
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft
File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json)
Hash identifier: ErJSu1HuE3ltjiymNO4mYQfV23jxhh8GpbTnj8/13tM=
Subject key identifier: B7:D6:14:76:95:BE:AF:B0:15:6B:02:8E:EC:C7:CC:C3:01:CD:76:00
Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C
Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C
Certificate serial: 15B19CFAA13D474E5289E29066A6E3B6D553D1C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 19:48:15 +0000
Manifest this update: Sat 13 Jun 2026 19:43:15 +0000
Manifest next update: Sun 14 Jun 2026 20:16:15 +0000
Files and hashes: 1: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: d7OCr5IA1OtM9vIaMUVa/vm9gom+BHkqSHHZJ2+qoYI=)
2: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=)
3: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl
rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 15:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b1:9c:fa:a1:3d:47:4e:52:89:e2:90:66:a6:e3:b6:d5:53:d1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C
Validity
Not Before: Jun 13 19:43:15 2026 GMT
Not After : Jun 14 20:16:15 2026 GMT
Subject: CN=B7D6147695BEAFB0156B028EECC7CCC301CD7600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:98:8c:51:ea:05:cc:20:6c:97:30:69:e4:
85:8d:06:fd:06:8c:65:65:39:16:41:42:15:5b:21:
5f:02:a1:36:b6:96:9b:2c:df:3b:67:2b:dd:af:9c:
89:95:60:21:22:11:62:d0:9a:61:4a:8c:e8:af:bc:
be:80:9c:f6:c8:41:4c:ef:08:93:d3:5e:ec:4b:2c:
85:fa:b1:0f:2e:8a:86:e4:62:f5:25:be:4a:54:67:
8a:a4:d5:4f:fe:7d:0c:68:e0:10:ee:04:95:71:05:
ad:3c:13:a6:80:4f:fa:fb:30:e8:3a:07:b7:20:83:
1f:49:ed:b9:1a:54:31:cc:3a:6e:35:ee:06:e1:07:
37:d4:2c:74:83:10:b4:c0:ec:de:b0:50:a7:56:6a:
3c:dc:d4:81:f8:15:cd:6c:56:05:a3:bc:43:56:fe:
dd:31:55:cb:d6:8e:39:cc:54:82:cc:02:0f:39:4c:
02:d8:b5:d3:4e:2f:ee:98:a8:fc:7d:e2:72:9a:ef:
04:ca:fc:8b:89:5f:6f:bd:68:3b:cc:67:11:eb:fb:
a9:01:88:53:06:cc:3c:7a:4c:0f:2d:0c:c5:ae:0d:
f2:dd:64:98:2a:59:e3:a3:81:84:1f:a0:b3:0c:c2:
74:46:7c:7b:61:9d:41:9f:80:58:2c:a6:5f:bd:51:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D6:14:76:95:BE:AF:B0:15:6B:02:8E:EC:C7:CC:C3:01:CD:76:00
X509v3 Authority Key Identifier:
keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:28:65:70:0b:52:cc:77:59:13:fa:c7:1b:0f:d3:c1:80:0a:
6c:9d:0d:91:01:d5:80:f2:1d:f2:94:77:1c:d2:ce:16:2b:72:
0f:21:21:a4:f6:59:68:33:1e:92:f5:b1:93:ff:0d:3d:54:7b:
0c:e5:64:75:eb:a9:38:9a:f0:98:04:fc:3a:cc:f1:81:17:b3:
8b:b9:bc:4c:33:0a:5e:8f:8e:11:74:cb:09:f7:06:6f:27:3a:
4e:bf:fc:71:67:db:46:16:a9:dc:04:ea:28:16:c2:3f:a1:77:
54:a4:57:a5:c2:88:df:43:38:71:ea:fc:1c:06:2a:af:ff:2f:
b4:3a:98:0a:e4:a3:dd:4a:47:fc:b6:c9:d4:c2:0a:f9:b2:69:
07:69:e1:c0:c2:6a:6c:2c:84:16:61:65:a6:f1:b5:18:f4:fd:
9a:db:6b:13:69:a1:4f:f6:e0:64:43:c9:63:e3:30:de:28:16:
61:2c:2b:cd:d2:a2:20:05:a7:ec:64:77:44:b8:e7:74:3f:99:
3c:50:a2:3e:23:e9:ed:1f:50:e0:a1:e1:c3:76:6b:11:08:f5:
b7:37:4e:ad:80:09:7c:e8:ab:16:f5:55:60:1f:0b:3c:a0:5b:
37:d1:ce:8c:ec:79:07:4b:4e:6a:d0:9b:6b:8f:01:5a:c9:6f:
56:af:52:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:18:16 2026 by rpki-client