$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: CsHWtt5M9v6LRcffc3LYbQA8UCbinisREY7BpBG/GfY= Subject key identifier: 2A:DE:19:0D:20:74:45:A2:61:E9:B7:BD:BB:D9:13:D4:F3:0A:A4:5F Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 2A710A0BB4D915EFB74CED1F42BAA7D22CD95737 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 01A1 Signing time: Sat 06 Sep 2025 19:01:19 +0000 Manifest this update: Sat 06 Sep 2025 18:56:19 +0000 Manifest next update: Wed 10 Sep 2025 04:26:19 +0000 Files and hashes: 1: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: OGejiG7ww/4ANM9WMGVqk5ky5j5O+TRQ9Z18Ia9TOUM=) 2: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: HwS+Tky+pB6c07joZGDml2m4MCa92uI8aQNz8oIlL2g=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d3VfPkAv0Y7wZUXEtDA5/M8jwR4+SgensuDndKBOuNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:71:0a:0b:b4:d9:15:ef:b7:4c:ed:1f:42:ba:a7:d2:2c:d9:57:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Sep 6 18:56:19 2025 GMT Not After : Sep 10 04:26:19 2025 GMT Subject: CN=2ADE190D207445A261E9B7BDBBD913D4F30AA45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:ba:f1:7b:0a:71:30:3b:b4:0a:86:4f:f5: 08:97:87:eb:95:23:4b:e3:ca:4b:d3:79:0e:01:07: 61:cc:47:08:84:dd:97:55:ed:5e:f2:ad:75:b7:0f: e2:44:a9:2a:fb:d9:b0:56:df:20:52:73:ea:b7:55: 1a:eb:a2:62:26:3a:b2:da:9a:1b:5e:dd:0a:aa:a9: 65:3c:49:1a:80:41:05:4d:22:02:78:85:ca:bf:61: 31:5a:b1:34:e9:87:b5:74:24:93:4d:63:da:eb:20: c2:e9:f8:c2:2a:49:05:91:7d:27:d6:e1:c3:07:1f: d9:47:a4:20:b3:04:13:4b:3c:00:7a:40:1b:aa:c9: 60:b7:73:8e:29:7b:7a:fb:b1:6b:3d:58:01:70:44: 0b:e1:f3:9d:cf:2a:29:c4:d4:59:d9:a6:20:04:3e: f2:b3:71:12:4b:a9:97:96:1f:8e:ee:7b:56:8b:23: 14:4d:25:5f:f5:f8:eb:91:fe:66:90:c6:64:26:f2: 8d:b5:c6:d0:e9:66:8c:8e:e5:c6:6d:a1:5c:95:75: c3:7d:21:c3:81:83:ed:60:96:5f:47:f5:a7:4e:f3: 6a:68:84:e5:5e:f8:6c:0a:e6:ce:24:b7:1d:dc:f3: b7:e3:69:ad:48:cf:c0:a7:09:a2:2f:5b:25:38:78: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DE:19:0D:20:74:45:A2:61:E9:B7:BD:BB:D9:13:D4:F3:0A:A4:5F X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:47:d2:30:bc:3b:4d:b6:99:34:1d:6a:fb:52:1a:e2:b8:6b: a5:cc:af:e3:fe:14:6e:d5:21:97:49:c9:69:91:d4:52:e7:bf: 05:3e:75:42:49:e6:93:05:e4:8f:72:9f:2d:7a:7b:1b:1b:cd: 4d:46:14:9f:ca:2c:d6:ba:b7:3f:0d:d5:3a:fe:67:f1:64:1f: 24:08:7d:cb:5c:a1:3a:77:db:b1:db:a8:f1:8e:27:06:8f:b3: a6:6d:df:96:1e:7d:fe:c8:07:e0:b7:71:7e:a6:37:29:0d:79: fe:af:99:f9:ed:2d:b5:9e:36:4f:1b:b8:32:e0:d0:86:44:21: 04:ca:be:65:6b:56:c7:7c:ea:b0:fb:c4:9f:e4:4b:26:27:2a: 62:a2:82:5f:7a:c5:99:14:8f:65:38:30:3e:08:b7:7d:83:c5: 34:ae:41:48:95:60:11:a8:1e:97:2c:90:e2:25:bc:78:b9:e5: b4:73:dd:ab:ac:04:b9:99:46:7f:79:52:62:27:7c:f4:03:df: 58:ac:90:d8:bd:89:d9:60:e6:53:51:0c:59:0d:12:49:9d:99: 69:04:a7:2a:a3:b0:75:97:ef:73:8d:47:08:a6:f7:8b:21:bd: d0:ea:0d:58:10:43:b2:b6:d2:dd:af:93:6d:a2:23:e0:3b:c0: 0a:0d:fe:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKnEKC7TZFe+3TO0fQrqn0izZVzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNTA5MDYxODU2MTlaFw0yNTA5MTAwNDI2MTlaMDMxMTAvBgNV BAMTKDJBREUxOTBEMjA3NDQ1QTI2MUU5QjdCREJCRDkxM0Q0RjMwQUE0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38rrxewpxMDu0CoZP9QiXh+uV I0vjykvTeQ4BB2HMRwiE3ZdV7V7yrXW3D+JEqSr72bBW3yBSc+q3VRrromImOrLa mhte3QqqqWU8SRqAQQVNIgJ4hcq/YTFasTTph7V0JJNNY9rrIMLp+MIqSQWRfSfW 4cMHH9lHpCCzBBNLPAB6QBuqyWC3c44pe3r7sWs9WAFwRAvh853PKinE1FnZpiAE PvKzcRJLqZeWH47ue1aLIxRNJV/1+OuR/maQxmQm8o21xtDpZoyO5cZtoVyVdcN9 IcOBg+1gll9H9adO82pohOVe+GwK5s4ktx3c87fjaa1Iz8CnCaIvWyU4eDzjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKt4ZDSB0RaJh6be9u9kT1PMKpF8wHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNH0jC8O022mTQdavtSGuK4a6XMr+P+FG7V IZdJyWmR1FLnvwU+dUJJ5pMF5I9yny16exsbzU1GFJ/KLNa6tz8N1Tr+Z/FkHyQI fctcoTp327HbqPGOJwaPs6Zt35Yeff7IB+C3cX6mNykNef6vmfntLbWeNk8buDLg 0IZEIQTKvmVrVsd86rD7xJ/kSyYnKmKigl96xZkUj2U4MD4It32DxTSuQUiVYBGo HpcskOIlvHi55bRz3ausBLmZRn95UmInfPQD31iskNi9idlg5lNRDFkNEkmdmWkE pyqjsHWX73ONRwim94shvdDqDVgQQ7K20t2vk22iI+A7wAoN/jI= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:09 2025 by rpki-client