$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft File: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft (raw, json) Hash identifier: LVVi0cqKtU3B5tfFPItEFzSiGenrSMxJ0/M6yVq4At8= Subject key identifier: D5:7C:38:08:F9:96:59:B5:29:E0:A3:BD:8A:2B:00:7B:5C:CF:A7:2E Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Certificate serial: 57EF330975CD5B8B4F8BE84BD48DF966CE82BE4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 22:52:47 +0000 Manifest this update: Sat 14 Nov 2026 22:47:46 +0000 Manifest next update: Mon 16 Nov 2026 02:06:46 +0000 Files and hashes: 1: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: IfGffrMHINPuRfD4RL+78GjC4IFDiYDYpPLVDptGnC4=) 2: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl (hash: rOoJt4YKTJ6O4rjdInJuJdR08wulY9Evf/LnXylUoR8=) 3: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: wQj10i6uxR8PMgl15oZaZmKj6Dkq8me1CXWhGz38VZw=) 4: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: NybJNfrfr/FQtxQSfpzK5NCbywm4KAHMLV7iC5XOQDQ=) 5: 323430343a3137303a3a2f33322d3438203d3e2039333430.roa (hash: oM4SBMchb4TsPlpHrul0BOqMxKJ+BhpxMfjrBbw3y1E=) 6: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=) 7: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 0DjkrTA9ouNvrCsdojisPz41tYiFCwdDrjUDolphH5E=) 8: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: PJEb98fYS4vg3BBgZ6XrL5za6qVUTLmXWj6MOSgyH3k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 02:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ef:33:09:75:cd:5b:8b:4f:8b:e8:4b:d4:8d:f9:66:ce:82:be:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Validity Not Before: Nov 14 22:47:46 2026 GMT Not After : Nov 16 02:06:46 2026 GMT Subject: CN=D57C3808F99659B529E0A3BD8A2B007B5CCFA72E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:5e:6d:32:5b:2d:40:a7:4c:50:e1:e5:38: b7:00:c2:ed:aa:64:a3:29:27:90:56:d6:77:18:ae: 47:4c:76:df:2d:53:78:97:64:85:07:ff:39:ff:90: d4:a6:00:88:7f:5d:e1:84:6e:c5:69:fb:a8:ef:6f: 74:c5:7f:5a:c9:bd:2c:e1:5c:56:d2:09:99:a7:93: 0a:21:b6:39:a5:a3:50:06:f5:a0:46:a9:db:d6:00: 28:21:5c:91:8e:38:2d:66:84:45:77:62:9b:dd:d5: 92:5a:f6:f9:39:b4:34:f5:7c:05:7a:40:6b:a5:08: 69:69:86:43:48:ac:82:ae:b1:cd:99:0e:d4:27:e4: 5e:58:44:74:4a:4f:b4:8d:90:4d:dc:fa:b2:66:08: f7:c1:9c:52:61:47:15:f5:0e:16:56:e2:13:bc:d0: e7:39:f8:e4:3b:47:04:42:c1:a4:d5:ab:91:94:1a: d7:a1:bc:19:67:76:ac:69:cb:a7:b2:3e:9c:c7:28: 50:99:8e:c9:50:2d:ce:24:d0:fe:57:ea:38:83:03: 0f:d4:11:3b:b3:b1:45:ca:ef:d8:05:8e:e8:15:41: 4c:0c:82:40:87:9d:59:f2:a9:81:86:e5:aa:78:a7: eb:82:ef:d1:b6:47:2b:8f:a8:f3:1a:f8:c9:d5:9c: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7C:38:08:F9:96:59:B5:29:E0:A3:BD:8A:2B:00:7B:5C:CF:A7:2E X509v3 Authority Key Identifier: keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1d:c3:6f:40:00:af:ca:55:58:0e:a1:a0:f1:74:c4:ad:2e: 94:b1:45:d5:31:fa:c3:0b:17:61:bc:29:29:79:57:20:3a:a4: 1a:98:52:6a:99:8a:bb:85:75:e7:85:40:c0:d0:4e:11:3c:6c: 54:58:cd:2f:6a:f4:da:23:31:5c:cc:99:48:d9:1f:c2:4d:77: ad:19:c8:ac:68:d1:a5:e8:d0:f8:e1:ee:ca:e3:35:4d:99:ea: f7:d7:f7:ff:3e:54:9f:2a:28:2f:2a:22:8e:a6:57:dd:81:2e: 08:90:33:a2:dd:dd:cb:fc:2c:ae:37:03:8b:71:c9:26:04:14: da:6c:a0:60:4f:59:54:8b:34:a0:04:3e:c8:30:db:0d:e4:45: 2d:e3:3a:95:55:38:da:08:4d:8c:7e:01:fe:57:b7:cf:7f:be: 3b:be:df:c0:e2:a1:ce:8f:71:db:51:b5:cb:2a:f2:b5:8c:0f: 49:86:a7:22:a8:55:7e:f6:c8:92:0a:43:e8:b9:5e:8a:e6:ac: 38:a5:a4:e0:60:e0:e0:9e:72:ed:0a:ca:2a:8c:c9:90:94:b4: f0:bf:ea:d7:f8:f3:22:8f:a9:5c:cf:e3:60:fc:ba:89:a4:f6: a0:7d:1d:46:f7:a3:92:4a:ea:57:f5:9d:f3:a4:22:33:69:98: e5:bd:f4:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+8zCXXNW4tPi+hL1I35Zs6Cvk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcw M0ZBOUUyODAeFw0yNjExMTQyMjQ3NDZaFw0yNjExMTYwMjA2NDZaMDMxMTAvBgNV BAMTKEQ1N0MzODA4Rjk5NjU5QjUyOUUwQTNCRDhBMkIwMDdCNUNDRkE3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTl5tMlstQKdMUOHlOLcAwu2q ZKMpJ5BW1ncYrkdMdt8tU3iXZIUH/zn/kNSmAIh/XeGEbsVp+6jvb3TFf1rJvSzh XFbSCZmnkwohtjmlo1AG9aBGqdvWACghXJGOOC1mhEV3Ypvd1ZJa9vk5tDT1fAV6 QGulCGlphkNIrIKusc2ZDtQn5F5YRHRKT7SNkE3c+rJmCPfBnFJhRxX1DhZW4hO8 0Oc5+OQ7RwRCwaTVq5GUGtehvBlndqxpy6eyPpzHKFCZjslQLc4k0P5X6jiDAw/U ETuzsUXK79gFjugVQUwMgkCHnVnyqYGG5ap4p+uC79G2RyuPqPMa+MnVnOyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Xw4CPmWWbUp4KO9iisAe1zPpy4wHwYDVR0j BBgwFoAUZiodHwuD3OrHPZc1FJeaFwP6nigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTViMWU1N2UtYTBmMS00NjdmLWE0NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYw QjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcwM0ZBOUUyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjJBMUQxRjBCODNEQ0VBQzczRDk3MzUxNDk3OUExNzAzRkE5 RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlB MTcwM0ZBOUUyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0dw29AAK/KVVgOoaDxdMStLpSxRdUx+sML F2G8KSl5VyA6pBqYUmqZiruFdeeFQMDQThE8bFRYzS9q9NojMVzMmUjZH8JNd60Z yKxo0aXo0Pjh7srjNU2Z6vfX9/8+VJ8qKC8qIo6mV92BLgiQM6Ld3cv8LK43A4tx ySYEFNpsoGBPWVSLNKAEPsgw2w3kRS3jOpVVONoITYx+Af5Xt89/vju+38Dioc6P cdtRtcsq8rWMD0mGpyKoVX72yJIKQ+i5XormrDilpOBg4OCecu0KyiqMyZCUtPC/ 6tf48yKPqVzP42D8uomk9qB9HUb3o5JK6lf1nfOkIjNpmOW99P4= -----END CERTIFICATE-----Generated at Sun Nov 15 13:09:04 2026 by rpki-client