$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: 4HuRJhQJiXqPI6GQpHSa/eN2slePsK+AkQ78WEeADFc= Subject key identifier: C4:D7:71:41:C7:71:63:C8:79:85:A5:A9:64:1A:AC:DB:C9:C6:B4:8F Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 0B817DD1D9FCC0E30237845A97D0B81379DB557D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 01F3 Signing time: Sat 07 Mar 2026 13:51:28 +0000 Manifest this update: Sat 07 Mar 2026 13:46:28 +0000 Manifest next update: Wed 11 Mar 2026 01:02:28 +0000 Files and hashes: 1: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: DNz2RcuUAAfEicN93wf6MFZ1y15tOLYJVJqKbjpIlh0=) 2: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d/oqyDi4sv5f7bgdGzOv2LunD1qLNy94sxilYJ9cVe0=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: wlFQ0Mhp/1XnwwUvAj+JZIZYp8c/czLKraMQXNmD1R0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:81:7d:d1:d9:fc:c0:e3:02:37:84:5a:97:d0:b8:13:79:db:55:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Mar 7 13:46:28 2026 GMT Not After : Mar 11 01:02:28 2026 GMT Subject: CN=C4D77141C77163C87985A5A9641AACDBC9C6B48F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:53:92:79:af:07:53:91:38:8f:02:63:7f: a1:36:00:18:94:2f:06:17:e0:aa:df:f0:ff:d4:95: 0a:74:65:c0:de:38:21:0d:72:d5:06:2c:8f:93:8e: 29:b5:f9:d2:d6:a2:c0:0f:6b:bb:33:23:ed:e9:27: 8a:fa:42:25:20:c7:ed:70:9f:da:db:fc:73:1e:cd: af:00:f8:bc:65:af:ad:c7:67:d8:94:e1:59:89:ee: 72:97:ee:b5:65:f7:79:63:62:74:e8:c0:35:08:c5: 24:88:ae:ce:b1:22:20:2c:3d:10:3e:ca:e9:95:c2: e6:19:55:46:35:54:a8:70:89:34:b7:57:f5:66:a2: be:61:ba:50:c9:95:93:23:1b:20:db:1e:c1:1e:cf: 78:63:57:8e:19:23:ee:08:2d:44:9b:ff:7e:31:d2: d2:04:a6:63:bd:fd:61:25:a1:c4:be:1d:47:c9:e8: 1e:a6:9c:57:4b:0e:bd:27:e1:30:85:f8:f4:5e:f1: ef:5f:e8:1f:7a:e8:30:7e:9f:70:d2:c2:31:2f:b8: a7:9e:81:07:dc:fd:24:bd:e5:99:e9:5c:b0:62:44: bf:ce:9f:b8:fd:3a:72:c2:34:a5:cb:66:14:f2:e7: 81:e4:ac:7b:56:b6:4b:05:0a:1e:4f:20:a2:49:83: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D7:71:41:C7:71:63:C8:79:85:A5:A9:64:1A:AC:DB:C9:C6:B4:8F X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:32:fb:60:70:f4:11:50:4e:d6:46:f1:fd:03:50:7e:15:4a: c4:58:b5:44:0b:ba:f4:1b:4a:f3:8a:1e:1e:23:b9:e6:5d:81: 2c:0e:67:08:6e:5d:4a:16:97:cc:fb:39:b0:84:e5:a6:37:7b: 34:ee:af:1d:14:50:b8:39:b8:ab:ba:34:af:49:72:2c:8c:95: 51:87:18:10:96:85:14:ff:e2:f5:15:ef:98:25:ef:d4:c4:b9: dd:e0:1a:ad:8f:85:3a:4d:2c:77:85:a1:e5:a5:2d:cb:63:ed: 17:e2:b1:f2:40:70:a3:9a:e3:18:e4:ea:47:c3:22:1e:21:44: 2f:e4:e6:83:9d:f6:ef:1b:c8:e7:f6:ac:e9:1c:1c:9f:78:08: 90:47:97:87:af:85:9c:1b:0e:03:18:23:d0:6e:03:5d:9b:0f: 60:74:91:c3:5e:bf:2c:c3:2d:db:df:c3:81:ae:87:a8:ad:be: 16:dd:b2:77:93:c9:55:0d:1c:ac:89:18:9c:b3:47:fd:66:06: 86:e8:5d:c8:80:84:57:af:2b:b0:fa:33:67:eb:34:80:3f:b4: 12:cb:97:4d:fe:af:85:15:d2:bb:70:94:63:52:23:6f:61:45: 50:98:9e:3d:d3:7f:1a:c5:c3:b3:69:5e:44:16:e4:63:08:45: 03:08:4b:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4F90dn8wOMCN4Ral9C4E3nbVX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNjAzMDcxMzQ2MjhaFw0yNjAzMTEwMTAyMjhaMDMxMTAvBgNV BAMTKEM0RDc3MTQxQzc3MTYzQzg3OTg1QTVBOTY0MUFBQ0RCQzlDNkI0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/FOSea8HU5E4jwJjf6E2ABiU LwYX4Krf8P/UlQp0ZcDeOCENctUGLI+Tjim1+dLWosAPa7szI+3pJ4r6QiUgx+1w n9rb/HMeza8A+Lxlr63HZ9iU4VmJ7nKX7rVl93ljYnTowDUIxSSIrs6xIiAsPRA+ yumVwuYZVUY1VKhwiTS3V/Vmor5hulDJlZMjGyDbHsEez3hjV44ZI+4ILUSb/34x 0tIEpmO9/WElocS+HUfJ6B6mnFdLDr0n4TCF+PRe8e9f6B966DB+n3DSwjEvuKee gQfc/SS95ZnpXLBiRL/On7j9OnLCNKXLZhTy54HkrHtWtksFCh5PIKJJg7VtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxNdxQcdxY8h5haWpZBqs28nGtI8wHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYy+2Bw9BFQTtZG8f0DUH4VSsRYtUQLuvQb SvOKHh4jueZdgSwOZwhuXUoWl8z7ObCE5aY3ezTurx0UULg5uKu6NK9JciyMlVGH GBCWhRT/4vUV75gl79TEud3gGq2PhTpNLHeFoeWlLctj7RfisfJAcKOa4xjk6kfD Ih4hRC/k5oOd9u8byOf2rOkcHJ94CJBHl4evhZwbDgMYI9BuA12bD2B0kcNevyzD Ldvfw4Guh6itvhbdsneTyVUNHKyJGJyzR/1mBoboXciAhFevK7D6M2frNIA/tBLL l03+r4UV0rtwlGNSI29hRVCYnj3TfxrFw7NpXkQW5GMIRQMIS50= -----END CERTIFICATE-----Generated at Sat Mar 7 22:54:19 2026 by rpki-client