$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft File: 306A66EEE635498634AE42872829D07FEBC048AD.mft (raw, json) Hash identifier: bAYuF4Cwu3PfEUE0t8MwTJOO5Qa1SoepK/fXXWmaek8= Subject key identifier: BD:E9:3E:AA:4E:27:43:FE:A7:3A:1E:B6:3E:FF:DA:77:B4:EA:49:78 Authority key identifier: 30:6A:66:EE:E6:35:49:86:34:AE:42:87:28:29:D0:7F:EB:C0:48:AD Certificate issuer: /CN=306A66EEE635498634AE42872829D07FEBC048AD Certificate serial: 38A7FEC035601427E17CBC4BCAE11DAFBFA936FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/306A66EEE635498634AE42872829D07FEBC048AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:21:46 +0000 Manifest this update: Wed 16 Sep 2026 18:16:46 +0000 Manifest next update: Thu 17 Sep 2026 20:16:46 +0000 Files and hashes: 1: 306A66EEE635498634AE42872829D07FEBC048AD.crl (hash: qKkoblP2oyi9uVXFSJRBgEUQS8n0vuizESW20sNhr1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.crl rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/306A66EEE635498634AE42872829D07FEBC048AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a7:fe:c0:35:60:14:27:e1:7c:bc:4b:ca:e1:1d:af:bf:a9:36:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306A66EEE635498634AE42872829D07FEBC048AD Validity Not Before: Sep 16 18:16:46 2026 GMT Not After : Sep 17 20:16:46 2026 GMT Subject: CN=BDE93EAA4E2743FEA73A1EB63EFFDA77B4EA4978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:70:0d:3c:cd:fd:fc:2b:50:96:a9:fc:9d:f3: 5d:23:c8:2c:d1:75:2c:44:9e:9c:ee:7a:fe:94:17: 10:88:ae:ee:9e:59:56:d9:46:a4:24:60:f5:e7:0c: 9e:8c:4c:e8:e0:6b:f0:65:a3:46:2e:81:65:57:e6: 6c:c1:84:9c:dc:9e:ec:50:29:e0:a5:49:ba:df:d3: 80:3c:d0:44:76:c0:54:8e:ce:f7:96:9b:cb:a1:a9: ba:71:79:05:2f:13:05:38:e2:6d:f0:d7:f8:3c:51: 5e:cf:10:46:76:88:58:d6:09:8d:0e:f0:9f:f0:67: 8b:ec:aa:87:78:a0:c1:6f:dd:07:4f:77:1c:bd:52: 1c:7e:4b:9d:e8:cb:00:6d:65:c0:04:e2:83:2c:f3: 6a:81:7e:ad:cc:e3:e4:ab:79:1d:d3:fa:2a:ca:4b: 63:2b:85:cb:3a:b6:1c:7d:9a:c7:9a:16:7b:53:1c: eb:13:4a:a5:7c:ab:d4:be:ee:c9:5d:5a:77:c4:e5: 16:51:c9:5e:64:4c:aa:26:66:7b:84:a2:6e:27:e7: 19:ac:8b:aa:51:cb:b2:61:3c:11:3f:78:b2:9d:f2: a5:e5:fb:4f:99:09:81:e9:f1:3f:9f:a1:c0:2b:4b: 6a:05:d8:a6:63:0c:f9:c6:79:7b:05:ea:75:db:57: bd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E9:3E:AA:4E:27:43:FE:A7:3A:1E:B6:3E:FF:DA:77:B4:EA:49:78 X509v3 Authority Key Identifier: keyid:30:6A:66:EE:E6:35:49:86:34:AE:42:87:28:29:D0:7F:EB:C0:48:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/306A66EEE635498634AE42872829D07FEBC048AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b2:36:4d:dd:4d:10:e7:d9:3e:47:6b:e5:95:b9:f3:1e:d8: 77:b9:fb:12:b4:4a:a5:6d:fb:30:e0:dd:12:75:34:63:1d:69: e2:0a:2c:96:1b:c5:a6:61:b7:65:32:52:4b:ab:3a:60:5c:1b: 71:b5:4d:f2:4f:c7:d9:73:51:41:fa:52:43:b7:de:1c:80:3b: 69:ec:5f:22:21:2f:a5:98:da:bd:67:72:2d:51:1e:61:54:10: 3d:2f:04:93:7f:4b:bc:1c:52:0d:97:1e:51:48:e7:05:97:d0: 30:e9:e4:17:bf:14:2a:53:5c:34:b5:40:a2:65:c7:84:9b:e7: c2:99:8b:ef:a6:b1:f0:07:bf:83:f0:95:f9:27:f1:25:86:00: 1a:dc:f6:95:0e:4b:77:a6:82:26:39:a3:e3:67:fa:4e:b9:6b: 54:67:f5:61:cc:73:59:bd:54:60:1a:16:d6:1d:82:31:19:74: 93:d8:c4:08:4e:c7:e0:6b:4a:82:1e:52:49:cd:7d:59:cb:5d: 5d:fe:bf:14:6e:07:cc:09:60:2c:3c:35:2a:2c:86:f2:4d:cc: c1:b9:6f:d8:5b:c4:cf:65:a6:20:f4:75:1e:bb:bf:57:01:01: dd:f8:ee:b6:21:90:67:9d:6a:db:37:51:8b:eb:24:3a:b3:c3: bd:da:a0:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKf+wDVgFCfhfLxLyuEdr7+pNv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA2QTY2RUVFNjM1NDk4NjM0QUU0Mjg3MjgyOUQwN0ZF QkMwNDhBRDAeFw0yNjA5MTYxODE2NDZaFw0yNjA5MTcyMDE2NDZaMDMxMTAvBgNV BAMTKEJERTkzRUFBNEUyNzQzRkVBNzNBMUVCNjNFRkZEQTc3QjRFQTQ5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlcA08zf38K1CWqfyd810jyCzR dSxEnpzuev6UFxCIru6eWVbZRqQkYPXnDJ6MTOjga/Blo0YugWVX5mzBhJzcnuxQ KeClSbrf04A80ER2wFSOzveWm8uhqbpxeQUvEwU44m3w1/g8UV7PEEZ2iFjWCY0O 8J/wZ4vsqod4oMFv3QdPdxy9Uhx+S53oywBtZcAE4oMs82qBfq3M4+SreR3T+irK S2Mrhcs6thx9mseaFntTHOsTSqV8q9S+7sldWnfE5RZRyV5kTKomZnuEom4n5xms i6pRy7JhPBE/eLKd8qXl+0+ZCYHp8T+focArS2oF2KZjDPnGeXsF6nXbV733AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvek+qk4nQ/6nOh62Pv/ad7TqSXgwHwYDVR0j BBgwFoAUMGpm7uY1SYY0rkKHKCnQf+vASK0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M4YzQ2ZmItYjZjMS00YTY5LTgzZmItOTBlN2Q1YzMyNmRlLzAvMzA2QTY2RUVF NjM1NDk4NjM0QUU0Mjg3MjgyOUQwN0ZFQkMwNDhBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDZBNjZFRUU2MzU0OTg2MzRBRTQyODcyODI5RDA3RkVCQzA0 OEFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvMzA2QTY2RUVFNjM1NDk4NjM0QUU0Mjg3MjgyOUQw N0ZFQkMwNDhBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2yNk3dTRDn2T5Ha+WVufMe2He5+xK0SqVt +zDg3RJ1NGMdaeIKLJYbxaZht2UyUkurOmBcG3G1TfJPx9lzUUH6UkO33hyAO2ns XyIhL6WY2r1nci1RHmFUED0vBJN/S7wcUg2XHlFI5wWX0DDp5Be/FCpTXDS1QKJl x4Sb58KZi++msfAHv4Pwlfkn8SWGABrc9pUOS3emgiY5o+Nn+k65a1Rn9WHMc1m9 VGAaFtYdgjEZdJPYxAhOx+BrSoIeUknNfVnLXV3+vxRuB8wJYCw8NSoshvJNzMG5 b9hbxM9lpiD0dR67v1cBAd347rYhkGedats3UYvrJDqzw73aoB8= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:03 2026 by rpki-client