
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft
File: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft (raw, json)
Hash identifier: gaFjLvK2ukM+VSCUms7CJiaxPd5875MkbNyTjm4d4Ds=
Subject key identifier: 9A:7D:45:0F:DA:CB:8D:4C:80:51:22:AF:1A:61:53:8A:39:62:74:64
Authority key identifier: 96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71
Certificate issuer: /CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271
Certificate serial: 261FE5CEB496004EC820DE29D6EC76211A6A2F80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 18:37:13 +0000
Manifest this update: Wed 16 Sep 2026 18:32:13 +0000
Manifest next update: Thu 17 Sep 2026 20:50:13 +0000
Files and hashes: 1: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl (hash: 8cgWoygRF9sVlga76ibe9ERBRST+ahfDov4cuv9bY5Q=)
2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: O7VzOc1QQXPH4ovFqaeUilVVeRWPbXN3yznnumHTcH0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl
rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:1f:e5:ce:b4:96:00:4e:c8:20:de:29:d6:ec:76:21:1a:6a:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271
Validity
Not Before: Sep 16 18:32:13 2026 GMT
Not After : Sep 17 20:50:13 2026 GMT
Subject: CN=9A7D450FDACB8D4C805122AF1A61538A39627464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:d0:6f:f3:a8:24:26:af:24:dc:7c:bf:25:
03:2e:b1:c2:3f:74:c4:61:8b:e2:0a:38:da:8e:de:
ac:f9:90:d2:1a:56:d9:72:bc:69:bc:36:3f:e2:bc:
18:8b:40:05:ba:05:a0:2c:4b:8d:69:72:61:d0:19:
df:be:9c:4c:1e:61:b0:f3:11:9d:6e:e7:ec:51:38:
d4:31:9a:55:6f:d5:6c:f0:15:9b:7e:77:00:5d:61:
2a:19:83:b8:6f:6c:a3:61:84:21:11:4c:81:2e:02:
23:4a:64:f9:b6:22:77:d2:d8:d3:53:01:45:9c:ed:
04:c8:5f:00:d7:1c:cb:a0:2d:05:b8:85:27:26:79:
0b:e4:c8:65:c1:d6:18:cc:03:86:16:6a:28:31:e7:
c7:e8:c0:6d:4f:64:7b:29:e4:f1:d7:3f:89:b1:6f:
37:fd:2e:13:73:20:13:a2:6c:29:6c:a9:34:68:3b:
e8:89:bc:25:32:a9:69:fc:08:25:88:2c:25:b5:50:
50:f0:b0:f0:52:8d:71:2b:7c:32:6b:84:b4:61:46:
54:7e:14:51:15:f7:ed:83:17:67:01:3d:63:15:bf:
9a:64:1d:4d:ed:72:99:85:0d:40:dd:79:9b:91:68:
9b:fe:34:ea:77:7d:44:92:61:9f:1c:2b:64:36:d6:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7D:45:0F:DA:CB:8D:4C:80:51:22:AF:1A:61:53:8A:39:62:74:64
X509v3 Authority Key Identifier:
keyid:96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d1:61:4c:fd:79:18:0f:b5:9b:a4:57:03:58:7b:ff:73:8a:
39:99:81:a3:1b:27:f0:29:78:23:b3:ce:d0:b2:4b:63:02:41:
98:a2:36:8f:e8:85:0a:f6:f5:0c:26:58:4b:b8:74:6d:ef:78:
34:7b:07:9d:e8:03:d6:9a:59:44:2d:3e:d9:2b:61:85:62:30:
d8:5c:5c:99:28:da:ad:57:e3:ec:fd:b3:f9:00:78:d4:10:fa:
b9:65:97:9b:1a:5c:0a:1c:c0:41:ac:09:7c:07:d9:58:4f:ca:
b4:5f:9f:68:67:2b:38:66:54:0c:e8:82:55:62:eb:b4:78:9e:
17:35:78:95:04:ad:38:ad:96:aa:ad:ff:f7:c5:d2:db:d3:6b:
6c:b8:17:df:9f:5f:72:c7:6b:57:7e:8c:17:17:07:02:49:9c:
5c:3e:63:28:06:46:9b:77:c2:f3:ed:7a:65:82:23:03:df:2b:
70:5b:d0:d8:dd:57:7e:47:bf:87:1e:7a:78:33:fe:2c:ad:5b:
4d:f9:13:9f:a3:e4:69:a3:2f:f5:3e:c2:ca:5f:86:07:c7:8d:
57:29:88:68:52:58:e9:f2:5f:99:8f:72:fc:0e:f6:86:60:ab:
b1:81:65:2a:ba:4b:e4:bc:02:d9:ad:9f:7d:02:5c:97:71:9c:
85:fb:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:23:17 2026 by rpki-client