
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
File: 096E75D80B559B9824609BA61681D845A0CB0F77.mft (raw, json)
Hash identifier: w9gEVnRSCclieuPRi0i3B28qcvbGWoBg+ZmUMC2fM5o=
Subject key identifier: 8A:6F:B4:B0:3D:01:D4:24:29:BE:69:1D:75:BF:42:B2:76:E4:41:5E
Authority key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77
Certificate issuer: /CN=096E75D80B559B9824609BA61681D845A0CB0F77
Certificate serial: 532D64F9D91473770E505EB48E9AD0B9717582EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 06:21:15 +0000
Manifest this update: Thu 17 Sep 2026 06:16:15 +0000
Manifest next update: Fri 18 Sep 2026 07:52:15 +0000
Files and hashes: 1: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: 0malPwz+RTtf0zfQa5ZCgjL04DU4eZWwOeTz+IpVOtc=)
2: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: 6XmdhHpwmPbSLXc9MObJukxUpYpgVWG679zPioXW/jI=)
3: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: 0yluROs0GMVlDuEEaLUkv4SFh8PCi14+YfNxdsvSrjw=)
4: 096E75D80B559B9824609BA61681D845A0CB0F77.crl (hash: D1MPROId29L2wA1kpCL3OrttSaU4drohd1Q1UygcWkQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl
rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2d:64:f9:d9:14:73:77:0e:50:5e:b4:8e:9a:d0:b9:71:75:82:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096E75D80B559B9824609BA61681D845A0CB0F77
Validity
Not Before: Sep 17 06:16:15 2026 GMT
Not After : Sep 18 07:52:15 2026 GMT
Subject: CN=8A6FB4B03D01D42429BE691D75BF42B276E4415E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:ab:cb:4b:54:5f:53:96:9d:f5:75:90:02:
0c:ee:db:cc:46:81:6a:20:8d:a4:3e:3d:db:ed:01:
eb:12:31:96:f3:58:72:54:98:01:7a:9c:9b:09:0d:
5e:db:ea:77:1f:03:95:5f:3b:1e:d1:d6:23:0e:4e:
bb:f2:d4:ef:1f:c5:14:5c:46:18:b8:ba:ff:8a:b4:
48:b2:3e:34:b6:02:12:cd:57:73:7e:27:fe:85:1d:
ac:75:dd:4a:6d:30:5b:ec:a2:d7:a1:18:f9:6e:70:
83:e3:4f:a7:09:f7:8a:84:be:36:e5:dc:0a:22:20:
23:b6:bb:84:a5:d5:97:4d:39:47:6a:c1:93:9e:a9:
57:23:af:64:b6:1e:e3:06:06:1c:62:72:80:ed:9b:
98:ee:98:64:23:5d:d9:42:ca:7a:14:c7:0e:e4:da:
f7:b7:9a:d0:01:73:6c:63:3c:f9:4a:88:c7:13:e0:
89:6a:73:92:e8:d4:6c:01:6a:42:99:91:81:05:c6:
12:24:d2:44:7f:b0:82:79:c8:a4:71:5d:e1:44:9e:
54:f1:05:7a:ec:10:19:2d:48:28:5e:05:d2:22:e7:
7c:56:bd:a2:b3:b4:3c:82:b1:fd:15:e8:10:71:0e:
25:ba:b4:a3:9d:6b:ac:92:60:36:a7:12:2a:2f:50:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6F:B4:B0:3D:01:D4:24:29:BE:69:1D:75:BF:42:B2:76:E4:41:5E
X509v3 Authority Key Identifier:
keyid:09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bc:2d:89:31:64:6e:b1:f6:cb:45:be:60:8c:27:02:85:d8:
04:6c:87:c3:26:ba:94:75:89:ff:22:15:d7:cd:12:89:49:7f:
b6:40:29:2a:6e:4f:a7:31:ff:44:de:1e:15:1e:7b:d1:87:2d:
d1:7f:b4:ba:4a:3c:a5:7c:77:73:5d:4c:69:1b:b6:ba:44:02:
06:6c:fa:55:11:05:d1:0f:81:db:a0:82:e5:f4:ae:f7:b9:56:
d8:6e:3a:e7:04:43:48:74:17:32:26:2b:41:67:70:a5:10:0f:
63:e5:15:d5:e1:59:60:79:97:7b:aa:c8:fb:29:89:97:ae:b4:
dc:bc:6f:60:10:45:ef:59:e7:14:19:5c:8d:8b:ae:ec:18:e0:
04:43:a2:ae:ef:54:81:dc:85:a2:0d:17:84:64:34:c7:3c:c1:
25:5b:5f:a2:99:60:b6:a0:f3:b1:70:ca:f5:4c:25:75:70:97:
07:c9:f1:8e:95:83:84:f5:83:22:b1:ad:ef:06:07:5d:00:b1:
c7:b6:be:37:df:2a:0a:a0:ea:68:a2:ae:b5:a1:3f:cc:c2:92:
3d:70:1a:dc:a7:9e:19:9d:2f:a1:d4:54:9e:9d:48:4f:a3:a2:
c6:34:f8:71:81:3d:a2:e6:0f:30:11:c3:15:56:d1:f8:ce:45:
ff:95:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:48:05 2026 by rpki-client