$ rpki-client -vvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json) Hash identifier: s93d108lS7vNmhhfKy7vV6naEaqBo1DcaMA0EKaZi/Y= Subject key identifier: 0B:38:A8:E0:08:08:0A:59:BA:FA:F1:B9:C1:D8:BA:7D:61:C1:1F:65 Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Certificate serial: 7D66901346219FE5A4C537B78FA4100ED2D5581E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 00:11:31 +0000 Manifest this update: Wed 29 Jul 2026 00:06:31 +0000 Manifest next update: Thu 30 Jul 2026 00:46:31 +0000 Files and hashes: 1: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=) 2: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: nHkKDTXLvsJbnBCopcsk3Jv5zXZLuIQEqxUI9f+dnyo=) 3: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:66:90:13:46:21:9f:e5:a4:c5:37:b7:8f:a4:10:0e:d2:d5:58:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Validity Not Before: Jul 29 00:06:31 2026 GMT Not After : Jul 30 00:46:31 2026 GMT Subject: CN=0B38A8E008080A59BAFAF1B9C1D8BA7D61C11F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:bb:00:e1:5d:cc:4a:ca:bc:5b:78:fa:63: 87:d6:68:e9:af:d4:91:66:39:bb:54:19:00:e0:a1: 1c:20:08:93:b9:7e:aa:2b:33:79:f4:d0:32:0d:8e: e2:64:40:e5:a2:2b:64:74:eb:e2:f9:ea:7a:14:2e: cb:03:5b:8f:8e:20:b8:df:64:09:73:ae:56:89:67: fe:cb:f2:fa:56:bb:6a:64:fe:44:44:da:4f:7c:81: 3e:08:f7:86:74:a4:4b:b9:00:16:29:62:7e:93:73: 06:ef:a0:98:a3:f7:d3:c7:b9:d7:0f:9f:cc:8e:ba: d8:83:78:e0:1c:8a:27:01:b3:97:c8:c2:3c:53:c6: 3b:df:9f:90:e2:bd:b1:9f:eb:bd:29:1a:d3:62:ed: b0:75:eb:d5:69:f0:e5:f5:6c:13:e7:dd:ae:13:7e: 3e:50:6c:76:da:b0:09:88:84:09:fd:6e:ed:96:b2: 90:f7:3e:59:24:02:4f:b6:38:ba:6e:76:37:d3:d2: b3:6d:57:c7:40:9c:1e:cf:3f:57:52:19:76:c0:38: 47:ab:63:6f:30:f1:79:45:1f:81:47:59:fb:eb:d9: 9e:ef:b7:8a:72:82:b8:3b:b5:37:c0:3b:a1:e8:f8: 70:51:13:90:5f:27:98:46:31:26:25:66:d3:e0:94: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:38:A8:E0:08:08:0A:59:BA:FA:F1:B9:C1:D8:BA:7D:61:C1:1F:65 X509v3 Authority Key Identifier: keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a5:13:03:5a:e7:9c:dc:e0:d0:5e:82:d2:63:80:cb:6c:72: 56:57:13:9c:9c:fb:8c:36:1f:52:0e:70:3c:8d:0f:a3:f4:c3: 4e:4b:6f:95:3e:cb:ff:75:3c:3f:e0:5c:e0:c8:ee:4f:41:d7: 5f:e1:15:ae:c6:ce:ab:95:91:1c:72:12:af:08:51:66:be:e9: 28:db:b6:98:19:92:2a:13:fe:fd:85:95:f7:80:e5:51:aa:ce: b7:d1:e4:1a:50:a3:70:c5:6c:8f:ca:04:30:b1:75:c9:d0:c4: d1:dd:8f:f4:11:7b:55:8d:38:0b:27:67:d7:f7:f8:73:f7:b4: 1f:6e:65:bf:a0:6b:3b:5c:0f:ef:38:1d:96:d3:4a:87:ef:0d: ed:d8:6a:b0:54:b5:af:da:83:89:87:56:0c:6f:47:a8:b7:3d: 1f:1a:90:dd:bb:c7:e2:83:f9:2a:05:f5:8e:f2:e2:be:47:06: 21:c2:ee:98:64:b9:d0:2b:50:f8:29:dc:60:0b:aa:cb:c0:23: f7:b3:d1:8b:37:fc:06:b7:1e:30:20:a7:a0:04:05:bb:be:34: 5d:fe:5c:2d:bc:c2:e7:88:25:5e:76:c4:61:c8:3d:fa:45:1d: 21:45:56:3e:06:97:dc:e6:d1:1a:15:94:b9:54:cd:e0:5e:43: 54:7c:f3:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWaQE0Yhn+WkxTe3j6QQDtLVWB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1 M0M5NTQyQzAeFw0yNjA3MjkwMDA2MzFaFw0yNjA3MzAwMDQ2MzFaMDMxMTAvBgNV BAMTKDBCMzhBOEUwMDgwODBBNTlCQUZBRjFCOUMxRDhCQTdENjFDMTFGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LrsA4V3MSsq8W3j6Y4fWaOmv 1JFmObtUGQDgoRwgCJO5fqorM3n00DINjuJkQOWiK2R06+L56noULssDW4+OILjf ZAlzrlaJZ/7L8vpWu2pk/kRE2k98gT4I94Z0pEu5ABYpYn6TcwbvoJij99PHudcP n8yOutiDeOAciicBs5fIwjxTxjvfn5DivbGf670pGtNi7bB169Vp8OX1bBPn3a4T fj5QbHbasAmIhAn9bu2WspD3PlkkAk+2OLpudjfT0rNtV8dAnB7PP1dSGXbAOEer Y28w8XlFH4FHWfvr2Z7vt4pygrg7tTfAO6Ho+HBRE5BfJ5hGMSYlZtPglNl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCzio4AgIClm6+vG5wdi6fWHBH2UwHwYDVR0j BBgwFoAUMBNq8Osv+p8U4FLk5JCqm1PJVCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4ZjliNmItMDI3YS00YmU2LWFiMDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBF QjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1M0M5NTQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDEzNkFGMEVCMkZGQTlGMTRFMDUyRTRFNDkwQUE5QjUzQzk1 NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFB OUI1M0M5NTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKylEwNa55zc4NBegtJjgMtsclZXE5yc+4w2 H1IOcDyND6P0w05Lb5U+y/91PD/gXODI7k9B11/hFa7GzquVkRxyEq8IUWa+6Sjb tpgZkioT/v2FlfeA5VGqzrfR5BpQo3DFbI/KBDCxdcnQxNHdj/QRe1WNOAsnZ9f3 +HP3tB9uZb+gaztcD+84HZbTSofvDe3YarBUta/ag4mHVgxvR6i3PR8akN27x+KD +SoF9Y7y4r5HBiHC7phkudArUPgp3GALqsvAI/ez0Ys3/Aa3HjAgp6AEBbu+NF3+ XC28wueIJV52xGHIPfpFHSFFVj4Gl9zm0RoVlLlUzeBeQ1R88zk= -----END CERTIFICATE-----Generated at Wed Jul 29 11:01:27 2026 by rpki-client