$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft File: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft (raw, json) Hash identifier: 2cVTfJgNVzvQNQauR70l10P1QU7Yn3SCGCHMN9oKQnQ= Subject key identifier: CC:D0:30:8F:C4:66:79:3C:30:84:16:CA:F0:0D:4B:FE:22:3B:54:EB Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Certificate serial: 606E5EBED999EF61603A02C4B20CDAF006260724 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 14:54:53 +0000 Manifest this update: Tue 28 Jul 2026 14:49:53 +0000 Manifest next update: Wed 29 Jul 2026 15:34:53 +0000 Files and hashes: 1: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=) 2: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: NybJNfrfr/FQtxQSfpzK5NCbywm4KAHMLV7iC5XOQDQ=) 3: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl (hash: s4kAEaaW57LLWiQd7idpwo0ONmdfhhSVWr6m3u9Ji6A=) 4: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: PJEb98fYS4vg3BBgZ6XrL5za6qVUTLmXWj6MOSgyH3k=) 5: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 0DjkrTA9ouNvrCsdojisPz41tYiFCwdDrjUDolphH5E=) 6: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: wQj10i6uxR8PMgl15oZaZmKj6Dkq8me1CXWhGz38VZw=) 7: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: IfGffrMHINPuRfD4RL+78GjC4IFDiYDYpPLVDptGnC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6e:5e:be:d9:99:ef:61:60:3a:02:c4:b2:0c:da:f0:06:26:07:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Validity Not Before: Jul 28 14:49:53 2026 GMT Not After : Jul 29 15:34:53 2026 GMT Subject: CN=CCD0308FC466793C308416CAF00D4BFE223B54EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:4a:c3:92:5a:15:a3:af:8b:1a:ee:e9:fd: 62:c9:96:24:53:97:e8:ce:86:22:88:ac:99:f6:cd: 7f:21:ea:d3:f8:33:b6:5c:47:d1:82:c9:c5:cf:a7: 41:c6:bf:28:5d:1b:81:86:80:c1:59:1b:01:d4:8b: 86:c1:98:33:d8:e1:3a:05:2b:89:29:dd:61:53:24: f5:db:31:f9:5e:64:a8:c9:80:6c:a0:e7:db:3c:bb: 43:55:37:dc:5e:64:68:c4:88:96:86:7e:14:93:34: 6f:70:fe:75:c8:5e:07:d3:c5:b7:bf:3b:f2:f4:25: c4:be:fe:bb:3e:3c:8a:fd:0d:a4:01:f5:60:38:7b: 98:0d:ab:47:5f:e5:68:32:83:20:65:c7:a6:0a:10: d4:ab:09:7d:ab:af:fd:38:ef:6e:cd:3e:07:dd:33: 77:46:e3:ab:a8:e6:8f:be:ea:01:8f:d5:0f:5a:1d: 2a:1c:f1:86:59:eb:3c:fd:ff:b2:46:30:ff:cd:44: b5:6c:2e:e2:d7:eb:6b:3e:30:05:8e:bd:55:35:7f: db:94:c9:d6:7b:3c:3f:56:33:99:65:f6:6d:d0:3f: a1:f7:45:89:7e:42:ee:7b:8e:24:cd:e4:09:cf:39: ab:7e:d0:27:9b:0a:b6:d6:1f:6b:c9:a4:51:c2:8e: f0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D0:30:8F:C4:66:79:3C:30:84:16:CA:F0:0D:4B:FE:22:3B:54:EB X509v3 Authority Key Identifier: keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:89:06:cf:e2:73:d5:30:68:24:93:62:8b:65:53:19:d1:ac: 98:43:40:38:f1:fe:f9:b0:a5:55:ff:7c:25:cc:1a:2b:35:bf: af:69:46:03:7e:7d:39:c3:72:c4:98:75:67:99:6d:c1:8c:67: 61:51:1e:d2:c9:8a:8a:0b:58:94:de:01:ea:b5:dc:d9:ed:d8: 88:c8:1a:8d:58:ae:ec:fb:c8:24:0f:9a:82:05:e6:30:93:99: 25:d2:7f:19:04:ce:be:c7:39:f7:9e:e1:66:fb:93:e3:75:76: a1:49:83:29:66:c8:64:b8:36:72:b2:f3:c6:65:d8:f8:af:5e: ea:9f:fd:50:b0:81:61:76:97:7b:0f:9c:2e:12:9f:d1:be:7a: b4:ed:3d:a6:8b:82:c2:7b:5a:1d:13:0c:0a:b9:a0:21:69:27: 4f:e1:8e:8b:12:8c:51:21:69:bb:0c:91:a2:a7:bd:0b:80:17: 25:c6:54:c3:a9:fb:85:e1:f7:c8:8f:e4:f6:56:3c:1b:b7:65: ca:62:1e:9d:f9:5b:bd:5c:2f:09:35:60:a6:81:d5:ae:22:34: 8e:1a:cb:bd:4d:f9:2d:60:4c:11:f5:4f:0a:7d:0f:cf:b7:fd: 02:5d:1c:ca:c7:57:7f:a6:09:4d:38:35:d1:4c:8e:54:17:c1: df:c4:ed:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYG5evtmZ72FgOgLEsgza8AYmByQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcw M0ZBOUUyODAeFw0yNjA3MjgxNDQ5NTNaFw0yNjA3MjkxNTM0NTNaMDMxMTAvBgNV BAMTKENDRDAzMDhGQzQ2Njc5M0MzMDg0MTZDQUYwMEQ0QkZFMjIzQjU0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPQErDkloVo6+LGu7p/WLJliRT l+jOhiKIrJn2zX8h6tP4M7ZcR9GCycXPp0HGvyhdG4GGgMFZGwHUi4bBmDPY4ToF K4kp3WFTJPXbMfleZKjJgGyg59s8u0NVN9xeZGjEiJaGfhSTNG9w/nXIXgfTxbe/ O/L0JcS+/rs+PIr9DaQB9WA4e5gNq0df5WgygyBlx6YKENSrCX2rr/04727NPgfd M3dG46uo5o++6gGP1Q9aHSoc8YZZ6zz9/7JGMP/NRLVsLuLX62s+MAWOvVU1f9uU ydZ7PD9WM5ll9m3QP6H3RYl+Qu57jiTN5AnPOat+0CebCrbWH2vJpFHCjvA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzNAwj8RmeTwwhBbK8A1L/iI7VOswHwYDVR0j BBgwFoAUZiodHwuD3OrHPZc1FJeaFwP6nigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTViMWU1N2UtYTBmMS00NjdmLWE0NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYw QjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcwM0ZBOUUyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjJBMUQxRjBCODNEQ0VBQzczRDk3MzUxNDk3OUExNzAzRkE5 RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlB MTcwM0ZBOUUyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOJBs/ic9UwaCSTYotlUxnRrJhDQDjx/vmw pVX/fCXMGis1v69pRgN+fTnDcsSYdWeZbcGMZ2FRHtLJiooLWJTeAeq13Nnt2IjI Go1Yruz7yCQPmoIF5jCTmSXSfxkEzr7HOfee4Wb7k+N1dqFJgylmyGS4NnKy88Zl 2PivXuqf/VCwgWF2l3sPnC4Sn9G+erTtPaaLgsJ7Wh0TDAq5oCFpJ0/hjosSjFEh absMkaKnvQuAFyXGVMOp+4Xh98iP5PZWPBu3ZcpiHp35W71cLwk1YKaB1a4iNI4a y71N+S1gTBH1Twp9D8+3/QJdHMrHV3+mCU04NdFMjlQXwd/E7ec= -----END CERTIFICATE-----Generated at Wed Jul 29 05:41:10 2026 by rpki-client