$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: oR9B3Xq5LfSEusjf2LYQeAlbzDYeoPYa1RHchlqyirI= Subject key identifier: D6:51:9F:7F:E5:E0:FE:6B:A2:58:7B:9E:E1:68:26:08:60:7B:A2:4C Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 2FA86A892ABFB2AA94F55646BCF6ADE843293001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: D9 Signing time: Tue 21 Apr 2026 02:22:33 +0000 Manifest this update: Tue 21 Apr 2026 02:17:33 +0000 Manifest next update: Fri 24 Apr 2026 04:03:33 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: ZX4eQFaB7bJnmXvnwqxTQSAbc/guoDFrN3hx+HU9yw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a8:6a:89:2a:bf:b2:aa:94:f5:56:46:bc:f6:ad:e8:43:29:30:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Apr 21 02:17:33 2026 GMT Not After : Apr 24 04:03:33 2026 GMT Subject: CN=D6519F7FE5E0FE6BA2587B9EE1682608607BA24C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:46:6a:f7:c8:fc:67:11:82:8f:50:b6:70: d4:1c:46:bf:01:e6:8a:59:0d:f7:47:87:42:b5:d3: 5d:5e:b6:c7:62:25:e0:b2:5d:01:bf:ff:33:b4:45: f1:b8:19:ce:7b:12:af:3f:5e:c6:64:e1:e5:f5:10: c0:43:5e:22:36:17:df:43:61:47:cf:45:6a:d1:05: 1d:a0:1f:e7:ad:9d:c4:c9:77:bd:84:04:53:1e:be: ef:d2:b7:34:aa:a2:37:06:3d:5d:f8:cd:ff:2d:86: 62:09:7d:84:3d:1e:46:00:00:ff:75:5d:ff:52:98: ec:6e:c2:a4:16:88:34:aa:36:ae:52:97:ed:db:0f: 97:45:82:d9:06:c8:44:d7:ff:dc:fe:ea:84:1a:dd: 48:d8:9e:a7:cf:de:27:9a:a6:1f:88:3d:97:ca:d0: 16:e5:53:e9:8c:76:1f:88:3d:62:cc:9f:94:e4:ae: 70:14:fa:76:21:18:66:ea:1b:25:f4:0f:9e:8b:01: e7:51:9e:4e:77:23:7c:f1:e1:c9:f1:34:e7:89:1b: 8d:f4:c4:48:3f:ef:9c:f2:b3:2a:30:92:e8:d8:42: 95:48:ec:b4:09:96:34:2d:10:31:96:4e:17:c7:61: d9:49:53:b5:05:75:d2:af:1e:86:e6:0f:1f:1b:85: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:51:9F:7F:E5:E0:FE:6B:A2:58:7B:9E:E1:68:26:08:60:7B:A2:4C X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:56:a5:b0:fa:8c:0a:42:8d:75:f8:57:61:30:0f:f7:f5: 9d:f1:5b:bc:e8:fc:49:30:c6:65:67:1e:89:3a:91:f3:57:8d: 48:eb:c1:99:82:31:6c:bb:4a:f4:c5:d7:f6:18:fa:9a:c1:ee: 3d:c4:9d:05:39:20:1e:ef:f3:ea:ab:b4:e3:10:5f:9f:fd:41: 72:09:0b:98:42:1b:4d:02:4b:cd:92:eb:e6:81:89:44:f9:e9: cf:d1:3f:a7:08:6f:5f:28:2e:ba:79:f4:bc:0b:69:b2:0e:be: c4:15:d5:51:bd:15:78:a6:9d:ff:c1:80:c5:59:08:ab:3e:1c: dd:07:c8:e7:14:b1:1c:23:27:1a:47:fd:da:b6:81:b3:2b:27: 45:e3:05:2e:ea:df:27:b0:8b:de:88:94:53:f2:b1:c6:86:63: 0d:f5:c0:90:20:74:73:63:33:a2:9b:dd:f8:63:ae:9e:61:af: 4e:d1:27:3b:a7:f4:3c:a6:7d:c5:83:b7:4d:e8:27:6a:b5:8a: 6e:23:84:d4:2b:8e:d9:f2:39:ef:83:85:6d:29:ce:56:3c:7a: 8e:52:75:91:4a:7d:a1:0b:a5:62:90:b4:8b:fd:cd:5c:21:62: 31:38:7b:64:17:a2:e9:7c:66:8e:9f:c5:17:90:7e:7b:1f:a4: fc:a9:e2:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6hqiSq/sqqU9VZGvPat6EMpMAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNjA0MjEwMjE3MzNaFw0yNjA0MjQwNDAzMzNaMDMxMTAvBgNV BAMTKEQ2NTE5RjdGRTVFMEZFNkJBMjU4N0I5RUUxNjgyNjA4NjA3QkEyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tEZq98j8ZxGCj1C2cNQcRr8B 5opZDfdHh0K1011etsdiJeCyXQG//zO0RfG4Gc57Eq8/XsZk4eX1EMBDXiI2F99D YUfPRWrRBR2gH+etncTJd72EBFMevu/StzSqojcGPV34zf8thmIJfYQ9HkYAAP91 Xf9SmOxuwqQWiDSqNq5Sl+3bD5dFgtkGyETX/9z+6oQa3UjYnqfP3ieaph+IPZfK 0BblU+mMdh+IPWLMn5TkrnAU+nYhGGbqGyX0D56LAedRnk53I3zx4cnxNOeJG430 xEg/75zysyowkujYQpVI7LQJljQtEDGWThfHYdlJU7UFddKvHobmDx8bhZvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1lGff+Xg/muiWHue4WgmCGB7okwwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrnVqWw+owKQo11+FdhMA/39Z3xW7zo/Ekw xmVnHok6kfNXjUjrwZmCMWy7SvTF1/YY+prB7j3EnQU5IB7v8+qrtOMQX5/9QXIJ C5hCG00CS82S6+aBiUT56c/RP6cIb18oLrp59LwLabIOvsQV1VG9FXimnf/BgMVZ CKs+HN0HyOcUsRwjJxpH/dq2gbMrJ0XjBS7q3yewi96IlFPyscaGYw31wJAgdHNj M6Kb3fhjrp5hr07RJzun9DymfcWDt03oJ2q1im4jhNQrjtnyOe+DhW0pzlY8eo5S dZFKfaELpWKQtIv9zVwhYjE4e2QXoul8Zo6fxReQfnsfpPyp4ok= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:52 2026 by rpki-client