
$ rpki-client -vvf rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
File: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft (raw, json)
Hash identifier: 8pTVnG1WGaXANTEQc/b7Q1V6YuPoMwLD62k4fhmIatY=
Subject key identifier: D9:B3:A2:55:8F:3D:DF:2C:9F:A6:45:B2:2B:1A:80:7D:0A:AC:F5:5C
Authority key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C
Certificate issuer: /CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C
Certificate serial: 59B0EDF6EF57724934AEED7E484FBD1060F2AD0D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 19:23:30 +0000
Manifest this update: Tue 02 Jun 2026 19:18:30 +0000
Manifest next update: Wed 03 Jun 2026 23:11:30 +0000
Files and hashes: 1: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl (hash: OWuhQgenXvHw7Dkba+itwHd2hRK5XSyjqJAvCbOMxr8=)
2: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: 2NisVTWE+HRD9wRpvxBcr4vnaVycZuCJLBHWrwbnEQ8=)
3: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: /BgEs0X95g+IDSnEOlX/MgvWY3v0qZzbss60jPNLBe0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl
rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b0:ed:f6:ef:57:72:49:34:ae:ed:7e:48:4f:bd:10:60:f2:ad:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C
Validity
Not Before: Jun 2 19:18:30 2026 GMT
Not After : Jun 3 23:11:30 2026 GMT
Subject: CN=D9B3A2558F3DDF2C9FA645B22B1A807D0AACF55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:7e:e0:8d:72:ab:df:0a:41:7e:bf:78:63:
77:dd:19:4b:f9:0e:a3:91:00:0b:13:2b:13:b1:aa:
65:67:c6:54:a3:8a:c5:e9:ba:28:7c:1e:48:d0:6c:
1e:a0:7f:bf:82:7f:fb:19:6e:80:bc:12:15:15:a2:
a3:9b:f2:d9:19:63:66:b3:b5:c0:17:2c:cc:c2:54:
75:3b:44:40:18:a9:05:9b:ae:d6:45:43:da:21:ab:
35:47:a5:db:01:70:f3:80:97:13:a7:58:b2:6c:5a:
f3:32:e5:64:99:03:1f:56:a1:f6:b2:ca:0b:76:20:
62:7a:88:ca:41:88:fc:c5:f1:ae:34:0f:9d:fc:6c:
32:57:cb:43:ab:a0:74:29:77:31:14:a6:21:4d:c7:
c4:40:7a:31:02:40:46:5e:ef:e0:dc:56:12:1c:bc:
36:5f:4b:06:fc:65:ce:d0:93:08:29:c1:3a:95:7b:
12:7b:9c:ab:86:c4:88:a7:a2:85:4b:4d:06:8d:24:
e1:5e:c6:56:e8:5b:7d:e0:f9:d3:88:7e:2a:80:02:
e8:4c:ec:85:15:33:6f:38:a3:6d:39:99:bd:4d:2c:
48:5c:f7:ba:43:5c:29:88:5d:18:c9:e7:63:d7:a5:
3f:95:90:a2:60:f7:4a:91:3f:e8:92:c6:e2:01:fa:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B3:A2:55:8F:3D:DF:2C:9F:A6:45:B2:2B:1A:80:7D:0A:AC:F5:5C
X509v3 Authority Key Identifier:
keyid:96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c0:db:d1:8b:a5:3a:78:43:6f:05:8c:d0:86:02:47:09:55:
b7:91:06:35:a8:7d:94:c6:9b:3c:92:56:84:1a:7b:cc:02:fb:
af:0f:5e:63:5d:50:1d:e3:ad:e0:13:e7:ad:8d:60:c4:b0:34:
a1:e7:2f:7f:39:2e:55:da:d8:44:8f:63:a0:a0:b4:99:12:61:
00:6d:fa:9b:8c:cf:46:bf:12:25:10:79:c5:96:a9:89:53:3e:
51:62:2e:be:3b:80:df:66:11:17:5a:d9:ad:84:99:82:3e:2a:
7a:ca:29:2b:6f:3f:6d:e3:c3:71:8f:2e:98:79:3b:b1:1b:6b:
7f:ab:f5:00:4e:19:44:40:ee:ce:25:c6:04:ca:c6:7b:8d:91:
6d:de:70:28:c5:61:0d:6e:d4:b9:ba:58:c6:33:2f:d3:2f:50:
5f:74:c2:68:de:2e:6d:00:20:64:85:1d:33:65:12:3b:52:28:
30:05:80:90:49:8c:45:e9:2c:c5:40:ef:40:c7:ba:89:9c:a3:
0b:30:4f:a7:68:b4:ad:69:7c:bd:bd:5a:8c:6d:e4:e2:38:e6:
4a:bf:74:67:b7:00:01:11:3d:18:d7:c6:5c:c8:8b:02:f5:0a:
b9:f1:de:82:37:5e:6d:3f:77:69:8f:0d:5a:42:36:70:37:a3:
f1:fe:2f:76
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWbDt9u9Xckk0ru1+SE+9EGDyrQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0MwNjA2
RUM3NzM0QzAeFw0yNjA2MDIxOTE4MzBaFw0yNjA2MDMyMzExMzBaMDMxMTAvBgNV
BAMTKEQ5QjNBMjU1OEYzRERGMkM5RkE2NDVCMjJCMUE4MDdEMEFBQ0Y1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNn7gjXKr3wpBfr94Y3fdGUv5
DqORAAsTKxOxqmVnxlSjisXpuih8HkjQbB6gf7+Cf/sZboC8EhUVoqOb8tkZY2az
tcAXLMzCVHU7REAYqQWbrtZFQ9ohqzVHpdsBcPOAlxOnWLJsWvMy5WSZAx9Wofay
ygt2IGJ6iMpBiPzF8a40D538bDJXy0OroHQpdzEUpiFNx8RAejECQEZe7+DcVhIc
vDZfSwb8Zc7QkwgpwTqVexJ7nKuGxIinooVLTQaNJOFexlboW33g+dOIfiqAAuhM
7IUVM284o205mb1NLEhc97pDXCmIXRjJ52PXpT+VkKJg90qRP+iSxuIB+hKXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2bOiVY893yyfpkWyKxqAfQqs9VwwHwYDVR0j
BBgwFoAUlr5tN9YjGySvrcl83GfAYG7Hc0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTU3OTk2ZjUtYTkzNC00YjQ0LTg1NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdE
NjIzMUIyNEFGQURDOTdDREM2N0MwNjA2RUM3NzM0Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NkJFNkQzN0Q2MjMxQjI0QUZBREM5N0NEQzY3QzA2MDZFQzc3
MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1
NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0Mw
NjA2RUM3NzM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKbA29GLpTp4Q28FjNCGAkcJVbeRBjWofZTG
mzySVoQae8wC+68PXmNdUB3jreAT562NYMSwNKHnL385LlXa2ESPY6CgtJkSYQBt
+puMz0a/EiUQecWWqYlTPlFiLr47gN9mERda2a2EmYI+KnrKKStvP23jw3GPLph5
O7Eba3+r9QBOGURA7s4lxgTKxnuNkW3ecCjFYQ1u1Lm6WMYzL9MvUF90wmjeLm0A
IGSFHTNlEjtSKDAFgJBJjEXpLMVA70DHuomcowswT6dotK1pfL29Woxt5OI45kq/
dGe3AAERPRjXxlzIiwL1Crnx3oI3Xm0/d2mPDVpCNnA3o/H+L3Y=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:21:04 2026 by rpki-client