$ rpki-client -vvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json) Hash identifier: t9u3XkNFmZEUw+zzROkwMgsJq4CVvGFe/w2T0ha/12Y= Subject key identifier: C0:3E:7B:60:A3:17:EA:A1:45:FD:D7:46:60:A1:34:73:2F:84:5E:C5 Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Certificate serial: 7BBCFAD9073D5E6B6F88509F8C4F9771A95AD1EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:58:21 +0000 Manifest this update: Thu 23 Jul 2026 18:53:21 +0000 Manifest next update: Fri 24 Jul 2026 22:29:21 +0000 Files and hashes: 1: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: bsxNhpzWNMIpaO9+Lxfc8tBuwkUf1QQx0/loiNOiLfo=) 2: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=) 3: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bc:fa:d9:07:3d:5e:6b:6f:88:50:9f:8c:4f:97:71:a9:5a:d1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Validity Not Before: Jul 23 18:53:21 2026 GMT Not After : Jul 24 22:29:21 2026 GMT Subject: CN=C03E7B60A317EAA145FDD74660A134732F845EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:a4:9c:67:e6:71:53:30:3f:18:25:f4:3e: d4:2a:48:df:c5:b5:98:ca:5a:d0:e0:8c:ab:82:e5: 8f:14:76:9a:6b:2b:c5:9b:4d:da:b0:57:8e:af:53: b0:3a:c0:65:0f:e3:48:fd:db:ab:a8:c1:4f:d8:b6: ce:51:b2:d6:e1:42:62:75:56:ae:a7:d3:43:19:99: a9:15:3d:b0:8c:f2:d8:87:da:5a:d7:c5:08:23:05: 75:02:10:bf:a3:86:a3:3d:6f:46:01:71:14:e7:4b: cd:e9:b7:72:b7:85:39:7c:7f:78:df:5e:d1:33:5e: 06:a1:5b:bd:84:aa:53:9c:b2:bf:6b:24:8c:e2:33: 29:f6:b8:2e:63:f6:d1:0b:e8:de:41:f7:5f:66:e7: 3c:59:0c:03:6d:0a:94:6e:d3:14:2e:7d:4f:66:d2: 2e:42:73:b5:c4:8a:70:26:53:71:4f:b3:71:bc:a4: fd:96:f5:4b:0f:22:ee:c0:e0:d8:1e:e8:85:f2:2f: e2:89:70:58:3b:73:67:67:c0:94:16:3b:b8:48:f2: 8f:c1:ed:63:ef:31:e1:63:3a:c7:7f:ae:96:7c:ba: 35:c5:b2:db:9f:b6:d0:9a:39:66:df:57:3d:76:b8: 0e:a6:d0:1b:a9:da:d5:89:03:d6:d8:49:b8:00:e8: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3E:7B:60:A3:17:EA:A1:45:FD:D7:46:60:A1:34:73:2F:84:5E:C5 X509v3 Authority Key Identifier: keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:02:93:68:48:12:57:cd:e1:69:99:ed:bd:c0:df:88:22:a6: 8f:25:e5:4f:83:88:fe:f0:d5:97:3f:2d:c9:b8:db:0f:ea:91: 6c:9a:fb:9d:49:8b:fd:73:f5:3e:2a:8a:f1:0b:c3:ce:70:81: 3c:3b:6b:59:d0:85:6b:f7:e7:de:91:71:fa:83:dc:8f:19:8d: 68:72:6f:78:13:d6:b8:10:96:c1:4e:34:65:37:ea:24:28:ec: 68:79:ce:f3:35:da:f3:7c:6e:7f:67:ad:f2:6c:aa:ec:c3:c6: 01:22:5a:c6:96:c8:0f:86:6f:87:d7:b8:15:cd:27:76:36:b0: 69:10:45:a6:10:4c:c4:83:28:6a:70:4f:cf:08:9c:d4:83:3e: cd:e0:a5:ec:c8:30:c9:a4:5d:a5:6e:c1:f3:cc:79:f9:59:f0: 85:f1:6e:fb:ef:02:30:20:fd:35:0b:c5:8e:e7:97:38:b2:82: 78:02:82:b0:f5:d6:9f:c7:5e:63:17:8a:f7:3b:0a:6f:39:5b: f3:21:78:b3:b9:e4:5d:d5:e2:72:cb:7c:0d:31:47:53:24:04: aa:81:71:39:d1:44:9d:56:f7:ba:a5:2f:32:a1:ae:f5:d2:3e: 3d:11:d9:a6:0b:50:80:61:cf:3f:33:68:c8:22:83:3a:b7:55: da:ce:8c:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7z62Qc9XmtviFCfjE+Xcala0e4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1 M0M5NTQyQzAeFw0yNjA3MjMxODUzMjFaFw0yNjA3MjQyMjI5MjFaMDMxMTAvBgNV BAMTKEMwM0U3QjYwQTMxN0VBQTE0NUZERDc0NjYwQTEzNDczMkY4NDVFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1KScZ+ZxUzA/GCX0PtQqSN/F tZjKWtDgjKuC5Y8UdpprK8WbTdqwV46vU7A6wGUP40j926uowU/Yts5RstbhQmJ1 Vq6n00MZmakVPbCM8tiH2lrXxQgjBXUCEL+jhqM9b0YBcRTnS83pt3K3hTl8f3jf XtEzXgahW72EqlOcsr9rJIziMyn2uC5j9tEL6N5B919m5zxZDANtCpRu0xQufU9m 0i5Cc7XEinAmU3FPs3G8pP2W9UsPIu7A4Nge6IXyL+KJcFg7c2dnwJQWO7hI8o/B 7WPvMeFjOsd/rpZ8ujXFstufttCaOWbfVz12uA6m0Bup2tWJA9bYSbgA6LCFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwD57YKMX6qFF/ddGYKE0cy+EXsUwHwYDVR0j BBgwFoAUMBNq8Osv+p8U4FLk5JCqm1PJVCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4ZjliNmItMDI3YS00YmU2LWFiMDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBF QjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1M0M5NTQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDEzNkFGMEVCMkZGQTlGMTRFMDUyRTRFNDkwQUE5QjUzQzk1 NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFB OUI1M0M5NTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACACk2hIElfN4WmZ7b3A34gipo8l5U+DiP7w 1Zc/Lcm42w/qkWya+51Ji/1z9T4qivELw85wgTw7a1nQhWv3596RcfqD3I8ZjWhy b3gT1rgQlsFONGU36iQo7Gh5zvM12vN8bn9nrfJsquzDxgEiWsaWyA+Gb4fXuBXN J3Y2sGkQRaYQTMSDKGpwT88InNSDPs3gpezIMMmkXaVuwfPMeflZ8IXxbvvvAjAg /TULxY7nlziygngCgrD11p/HXmMXivc7Cm85W/MheLO55F3V4nLLfA0xR1MkBKqB cTnRRJ1W97qlLzKhrvXSPj0R2aYLUIBhzz8zaMgigzq3VdrOjCk= -----END CERTIFICATE-----Generated at Fri Jul 24 15:06:55 2026 by rpki-client