$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft File: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft (raw, json) Hash identifier: FoqY+H8yRAvrJS2p5Hs5u+qFpZTC9D+srG8CS1FxKmw= Subject key identifier: AC:D9:F3:C4:E6:A8:B1:48:16:28:86:80:50:A5:45:1B:46:93:E4:5B Authority key identifier: 30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C Certificate issuer: /CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Certificate serial: 49981450FB149C5866015A14CB35129CFFE3E4B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft Manifest number: EC Signing time: Sat 24 Oct 2026 17:51:27 +0000 Manifest this update: Sat 24 Oct 2026 17:46:27 +0000 Manifest next update: Sun 25 Oct 2026 18:43:27 +0000 Files and hashes: 1: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (hash: NYpdwytkChGCzh12ASFb3hn9VjleUU/gf+HbYhk8TR8=) 2: 30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl (hash: JXy/xAjknHnTwPaEWfACT+Z5/pK6tcSTcWKqrPRXYmU=) 3: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (hash: 6bvQorAqlffll2az/Z94BA0ycY0P8ekup5NSEtWtL/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:98:14:50:fb:14:9c:58:66:01:5a:14:cb:35:12:9c:ff:e3:e4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30136AF0EB2FFA9F14E052E4E490AA9B53C9542C Validity Not Before: Oct 24 17:46:27 2026 GMT Not After : Oct 25 18:43:27 2026 GMT Subject: CN=ACD9F3C4E6A8B1481628868050A5451B4693E45B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:7d:60:1a:26:78:32:d5:00:bd:91:fb:7d: 50:31:86:ab:4f:63:69:28:01:f9:a9:56:de:56:3e: 59:76:c0:1b:0e:4a:2d:91:01:2b:4e:82:22:7b:40: b3:af:6d:43:79:bc:8b:4c:e7:5d:12:a5:97:c9:c7: 40:b3:75:df:a6:91:d0:15:06:ba:d5:20:28:78:2d: 97:df:cf:49:1b:de:22:fa:a2:5d:2a:a3:3c:71:a1: 11:1f:7a:02:34:53:c9:ab:7a:6f:da:d7:ae:ac:d6: b9:14:a9:96:a7:c2:81:be:b6:5c:2a:6b:de:a8:fd: 27:63:6b:3c:98:14:01:e3:62:15:0c:44:57:7f:63: cd:1b:4a:0c:0e:12:02:3e:ff:79:34:c1:e1:63:6c: c7:51:10:fd:36:bc:93:96:5f:aa:4b:9b:35:57:89: f2:40:69:61:66:c3:e8:2f:14:7b:79:b6:bc:c6:38: 15:1b:bb:5a:b0:ac:6f:ed:25:32:39:a7:94:fe:44: 59:10:68:4d:51:02:b8:23:7e:54:91:6b:64:99:d2: 7f:02:37:1d:d4:bc:ea:c1:a4:4f:ae:ec:89:3b:2d: 95:47:96:d0:7c:b9:2f:09:76:a1:25:18:d1:84:98: cd:81:04:53:52:0b:3f:3d:3d:e4:8a:1d:a9:2a:26: 6a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D9:F3:C4:E6:A8:B1:48:16:28:86:80:50:A5:45:1B:46:93:E4:5B X509v3 Authority Key Identifier: keyid:30:13:6A:F0:EB:2F:FA:9F:14:E0:52:E4:E4:90:AA:9B:53:C9:54:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/30136AF0EB2FFA9F14E052E4E490AA9B53C9542C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7d:51:90:a3:22:2f:60:d0:24:86:6f:b9:5f:1c:cd:13:10: df:e4:10:0e:08:97:19:d9:ae:31:e5:4a:71:05:af:36:86:69: d0:c2:c3:20:b0:06:d6:c2:85:c0:f0:07:b5:80:b2:5f:c3:ff: 3d:24:21:1b:a4:04:3b:06:da:ef:16:4d:5d:a4:23:51:73:14: 6f:7e:9b:75:67:b8:26:a6:1a:53:ff:c9:5d:37:1f:ee:83:a1: 69:74:65:6f:5e:80:e9:59:52:3f:63:03:e2:ab:73:bd:da:73: ff:5b:1f:b1:4b:a3:13:bd:d4:62:ed:89:49:9e:9c:52:34:11: 68:bc:37:9e:39:1d:38:3c:86:cd:ac:8e:c1:c6:76:f4:80:d6: f7:0b:db:06:87:53:d1:4f:df:4c:8e:d2:4e:2c:ce:ad:ca:36: 25:c3:f9:e8:af:33:ce:b6:79:f2:14:c5:4b:ec:27:30:a7:77: 1f:29:3f:c2:a0:9e:89:cd:5e:55:d1:7a:78:6a:11:54:38:6a: 82:8b:56:fe:4a:63:b9:0c:d9:0c:ff:c4:af:82:b9:0f:bf:d6: 83:7a:b3:35:be:f9:f1:cb:33:0e:3a:65:36:a3:0d:8f:82:2c: 69:64:1c:c6:71:c6:08:5f:f6:3b:4b:16:01:72:c0:1c:b8:b0: f8:f3:0b:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZgUUPsUnFhmAVoUyzUSnP/j5LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1 M0M5NTQyQzAeFw0yNjEwMjQxNzQ2MjdaFw0yNjEwMjUxODQzMjdaMDMxMTAvBgNV BAMTKEFDRDlGM0M0RTZBOEIxNDgxNjI4ODY4MDUwQTU0NTFCNDY5M0U0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJn1gGiZ4MtUAvZH7fVAxhqtP Y2koAfmpVt5WPll2wBsOSi2RAStOgiJ7QLOvbUN5vItM510SpZfJx0Czdd+mkdAV BrrVICh4LZffz0kb3iL6ol0qozxxoREfegI0U8mrem/a166s1rkUqZanwoG+tlwq a96o/SdjazyYFAHjYhUMRFd/Y80bSgwOEgI+/3k0weFjbMdREP02vJOWX6pLmzVX ifJAaWFmw+gvFHt5trzGOBUbu1qwrG/tJTI5p5T+RFkQaE1RArgjflSRa2SZ0n8C Nx3UvOrBpE+u7Ik7LZVHltB8uS8JdqElGNGEmM2BBFNSCz89PeSKHakqJmp1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNnzxOaosUgWKIaAUKVFG0aT5FswHwYDVR0j BBgwFoAUMBNq8Osv+p8U4FLk5JCqm1PJVCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4ZjliNmItMDI3YS00YmU2LWFiMDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBF QjJGRkE5RjE0RTA1MkU0RTQ5MEFBOUI1M0M5NTQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDEzNkFGMEVCMkZGQTlGMTRFMDUyRTRFNDkwQUE5QjUzQzk1 NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvMzAxMzZBRjBFQjJGRkE5RjE0RTA1MkU0RTQ5MEFB OUI1M0M5NTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIR9UZCjIi9g0CSGb7lfHM0TEN/kEA4IlxnZ rjHlSnEFrzaGadDCwyCwBtbChcDwB7WAsl/D/z0kIRukBDsG2u8WTV2kI1FzFG9+ m3VnuCamGlP/yV03H+6DoWl0ZW9egOlZUj9jA+Krc73ac/9bH7FLoxO91GLtiUme nFI0EWi8N545HTg8hs2sjsHGdvSA1vcL2waHU9FP30yO0k4szq3KNiXD+eivM862 efIUxUvsJzCndx8pP8KgnonNXlXRenhqEVQ4aoKLVv5KY7kM2Qz/xK+CuQ+/1oN6 szW++fHLMw46ZTajDY+CLGlkHMZxxghf9jtLFgFywBy4sPjzC8E= -----END CERTIFICATE-----Generated at Sat Oct 24 20:44:42 2026 by rpki-client