$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json) Hash identifier: jF9+V9OqDVS4If97WiTXl27FVM4KunqucZhe9/pC2V0= Subject key identifier: 0D:C8:7C:24:FC:D5:5B:1D:6C:E3:7A:45:22:24:D6:F9:81:EF:AB:33 Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Certificate serial: 218EA8050D72599257C69381EFBB49EE63AD6DA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 14:19:07 +0000 Manifest this update: Tue 22 Sep 2026 14:14:07 +0000 Manifest next update: Wed 23 Sep 2026 15:24:07 +0000 Files and hashes: 1: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=) 2: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: fEMbWjzVUacbtA/lOgFcJOTs+wZl8WdzZWf+sGBJlYU=) 3: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8e:a8:05:0d:72:59:92:57:c6:93:81:ef:bb:49:ee:63:ad:6d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Validity Not Before: Sep 22 14:14:07 2026 GMT Not After : Sep 23 15:24:07 2026 GMT Subject: CN=0DC87C24FCD55B1D6CE37A452224D6F981EFAB33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e1:1d:9a:13:1b:b9:07:13:46:3c:a7:ef:88: 1e:ce:4f:6c:5f:63:e1:9f:3b:d0:a5:a2:e0:e3:c8: 78:f0:32:62:82:de:9f:73:01:2d:71:ea:1a:1e:45: 35:1f:f0:21:c5:f8:38:ef:ab:e1:1b:c9:e7:71:3f: 1b:a0:db:c5:27:15:d2:71:03:8b:6a:89:c7:9c:75: f7:56:21:8b:65:15:dd:07:31:ad:dc:18:4f:e7:78: 47:6b:32:22:38:8c:9c:68:6d:b6:2a:b2:17:7d:5d: f7:a5:dd:c8:00:66:84:51:ce:89:33:16:93:1f:de: bb:e7:fc:97:0d:28:b4:d2:9d:02:a9:b7:36:9b:01: e7:a8:2a:f3:4c:7e:bb:c7:32:31:0a:92:cd:7e:18: 18:72:e4:eb:6b:22:a9:d0:77:69:40:80:6b:02:78: 1c:5c:af:a0:79:27:e5:dd:a7:b7:6a:3f:fc:f2:33: 54:90:51:90:3c:24:63:ec:b1:5a:56:da:d7:74:a3: b6:df:84:ec:e3:85:31:d3:95:3e:13:4d:c5:bd:d9: a1:5e:f9:cf:51:72:05:02:97:e9:bc:4f:f1:a8:45: 53:64:b2:b9:de:a0:b7:a8:0d:f4:3b:d5:75:35:7e: 3b:1c:9b:23:9d:21:94:db:b4:67:13:87:2d:1f:5f: ca:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C8:7C:24:FC:D5:5B:1D:6C:E3:7A:45:22:24:D6:F9:81:EF:AB:33 X509v3 Authority Key Identifier: keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ed:1c:61:74:42:cf:a6:f8:05:e5:39:8e:6a:d0:42:0e:b2: 9b:4b:fc:57:6b:29:88:c5:8f:b6:be:31:88:4b:fb:a3:68:15: 0b:a5:72:7a:be:bc:af:bb:3e:ce:58:6b:34:2a:6c:2d:29:53: 9a:61:2f:03:eb:27:da:25:aa:47:a5:ed:25:80:87:06:12:ff: 57:15:d6:5c:96:c0:1b:b6:30:da:1c:34:fa:b6:4f:dd:f3:e2: 46:16:d8:ff:eb:bd:fd:83:be:32:86:a8:f1:e0:f4:45:40:0f: c7:c3:7a:9c:4a:ae:b3:61:84:96:39:69:ae:b4:1e:92:d5:91: c4:9d:be:c5:51:c5:a9:23:b7:4d:0e:64:26:29:c5:fa:df:a4: 4a:89:71:11:09:25:f7:f3:4b:3f:3f:82:04:99:f3:d0:34:88: c5:53:53:b6:fd:92:6e:a0:b8:24:a5:d5:87:45:4b:47:a9:93: 0a:47:ad:43:53:c4:1f:c3:f7:92:71:c7:fd:77:f8:3b:23:94: 80:e4:1f:d0:ea:04:b3:a3:64:b3:cc:b1:b1:43:3e:aa:55:76: f8:eb:6a:53:93:48:b0:bd:74:5c:31:9e:57:24:1e:f1:4f:cd: 15:89:d3:92:4f:b1:8a:de:3a:01:47:63:1a:a8:0a:c5:36:d7: ff:52:6b:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIY6oBQ1yWZJXxpOB77tJ7mOtbacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1 M0M5NTQyQzAeFw0yNjA5MjIxNDE0MDdaFw0yNjA5MjMxNTI0MDdaMDMxMTAvBgNV BAMTKDBEQzg3QzI0RkNENTVCMUQ2Q0UzN0E0NTIyMjRENkY5ODFFRkFCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo4R2aExu5BxNGPKfviB7OT2xf Y+GfO9ClouDjyHjwMmKC3p9zAS1x6hoeRTUf8CHF+Djvq+EbyedxPxug28UnFdJx A4tqicecdfdWIYtlFd0HMa3cGE/neEdrMiI4jJxobbYqshd9Xfel3cgAZoRRzokz FpMf3rvn/JcNKLTSnQKptzabAeeoKvNMfrvHMjEKks1+GBhy5OtrIqnQd2lAgGsC eBxcr6B5J+Xdp7dqP/zyM1SQUZA8JGPssVpW2td0o7bfhOzjhTHTlT4TTcW92aFe +c9RcgUCl+m8T/GoRVNksrneoLeoDfQ71XU1fjscmyOdIZTbtGcThy0fX8r9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDch8JPzVWx1s43pFIiTW+YHvqzMwHwYDVR0j BBgwFoAUMBNq8Osv+p8U4FLk5JCqm1PJVCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4ZjliNmItMDI3YS00YmU2LWFiMDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBF QjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1M0M5NTQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDEzNkFGMEVCMkZGQTlGMTRFMDUyRTRFNDkwQUE5QjUzQzk1 NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFB OUI1M0M5NTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJztHGF0Qs+m+AXlOY5q0EIOsptL/FdrKYjF j7a+MYhL+6NoFQulcnq+vK+7Ps5YazQqbC0pU5phLwPrJ9olqkel7SWAhwYS/1cV 1lyWwBu2MNocNPq2T93z4kYW2P/rvf2DvjKGqPHg9EVAD8fDepxKrrNhhJY5aa60 HpLVkcSdvsVRxakjt00OZCYpxfrfpEqJcREJJffzSz8/ggSZ89A0iMVTU7b9km6g uCSl1YdFS0epkwpHrUNTxB/D95Jxx/13+DsjlIDkH9DqBLOjZLPMsbFDPqpVdvjr alOTSLC9dFwxnlckHvFPzRWJ05JPsYreOgFHYxqoCsU21/9Sa3U= -----END CERTIFICATE-----Generated at Tue Sep 22 20:23:21 2026 by rpki-client