$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: hmTUfJJAGB1tyshONiiP7NZyaxaqcJTWQtZ88TLRojQ= Subject key identifier: 3A:A6:70:11:01:A9:5B:D1:3C:B8:16:7D:72:B2:94:7C:0F:EB:DF:A3 Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 5BF3025E2D2DCEF2AC26BB743257AFECB4E9F76B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 72 Signing time: Sun 31 Aug 2025 06:12:19 +0000 Manifest this update: Sun 31 Aug 2025 06:07:19 +0000 Manifest next update: Wed 03 Sep 2025 09:27:19 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: VTRgQ2/oAQ1JO197MEEmVIzEXFmf0CXlmEKQ3Gw5j64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f3:02:5e:2d:2d:ce:f2:ac:26:bb:74:32:57:af:ec:b4:e9:f7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Aug 31 06:07:19 2025 GMT Not After : Sep 3 09:27:19 2025 GMT Subject: CN=3AA6701101A95BD13CB8167D72B2947C0FEBDFA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:a2:33:0f:cb:f2:8c:53:5b:46:dd:1f:3a: 1d:cd:86:71:67:f1:09:3a:da:b8:21:ab:c6:0a:83: 77:ed:30:47:77:5a:26:3b:3a:fe:2a:de:c0:57:72: e7:65:47:19:9f:f6:a1:44:fa:ff:06:51:1d:73:35: 5b:c5:ea:c8:0b:af:41:8a:f3:76:ea:3e:4e:3e:ea: 03:ff:a7:f4:30:40:03:50:90:f3:fc:d8:56:cc:d2: e2:62:9b:06:6f:99:96:45:02:f9:3f:de:f8:b7:59: 59:b5:3a:54:ce:8d:ba:e2:88:d2:25:4d:f5:15:38: 3c:a8:64:c1:27:43:e3:54:c1:23:7f:07:b7:73:64: 3e:39:53:12:33:13:35:ef:6e:78:17:f3:38:ab:e4: 4e:54:75:b1:6d:62:b8:e7:d8:20:29:53:71:c5:b9: 75:6e:bd:b9:f0:03:a4:61:01:c7:98:1e:dd:5d:41: 31:81:6a:24:5f:86:46:51:95:30:af:30:a3:6a:9f: 29:49:b1:dd:11:45:06:1f:73:52:ad:4f:c5:1d:84: 8a:e1:e0:f3:46:a1:02:13:d0:b5:63:70:8e:e6:82: 71:1f:9a:2f:20:cd:3d:ec:8b:35:62:82:37:f8:dd: 86:16:77:49:1e:b5:5b:57:a7:03:a1:8d:f4:b7:c0: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A6:70:11:01:A9:5B:D1:3C:B8:16:7D:72:B2:94:7C:0F:EB:DF:A3 X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ee:6c:72:92:41:9d:86:a4:0b:73:61:1a:0b:b1:2d:e0:ea: 7b:0e:5c:93:87:fd:9d:a5:0a:23:ca:37:ba:20:e8:4c:dd:a2: c7:70:db:b7:e8:dd:38:ed:47:5e:3f:1f:ef:3e:62:a4:8f:08: c0:59:72:6f:b4:d6:a0:4c:22:6b:4b:88:e7:83:a3:f9:d1:8e: 0b:ee:44:63:02:5b:6c:62:28:28:63:ff:71:04:02:e9:ef:13: 8c:6b:9a:a5:e1:34:27:0a:c0:41:62:a8:72:f8:be:a0:2b:d5: a4:88:b7:31:b8:b9:2a:9a:aa:6d:c1:54:85:84:9b:af:f4:98: ed:c0:5c:80:8b:b2:e1:c7:82:a9:19:8b:41:11:b3:56:19:f6: df:0d:df:f7:76:f1:98:ef:1f:a6:23:61:c8:50:29:3b:41:7e: a6:c2:0d:14:ab:21:d1:8a:f2:93:c1:54:7b:1e:04:5d:6d:25: 60:33:73:c5:c1:9d:fb:ba:f9:77:d1:1e:82:88:54:e3:00:38: c2:c7:71:ef:10:3f:13:9e:6d:29:24:a9:85:cd:dc:53:06:ed: 59:fc:af:7b:1f:6d:b0:00:29:0c:b9:ee:e1:fc:2e:08:94:93: 47:9d:e0:12:92:aa:d8:a7:bc:11:09:86:b3:c1:36:e6:d1:67: 07:c8:77:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/MCXi0tzvKsJrt0Mlev7LTp92swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA4MzEwNjA3MTlaFw0yNTA5MDMwOTI3MTlaMDMxMTAvBgNV BAMTKDNBQTY3MDExMDFBOTVCRDEzQ0I4MTY3RDcyQjI5NDdDMEZFQkRGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zqIzD8vyjFNbRt0fOh3NhnFn 8Qk62rghq8YKg3ftMEd3WiY7Ov4q3sBXcudlRxmf9qFE+v8GUR1zNVvF6sgLr0GK 83bqPk4+6gP/p/QwQANQkPP82FbM0uJimwZvmZZFAvk/3vi3WVm1OlTOjbriiNIl TfUVODyoZMEnQ+NUwSN/B7dzZD45UxIzEzXvbngX8zir5E5UdbFtYrjn2CApU3HF uXVuvbnwA6RhAceYHt1dQTGBaiRfhkZRlTCvMKNqnylJsd0RRQYfc1KtT8UdhIrh 4PNGoQIT0LVjcI7mgnEfmi8gzT3sizVigjf43YYWd0ketVtXpwOhjfS3wHvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOqZwEQGpW9E8uBZ9crKUfA/r36MwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzubHKSQZ2GpAtzYRoLsS3g6nsOXJOH/Z2l CiPKN7og6Ezdosdw27fo3TjtR14/H+8+YqSPCMBZcm+01qBMImtLiOeDo/nRjgvu RGMCW2xiKChj/3EEAunvE4xrmqXhNCcKwEFiqHL4vqAr1aSItzG4uSqaqm3BVIWE m6/0mO3AXICLsuHHgqkZi0ERs1YZ9t8N3/d28ZjvH6YjYchQKTtBfqbCDRSrIdGK 8pPBVHseBF1tJWAzc8XBnfu6+XfRHoKIVOMAOMLHce8QPxOebSkkqYXN3FMG7Vn8 r3sfbbAAKQy57uH8LgiUk0ed4BKSqtinvBEJhrPBNubRZwfId6U= -----END CERTIFICATE-----Generated at Sun Aug 31 21:12:02 2025 by rpki-client