$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: JRNOOS+wH6ubB6Jg6KS57EgIb7zTt5kQ42AiT/t/ZQs= Subject key identifier: C5:7A:5C:2E:38:8F:5A:6D:8D:C7:2E:C3:FE:7E:AA:44:BF:B0:52:53 Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 5E5BBDC6CCB95FA7FF5319AAF019BA7ECEC9EFFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: C5 Signing time: Thu 05 Mar 2026 11:52:27 +0000 Manifest this update: Thu 05 Mar 2026 11:47:27 +0000 Manifest next update: Sun 08 Mar 2026 16:08:27 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: dLT4KYRTYgJE/U9cJv0DgnvFPK9zUwTaqis7ETSWg5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 16:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5b:bd:c6:cc:b9:5f:a7:ff:53:19:aa:f0:19:ba:7e:ce:c9:ef:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Mar 5 11:47:27 2026 GMT Not After : Mar 8 16:08:27 2026 GMT Subject: CN=C57A5C2E388F5A6D8DC72EC3FE7EAA44BFB05253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:13:8b:17:aa:bb:df:2b:b6:1d:a0:65:85: 1a:45:a4:b7:32:2f:47:aa:cf:cc:24:0f:a4:84:c9: 79:4e:dc:05:a1:b7:ba:c3:77:c2:73:2b:da:5d:1c: b2:fc:97:55:2b:55:97:a5:f7:a7:97:f5:aa:d5:89: c1:0e:0d:d9:f0:93:62:eb:7d:a4:97:9e:89:76:e7: 20:e0:ff:b3:3b:da:66:cd:4b:79:b3:20:18:3d:b4: aa:80:86:01:a0:fe:3c:f9:cc:0f:34:ba:e1:ed:c1: 05:4e:56:0d:51:1c:a0:e1:95:58:f3:9d:83:f1:9e: aa:85:a6:ba:88:a0:86:e9:4f:e0:5c:5e:5b:76:6b: 80:8f:81:08:b9:36:38:4f:e3:76:c4:2f:94:c7:05: 0e:60:81:32:38:30:c0:aa:52:47:e7:4e:82:0b:84: 60:f9:0c:8c:12:57:ab:b9:7e:81:e4:b0:91:b8:bc: af:ab:20:b8:03:10:82:54:a4:7c:4a:d2:91:63:68: c7:5e:a2:62:76:d5:05:97:95:4c:68:38:f5:d6:24: 33:0d:71:7b:4a:89:45:0d:0f:1d:ff:58:fa:1a:34: cb:ee:5f:51:df:25:47:ad:55:8b:c6:97:13:4f:d5: 90:4c:56:1a:4e:be:e0:13:6f:89:ab:a6:fc:77:b1: 9d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7A:5C:2E:38:8F:5A:6D:8D:C7:2E:C3:FE:7E:AA:44:BF:B0:52:53 X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9b:d9:18:65:1c:0f:44:0c:4e:bf:9a:35:19:50:ac:ce:4c: d5:34:2a:70:09:59:44:37:8e:79:d3:23:45:2e:4d:e3:c9:f0: 6d:10:b5:ab:5b:66:2e:06:9e:dd:09:6a:33:26:6d:ed:e4:15: 95:5d:dd:5e:c1:62:14:16:22:49:45:4e:3a:fd:aa:40:38:43: d4:bc:a9:f0:99:46:bc:0d:bf:37:53:09:28:8c:d6:c8:80:eb: 4c:e0:1c:9f:5d:bd:51:29:bf:1a:50:d9:08:39:d5:bd:90:f1: 8c:70:86:f9:47:e6:40:bd:19:67:b1:fe:3b:a3:dc:f3:de:c0: 9e:02:a0:0c:fc:80:5a:02:ae:2f:49:6a:19:62:52:b4:af:fa: fc:3c:93:ec:fd:65:60:7e:5c:3c:fe:4e:5f:aa:51:88:9e:1a: fa:53:68:39:79:48:82:11:ff:12:ee:e7:e9:ee:01:6b:5a:d5: 29:81:26:ca:57:bc:49:87:17:35:be:24:2b:e0:90:f9:6e:cf: c6:06:a1:78:ed:8d:6b:a6:49:e4:18:7b:e6:14:fc:8c:2b:09: 67:6c:74:4c:ab:73:dc:bd:bf:13:91:db:d9:99:c3:7b:0f:ad: 44:d3:4c:4f:cd:11:3a:e3:a8:b2:be:38:c8:e1:d5:fc:b4:64: af:af:d6:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlu9xsy5X6f/Uxmq8Bm6fs7J7/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNjAzMDUxMTQ3MjdaFw0yNjAzMDgxNjA4MjdaMDMxMTAvBgNV BAMTKEM1N0E1QzJFMzg4RjVBNkQ4REM3MkVDM0ZFN0VBQTQ0QkZCMDUyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ChOLF6q73yu2HaBlhRpFpLcy L0eqz8wkD6SEyXlO3AWht7rDd8JzK9pdHLL8l1UrVZel96eX9arVicEODdnwk2Lr faSXnol25yDg/7M72mbNS3mzIBg9tKqAhgGg/jz5zA80uuHtwQVOVg1RHKDhlVjz nYPxnqqFprqIoIbpT+BcXlt2a4CPgQi5NjhP43bEL5THBQ5ggTI4MMCqUkfnToIL hGD5DIwSV6u5foHksJG4vK+rILgDEIJUpHxK0pFjaMdeomJ21QWXlUxoOPXWJDMN cXtKiUUNDx3/WPoaNMvuX1HfJUetVYvGlxNP1ZBMVhpOvuATb4mrpvx3sZ0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxXpcLjiPWm2Nxy7D/n6qRL+wUlMwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSb2RhlHA9EDE6/mjUZUKzOTNU0KnAJWUQ3 jnnTI0UuTePJ8G0QtatbZi4Gnt0JajMmbe3kFZVd3V7BYhQWIklFTjr9qkA4Q9S8 qfCZRrwNvzdTCSiM1siA60zgHJ9dvVEpvxpQ2Qg51b2Q8YxwhvlH5kC9GWex/juj 3PPewJ4CoAz8gFoCri9JahliUrSv+vw8k+z9ZWB+XDz+Tl+qUYieGvpTaDl5SIIR /xLu5+nuAWta1SmBJspXvEmHFzW+JCvgkPluz8YGoXjtjWumSeQYe+YU/IwrCWds dEyrc9y9vxOR29mZw3sPrUTTTE/NETrjqLK+OMjh1fy0ZK+v1qQ= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:28 2026 by rpki-client