$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json) Hash identifier: 6ufKbCZbrhPiIgP/LyatKVC4Zo/v1qEQ6zc96lvqAn4= Subject key identifier: F1:5A:7F:48:C0:9C:7F:46:B2:41:12:42:05:6E:20:8C:91:7B:DC:10 Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Certificate serial: 7E64B3C3EE1F4666357D19E107020A63B6E66737 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft Manifest number: D0 Signing time: Sat 03 Oct 2026 18:48:38 +0000 Manifest this update: Sat 03 Oct 2026 18:43:38 +0000 Manifest next update: Sun 04 Oct 2026 20:00:38 +0000 Files and hashes: 1: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=) 2: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=) 3: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: IMJUSRTze6CVVyH8M+7uMarn02+B2PiF1efsCR6j1bA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:64:b3:c3:ee:1f:46:66:35:7d:19:e1:07:02:0a:63:b6:e6:67:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Validity Not Before: Oct 3 18:43:38 2026 GMT Not After : Oct 4 20:00:38 2026 GMT Subject: CN=F15A7F48C09C7F46B2411242056E208C917BDC10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4d:af:25:c4:97:9f:a0:54:7f:f0:90:d1:e9: 29:c8:6a:ae:e7:b4:26:41:90:9a:83:07:78:d7:9c: d0:9f:fd:0f:fc:17:a8:f8:83:28:5c:0a:03:96:d7: e6:76:51:c1:d0:bf:11:52:04:07:21:9a:ea:57:0f: dd:af:82:51:e6:b6:3e:a0:05:6e:43:79:f9:45:d2: 57:fb:83:e9:6d:b7:af:03:22:13:c5:b6:00:2b:f8: 34:e9:2f:2b:fe:91:45:6e:16:71:62:ea:3b:2f:50: 5f:08:89:6a:1d:28:33:c3:87:14:1f:73:16:67:af: d4:cd:f0:d7:eb:ce:61:ea:72:7d:97:18:a7:38:3c: 2f:a9:48:1c:e2:64:8a:ab:0c:ea:37:53:0f:45:92: cd:da:4c:e8:6b:e9:06:61:a3:5d:a8:e8:7f:59:88: e1:eb:1a:99:ab:94:d8:97:7f:7c:8d:9f:df:d0:17: fd:d0:31:e9:dd:71:b8:74:71:cc:df:9e:75:39:66: da:6d:d1:37:2b:8d:c2:f4:36:6d:a8:e2:b7:2b:86: 27:b1:f1:a4:6a:f3:5a:ed:2c:be:20:ce:fc:1b:0d: bd:d3:56:36:8e:9c:e8:4d:72:0f:19:ae:89:f9:73: 83:89:63:26:9c:8c:d3:d4:5d:01:36:ff:4e:5a:65: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5A:7F:48:C0:9C:7F:46:B2:41:12:42:05:6E:20:8C:91:7B:DC:10 X509v3 Authority Key Identifier: keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:16:9c:82:87:b7:f8:fd:a7:5a:98:aa:3a:5d:d4:fe:a0:1d: bc:3f:77:8a:52:fd:f5:ae:a8:8b:2b:82:05:76:7c:4b:1b:67: 8f:cb:48:bc:6d:25:68:94:d1:84:01:65:52:b6:96:54:5d:92: 20:fe:d2:78:ed:5e:d6:c2:40:cf:86:f6:21:ee:1c:d7:08:a4: ae:5d:35:79:19:f3:a7:8e:b2:30:f4:8d:3e:0f:a0:75:52:40: ae:1a:7f:7c:1b:7c:7f:57:b7:8b:e0:67:ce:e5:3b:01:8b:61: ee:51:b7:72:af:d5:e3:c6:76:5c:db:8c:18:4b:60:61:89:f9: cb:76:c6:45:d0:25:9d:66:ba:24:d1:0d:48:11:a5:a6:75:82: 07:79:7a:18:a4:71:17:19:3a:cd:3c:81:58:3b:3c:51:9b:c2: 94:ab:59:d2:3f:7e:f7:da:13:bf:17:2d:08:0e:8a:a9:72:f4: 0f:94:7d:02:63:0e:03:5d:d6:f2:6e:2a:07:4a:cf:78:56:58: 13:d9:11:0a:de:a5:00:e5:76:49:2f:0a:3a:b4:11:d1:cf:bd: 88:b3:66:9c:ee:8e:9b:c5:4f:82:bd:c0:f0:53:5d:2a:90:13: 8e:1e:26:69:a3:46:d8:c4:51:ce:f4:19:64:40:5d:4c:e1:34: fa:55:8e:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmSzw+4fRmY1fRnhBwIKY7bmZzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1 M0M5NTQyQzAeFw0yNjEwMDMxODQzMzhaFw0yNjEwMDQyMDAwMzhaMDMxMTAvBgNV BAMTKEYxNUE3RjQ4QzA5QzdGNDZCMjQxMTI0MjA1NkUyMDhDOTE3QkRDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTa8lxJefoFR/8JDR6SnIaq7n tCZBkJqDB3jXnNCf/Q/8F6j4gyhcCgOW1+Z2UcHQvxFSBAchmupXD92vglHmtj6g BW5DeflF0lf7g+ltt68DIhPFtgAr+DTpLyv+kUVuFnFi6jsvUF8IiWodKDPDhxQf cxZnr9TN8NfrzmHqcn2XGKc4PC+pSBziZIqrDOo3Uw9Fks3aTOhr6QZho12o6H9Z iOHrGpmrlNiXf3yNn9/QF/3QMendcbh0cczfnnU5Ztpt0TcrjcL0Nm2o4rcrhiex 8aRq81rtLL4gzvwbDb3TVjaOnOhNcg8Zron5c4OJYyacjNPUXQE2/05aZZOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Vp/SMCcf0ayQRJCBW4gjJF73BAwHwYDVR0j BBgwFoAUMBNq8Osv+p8U4FLk5JCqm1PJVCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4ZjliNmItMDI3YS00YmU2LWFiMDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBF QjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1M0M5NTQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDEzNkFGMEVCMkZGQTlGMTRFMDUyRTRFNDkwQUE5QjUzQzk1 NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFB OUI1M0M5NTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAWnIKHt/j9p1qYqjpd1P6gHbw/d4pS/fWu qIsrggV2fEsbZ4/LSLxtJWiU0YQBZVK2llRdkiD+0njtXtbCQM+G9iHuHNcIpK5d NXkZ86eOsjD0jT4PoHVSQK4af3wbfH9Xt4vgZ87lOwGLYe5Rt3Kv1ePGdlzbjBhL YGGJ+ct2xkXQJZ1muiTRDUgRpaZ1ggd5ehikcRcZOs08gVg7PFGbwpSrWdI/fvfa E78XLQgOiqly9A+UfQJjDgNd1vJuKgdKz3hWWBPZEQrepQDldkkvCjq0EdHPvYiz ZpzujpvFT4K9wPBTXSqQE44eJmmjRtjEUc70GWRAXUzhNPpVjsc= -----END CERTIFICATE-----Generated at Sun Oct 4 08:35:08 2026 by rpki-client