
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
File: 96FDA607CDE580764664CCDAA75B9ECDACB44700.mft (raw, json)
Hash identifier: ytDFY2w0qhDuFr6ikI+OBYKwa9DuSkTAIFrP1NVbAyg=
Subject key identifier: 05:09:3B:32:59:C9:33:34:37:89:11:9E:CE:18:5D:90:2C:C4:E8:B0
Authority key identifier: 96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00
Certificate issuer: /CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
Certificate serial: 74AF3D7A034F249A3B1F8A424BCD59FF4BE6DDF6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 01:55:57 +0000
Manifest this update: Thu 17 Sep 2026 01:50:57 +0000
Manifest next update: Fri 18 Sep 2026 04:07:57 +0000
Files and hashes: 1: 96FDA607CDE580764664CCDAA75B9ECDACB44700.crl (hash: nLMowFjm8hnTPJ1NixpzmOeQNu1ilbYDqRRsmGwWNYg=)
2: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: Xmk4AKXAk65syZMNokwtsrkCl9OG2CFthVNLs1MeEBs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl
rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:af:3d:7a:03:4f:24:9a:3b:1f:8a:42:4b:cd:59:ff:4b:e6:dd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
Validity
Not Before: Sep 17 01:50:57 2026 GMT
Not After : Sep 18 04:07:57 2026 GMT
Subject: CN=05093B3259C933343789119ECE185D902CC4E8B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:47:a4:d7:24:55:77:20:b8:5a:43:54:f6:
c6:10:dc:78:70:47:1f:43:35:3a:71:b1:03:6b:64:
91:1f:54:1d:9e:aa:f8:20:a5:a0:41:32:29:f8:85:
8d:a5:52:f3:cf:c8:f4:2b:57:36:d8:9d:b9:a1:bf:
f4:62:2a:f6:f9:a5:81:4d:05:9d:d8:5d:d1:ef:df:
68:f6:60:13:fd:13:a4:0e:77:c0:9f:5a:15:61:9a:
57:a9:51:b1:45:6e:04:5a:48:a7:07:c1:29:0d:b8:
c9:1f:a3:3f:3b:1c:1d:00:01:5d:f1:b8:39:dc:0e:
0f:90:3c:80:e7:a1:52:53:19:de:2d:d7:db:a7:fc:
f0:93:69:7f:1b:16:b2:8e:2a:ee:1d:11:18:ff:10:
3d:8c:8e:27:33:77:33:56:07:ae:44:54:8a:5d:87:
fd:ee:89:0c:38:4b:b1:de:90:01:9e:b3:c0:a3:7c:
f4:63:bc:66:2b:ec:d0:3e:25:a8:4c:15:a4:57:ce:
22:9d:5b:75:f5:b8:aa:22:10:b9:9b:a1:6d:b5:93:
5d:6e:ac:0a:2a:08:be:b3:c5:97:70:2c:a5:1e:c6:
4d:72:ed:85:5f:54:fd:f4:7e:69:40:d2:db:69:3e:
28:51:31:0e:4a:d1:26:2b:1b:cf:e5:8a:00:23:3f:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:09:3B:32:59:C9:33:34:37:89:11:9E:CE:18:5D:90:2C:C4:E8:B0
X509v3 Authority Key Identifier:
keyid:96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a9:49:f0:ec:42:f6:8b:65:5d:ca:5f:c2:07:7e:99:64:61:
ea:87:78:68:d0:b4:85:39:a5:ce:36:07:4e:1b:c3:a3:f6:65:
d1:6d:59:49:43:7e:3c:be:a3:e5:bb:b4:2d:0d:40:8e:f4:fb:
0c:cb:7a:ad:24:a2:aa:22:18:cc:27:5e:f2:18:fa:2f:2c:90:
e1:bb:82:57:ab:7d:85:cc:d6:95:c6:6d:6d:80:4d:63:dd:6d:
ba:16:24:d3:5a:09:fa:cb:e3:7e:35:9c:a9:53:02:65:1f:94:
74:49:a5:78:d4:92:11:e3:e6:ee:04:a8:a5:66:b3:2f:c2:7a:
88:e4:e5:6f:ec:34:96:d6:a0:a1:03:81:ac:33:d9:94:a5:2c:
dd:89:be:b0:36:ff:7a:b9:00:a3:76:a5:bd:be:7a:70:0d:f9:
aa:27:ec:00:3d:06:d1:52:fa:d6:17:ad:8e:d6:b3:cd:c4:31:
9b:40:2f:54:60:b5:67:ac:e1:70:18:7a:64:06:6b:f2:77:ff:
42:15:66:8c:3d:ac:3b:e7:56:25:f1:18:39:db:1b:8e:df:1c:
b2:2c:a0:b2:6e:7c:b9:e7:1c:d2:22:b1:fe:73:9f:98:3c:07:
b3:69:3e:24:e1:f3:6c:82:06:10:af:d5:92:9b:1d:61:dd:0e:
30:8d:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 06:43:51 2026 by rpki-client