$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.mft File: 96724AF35F57C1F59A824F909E2522BAC6560A6D.mft (raw, json) Hash identifier: eNzocq+Qsdk4QgT3l+pdy+5fXzgyXp4TZ5Hs+7EicQw= Subject key identifier: 3C:41:E8:03:40:79:37:40:34:4A:5A:53:97:E0:3B:C2:37:75:F3:1D Authority key identifier: 96:72:4A:F3:5F:57:C1:F5:9A:82:4F:90:9E:25:22:BA:C6:56:0A:6D Certificate issuer: /CN=96724AF35F57C1F59A824F909E2522BAC6560A6D Certificate serial: 4FE744EB87DAC585E2488939ABFEB7D6A6206208 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96724AF35F57C1F59A824F909E2522BAC6560A6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 11:12:25 +0000 Manifest this update: Thu 17 Sep 2026 11:07:25 +0000 Manifest next update: Fri 18 Sep 2026 13:02:25 +0000 Files and hashes: 1: 96724AF35F57C1F59A824F909E2522BAC6560A6D.crl (hash: xPwiLJi+NsDXP0Gae9nYInTE2mK1H1W+cqyYjRxoI3I=) 2: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: Gw/ouM+79fWgaC67VfYoogoQzL2GG+1ni52ruiFVvNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.crl rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96724AF35F57C1F59A824F909E2522BAC6560A6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e7:44:eb:87:da:c5:85:e2:48:89:39:ab:fe:b7:d6:a6:20:62:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96724AF35F57C1F59A824F909E2522BAC6560A6D Validity Not Before: Sep 17 11:07:25 2026 GMT Not After : Sep 18 13:02:25 2026 GMT Subject: CN=3C41E80340793740344A5A5397E03BC23775F31D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:28:9c:04:f3:54:f8:b0:bf:16:98:11:d9: 48:87:12:e9:ea:a5:a8:11:5e:1e:df:76:9f:e5:f0: 0e:e3:46:15:06:64:e4:cf:5d:d0:41:d5:f0:d9:a1: 92:3d:4a:4d:c8:d0:5f:cf:74:c2:bd:72:53:2c:62: c0:c2:c8:72:d0:af:54:17:3c:05:4a:1a:55:83:58: dc:fc:02:62:77:28:a2:3a:63:85:e2:ee:5e:35:54: 3f:c6:93:a8:b2:ae:e7:99:bb:c9:96:85:ce:34:fc: 73:aa:f7:e5:db:65:45:28:99:d7:a1:7d:4e:d1:16: 32:a5:94:11:c9:08:77:62:b8:3c:28:c4:24:6f:98: 6f:d7:d4:c6:2e:36:ef:bf:87:48:bf:42:ef:f7:da: 8f:e1:7a:ae:e6:53:82:91:4c:99:25:48:ad:f6:06: a7:7d:86:51:f4:a1:4e:1f:a1:c4:54:b9:d3:8a:d0: 40:20:82:e7:1f:58:73:3b:35:98:f9:fe:5c:b5:a1: 61:b4:db:b8:55:2a:60:cf:ce:89:26:4c:27:0f:a2: d8:08:5d:c2:b5:5a:be:1f:86:d4:cd:6e:10:51:35: d3:b6:4e:a6:98:a0:35:1c:6f:0c:52:26:3e:02:cf: d3:16:bb:cb:a8:db:58:22:fe:27:10:98:c0:ae:a9: fc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:41:E8:03:40:79:37:40:34:4A:5A:53:97:E0:3B:C2:37:75:F3:1D X509v3 Authority Key Identifier: keyid:96:72:4A:F3:5F:57:C1:F5:9A:82:4F:90:9E:25:22:BA:C6:56:0A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96724AF35F57C1F59A824F909E2522BAC6560A6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/96724AF35F57C1F59A824F909E2522BAC6560A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5c:3b:2e:4d:13:e8:81:66:4e:32:5e:19:86:9b:a5:c9:e8: 63:35:e6:d2:66:29:94:73:4f:96:74:13:5e:8d:ba:bc:63:fc: bb:a0:28:ed:ad:1e:f2:91:2c:44:29:b5:67:55:ed:ab:ee:de: 50:74:63:df:a9:22:2f:82:29:e7:0b:e8:0d:31:18:a2:23:ec: c4:8a:61:65:92:b7:e1:f6:f7:22:7c:22:23:c1:59:c3:79:ab: ec:9f:01:fd:c7:bf:d0:91:83:d4:0c:3b:92:15:a3:0d:cc:46: 11:69:26:ea:11:93:27:ef:6e:13:4d:2e:13:7d:ac:9b:1c:20: 0b:e4:6f:8b:11:38:65:1e:39:ac:85:36:a1:ea:9d:89:1c:48: 8d:9b:b4:8f:10:a0:df:58:24:0e:b6:4f:9a:55:66:27:91:46: e5:2a:3f:ce:49:9e:51:e1:6c:71:35:0f:05:47:11:d2:6a:ec: c1:20:a4:97:2a:12:d4:81:83:ff:dd:e9:2a:3c:7a:d2:2b:58: 38:bd:78:98:74:1d:f3:06:6a:f2:74:45:dc:71:c8:2e:70:90: 9d:4c:73:f2:ac:a3:05:c2:de:3b:ff:27:f6:05:4a:80:88:3f: 72:4c:f0:f1:49:3d:66:3a:89:b1:3c:11:61:43:59:97:d9:30: 02:cc:06:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+dE64faxYXiSIk5q/631qYgYggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3MjRBRjM1RjU3QzFGNTlBODI0RjkwOUUyNTIyQkFD NjU2MEE2RDAeFw0yNjA5MTcxMTA3MjVaFw0yNjA5MTgxMzAyMjVaMDMxMTAvBgNV BAMTKDNDNDFFODAzNDA3OTM3NDAzNDRBNUE1Mzk3RTAzQkMyMzc3NUYzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgOCicBPNU+LC/FpgR2UiHEunq pagRXh7fdp/l8A7jRhUGZOTPXdBB1fDZoZI9Sk3I0F/PdMK9clMsYsDCyHLQr1QX PAVKGlWDWNz8AmJ3KKI6Y4Xi7l41VD/Gk6iyrueZu8mWhc40/HOq9+XbZUUomdeh fU7RFjKllBHJCHdiuDwoxCRvmG/X1MYuNu+/h0i/Qu/32o/heq7mU4KRTJklSK32 Bqd9hlH0oU4focRUudOK0EAggucfWHM7NZj5/ly1oWG027hVKmDPzokmTCcPotgI XcK1Wr4fhtTNbhBRNdO2TqaYoDUcbwxSJj4Cz9MWu8uo21gi/icQmMCuqfzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPEHoA0B5N0A0SlpTl+A7wjd18x0wHwYDVR0j BBgwFoAUlnJK819XwfWagk+QniUiusZWCm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU1OTM0NDUtYTI1ZC00OGUwLWFiYzItYWIwNWUwNjUwNjU1LzAvOTY3MjRBRjM1 RjU3QzFGNTlBODI0RjkwOUUyNTIyQkFDNjU2MEE2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjcyNEFGMzVGNTdDMUY1OUE4MjRGOTA5RTI1MjJCQUM2NTYw QTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU1OTM0NDUtYTI1ZC00OGUwLWFi YzItYWIwNWUwNjUwNjU1LzAvOTY3MjRBRjM1RjU3QzFGNTlBODI0RjkwOUUyNTIy QkFDNjU2MEE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5cOy5NE+iBZk4yXhmGm6XJ6GM15tJmKZRz T5Z0E16Nurxj/LugKO2tHvKRLEQptWdV7avu3lB0Y9+pIi+CKecL6A0xGKIj7MSK YWWSt+H29yJ8IiPBWcN5q+yfAf3Hv9CRg9QMO5IVow3MRhFpJuoRkyfvbhNNLhN9 rJscIAvkb4sROGUeOayFNqHqnYkcSI2btI8QoN9YJA62T5pVZieRRuUqP85JnlHh bHE1DwVHEdJq7MEgpJcqEtSBg//d6So8etIrWDi9eJh0HfMGavJ0RdxxyC5wkJ1M c/KsowXC3jv/J/YFSoCIP3JM8PFJPWY6ibE8EWFDWZfZMALMBnM= -----END CERTIFICATE-----Generated at Thu Sep 17 14:02:35 2026 by rpki-client