$ rpki-client -vvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json) Hash identifier: zijdb/H2sug0Znua3Ga8GHFb+FgTE1SwQCpzuwVzgLo= Subject key identifier: 25:DB:3D:31:D8:40:75:3A:68:E7:7F:23:33:96:1F:A4:14:D7:05:C7 Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Certificate serial: 37BB6844D83335098161FA4D182242D2A574D250 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:18:32 +0000 Manifest this update: Tue 12 May 2026 07:13:32 +0000 Manifest next update: Wed 13 May 2026 10:42:32 +0000 Files and hashes: 1: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: VKaL9dDW4eQeGTlDhFITQHBA4e9p3J4TJTfw9eT3E/U=) 2: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=) 3: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bb:68:44:d8:33:35:09:81:61:fa:4d:18:22:42:d2:a5:74:d2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Validity Not Before: May 12 07:13:32 2026 GMT Not After : May 13 10:42:32 2026 GMT Subject: CN=25DB3D31D840753A68E77F2333961FA414D705C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:c6:49:30:11:9f:a5:12:5f:0c:28:fd:7a: 43:08:f8:60:ca:00:e5:33:79:ed:17:84:cd:8c:8a: 10:1c:b0:8b:22:f5:14:11:42:41:0a:53:fd:25:ff: 80:66:40:d6:c4:5e:f5:bc:fb:33:56:ae:c1:ec:81: 7c:8c:e4:ad:64:09:cb:b7:68:90:e3:50:e2:b4:e7: 57:d0:ed:31:c9:01:e2:c7:d7:81:6f:cb:fe:f9:e0: 98:e5:8f:f9:9d:68:91:c1:27:c4:87:9e:9b:30:de: 3f:85:52:dc:07:8c:65:59:9b:fd:0a:be:d6:69:5f: a9:49:5e:d4:32:2e:f8:66:25:27:1a:c7:be:d4:11: 11:f1:ec:8c:fc:58:15:05:de:c6:fa:16:45:ef:02: 3e:8a:6f:88:4c:1d:05:b2:c7:a8:50:65:e7:37:a5: ef:cf:17:25:fe:39:c7:d4:fb:fd:62:a3:b6:dc:8f: a8:bc:99:79:e7:74:1a:1f:3e:96:03:fd:31:47:0b: 28:83:0e:60:82:1f:41:f5:5f:46:5d:4f:2f:1a:d0: 0b:d9:db:f4:53:37:f4:e7:6c:36:9a:89:13:c2:ab: 9f:71:b2:65:f4:c5:e4:b6:45:34:64:94:e7:de:4c: 5c:60:96:49:4f:34:7e:c0:29:d6:31:7e:89:bb:14: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:3D:31:D8:40:75:3A:68:E7:7F:23:33:96:1F:A4:14:D7:05:C7 X509v3 Authority Key Identifier: keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ae:c3:46:a4:2f:6c:03:ce:6e:e8:1c:c7:fe:b7:03:b1:e6: d4:fd:6c:95:5e:26:eb:ad:01:8d:1b:22:a0:88:43:f2:ef:92: a3:a2:f8:d2:65:88:a8:2e:35:5f:d4:62:b9:86:c7:87:6a:c9: d9:cf:37:c5:6e:f7:cf:bc:2f:98:b8:26:46:bf:e5:fd:f1:7a: b9:aa:fd:cd:01:c2:34:8f:10:5d:ed:58:56:ec:b2:61:38:71: 16:71:4c:33:ea:fd:52:38:4d:f3:13:44:70:38:ca:57:24:58: 78:42:55:32:cf:2f:bf:0b:09:47:fc:42:20:44:66:6e:49:4d: ae:57:96:da:d3:56:ce:df:8d:f6:16:0f:98:9c:51:5b:81:9b: 23:f3:3b:59:b1:98:fe:94:01:ba:f0:de:30:e0:d3:25:60:31: b1:62:46:b7:d7:d0:32:9b:a7:2a:c4:2c:9a:7b:2f:29:f0:9a: db:fc:20:19:e2:21:ce:14:bc:ef:54:45:47:26:3c:bb:f8:ed: 85:66:0b:d6:b3:9b:8b:0a:1f:42:e3:c1:3b:1d:f4:59:10:62: 65:a3:6e:b2:23:0f:de:45:15:ec:91:0c:f9:80:ec:6b:ab:1d: 49:c9:5d:5e:da:8a:a8:64:0c:33:a0:86:b0:56:7d:38:74:58: c2:95:92:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7toRNgzNQmBYfpNGCJC0qV00lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1 M0M5NTQyQzAeFw0yNjA1MTIwNzEzMzJaFw0yNjA1MTMxMDQyMzJaMDMxMTAvBgNV BAMTKDI1REIzRDMxRDg0MDc1M0E2OEU3N0YyMzMzOTYxRkE0MTRENzA1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEi8ZJMBGfpRJfDCj9ekMI+GDK AOUzee0XhM2MihAcsIsi9RQRQkEKU/0l/4BmQNbEXvW8+zNWrsHsgXyM5K1kCcu3 aJDjUOK051fQ7THJAeLH14Fvy/754Jjlj/mdaJHBJ8SHnpsw3j+FUtwHjGVZm/0K vtZpX6lJXtQyLvhmJScax77UERHx7Iz8WBUF3sb6FkXvAj6Kb4hMHQWyx6hQZec3 pe/PFyX+OcfU+/1io7bcj6i8mXnndBofPpYD/TFHCyiDDmCCH0H1X0ZdTy8a0AvZ 2/RTN/TnbDaaiRPCq59xsmX0xeS2RTRklOfeTFxglklPNH7AKdYxfom7FEWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJds9MdhAdTpo538jM5YfpBTXBccwHwYDVR0j BBgwFoAUMBNq8Osv+p8U4FLk5JCqm1PJVCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4ZjliNmItMDI3YS00YmU2LWFiMDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBF QjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1M0M5NTQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDEzNkFGMEVCMkZGQTlGMTRFMDUyRTRFNDkwQUE5QjUzQzk1 NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFB OUI1M0M5NTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyuw0akL2wDzm7oHMf+twOx5tT9bJVeJuut AY0bIqCIQ/LvkqOi+NJliKguNV/UYrmGx4dqydnPN8Vu98+8L5i4Jka/5f3xermq /c0BwjSPEF3tWFbssmE4cRZxTDPq/VI4TfMTRHA4ylckWHhCVTLPL78LCUf8QiBE Zm5JTa5XltrTVs7fjfYWD5icUVuBmyPzO1mxmP6UAbrw3jDg0yVgMbFiRrfX0DKb pyrELJp7Lynwmtv8IBniIc4UvO9URUcmPLv47YVmC9azm4sKH0LjwTsd9FkQYmWj brIjD95FFeyRDPmA7GurHUnJXV7aiqhkDDOghrBWfTh0WMKVkh0= -----END CERTIFICATE-----Generated at Wed May 13 04:00:08 2026 by rpki-client