$ rpki-client -vvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json) Hash identifier: wYuUJDu1h7ujwCoAnLxU3oJwK08g2z0YJFrXzTZsRXY= Subject key identifier: C9:10:7B:2A:4A:CA:34:4E:36:DC:39:6B:71:AC:D5:16:B4:FF:7A:89 Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Certificate serial: 24798AD75B0130430914BCA0AE1C2289B9E1619A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 09:54:06 +0000 Manifest this update: Sun 19 Jul 2026 09:49:06 +0000 Manifest next update: Mon 20 Jul 2026 12:50:06 +0000 Files and hashes: 1: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: Bo/Qf+RMDUcqgCtANl3vuJLDMmreup9Fl2cdx0Ck50o=) 2: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=) 3: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:79:8a:d7:5b:01:30:43:09:14:bc:a0:ae:1c:22:89:b9:e1:61:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Validity Not Before: Jul 19 09:49:06 2026 GMT Not After : Jul 20 12:50:06 2026 GMT Subject: CN=C9107B2A4ACA344E36DC396B71ACD516B4FF7A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:3f:cd:57:8d:5a:30:a5:07:08:5d:b5:80: 2c:c7:96:d5:36:47:1f:b4:62:59:a6:39:04:4f:4a: cf:52:a9:03:9b:c7:65:b9:ee:cf:b1:d7:18:a3:9d: 91:b6:a9:c3:fe:ad:e0:6e:0d:fc:d1:f3:53:11:e7: 64:68:12:80:83:cf:58:9b:70:8a:6b:b6:7f:48:64: f0:8b:50:a6:dd:48:e8:d1:df:a4:a0:e9:9f:95:81: b5:a1:c2:11:c6:d2:97:c9:8e:24:93:b4:60:66:c9: 7e:53:62:68:ba:d2:72:fa:19:52:dc:70:17:4a:ea: 08:ef:7d:8f:98:c3:59:42:9a:28:4a:72:8e:47:67: 8a:cb:1c:3a:3f:1b:31:11:9f:5e:70:2e:44:3a:0d: bb:8d:09:cd:d7:36:3c:44:aa:ed:36:e4:a1:f5:25: cd:ea:fd:26:68:f1:28:cf:7f:b1:db:51:2e:c3:32: b1:b2:24:ae:e3:49:0d:4d:09:86:36:f1:25:8b:fd: f8:19:28:f1:15:80:6e:a0:48:2e:22:87:2d:ec:6c: 46:33:91:cf:21:7c:4d:98:79:9e:f7:b0:30:67:e3: 07:7a:60:26:07:2c:22:4e:f8:03:5b:4f:39:88:b1: d1:40:65:b1:8f:c2:20:7b:24:57:a1:bc:34:c8:bb: d9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:10:7B:2A:4A:CA:34:4E:36:DC:39:6B:71:AC:D5:16:B4:FF:7A:89 X509v3 Authority Key Identifier: keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d7:34:83:80:92:bf:1a:c9:56:aa:e4:d3:54:52:0d:6b:88: 17:b0:8f:e7:e8:55:8a:15:b2:4b:0f:53:56:f7:1b:92:6b:51: 5e:10:29:34:3b:e7:44:67:9e:96:52:7d:27:c5:01:9a:10:43: 02:8a:8f:e5:8f:78:a8:05:93:5d:47:57:fa:71:5c:6c:a7:ac: a9:20:56:ce:1b:53:7b:09:d7:37:3b:66:76:67:22:21:58:09: da:f7:73:67:85:b9:ba:f2:55:f8:e5:1a:94:28:72:09:53:df: 9e:e6:bf:74:f1:40:7c:49:58:79:a9:5d:5f:51:28:78:5b:ab: e1:1c:02:3d:d8:8a:30:82:0a:27:41:53:70:c9:7a:d1:02:97: 88:f6:cb:d1:81:76:64:8f:95:6d:3e:21:7b:85:3a:5d:b5:23: fc:18:a1:d0:be:ec:54:2d:ae:12:a6:cc:4e:48:db:33:97:f3: 93:2f:91:b3:30:fd:76:75:d1:7d:e6:00:18:27:1b:53:b9:2d: 6d:67:6a:94:86:55:91:f2:01:38:4c:c4:2b:62:1c:9b:b0:81: 63:e5:2c:e0:36:93:4e:ea:03:8b:57:4f:5d:0f:72:4e:32:ff: 29:b5:04:cb:99:37:25:c6:05:fa:d6:2f:e9:f0:fe:c9:45:83: 60:5e:78:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHmK11sBMEMJFLygrhwiibnhYZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1 M0M5NTQyQzAeFw0yNjA3MTkwOTQ5MDZaFw0yNjA3MjAxMjUwMDZaMDMxMTAvBgNV BAMTKEM5MTA3QjJBNEFDQTM0NEUzNkRDMzk2QjcxQUNENTE2QjRGRjdBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pD/NV41aMKUHCF21gCzHltU2 Rx+0YlmmOQRPSs9SqQObx2W57s+x1xijnZG2qcP+reBuDfzR81MR52RoEoCDz1ib cIprtn9IZPCLUKbdSOjR36Sg6Z+VgbWhwhHG0pfJjiSTtGBmyX5TYmi60nL6GVLc cBdK6gjvfY+Yw1lCmihKco5HZ4rLHDo/GzERn15wLkQ6DbuNCc3XNjxEqu025KH1 Jc3q/SZo8SjPf7HbUS7DMrGyJK7jSQ1NCYY28SWL/fgZKPEVgG6gSC4ihy3sbEYz kc8hfE2YeZ73sDBn4wd6YCYHLCJO+ANbTzmIsdFAZbGPwiB7JFehvDTIu9nZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRB7KkrKNE423DlrcazVFrT/eokwHwYDVR0j BBgwFoAUMBNq8Osv+p8U4FLk5JCqm1PJVCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4ZjliNmItMDI3YS00YmU2LWFiMDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBF QjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1M0M5NTQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDEzNkFGMEVCMkZGQTlGMTRFMDUyRTRFNDkwQUE5QjUzQzk1 NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFB OUI1M0M5NTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDXNIOAkr8ayVaq5NNUUg1riBewj+foVYoV sksPU1b3G5JrUV4QKTQ750RnnpZSfSfFAZoQQwKKj+WPeKgFk11HV/pxXGynrKkg Vs4bU3sJ1zc7ZnZnIiFYCdr3c2eFubryVfjlGpQocglT357mv3TxQHxJWHmpXV9R KHhbq+EcAj3YijCCCidBU3DJetECl4j2y9GBdmSPlW0+IXuFOl21I/wYodC+7FQt rhKmzE5I2zOX85MvkbMw/XZ10X3mABgnG1O5LW1napSGVZHyAThMxCtiHJuwgWPl LOA2k07qA4tXT10Pck4y/ym1BMuZNyXGBfrWL+nw/slFg2BeeBY= -----END CERTIFICATE-----Generated at Sun Jul 19 23:19:12 2026 by rpki-client