32nun+Rt3aX5Uf//3cKfG iqj76q++lV2vjsyknDStlTys0CvnNFBNT/tpJ6Qe4Mx8qdHWSSU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:43:42 2026 by rpki-client