$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json) Hash identifier: 4TzAV0Fpnq1vByCK9QOVrWYcfF/CtVZaL3PgaSwwAgQ= Subject key identifier: 95:D7:AB:BB:4E:1D:AF:BA:57:AE:B2:20:A1:2F:56:FA:E2:7E:40:50 Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Certificate serial: 64D8B4FC07DAB5DE0E97E2272B90293454B18AEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 04:38:32 +0000 Manifest this update: Thu 03 Sep 2026 04:33:32 +0000 Manifest next update: Fri 04 Sep 2026 06:15:32 +0000 Files and hashes: 1: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: RM2YuUB8jpq4knuQHB3QDzDF4XEP/xnVTxjfO+pJk+E=) 2: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=) 3: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d8:b4:fc:07:da:b5:de:0e:97:e2:27:2b:90:29:34:54:b1:8a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Validity Not Before: Sep 3 04:33:32 2026 GMT Not After : Sep 4 06:15:32 2026 GMT Subject: CN=95D7ABBB4E1DAFBA57AEB220A12F56FAE27E4050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:51:7b:78:16:24:f9:d1:e2:d4:2c:53:b9:42: dd:59:bf:14:15:3f:1f:ea:42:77:5a:ca:e6:94:4e: 63:75:c7:fb:07:c8:ca:52:61:84:ac:2c:0e:7f:23: 16:9d:45:7f:4b:bb:92:d6:bb:fe:cc:cf:55:ba:71: 7b:02:12:4e:ba:0b:36:ea:17:47:63:bb:bb:64:a8: 2a:68:2c:3a:ed:b1:ab:17:ca:21:0b:40:50:b7:a6: f2:61:e8:23:a3:4e:4c:89:5d:6e:ce:19:dd:c2:3f: 57:36:cc:29:75:20:68:1a:02:4d:a7:44:40:55:b2: 76:b3:47:66:dd:12:18:23:df:d9:d3:bd:c5:49:56: 10:2d:59:85:81:78:fa:dc:95:6d:f5:07:39:9c:bb: c4:f1:12:57:0b:5e:39:4b:a4:fc:0e:2c:fd:d2:28: f7:9e:c1:c2:3f:2f:32:e6:30:f2:56:ee:d3:62:fa: 22:fc:2d:68:80:69:51:dd:0a:24:6f:00:41:0c:af: e7:c9:ef:c2:46:23:c2:a3:88:d3:64:2d:eb:51:b1: 11:fd:82:43:6b:48:1e:51:fb:86:38:e8:09:18:74: bc:a9:92:65:26:40:55:3b:4e:84:f7:00:a9:b6:8d: 77:a7:7d:5c:a2:22:ba:95:61:5a:3f:fa:5c:35:93: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D7:AB:BB:4E:1D:AF:BA:57:AE:B2:20:A1:2F:56:FA:E2:7E:40:50 X509v3 Authority Key Identifier: keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b5:49:f5:a9:e9:bb:b0:2a:a2:9c:06:f9:1f:6e:04:17:2e: 31:5e:27:71:41:8f:61:58:f4:5a:46:f0:eb:65:9f:e8:9f:47: 91:bd:e5:0f:18:0a:4c:a6:bf:fa:61:c1:c2:31:8a:3d:b2:7d: 3e:fe:96:7a:de:62:33:f0:97:26:14:f7:d5:5b:c8:50:46:7a: c7:41:7b:80:0b:f6:99:e6:bd:78:dc:c6:21:da:56:07:60:5f: 1f:0c:d1:9d:56:10:15:a1:70:5f:86:d8:c6:0b:99:a1:3f:22: 03:56:5f:05:85:92:55:6e:35:2d:d4:24:27:2e:7c:13:e6:af: d2:67:ad:ce:8d:7b:99:39:19:ad:05:0d:8c:fa:ee:23:d5:b9: 7e:13:6a:43:af:a7:e8:22:c2:ea:5c:ca:61:3d:d6:9d:a1:a2: 3c:77:4d:4e:b0:e0:ee:9f:f1:78:89:f9:7a:11:68:9b:5f:d8: e0:3b:3a:aa:f0:4c:23:db:5e:e5:b1:4d:36:0f:d0:a1:46:d2: d4:50:7c:bb:b5:a6:7b:47:9f:74:a7:3e:e9:f6:35:af:83:88: 31:e9:c3:39:10:6a:e1:69:cb:24:50:9c:2e:a0:ab:77:02:2e: 32:79:a6:0e:b8:2e:51:93:d2:2e:04:5a:dc:f3:50:d9:4f:22: 4c:3a:ca:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNi0/Afatd4Ol+InK5ApNFSxiuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1 M0M5NTQyQzAeFw0yNjA5MDMwNDMzMzJaFw0yNjA5MDQwNjE1MzJaMDMxMTAvBgNV BAMTKDk1RDdBQkJCNEUxREFGQkE1N0FFQjIyMEExMkY1NkZBRTI3RTQwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwUXt4FiT50eLULFO5Qt1ZvxQV Px/qQndayuaUTmN1x/sHyMpSYYSsLA5/IxadRX9Lu5LWu/7Mz1W6cXsCEk66Czbq F0dju7tkqCpoLDrtsasXyiELQFC3pvJh6COjTkyJXW7OGd3CP1c2zCl1IGgaAk2n REBVsnazR2bdEhgj39nTvcVJVhAtWYWBePrclW31Bzmcu8TxElcLXjlLpPwOLP3S KPeewcI/LzLmMPJW7tNi+iL8LWiAaVHdCiRvAEEMr+fJ78JGI8KjiNNkLetRsRH9 gkNrSB5R+4Y46AkYdLypkmUmQFU7ToT3AKm2jXenfVyiIrqVYVo/+lw1k5kJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlderu04dr7pXrrIgoS9W+uJ+QFAwHwYDVR0j BBgwFoAUMBNq8Osv+p8U4FLk5JCqm1PJVCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4ZjliNmItMDI3YS00YmU2LWFiMDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBF QjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1M0M5NTQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDEzNkFGMEVCMkZGQTlGMTRFMDUyRTRFNDkwQUE5QjUzQzk1 NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFB OUI1M0M5NTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKK1SfWp6buwKqKcBvkfbgQXLjFeJ3FBj2FY 9FpG8Otln+ifR5G95Q8YCkymv/phwcIxij2yfT7+lnreYjPwlyYU99VbyFBGesdB e4AL9pnmvXjcxiHaVgdgXx8M0Z1WEBWhcF+G2MYLmaE/IgNWXwWFklVuNS3UJCcu fBPmr9Jnrc6Ne5k5Ga0FDYz67iPVuX4TakOvp+giwupcymE91p2hojx3TU6w4O6f 8XiJ+XoRaJtf2OA7OqrwTCPbXuWxTTYP0KFG0tRQfLu1pntHn3SnPun2Na+DiDHp wzkQauFpyyRQnC6gq3cCLjJ5pg64LlGT0i4EWtzzUNlPIkw6yqA= -----END CERTIFICATE-----Generated at Thu Sep 3 09:27:47 2026 by rpki-client