$ rpki-client -vvf rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft File: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft (raw, json) Hash identifier: 7EKeuSQbL3XVJPqJdC7wQAGgt8do8CqHc68YIRTK42s= Subject key identifier: E9:1B:0E:3E:7A:52:FB:C7:16:F9:95:08:98:E0:1C:68:6D:C6:02:B5 Authority key identifier: 96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 Certificate issuer: /CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Certificate serial: 0E14274025194376954C6D115790D9E70DBC64BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft Manifest number: 14 Signing time: Sat 16 May 2026 15:59:33 +0000 Manifest this update: Sat 16 May 2026 15:54:33 +0000 Manifest next update: Sun 17 May 2026 19:08:33 +0000 Files and hashes: 1: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl (hash: h2JYK+lwuMvojxYpHXw4OMn3kxSTvdwsuWINipvKbjE=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: O7VzOc1QQXPH4ovFqaeUilVVeRWPbXN3yznnumHTcH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 19:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:14:27:40:25:19:43:76:95:4c:6d:11:57:90:d9:e7:0d:bc:64:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Validity Not Before: May 16 15:54:33 2026 GMT Not After : May 17 19:08:33 2026 GMT Subject: CN=E91B0E3E7A52FBC716F9950898E01C686DC602B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:fa:17:a6:7c:fc:f1:e6:e4:9c:97:ec:f2: 9b:34:ab:0b:2f:95:26:6f:2a:60:b0:df:c2:71:3f: d6:bb:cf:0d:a4:e5:94:4a:06:b9:1a:5c:13:aa:53: 79:44:75:20:64:80:bf:d9:e8:8e:63:a3:64:41:d3: 26:43:2d:83:9b:8d:24:c6:b0:dc:78:0c:d5:36:9c: 27:6a:6a:64:9b:32:65:08:d8:91:99:6b:47:69:67: 85:13:81:4d:76:11:c6:d7:ba:4f:31:51:f5:43:90: 21:7e:4b:6e:ea:fd:9d:7b:2c:e4:92:e4:6d:b9:8f: e4:1f:53:28:da:84:45:6c:28:a7:ce:9e:5c:b2:1a: 82:2c:5e:a2:4a:8b:64:ef:06:0b:1e:6a:d0:76:8d: a5:94:d0:24:c0:3f:51:e8:60:82:52:ad:ab:fa:25: 00:4a:2c:e1:59:b2:23:9d:eb:40:98:0e:dd:de:74: b7:81:22:d8:f5:72:c5:3c:09:89:b3:6c:c3:14:1e: de:6b:11:14:6a:ff:36:ff:0a:a2:3a:0b:7b:c8:8f: 4a:65:24:70:a0:1b:0c:70:42:5c:46:b0:72:c4:43: 98:b0:0e:fd:ae:bf:30:12:d8:c1:2f:e8:2d:50:06: b9:16:90:3b:85:47:42:96:4c:c1:37:d0:c9:18:72: 65:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1B:0E:3E:7A:52:FB:C7:16:F9:95:08:98:E0:1C:68:6D:C6:02:B5 X509v3 Authority Key Identifier: keyid:96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d6:d7:1d:98:cd:36:0e:c2:d5:02:2c:6b:89:7c:3d:2e:d0: 2e:c9:4c:ac:0e:ea:8b:c0:04:0c:03:e1:89:a9:2f:b2:4d:6b: 19:08:38:3f:ce:e8:b4:83:0d:db:d0:9a:cd:5d:ac:55:9e:f9: 2d:d1:27:d7:54:df:ff:81:fa:54:d3:b4:3c:42:7b:13:c6:44: d7:6e:59:9c:75:c2:2c:ec:7c:8d:17:25:7c:56:47:6b:7a:f1: 4e:45:bf:b3:ee:7f:a6:b1:95:99:1d:3b:6b:aa:b9:96:93:b4: ca:b9:2f:f9:6d:51:82:5b:cc:c4:ea:fc:57:27:dc:a2:fc:a2: a3:e0:1f:2a:81:15:89:e8:c5:34:65:8c:43:3f:99:a9:a4:ed: f1:b2:a8:38:50:78:e0:dd:e9:e9:4e:7e:f0:4f:dd:7f:8d:27: 0b:7e:92:6b:5f:28:fb:8f:fc:e4:20:1b:e2:34:bc:e2:a7:b9: ea:a8:57:bf:59:f0:a5:3b:76:71:99:f4:de:18:78:c7:db:c3: b5:06:32:42:1e:bf:59:af:75:d9:a7:ee:e2:0a:8d:52:50:ee: 42:b8:19:be:ef:87:cb:ce:41:8f:fc:63:39:0d:6b:0e:e0:30: a7:6f:57:9c:bd:13:fe:7b:3b:9d:9c:41:05:c1:b8:b5:33:29: 97:d8:ec:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhQnQCUZQ3aVTG0RV5DZ5w28ZLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2 QkZBOTI3MTAeFw0yNjA1MTYxNTU0MzNaFw0yNjA1MTcxOTA4MzNaMDMxMTAvBgNV BAMTKEU5MUIwRTNFN0E1MkZCQzcxNkY5OTUwODk4RTAxQzY4NkRDNjAyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdKvoXpnz88ebknJfs8ps0qwsv lSZvKmCw38JxP9a7zw2k5ZRKBrkaXBOqU3lEdSBkgL/Z6I5jo2RB0yZDLYObjSTG sNx4DNU2nCdqamSbMmUI2JGZa0dpZ4UTgU12EcbXuk8xUfVDkCF+S27q/Z17LOSS 5G25j+QfUyjahEVsKKfOnlyyGoIsXqJKi2TvBgseatB2jaWU0CTAP1HoYIJSrav6 JQBKLOFZsiOd60CYDt3edLeBItj1csU8CYmzbMMUHt5rERRq/zb/CqI6C3vIj0pl JHCgGwxwQlxGsHLEQ5iwDv2uvzAS2MEv6C1QBrkWkDuFR0KWTME30MkYcmUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6RsOPnpS+8cW+ZUImOAcaG3GArUwHwYDVR0j BBgwFoAUlveIW49KAWfIbjCD9jD/omv6knEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmZhMGRkZWQtMWFjZi00NDJkLTk2NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4 RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2QkZBOTI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkY3ODg1QjhGNEEwMTY3Qzg2RTMwODNGNjMwRkZBMjZCRkE5 MjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZG QTI2QkZBOTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPW1x2YzTYOwtUCLGuJfD0u0C7JTKwO6ovA BAwD4YmpL7JNaxkIOD/O6LSDDdvQms1drFWe+S3RJ9dU3/+B+lTTtDxCexPGRNdu WZx1wizsfI0XJXxWR2t68U5Fv7Puf6axlZkdO2uquZaTtMq5L/ltUYJbzMTq/Fcn 3KL8oqPgHyqBFYnoxTRljEM/mamk7fGyqDhQeODd6elOfvBP3X+NJwt+kmtfKPuP /OQgG+I0vOKnueqoV79Z8KU7dnGZ9N4YeMfbw7UGMkIev1mvddmn7uIKjVJQ7kK4 Gb7vh8vOQY/8YzkNaw7gMKdvV5y9E/57O52cQQXBuLUzKZfY7FQ= -----END CERTIFICATE-----Generated at Sun May 17 10:54:50 2026 by rpki-client