
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
File: 096782C6E108EAAEE59692E8A1E468AA698658F3.mft (raw, json)
Hash identifier: gsTbFe+FmVm+B4Xhty9ENK7kMGvn7ZXIM65LD02MSgc=
Subject key identifier: 82:41:C7:6E:07:47:39:3D:F2:CB:CB:8A:6C:00:B5:AA:F8:51:A5:25
Authority key identifier: 09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3
Certificate issuer: /CN=096782C6E108EAAEE59692E8A1E468AA698658F3
Certificate serial: 0F17AAF45822A2DC4C48E28AD88DC6BA26393D79
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 16:34:37 +0000
Manifest this update: Wed 16 Sep 2026 16:29:37 +0000
Manifest next update: Thu 17 Sep 2026 18:07:37 +0000
Files and hashes: 1: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: tMpre+MZxLR5ON6NNmXKYRn2JHOCOghwsK548yy7sUU=)
2: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 2fUOKnvs8nbAYX5IeKT2gpYQH5FYCwB7JlXdvrKSoYU=)
3: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: MoX5ilaIoQNT0YRgbynks7+fFHyOxX0urPfftQqHjU8=)
4: 096782C6E108EAAEE59692E8A1E468AA698658F3.crl (hash: n1VQKSJXbfsDwyeHcoPwjXjPNDDbP5yEUzws682OVKg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl
rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:17:aa:f4:58:22:a2:dc:4c:48:e2:8a:d8:8d:c6:ba:26:39:3d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096782C6E108EAAEE59692E8A1E468AA698658F3
Validity
Not Before: Sep 16 16:29:37 2026 GMT
Not After : Sep 17 18:07:37 2026 GMT
Subject: CN=8241C76E0747393DF2CBCB8A6C00B5AAF851A525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:a7:f2:82:7c:19:b5:21:29:f0:66:31:0b:
b1:4c:2f:6a:dd:9c:d7:1a:ef:8f:2e:8c:84:e8:84:
c3:f0:06:fc:e6:26:ef:ca:4a:8d:6a:14:0c:15:64:
29:49:69:85:43:dd:9c:17:ed:3b:60:18:23:cf:1c:
1f:d3:a7:48:85:c6:c6:42:8e:5f:01:76:59:9d:12:
24:0d:ed:6e:4c:40:47:f6:d5:0a:21:12:b9:b8:b1:
f4:53:de:10:ad:6c:e6:7f:df:25:14:40:d6:02:a3:
47:56:39:3b:a5:b0:26:de:12:d8:2f:51:91:da:c6:
ec:ee:2d:a3:d4:3b:22:6e:63:aa:1c:40:6e:8c:f6:
d9:1e:1b:72:ca:b8:f1:16:8f:9a:06:f0:ba:32:17:
68:de:65:b1:4f:1f:6b:4d:57:cd:bc:37:76:a3:c1:
28:01:b7:82:65:cc:34:47:77:89:15:26:60:a5:42:
8a:23:40:0c:6e:82:f9:4c:be:fc:49:99:d9:6b:ac:
69:3a:d5:a9:9f:2c:c6:ba:ca:93:4d:1f:55:8c:27:
77:68:a6:b5:3a:11:c2:c3:d5:17:e7:4a:63:8f:76:
55:54:7b:96:96:17:1e:9e:d4:03:5e:ac:9e:ef:72:
f5:27:da:6c:9d:ec:2d:ec:81:ac:e3:5e:5f:82:5e:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:41:C7:6E:07:47:39:3D:F2:CB:CB:8A:6C:00:B5:AA:F8:51:A5:25
X509v3 Authority Key Identifier:
keyid:09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b8:db:62:48:e6:fa:a0:b6:ef:68:1f:ad:a5:7b:e4:91:22:
44:0a:0b:eb:96:59:15:04:55:f4:91:11:6a:7f:7d:23:bf:8c:
55:65:de:63:be:aa:75:57:2e:76:2b:24:81:46:dc:76:ef:52:
0f:dd:e2:e4:ce:6b:70:18:c2:f9:02:88:d2:d9:6b:7b:2e:26:
a1:ef:f4:92:81:f6:45:0f:b2:40:71:ca:7c:b8:ba:da:fa:08:
b8:a2:64:2c:c4:1b:30:90:02:14:0f:82:69:85:21:21:b2:cc:
cc:ae:3b:7c:cf:7d:f0:b2:e6:eb:6d:d8:86:e8:90:68:9e:f1:
ee:bf:6a:fd:31:af:9b:82:1d:95:92:08:ab:45:e0:b4:37:37:
97:9c:de:37:cc:17:2c:f8:af:ee:a2:dd:f8:25:f6:f8:a0:96:
01:d4:18:26:fd:ea:3b:5d:41:c3:0b:91:d4:f1:38:63:ca:0f:
72:a0:17:99:e1:c8:3a:f8:3e:57:8a:ff:3a:81:ac:a7:fa:8e:
9d:b1:85:4f:8d:81:41:36:da:43:6f:f1:bf:19:e1:b6:f4:47:
e5:78:81:ba:8c:ae:60:31:dd:aa:07:3a:40:b0:88:d6:c2:8e:
66:0f:05:ba:db:4e:43:3e:7c:d3:a2:c9:f6:a7:ab:97:b8:36:
44:bd:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 11:45:07 2026 by rpki-client