$ rpki-client -vvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json) Hash identifier: /8WFQo0uSx23VjQUfbgnOKkdDq41N78hcb809SngKWI= Subject key identifier: F4:47:14:7A:BE:53:62:74:8A:43:F3:E0:51:7F:B0:07:47:30:EA:A4 Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Certificate serial: 244125303AFEB5105C415DD542FA83958A1197C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:35:36 +0000 Manifest this update: Tue 02 Jun 2026 12:30:36 +0000 Manifest next update: Wed 03 Jun 2026 12:59:36 +0000 Files and hashes: 1: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=) 2: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: gY6ebxWQW1KRBks5tF4V8Hryv6z6wgeTpp9nn/UaSI0=) 3: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:41:25:30:3a:fe:b5:10:5c:41:5d:d5:42:fa:83:95:8a:11:97:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Validity Not Before: Jun 2 12:30:36 2026 GMT Not After : Jun 3 12:59:36 2026 GMT Subject: CN=F447147ABE5362748A43F3E0517FB0074730EAA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:ae:7e:ee:ff:6d:f0:8b:c7:a6:2d:b1:c7: 9a:33:b2:79:f2:ee:b5:80:c6:83:9a:a8:7a:52:62: 93:af:f8:13:15:13:7c:c5:b5:34:ce:6f:ce:fc:95: 65:ca:64:04:38:21:72:f6:de:fa:8f:a3:6b:ca:ea: b8:71:c2:e5:f8:c5:dd:b6:d0:be:e9:21:fa:83:53: f2:4a:f0:e3:46:2e:ee:d6:dc:7c:d2:0b:e7:00:ce: 81:f3:a0:2c:e4:61:88:cf:7d:32:85:6e:ba:9c:cc: f2:43:08:ee:fe:4f:34:2c:4f:70:8d:2a:c7:27:2b: f9:bd:58:1a:08:ee:25:d3:02:bf:1a:d2:65:a6:c8: eb:fe:8f:70:c6:09:e5:65:63:f6:ed:46:26:72:3e: 0d:ce:05:c7:c0:84:2e:2b:4b:cd:6c:37:15:4e:51: 73:d7:1f:92:12:6e:39:ea:b7:5b:de:11:5b:92:02: 01:17:fe:90:77:55:36:af:49:ab:7c:a0:74:ce:a0: 7a:84:41:6c:53:d9:b0:e5:f5:c5:d6:59:40:89:94: c7:07:fc:4f:62:57:16:75:a6:ac:e8:af:79:7f:9d: b6:df:ec:ec:91:e3:81:36:fb:5a:a6:76:b9:4d:df: c3:3b:25:6a:8e:0b:f2:64:6e:32:05:f1:cf:d1:d1: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:47:14:7A:BE:53:62:74:8A:43:F3:E0:51:7F:B0:07:47:30:EA:A4 X509v3 Authority Key Identifier: keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3d:8b:62:4b:d7:30:54:7a:1f:6d:78:6e:61:fe:45:f5:04: 1a:1a:d0:59:ce:04:d9:7c:ff:e0:da:74:2a:be:62:b0:ea:bd: c0:bb:10:a2:45:fc:ae:bc:4e:a3:ab:54:d4:12:2a:45:5a:0a: 93:13:ea:a4:44:6c:d6:5b:d0:7f:0a:a4:b6:78:72:56:62:f4: 96:c8:48:05:12:c4:51:7e:80:61:3a:87:25:90:34:cf:6d:9e: 66:e5:6a:62:54:c6:fe:ef:62:9b:37:47:3c:23:b5:40:30:aa: dc:b7:04:0c:eb:b0:3f:38:d4:e7:84:28:6d:d7:9f:c8:45:67: 19:20:08:14:bd:c9:55:df:4a:5f:bc:f1:d6:6f:cd:c7:6a:7a: 3f:77:18:d8:68:f0:59:e6:05:e1:b0:ce:73:39:33:3d:6f:f4: 9a:bd:9e:d1:b2:03:0c:f4:aa:b0:d3:47:91:80:05:b9:48:4c: 48:da:65:b1:47:84:b1:1e:64:b0:30:a1:57:2e:37:c1:f2:a2: 34:03:1a:e0:21:00:0f:bc:ab:03:a6:98:09:ad:bc:7b:5d:6c: 5b:71:dd:e6:ae:51:f3:63:53:8b:11:d5:dd:29:d0:40:a1:9e: bd:43:86:a2:59:f0:6a:cb:14:b9:21:13:76:97:41:b5:d8:13: bb:0a:fd:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEElMDr+tRBcQV3VQvqDlYoRl8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1 M0M5NTQyQzAeFw0yNjA2MDIxMjMwMzZaFw0yNjA2MDMxMjU5MzZaMDMxMTAvBgNV BAMTKEY0NDcxNDdBQkU1MzYyNzQ4QTQzRjNFMDUxN0ZCMDA3NDczMEVBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWe65+7v9t8IvHpi2xx5ozsnny 7rWAxoOaqHpSYpOv+BMVE3zFtTTOb878lWXKZAQ4IXL23vqPo2vK6rhxwuX4xd22 0L7pIfqDU/JK8ONGLu7W3HzSC+cAzoHzoCzkYYjPfTKFbrqczPJDCO7+TzQsT3CN KscnK/m9WBoI7iXTAr8a0mWmyOv+j3DGCeVlY/btRiZyPg3OBcfAhC4rS81sNxVO UXPXH5ISbjnqt1veEVuSAgEX/pB3VTavSat8oHTOoHqEQWxT2bDl9cXWWUCJlMcH /E9iVxZ1pqzor3l/nbbf7OyR44E2+1qmdrlN38M7JWqOC/JkbjIF8c/R0U8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9EcUer5TYnSKQ/PgUX+wB0cw6qQwHwYDVR0j BBgwFoAUMBNq8Osv+p8U4FLk5JCqm1PJVCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4ZjliNmItMDI3YS00YmU2LWFiMDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBF QjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1M0M5NTQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDEzNkFGMEVCMkZGQTlGMTRFMDUyRTRFNDkwQUE5QjUzQzk1 NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFB OUI1M0M5NTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHo9i2JL1zBUeh9teG5h/kX1BBoa0FnOBNl8 /+DadCq+YrDqvcC7EKJF/K68TqOrVNQSKkVaCpMT6qREbNZb0H8KpLZ4clZi9JbI SAUSxFF+gGE6hyWQNM9tnmblamJUxv7vYps3RzwjtUAwqty3BAzrsD841OeEKG3X n8hFZxkgCBS9yVXfSl+88dZvzcdqej93GNho8FnmBeGwznM5Mz1v9Jq9ntGyAwz0 qrDTR5GABblITEjaZbFHhLEeZLAwoVcuN8HyojQDGuAhAA+8qwOmmAmtvHtdbFtx 3eauUfNjU4sR1d0p0EChnr1DhqJZ8GrLFLkhE3aXQbXYE7sK/Qo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:57 2026 by rpki-client