$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft File: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft (raw, json) Hash identifier: 0ZFABYHaoYuSYCV+UEjL7gdPiJ+F98C3CajpTY0PM4s= Subject key identifier: C0:54:7C:99:96:1E:86:7D:48:05:64:A8:CA:7F:10:9C:F0:3F:F2:13 Authority key identifier: 96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 Certificate issuer: /CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Certificate serial: 43BA6896AFDE4A3FE56A9EA3A87E04EFF988B381 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 11:22:01 +0000 Manifest this update: Mon 02 Nov 2026 11:17:01 +0000 Manifest next update: Tue 03 Nov 2026 12:15:01 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: O7VzOc1QQXPH4ovFqaeUilVVeRWPbXN3yznnumHTcH0=) 2: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl (hash: Dk5JTcOD7kdQmPsv/XDntLyAbs3exDoNBCEe+E5X85M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ba:68:96:af:de:4a:3f:e5:6a:9e:a3:a8:7e:04:ef:f9:88:b3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Validity Not Before: Nov 2 11:17:01 2026 GMT Not After : Nov 3 12:15:01 2026 GMT Subject: CN=C0547C99961E867D480564A8CA7F109CF03FF213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:53:fc:c9:c7:7d:91:9b:f1:01:a4:60:d6: 4e:84:ab:79:ec:38:6c:a1:4b:f7:74:8c:1a:52:3c: f4:b0:5d:66:a7:56:95:be:90:94:c5:71:d7:6f:70: 0e:ac:4e:34:5a:6d:50:fa:e1:57:26:16:7d:20:79: 87:f5:d4:85:81:00:8c:cf:74:10:e5:b2:d4:ee:dd: 7f:cc:93:68:aa:54:20:9d:52:4a:56:25:a5:bd:17: cc:e4:d8:73:ae:76:40:f3:8f:01:7d:a6:9b:1d:c2: a1:54:89:5a:11:9d:e0:41:cc:83:bb:4f:7e:54:3c: 38:f8:c9:da:37:a5:5a:b9:b4:cd:ed:34:51:49:0b: 60:0e:13:f8:18:a6:de:ba:62:4a:58:58:f3:b6:1c: b0:98:8b:47:46:e6:72:97:b8:22:ec:38:de:d1:e0: 38:23:a6:ce:28:6e:e1:21:55:4d:0c:2b:8c:66:16: fa:4a:89:6e:d5:fe:d3:9d:1c:2f:d3:8d:20:f8:e1: d9:60:0c:51:57:a9:6f:09:0b:2a:2c:fd:84:a2:11: 4d:a1:90:4d:45:83:4e:3e:df:d0:c9:2b:99:6e:d8: 6c:9b:fc:11:e5:14:8e:6d:75:ee:29:0a:f3:db:df: 91:08:9c:d6:7c:a5:a9:00:65:18:d9:c1:81:c4:7f: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:54:7C:99:96:1E:86:7D:48:05:64:A8:CA:7F:10:9C:F0:3F:F2:13 X509v3 Authority Key Identifier: keyid:96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2e:d7:38:6e:5c:62:af:6c:11:2a:57:b1:63:5a:c7:d2:2b: 9a:84:d2:25:94:58:cb:50:cc:f8:ed:93:60:e7:7f:38:b9:bb: 55:f0:12:53:77:6f:12:28:d7:ab:33:32:79:79:09:cf:02:1e: ff:85:b9:3e:8f:93:74:a8:ef:85:1a:5a:f8:b8:8d:22:dc:50: 02:f7:84:47:04:14:cc:a2:e2:01:3a:03:93:da:87:71:25:ef: 64:0a:62:47:6b:c7:4b:48:87:e2:e7:7d:c7:4e:dd:29:c5:5b: 3a:bc:df:0c:86:87:5f:b9:0c:ae:7f:b3:2b:cf:6b:af:96:71: 29:5c:b0:85:65:57:71:c6:b1:db:a4:77:88:fa:56:49:3b:58: d7:49:51:37:fe:b2:27:6b:1c:ee:4f:f4:88:30:4f:83:69:5f: f3:79:70:df:36:c7:5b:51:58:60:66:ef:f7:a6:32:e6:a7:8a: 2d:01:52:f4:b7:07:59:a2:12:cc:dd:b1:32:bf:9e:af:9c:dc: c9:27:53:0c:92:17:73:a8:e9:ff:90:0e:61:ad:15:0f:be:47: 68:bb:32:9c:8e:88:d8:78:86:a7:a6:c2:d4:14:c5:07:dd:34: 74:31:68:d0:03:4b:93:38:df:3d:2a:c5:52:01:14:1c:1d:67: de:c0:63:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7polq/eSj/lap6jqH4E7/mIs4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2 QkZBOTI3MTAeFw0yNjExMDIxMTE3MDFaFw0yNjExMDMxMjE1MDFaMDMxMTAvBgNV BAMTKEMwNTQ3Qzk5OTYxRTg2N0Q0ODA1NjRBOENBN0YxMDlDRjAzRkYyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwFP8ycd9kZvxAaRg1k6Eq3ns OGyhS/d0jBpSPPSwXWanVpW+kJTFcddvcA6sTjRabVD64VcmFn0geYf11IWBAIzP dBDlstTu3X/Mk2iqVCCdUkpWJaW9F8zk2HOudkDzjwF9ppsdwqFUiVoRneBBzIO7 T35UPDj4ydo3pVq5tM3tNFFJC2AOE/gYpt66YkpYWPO2HLCYi0dG5nKXuCLsON7R 4Dgjps4obuEhVU0MK4xmFvpKiW7V/tOdHC/TjSD44dlgDFFXqW8JCyos/YSiEU2h kE1Fg04+39DJK5lu2Gyb/BHlFI5tde4pCvPb35EInNZ8pakAZRjZwYHEf6R9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwFR8mZYehn1IBWSoyn8QnPA/8hMwHwYDVR0j BBgwFoAUlveIW49KAWfIbjCD9jD/omv6knEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmZhMGRkZWQtMWFjZi00NDJkLTk2NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4 RjRBMDE2N0M4NkUzMDgzRjYzMEZGQTI2QkZBOTI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkY3ODg1QjhGNEEwMTY3Qzg2RTMwODNGNjMwRkZBMjZCRkE5 MjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvOTZGNzg4NUI4RjRBMDE2N0M4NkUzMDgzRjYzMEZG QTI2QkZBOTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACku1zhuXGKvbBEqV7FjWsfSK5qE0iWUWMtQ zPjtk2Dnfzi5u1XwElN3bxIo16szMnl5Cc8CHv+FuT6Pk3So74UaWvi4jSLcUAL3 hEcEFMyi4gE6A5Pah3El72QKYkdrx0tIh+LnfcdO3SnFWzq83wyGh1+5DK5/syvP a6+WcSlcsIVlV3HGsdukd4j6Vkk7WNdJUTf+sidrHO5P9IgwT4NpX/N5cN82x1tR WGBm7/emMuanii0BUvS3B1miEszdsTK/nq+c3MknUwySF3Oo6f+QDmGtFQ++R2i7 MpyOiNh4hqemwtQUxQfdNHQxaNADS5M43z0qxVIBFBwdZ97AYz4= -----END CERTIFICATE-----Generated at Mon Nov 2 22:31:52 2026 by rpki-client