$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft File: 306A66EEE635498634AE42872829D07FEBC048AD.mft (raw, json) Hash identifier: L7LYHIAxrfQPr1qS1UXArDTibvRDosb4SPwRbPZ9hlQ= Subject key identifier: DF:18:42:8A:33:9F:CC:D6:30:B7:2A:DC:54:6B:40:42:EB:70:18:05 Authority key identifier: 30:6A:66:EE:E6:35:49:86:34:AE:42:87:28:29:D0:7F:EB:C0:48:AD Certificate issuer: /CN=306A66EEE635498634AE42872829D07FEBC048AD Certificate serial: 268FCDB07FBB22FDF0DBD4119170EC293A5D75E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/306A66EEE635498634AE42872829D07FEBC048AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:51:06 +0000 Manifest this update: Tue 12 May 2026 09:46:06 +0000 Manifest next update: Wed 13 May 2026 09:55:06 +0000 Files and hashes: 1: 306A66EEE635498634AE42872829D07FEBC048AD.crl (hash: qK5xBFkD6khIeSJnBjuNhJ0EfsJqHIKGd5aaHBxU1GQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.crl rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/306A66EEE635498634AE42872829D07FEBC048AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:8f:cd:b0:7f:bb:22:fd:f0:db:d4:11:91:70:ec:29:3a:5d:75:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306A66EEE635498634AE42872829D07FEBC048AD Validity Not Before: May 12 09:46:06 2026 GMT Not After : May 13 09:55:06 2026 GMT Subject: CN=DF18428A339FCCD630B72ADC546B4042EB701805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e4:20:2b:7f:5b:2b:34:6f:bd:62:25:0f:a9: 5c:91:d1:25:f4:71:76:19:4f:bf:5a:98:8b:56:4d: 6b:dc:00:56:94:57:85:c0:ad:8c:1b:a3:c1:c2:4e: c2:0f:cf:c4:da:9b:5c:a7:08:ba:12:d9:d9:f3:1f: 5c:3f:8b:4b:50:9f:6f:ac:a3:93:57:a8:e2:f7:9a: e2:64:26:37:9c:3d:f3:bf:f1:fa:54:02:bb:f5:5b: 67:9d:34:4d:18:33:8a:ab:fc:d7:98:1d:50:2d:ad: dd:37:f6:18:bd:6b:04:88:d5:3c:6c:81:e9:2e:73: ad:57:87:3d:2b:20:57:13:15:68:38:b6:56:65:af: 11:72:3c:ee:5d:92:08:36:b1:48:b5:e7:19:12:fe: f3:64:e8:8c:e2:4e:ce:1e:73:c6:fb:64:61:80:50: 7a:b2:97:29:96:12:36:c2:c7:8a:90:a0:06:9a:be: 37:f3:18:28:0b:73:06:b0:d0:59:7d:cc:d0:4e:9a: f5:23:d6:65:9c:4d:6c:02:4a:0e:7a:61:28:26:d6: 04:fa:9a:c4:8a:4d:ad:93:89:94:67:d3:c6:30:2a: 20:6e:fb:e7:4b:69:36:63:01:7c:c4:a1:fb:30:6c: 11:05:e7:e3:21:f5:1d:e6:30:cf:eb:3c:30:87:49: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:18:42:8A:33:9F:CC:D6:30:B7:2A:DC:54:6B:40:42:EB:70:18:05 X509v3 Authority Key Identifier: keyid:30:6A:66:EE:E6:35:49:86:34:AE:42:87:28:29:D0:7F:EB:C0:48:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/306A66EEE635498634AE42872829D07FEBC048AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:85:24:ca:eb:78:d3:40:d0:ea:36:78:38:25:a0:20:61:c6: 93:f9:45:51:5c:ec:d9:23:36:cd:21:e5:27:87:d3:d4:47:70: 78:01:99:25:37:e2:39:af:77:8d:c8:46:53:02:f3:0b:fe:a8: 60:b1:fb:40:5d:4b:9a:1e:9b:b6:f0:0f:6d:f5:dd:48:e1:98: b9:d2:f9:06:0b:89:57:c7:5f:4e:02:63:00:66:02:e4:53:de: 87:78:04:35:fc:a2:18:4e:d1:3a:d8:a9:8f:10:bc:9c:8c:75: 49:49:0c:6e:24:51:f8:92:02:80:ce:02:b1:d1:fb:08:79:c2: a2:93:97:fe:01:bd:b7:26:60:07:14:96:67:56:9f:09:d9:68: 2a:68:96:49:fe:df:9f:69:d2:e2:82:0f:3e:c8:8c:7a:61:86: 83:19:c0:a3:d4:b7:8f:65:0d:0a:62:5d:b0:8c:f7:f8:b6:18: 6b:ef:60:fd:86:e5:3e:00:3f:ba:6f:95:24:ba:78:b7:0e:72: 75:04:d6:66:b7:99:41:50:37:04:b7:8c:95:73:73:4e:3d:f5: ec:ea:6b:8b:ff:bd:fd:a6:69:7b:e5:6f:52:7e:b3:b2:06:9d: d0:8b:3b:d6:cc:23:8d:97:34:01:6f:5d:97:f9:d1:98:d9:cb: 20:1a:ab:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJo/NsH+7Iv3w29QRkXDsKTpddeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA2QTY2RUVFNjM1NDk4NjM0QUU0Mjg3MjgyOUQwN0ZF QkMwNDhBRDAeFw0yNjA1MTIwOTQ2MDZaFw0yNjA1MTMwOTU1MDZaMDMxMTAvBgNV BAMTKERGMTg0MjhBMzM5RkNDRDYzMEI3MkFEQzU0NkI0MDQyRUI3MDE4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5CArf1srNG+9YiUPqVyR0SX0 cXYZT79amItWTWvcAFaUV4XArYwbo8HCTsIPz8Tam1ynCLoS2dnzH1w/i0tQn2+s o5NXqOL3muJkJjecPfO/8fpUArv1W2edNE0YM4qr/NeYHVAtrd039hi9awSI1Txs gekuc61Xhz0rIFcTFWg4tlZlrxFyPO5dkgg2sUi15xkS/vNk6IziTs4ec8b7ZGGA UHqylymWEjbCx4qQoAaavjfzGCgLcwaw0Fl9zNBOmvUj1mWcTWwCSg56YSgm1gT6 msSKTa2TiZRn08YwKiBu++dLaTZjAXzEofswbBEF5+Mh9R3mMM/rPDCHSUPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3xhCijOfzNYwtyrcVGtAQutwGAUwHwYDVR0j BBgwFoAUMGpm7uY1SYY0rkKHKCnQf+vASK0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M4YzQ2ZmItYjZjMS00YTY5LTgzZmItOTBlN2Q1YzMyNmRlLzAvMzA2QTY2RUVF NjM1NDk4NjM0QUU0Mjg3MjgyOUQwN0ZFQkMwNDhBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDZBNjZFRUU2MzU0OTg2MzRBRTQyODcyODI5RDA3RkVCQzA0 OEFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvMzA2QTY2RUVFNjM1NDk4NjM0QUU0Mjg3MjgyOUQw N0ZFQkMwNDhBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmFJMrreNNA0Oo2eDgloCBhxpP5RVFc7Nkj Ns0h5SeH09RHcHgBmSU34jmvd43IRlMC8wv+qGCx+0BdS5oem7bwD2313UjhmLnS +QYLiVfHX04CYwBmAuRT3od4BDX8ohhO0TrYqY8QvJyMdUlJDG4kUfiSAoDOArHR +wh5wqKTl/4BvbcmYAcUlmdWnwnZaCpolkn+359p0uKCDz7IjHphhoMZwKPUt49l DQpiXbCM9/i2GGvvYP2G5T4AP7pvlSS6eLcOcnUE1ma3mUFQNwS3jJVzc0499ezq a4v/vf2maXvlb1J+s7IGndCLO9bMI42XNAFvXZf50ZjZyyAaqwU= -----END CERTIFICATE-----Generated at Tue May 12 22:47:01 2026 by rpki-client