$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: Li6Y6TamqvXx9Wd9kUPKrk4r6sM0Mz774Dk9TS43uvU= Subject key identifier: 15:B8:87:6E:14:9C:65:FC:FA:08:8A:CE:66:86:F0:34:66:44:DF:83 Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 3A9135E48A25A9380C53E2B28D00E7EFD486F23C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 0207 Signing time: Tue 21 Apr 2026 08:21:30 +0000 Manifest this update: Tue 21 Apr 2026 08:16:30 +0000 Manifest next update: Fri 24 Apr 2026 09:27:30 +0000 Files and hashes: 1: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d/oqyDi4sv5f7bgdGzOv2LunD1qLNy94sxilYJ9cVe0=) 2: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: wlFQ0Mhp/1XnwwUvAj+JZIZYp8c/czLKraMQXNmD1R0=) 3: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: VdERD7djEnDRuUzWQiLOufe0m10fZ51wdQ4rgXiwTkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 09:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:91:35:e4:8a:25:a9:38:0c:53:e2:b2:8d:00:e7:ef:d4:86:f2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Apr 21 08:16:30 2026 GMT Not After : Apr 24 09:27:30 2026 GMT Subject: CN=15B8876E149C65FCFA088ACE6686F0346644DF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:09:3f:0e:73:91:70:2e:3d:5b:1e:1d:ad: e3:aa:34:bb:ac:57:59:6f:57:0c:ac:3a:08:17:79: 78:5e:fa:ee:e0:96:5b:24:6c:5d:9b:95:9d:da:7e: fc:de:66:bd:a2:1a:d5:89:3a:7c:14:05:bf:a1:13: 27:9e:4f:49:60:fa:f7:de:c9:75:dd:a6:4e:20:39: 7a:67:32:1e:ac:d2:21:46:9b:28:1a:a0:ad:01:a8: 28:13:33:8c:8b:d2:f3:5b:d5:fd:b3:d8:80:4e:a1: 7d:56:4b:f8:a9:3f:03:5a:89:96:86:7a:da:1c:9f: c1:29:9a:da:5d:41:50:6d:14:9b:ca:41:2d:48:bb: fc:99:51:49:d9:72:08:06:99:e8:f1:6b:00:58:ae: e0:8e:73:a2:42:7e:27:f8:1b:76:77:30:d9:f7:45: 2d:79:00:2a:9c:aa:67:3d:44:72:3f:b7:72:b9:ae: a1:b5:40:29:41:f9:93:eb:ef:68:f0:4f:48:c1:9b: f5:d5:5f:2f:77:3a:7f:1b:47:4c:af:1c:88:3a:c6: f4:ab:41:2a:8f:5e:a8:a0:7a:d4:fa:42:66:37:43: 5b:b6:fb:f6:33:f7:f2:4b:35:8c:fd:4b:56:f5:8d: d5:c5:8d:f5:1a:e3:69:80:bd:4d:f4:4a:0e:45:4a: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B8:87:6E:14:9C:65:FC:FA:08:8A:CE:66:86:F0:34:66:44:DF:83 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:78:90:00:90:86:03:73:f4:a3:97:df:52:3d:b5:cd:17:4e: 4f:37:39:05:7b:50:c0:d7:07:5c:97:06:82:2d:37:0b:31:d2: f3:f3:a5:4f:df:ef:f2:4b:0e:0f:52:93:2d:16:9f:94:8d:36: 44:e0:23:51:66:92:fe:d0:dc:65:24:be:8f:b5:0d:e6:cc:88: cc:8f:be:9d:a9:50:7d:72:e2:a8:b3:5d:5b:1a:68:72:6f:cf: d7:e8:d3:93:09:6b:2b:6d:0f:0e:f1:44:91:a1:8f:28:7d:85: c6:22:a6:5e:69:7e:94:61:54:10:1e:5d:59:e0:a4:6c:69:a8: 8a:72:62:76:0e:cd:a4:1f:7a:69:56:43:68:d0:50:c3:ac:c8: cd:2f:44:72:76:9c:32:39:92:5a:48:c8:0c:2b:14:01:4b:37: 35:e2:ea:dc:9e:d2:6f:34:0e:28:eb:a6:c6:c8:91:1d:a8:5c: d5:0a:f4:73:b8:5f:ab:2f:b0:f9:24:2c:cf:b8:91:f9:d0:4d: 02:21:6b:c8:ac:3e:a9:15:54:b2:11:d7:9f:88:72:68:68:d1: 18:fa:4d:80:f7:27:57:b7:44:47:fe:85:a7:b0:d8:56:61:77: 21:6c:a0:5e:72:2a:17:e1:17:f6:d5:d3:b5:d4:10:b7:6d:ea: b1:51:f7:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpE15IolqTgMU+KyjQDn79SG8jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNjA0MjEwODE2MzBaFw0yNjA0MjQwOTI3MzBaMDMxMTAvBgNV BAMTKDE1Qjg4NzZFMTQ5QzY1RkNGQTA4OEFDRTY2ODZGMDM0NjY0NERGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ngk/DnORcC49Wx4dreOqNLus V1lvVwysOggXeXhe+u7gllskbF2blZ3afvzeZr2iGtWJOnwUBb+hEyeeT0lg+vfe yXXdpk4gOXpnMh6s0iFGmygaoK0BqCgTM4yL0vNb1f2z2IBOoX1WS/ipPwNaiZaG etocn8EpmtpdQVBtFJvKQS1Iu/yZUUnZcggGmejxawBYruCOc6JCfif4G3Z3MNn3 RS15ACqcqmc9RHI/t3K5rqG1QClB+ZPr72jwT0jBm/XVXy93On8bR0yvHIg6xvSr QSqPXqigetT6QmY3Q1u2+/Yz9/JLNYz9S1b1jdXFjfUa42mAvU30Sg5FSrcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFbiHbhScZfz6CIrOZobwNGZE34MwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN4kACQhgNz9KOX31I9tc0XTk83OQV7UMDX B1yXBoItNwsx0vPzpU/f7/JLDg9Sky0Wn5SNNkTgI1Fmkv7Q3GUkvo+1DebMiMyP vp2pUH1y4qizXVsaaHJvz9fo05MJayttDw7xRJGhjyh9hcYipl5pfpRhVBAeXVng pGxpqIpyYnYOzaQfemlWQ2jQUMOsyM0vRHJ2nDI5klpIyAwrFAFLNzXi6tye0m80 DijrpsbIkR2oXNUK9HO4X6svsPkkLM+4kfnQTQIha8isPqkVVLIR15+Icmho0Rj6 TYD3J1e3REf+haew2FZhdyFsoF5yKhfhF/bV07XUELdt6rFR9/U= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:24 2026 by rpki-client