$ rpki-client -vvf rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft File: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft (raw, json) Hash identifier: lgY9QkA7eQuops+hf8ScOARhxCmoiq1Ft5H+L+NWHCs= Subject key identifier: 8D:16:8C:F3:70:60:9A:D2:8A:4F:E8:7D:FC:CB:11:FA:40:73:13:2A Authority key identifier: 96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 Certificate issuer: /CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Certificate serial: 57538F9FC3A2FE9CB9FA6BF8FA91ED99EE705437 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft Manifest number: 56 Signing time: Sat 04 Jul 2026 09:34:11 +0000 Manifest this update: Sat 04 Jul 2026 09:29:11 +0000 Manifest next update: Sun 05 Jul 2026 13:00:11 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: O7VzOc1QQXPH4ovFqaeUilVVeRWPbXN3yznnumHTcH0=) 2: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl (hash: X11WEzYPTWpTZf/zVlzhW2VQPpfTC4APNNVaSxa0Dg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 05:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:53:8f:9f:c3:a2:fe:9c:b9:fa:6b:f8:fa:91:ed:99:ee:70:54:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Validity Not Before: Jul 4 09:29:11 2026 GMT Not After : Jul 5 13:00:11 2026 GMT Subject: CN=8D168CF370609AD28A4FE87DFCCB11FA4073132A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:f6:d0:ae:f5:70:a5:a1:b0:db:c5:98:39: 81:db:43:3c:ae:ab:5f:a8:c0:8b:43:ce:e5:be:c9: 2b:e3:11:df:aa:0f:ed:f7:16:36:96:66:98:ee:a5: 3c:44:8b:b1:ec:38:09:ee:48:5d:9b:cf:60:a3:b2: 5b:a7:3c:f8:ae:4f:a9:d2:b0:36:11:7c:f5:b3:8e: 56:65:69:1f:9e:77:e6:a8:e1:84:fe:13:72:37:3f: 58:00:26:f0:de:6c:a6:4c:dc:7f:59:df:4e:0f:ba: e6:48:db:8b:95:05:a6:94:57:c4:ef:1a:a5:bd:23: fa:9c:5a:2d:cf:3d:b6:f4:f2:ae:b7:62:6b:e8:0d: 8d:2a:ac:b4:89:1a:64:d3:e6:a6:39:30:6b:4e:df: c6:9c:14:67:c0:78:3f:7c:2d:08:bd:49:36:06:e8: 8c:e8:f9:12:5f:9f:6a:1b:b6:5c:76:9b:1a:b8:72: 0f:49:6c:f1:a6:06:a3:7f:82:e2:07:19:52:c3:90: 23:a5:27:e6:b5:5b:60:da:b0:f3:cb:b4:f3:18:f1: ad:45:ab:04:fa:ff:a7:77:0f:d2:75:18:de:62:c8: 3b:6b:6e:42:9a:1f:34:0e:e2:f4:b0:c9:be:5f:07: 49:00:82:54:00:97:cc:3a:11:fc:a3:a7:ed:e9:c7: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:16:8C:F3:70:60:9A:D2:8A:4F:E8:7D:FC:CB:11:FA:40:73:13:2A X509v3 Authority Key Identifier: keyid:96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:38:9a:80:8b:5e:5c:da:a3:cd:8e:b6:9c:9f:74:bf:ec:5f: 7c:4c:b3:bb:ff:af:c3:73:36:85:1d:cc:45:c0:5e:35:2b:a5: 34:78:67:9b:07:c8:0c:87:17:a8:94:a8:3b:64:63:81:e9:6d: 59:3f:4e:81:81:18:0a:e2:7d:29:fc:62:e5:18:56:f8:26:80: 38:28:2d:67:80:f0:1b:3a:b4:9f:93:30:ac:45:2c:6a:42:fc: 71:89:33:98:82:e9:58:e7:19:71:51:c2:a0:8f:49:50:e7:ee: 67:0b:9d:07:72:14:0c:51:72:52:68:d9:64:17:e6:e2:3e:1d: 78:22:d1:13:6d:23:d5:4b:b8:c2:ee:31:8e:d4:ab:08:13:0c: 0e:01:54:b3:fa:7e:ad:9d:a4:39:60:11:f2:59:54:8d:28:7d: 97:71:22:69:19:9f:08:62:a7:22:ad:3e:5a:19:62:37:92:dc: 5b:fc:5a:6b:e8:c5:e3:50:a5:fe:d5:38:75:86:38:d8:8b:14: 7b:37:6e:66:6b:71:ab:ab:15:14:49:c6:f2:db:1b:05:06:ef: a7:bd:c9:bb:53:8c:a6:f0:4c:0c:f9:39:39:fb:eb:92:fa:74: 89:65:c1:46:d0:e7:76:9b:f2:5f:54:1d:c5:24:d1:5f:7e:2d: 52:f5:4a:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1OPn8Oi/py5+mv4+pHtme5wVDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2 QkZBOTI3MTAeFw0yNjA3MDQwOTI5MTFaFw0yNjA3MDUxMzAwMTFaMDMxMTAvBgNV BAMTKDhEMTY4Q0YzNzA2MDlBRDI4QTRGRTg3REZDQ0IxMUZBNDA3MzEzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFfbQrvVwpaGw28WYOYHbQzyu q1+owItDzuW+ySvjEd+qD+33FjaWZpjupTxEi7HsOAnuSF2bz2CjslunPPiuT6nS sDYRfPWzjlZlaR+ed+ao4YT+E3I3P1gAJvDebKZM3H9Z304PuuZI24uVBaaUV8Tv GqW9I/qcWi3PPbb08q63YmvoDY0qrLSJGmTT5qY5MGtO38acFGfAeD98LQi9STYG 6Izo+RJfn2obtlx2mxq4cg9JbPGmBqN/guIHGVLDkCOlJ+a1W2DasPPLtPMY8a1F qwT6/6d3D9J1GN5iyDtrbkKaHzQO4vSwyb5fB0kAglQAl8w6Efyjp+3px/c3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjRaM83BgmtKKT+h9/MsR+kBzEyowHwYDVR0j BBgwFoAUlveIW49KAWfIbjCD9jD/omv6knEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmZhMGRkZWQtMWFjZi00NDJkLTk2NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4 RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2QkZBOTI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkY3ODg1QjhGNEEwMTY3Qzg2RTMwODNGNjMwRkZBMjZCRkE5 MjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZG QTI2QkZBOTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQ4moCLXlzao82OtpyfdL/sX3xMs7v/r8Nz NoUdzEXAXjUrpTR4Z5sHyAyHF6iUqDtkY4HpbVk/ToGBGArifSn8YuUYVvgmgDgo LWeA8Bs6tJ+TMKxFLGpC/HGJM5iC6VjnGXFRwqCPSVDn7mcLnQdyFAxRclJo2WQX 5uI+HXgi0RNtI9VLuMLuMY7UqwgTDA4BVLP6fq2dpDlgEfJZVI0ofZdxImkZnwhi pyKtPloZYjeS3Fv8WmvoxeNQpf7VOHWGONiLFHs3bmZrcaurFRRJxvLbGwUG76e9 ybtTjKbwTAz5OTn765L6dIllwUbQ53ab8l9UHcUk0V9+LVL1SiQ= -----END CERTIFICATE-----Generated at Sat Jul 4 11:18:01 2026 by rpki-client