
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
File: 96A5BEF01619313B13000152FF7D9849B080E6AD.mft (raw, json)
Hash identifier: vuWxsPPnr40lAMN7xu54flj8t83q+k3UQ3PnlTSnW4E=
Subject key identifier: 76:67:26:1E:7F:74:60:99:D7:CA:C6:D4:92:2F:21:3D:C9:4F:A3:42
Authority key identifier: 96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD
Certificate issuer: /CN=96A5BEF01619313B13000152FF7D9849B080E6AD
Certificate serial: 33B80B0B4CD7DEFFDFA4684FFB8E5EC2182B7054
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 22:36:52 +0000
Manifest this update: Wed 16 Sep 2026 22:31:52 +0000
Manifest next update: Thu 17 Sep 2026 23:16:52 +0000
Files and hashes: 1: 96A5BEF01619313B13000152FF7D9849B080E6AD.crl (hash: OqvR/Dv735P8CnLjPgsXNGQqMv0dsNAIQZvg4QgQuS8=)
2: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: RDa+Zhnigfqo7biWFi13W+chpPOznuVZnbRPHv7vJrE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl
rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b8:0b:0b:4c:d7:de:ff:df:a4:68:4f:fb:8e:5e:c2:18:2b:70:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96A5BEF01619313B13000152FF7D9849B080E6AD
Validity
Not Before: Sep 16 22:31:52 2026 GMT
Not After : Sep 17 23:16:52 2026 GMT
Subject: CN=7667261E7F746099D7CAC6D4922F213DC94FA342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:5d:6e:f2:b7:77:c9:0e:c3:dc:12:98:5d:
a9:13:23:92:c9:6e:52:dc:63:df:26:86:1d:05:8f:
68:7f:f4:7e:ba:00:7b:37:b9:78:5a:c1:db:0f:b5:
6e:1d:8b:1e:32:c9:36:0f:ea:9a:dd:56:40:df:67:
35:9e:0b:bf:20:34:c9:15:b4:a3:4c:2b:fc:36:96:
9a:4f:6d:69:b1:9b:01:57:8a:14:d6:b4:2e:7f:6c:
9e:ea:b3:7c:48:93:24:a2:e9:95:a3:73:b1:3e:f6:
64:ac:fd:fd:c3:0a:cd:38:ac:2d:50:b9:b7:f3:23:
06:5f:92:10:c2:e0:97:c6:69:11:f4:4b:ff:a2:7e:
ea:df:fb:6e:12:e2:8b:8f:b1:4a:de:1e:a2:f4:00:
49:5c:29:4c:8c:72:64:5d:aa:a9:0b:66:6e:9c:17:
5f:7e:cd:1e:10:73:df:b9:30:2d:ad:2c:73:3f:81:
c4:c0:22:81:f9:19:f0:cd:9b:49:cd:bf:a5:e3:2e:
69:18:26:bf:5d:51:a9:3d:85:0c:cc:ce:cf:c6:00:
47:1f:95:65:fb:76:8f:47:07:ed:43:3a:43:eb:84:
cc:f1:be:a6:ef:af:ae:2c:c7:3b:89:c9:ab:c2:35:
6a:e4:34:8b:b3:64:8e:f5:b2:1f:84:f2:7d:bb:18:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:26:1E:7F:74:60:99:D7:CA:C6:D4:92:2F:21:3D:C9:4F:A3:42
X509v3 Authority Key Identifier:
keyid:96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4a:70:de:59:a9:03:0b:0f:80:ec:7d:55:63:72:6d:ea:3f:
38:d6:60:dc:c9:aa:7c:d4:1f:16:6a:ae:6d:1d:9e:45:06:f6:
b6:4d:99:46:30:7f:5e:94:6a:fb:7a:6e:07:e3:4d:66:8f:b1:
b1:f5:ef:07:a8:01:76:30:77:86:4c:ce:d5:a9:20:4f:5e:05:
86:eb:41:11:14:2a:27:e8:43:49:b6:6a:3a:2f:f3:0e:3b:ca:
14:53:b9:76:25:62:8b:63:2a:af:95:56:d3:0c:65:e5:ce:f7:
8c:e2:55:54:a0:37:e7:16:e4:61:ee:8c:3d:3b:49:d1:27:35:
0f:62:3f:70:80:f4:12:8b:7b:13:27:c1:eb:b7:07:1c:f4:21:
e8:14:d6:7f:4b:4a:00:bd:45:ca:f3:87:e9:41:f5:08:62:f9:
c4:11:99:de:8f:d8:09:81:a7:c2:97:18:dd:74:12:bd:09:52:
1b:45:e0:e8:60:d8:f1:2a:81:06:01:48:8f:40:95:05:0a:f3:
7e:ac:f8:6b:65:11:b5:10:8d:af:7c:4b:70:98:fa:a1:1b:e1:
c2:51:d8:15:37:3b:6e:2a:df:d2:80:d0:79:86:94:18:ca:e0:
93:3e:99:82:6b:ea:98:7b:2f:fe:9c:f5:e7:73:5a:f7:95:3d:
f9:1f:71:59
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM7gLC0zX3v/fpGhP+45ewhgrcFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZBNUJFRjAxNjE5MzEzQjEzMDAwMTUyRkY3RDk4NDlC
MDgwRTZBRDAeFw0yNjA5MTYyMjMxNTJaFw0yNjA5MTcyMzE2NTJaMDMxMTAvBgNV
BAMTKDc2NjcyNjFFN0Y3NDYwOTlEN0NBQzZENDkyMkYyMTNEQzk0RkEzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAV1u8rd3yQ7D3BKYXakTI5LJ
blLcY98mhh0Fj2h/9H66AHs3uXhawdsPtW4dix4yyTYP6prdVkDfZzWeC78gNMkV
tKNMK/w2lppPbWmxmwFXihTWtC5/bJ7qs3xIkySi6ZWjc7E+9mSs/f3DCs04rC1Q
ubfzIwZfkhDC4JfGaRH0S/+ifurf+24S4ouPsUreHqL0AElcKUyMcmRdqqkLZm6c
F19+zR4Qc9+5MC2tLHM/gcTAIoH5GfDNm0nNv6XjLmkYJr9dUak9hQzMzs/GAEcf
lWX7do9HB+1DOkPrhMzxvqbvr64sxzuJyavCNWrkNIuzZI71sh+E8n27GHlvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdmcmHn90YJnXysbUki8hPclPo0IwHwYDVR0j
BBgwFoAUlqW+8BYZMTsTAAFS/32YSbCA5q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDZlMmEyZTEtMWIyZC00OGNjLTlkYjMtNjdhODFhZjY3MDYyLzAvOTZBNUJFRjAx
NjE5MzEzQjEzMDAwMTUyRkY3RDk4NDlCMDgwRTZBRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NkE1QkVGMDE2MTkzMTNCMTMwMDAxNTJGRjdEOTg0OUIwODBF
NkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk
YjMtNjdhODFhZjY3MDYyLzAvOTZBNUJFRjAxNjE5MzEzQjEzMDAwMTUyRkY3RDk4
NDlCMDgwRTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGBKcN5ZqQMLD4DsfVVjcm3qPzjWYNzJqnzU
HxZqrm0dnkUG9rZNmUYwf16Uavt6bgfjTWaPsbH17weoAXYwd4ZMztWpIE9eBYbr
QREUKifoQ0m2ajov8w47yhRTuXYlYotjKq+VVtMMZeXO94ziVVSgN+cW5GHujD07
SdEnNQ9iP3CA9BKLexMnweu3Bxz0IegU1n9LSgC9Rcrzh+lB9Qhi+cQRmd6P2AmB
p8KXGN10Er0JUhtF4Ohg2PEqgQYBSI9AlQUK836s+GtlEbUQja98S3CY+qEb4cJR
2BU3O24q39KA0HmGlBjK4JM+mYJr6ph7L/6c9edzWveVPfkfcVk=
-----END CERTIFICATE-----
Generated at Thu Sep 17 15:09:08 2026 by rpki-client