$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft File: 96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft (raw, json) Hash identifier: 6aLisP2xZ1zVUdBntYDCLspRLIN70au6wpjNZbUiDp8= Subject key identifier: 5D:54:7C:49:FF:B5:C3:19:C8:0E:83:ED:69:ED:C5:43:AD:7B:BB:44 Authority key identifier: 96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65 Certificate issuer: /CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65 Certificate serial: 462836907D13CA107457015DA56420DD9F7DBD11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft Manifest number: BA Signing time: Fri 18 Sep 2026 01:40:22 +0000 Manifest this update: Fri 18 Sep 2026 01:35:22 +0000 Manifest next update: Sat 19 Sep 2026 03:06:22 +0000 Files and hashes: 1: 96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl (hash: XwxO0OarRPh5ENEMc5dNC4jbtt1WdCXrwj3RWJflpFo=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: qwEnHxrWVyiK94N8U1nG/pG5hFflP0C0qwS5eIrzLng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 03:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:28:36:90:7d:13:ca:10:74:57:01:5d:a5:64:20:dd:9f:7d:bd:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65 Validity Not Before: Sep 18 01:35:22 2026 GMT Not After : Sep 19 03:06:22 2026 GMT Subject: CN=5D547C49FFB5C319C80E83ED69EDC543AD7BBB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:9f:e0:7e:ac:40:08:94:79:86:08:39:74: 9b:fa:9a:56:67:02:5a:dc:ac:08:05:e4:c9:51:d8: 68:56:7d:de:81:99:90:aa:29:45:51:28:09:5a:c4: 18:bb:a4:71:76:6e:c7:df:29:cd:cd:bc:a4:64:a2: ae:48:d1:b1:a4:fe:65:9f:93:0f:d0:b9:d8:a7:4d: e7:42:9b:cd:9d:c3:19:19:48:a6:52:9d:4d:ab:37: 81:b0:83:8a:1b:e3:9d:da:09:d5:9c:e5:32:1f:2a: b9:12:5f:5c:ac:d2:e3:d1:81:58:d8:49:0b:f0:1f: 7d:1a:ee:c2:79:17:2f:d4:80:8c:18:e9:57:67:38: 6a:6d:0c:ac:70:27:9b:df:20:cb:a7:a6:6a:7a:06: 2b:35:c2:a1:c3:a2:ee:63:1e:3c:08:42:01:ec:30: 8e:28:9c:06:6e:1c:47:ff:ed:93:6e:95:3f:41:76: 6a:5e:a8:0f:8f:5b:be:88:1d:cd:5c:16:16:bd:d1: e3:1b:b5:d5:e5:41:1d:0c:fb:3d:da:15:45:d3:62: b8:05:1a:32:9b:8d:79:f6:cb:93:d0:bb:a5:d5:88: 24:00:d3:54:80:1a:a5:5f:9e:ae:d6:b0:64:1d:9e: aa:46:54:83:cd:1d:1b:21:01:63:11:65:55:9a:1d: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:54:7C:49:FF:B5:C3:19:C8:0E:83:ED:69:ED:C5:43:AD:7B:BB:44 X509v3 Authority Key Identifier: keyid:96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:66:96:0f:a4:32:ed:f4:f6:d2:37:75:9b:ce:0e:e2:b6:6c: 69:bf:7e:e1:80:bf:44:69:09:ca:a8:5c:89:0e:81:9b:37:eb: 44:a0:d9:e2:bb:b3:1f:c3:87:21:0d:92:80:70:c1:31:b2:e9: 58:eb:17:ff:50:90:88:ff:cf:17:dd:2b:61:f9:a8:3b:d0:e3: 65:63:47:cb:19:73:8f:8d:82:02:cc:22:6d:ed:f5:6d:63:ab: 14:1c:1a:6d:fa:86:c8:46:68:ae:ed:15:ab:53:44:c0:4c:94: 3b:90:f8:af:d0:92:da:ed:3c:ae:16:a7:e4:f5:6b:ea:c9:f5: 3e:4c:ed:4b:d8:c2:a5:77:21:a9:9f:ae:eb:3d:8a:62:e7:97: 8c:88:3b:85:f1:10:53:ff:51:fc:4f:1a:85:8e:12:99:e9:dc: 44:f3:80:1b:d4:49:4e:92:08:51:86:c1:03:c0:10:56:7e:70: 5b:d6:47:c6:ef:8c:ec:58:61:3e:2d:42:6e:c8:1e:c9:9c:f7: 55:89:9f:5d:de:d5:1c:38:d3:df:e0:e8:40:db:e9:5f:e8:9b: a7:1f:80:30:c2:46:d8:e8:5b:0b:dd:c4:39:0f:06:4e:09:e2: d1:6a:49:e5:55:76:44:b6:5e:7c:fe:85:0f:86:1c:80:58:34: de:ab:89:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURig2kH0TyhB0VwFdpWQg3Z99vREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCMEYwN0NFQzg3RDM5RkU2RDZDRjAyNzcxMDlFMEM0 NkI1MEY2NTAeFw0yNjA5MTgwMTM1MjJaFw0yNjA5MTkwMzA2MjJaMDMxMTAvBgNV BAMTKDVENTQ3QzQ5RkZCNUMzMTlDODBFODNFRDY5RURDNTQzQUQ3QkJCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7up/gfqxACJR5hgg5dJv6mlZn AlrcrAgF5MlR2GhWfd6BmZCqKUVRKAlaxBi7pHF2bsffKc3NvKRkoq5I0bGk/mWf kw/QudinTedCm82dwxkZSKZSnU2rN4Gwg4ob453aCdWc5TIfKrkSX1ys0uPRgVjY SQvwH30a7sJ5Fy/UgIwY6VdnOGptDKxwJ5vfIMunpmp6Bis1wqHDou5jHjwIQgHs MI4onAZuHEf/7ZNulT9BdmpeqA+PW76IHc1cFha90eMbtdXlQR0M+z3aFUXTYrgF GjKbjXn2y5PQu6XViCQA01SAGqVfnq7WsGQdnqpGVIPNHRshAWMRZVWaHcydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXVR8Sf+1wxnIDoPtae3FQ617u0QwHwYDVR0j BBgwFoAUlrDwfOyH05/m1s8CdxCeDEa1D2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEyMzhhNjItNmE5Ni00M2JjLTg3YWYtMDJkYjY0MWY3MTA5LzAvOTZCMEYwN0NF Qzg3RDM5RkU2RDZDRjAyNzcxMDlFMEM0NkI1MEY2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkIwRjA3Q0VDODdEMzlGRTZENkNGMDI3NzEwOUUwQzQ2QjUw RjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvOTZCMEYwN0NFQzg3RDM5RkU2RDZDRjAyNzcxMDlF MEM0NkI1MEY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxmlg+kMu309tI3dZvODuK2bGm/fuGAv0Rp CcqoXIkOgZs360Sg2eK7sx/DhyENkoBwwTGy6VjrF/9QkIj/zxfdK2H5qDvQ42Vj R8sZc4+NggLMIm3t9W1jqxQcGm36hshGaK7tFatTRMBMlDuQ+K/QktrtPK4Wp+T1 a+rJ9T5M7UvYwqV3Iamfrus9imLnl4yIO4XxEFP/UfxPGoWOEpnp3ETzgBvUSU6S CFGGwQPAEFZ+cFvWR8bvjOxYYT4tQm7IHsmc91WJn13e1Rw409/g6EDb6V/om6cf gDDCRtjoWwvdxDkPBk4J4tFqSeVVdkS2Xnz+hQ+GHIBYNN6rie4= -----END CERTIFICATE-----Generated at Fri Sep 18 14:04:55 2026 by rpki-client