$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft File: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft (raw, json) Hash identifier: OpZJqNUZYxUil36CVPKxggOePmsBPAeLpnHRHcjfWWM= Subject key identifier: 66:FA:31:20:AE:75:87:21:7D:65:5F:82:6D:99:88:61:0E:AC:1E:AA Authority key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C Certificate issuer: /CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Certificate serial: 2CCE45280B1A7D9CFF1788C2A2CAC047A750C787 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:54:48 +0000 Manifest this update: Wed 16 Sep 2026 20:49:48 +0000 Manifest next update: Fri 18 Sep 2026 00:08:48 +0000 Files and hashes: 1: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl (hash: YsCxGR6folkz/JP5O6t5MzpeeBsfFeeGZRZXgLwrkZk=) 2: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: /BgEs0X95g+IDSnEOlX/MgvWY3v0qZzbss60jPNLBe0=) 3: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: 2NisVTWE+HRD9wRpvxBcr4vnaVycZuCJLBHWrwbnEQ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ce:45:28:0b:1a:7d:9c:ff:17:88:c2:a2:ca:c0:47:a7:50:c7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Validity Not Before: Sep 16 20:49:48 2026 GMT Not After : Sep 18 00:08:48 2026 GMT Subject: CN=66FA3120AE7587217D655F826D9988610EAC1EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d5:7f:08:07:84:0f:e8:bb:38:df:e9:c5:84: 33:a6:cd:95:81:54:91:83:7b:4d:a8:f0:c8:e2:f7: 27:67:a7:7d:2e:ef:46:f5:31:5d:0b:57:66:5c:f8: 3b:62:c7:43:5e:b1:a8:3d:66:dc:93:c6:73:d6:ab: 33:c9:79:4f:4a:b3:d1:e6:b5:ac:ac:c8:c1:37:8d: 7a:d1:25:f2:25:df:39:e7:27:6e:6f:ad:30:3c:20: de:fe:d1:dd:97:6d:21:a7:a3:1a:29:df:b4:6a:4c: 44:dd:5c:93:7c:30:52:8b:1b:ba:ee:25:8d:e7:84: 3f:cb:46:84:36:3f:37:d6:20:d9:4d:3b:10:92:18: 3b:5f:81:7b:76:f7:3e:2d:d0:bc:93:d5:76:3c:26: 2f:fa:e3:7c:df:a1:ac:e3:bc:bf:89:bb:b5:13:42: 30:bb:56:ef:d7:68:8c:b9:74:34:7c:98:74:50:99: 93:af:13:4f:33:91:b0:7c:3e:c2:50:0c:5c:b8:95: c8:5b:19:54:19:fb:c0:ba:b8:56:ad:dd:a9:6d:9c: 56:35:39:4d:7a:36:07:68:1d:32:58:de:09:4a:07: b7:f1:34:ee:34:f2:e6:be:18:bb:6f:6b:35:a0:be: 8e:07:11:08:2e:21:5e:de:5c:22:9c:b2:9b:06:08: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FA:31:20:AE:75:87:21:7D:65:5F:82:6D:99:88:61:0E:AC:1E:AA X509v3 Authority Key Identifier: keyid:96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bc:39:31:76:be:b5:c7:ed:5f:a0:19:7d:21:f8:22:f0:e5: b6:f6:b4:19:13:09:0d:91:01:9c:e1:0d:29:17:a2:17:58:0d: 38:0e:9f:26:aa:9d:70:f1:61:56:cc:27:c2:94:b6:d5:b9:b8: bf:ba:bd:f5:c0:6a:0c:a9:8b:43:41:43:36:59:96:54:ba:a9: df:07:ab:e0:e8:97:16:ef:7c:0f:91:5d:8d:47:38:52:31:a9: ca:83:c2:17:31:8d:6d:e2:a6:1b:ac:8e:fd:80:75:1b:9d:10: 0a:03:1c:d9:da:91:de:7e:e1:aa:7b:f3:64:4d:bb:7a:b1:5d: bf:67:db:7b:01:fa:a0:5d:02:5b:dd:46:bb:ff:32:36:1d:d6: ea:8f:80:02:09:44:9a:b8:7e:c8:20:0c:c7:27:1a:4f:74:0f: 7c:28:f6:c3:97:6d:76:34:d5:27:51:9d:c2:6b:99:b0:b4:0f: 81:3e:8d:e2:a4:ec:da:14:87:0e:a8:73:d2:89:c8:ee:2e:8b: fd:db:b2:55:14:7c:84:3b:dd:e0:3e:c8:bf:58:17:89:26:59: 65:34:73:db:6c:3e:ec:93:3c:fb:f0:9a:1e:d4:cd:87:91:03: 2a:26:10:c9:ab:a1:ee:4a:c0:15:fa:1f:b5:92:85:0e:39:8d: 1a:54:7e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULM5FKAsafZz/F4jCosrAR6dQx4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0MwNjA2 RUM3NzM0QzAeFw0yNjA5MTYyMDQ5NDhaFw0yNjA5MTgwMDA4NDhaMDMxMTAvBgNV BAMTKDY2RkEzMTIwQUU3NTg3MjE3RDY1NUY4MjZEOTk4ODYxMEVBQzFFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX1X8IB4QP6Ls43+nFhDOmzZWB VJGDe02o8Mji9ydnp30u70b1MV0LV2Zc+Dtix0Nesag9ZtyTxnPWqzPJeU9Ks9Hm taysyME3jXrRJfIl3znnJ25vrTA8IN7+0d2XbSGnoxop37RqTETdXJN8MFKLG7ru JY3nhD/LRoQ2PzfWINlNOxCSGDtfgXt29z4t0LyT1XY8Ji/643zfoazjvL+Ju7UT QjC7Vu/XaIy5dDR8mHRQmZOvE08zkbB8PsJQDFy4lchbGVQZ+8C6uFat3altnFY1 OU16NgdoHTJY3glKB7fxNO408ua+GLtvazWgvo4HEQguIV7eXCKcspsGCEArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZvoxIK51hyF9ZV+CbZmIYQ6sHqowHwYDVR0j BBgwFoAUlr5tN9YjGySvrcl83GfAYG7Hc0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU3OTk2ZjUtYTkzNC00YjQ0LTg1NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdE NjIzMUIyNEFGQURDOTdDREM2N0MwNjA2RUM3NzM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkJFNkQzN0Q2MjMxQjI0QUZBREM5N0NEQzY3QzA2MDZFQzc3 MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1 NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0Mw NjA2RUM3NzM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu8OTF2vrXH7V+gGX0h+CLw5bb2tBkTCQ2R AZzhDSkXohdYDTgOnyaqnXDxYVbMJ8KUttW5uL+6vfXAagypi0NBQzZZllS6qd8H q+DolxbvfA+RXY1HOFIxqcqDwhcxjW3iphusjv2AdRudEAoDHNnakd5+4ap782RN u3qxXb9n23sB+qBdAlvdRrv/MjYd1uqPgAIJRJq4fsggDMcnGk90D3wo9sOXbXY0 1SdRncJrmbC0D4E+jeKk7NoUhw6oc9KJyO4ui/3bslUUfIQ73eA+yL9YF4kmWWU0 c9tsPuyTPPvwmh7UzYeRAyomEMmroe5KwBX6H7WShQ45jRpUfqg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:05 2026 by rpki-client