$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft File: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft (raw, json) Hash identifier: uJlQkJ+G9r4MN3/QFBnt2kFXXe3NIqKPHFUY3GyLVT8= Subject key identifier: C9:91:A8:19:EB:69:96:3F:C5:17:9F:21:E9:0C:C2:FC:06:5F:DB:86 Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Certificate serial: 524F2A358D65AEAFD988326E5C719145E00446A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft Manifest number: BE Signing time: Mon 21 Sep 2026 21:02:37 +0000 Manifest this update: Mon 21 Sep 2026 20:57:37 +0000 Manifest next update: Tue 22 Sep 2026 23:59:37 +0000 Files and hashes: 1: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: PJEb98fYS4vg3BBgZ6XrL5za6qVUTLmXWj6MOSgyH3k=) 2: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=) 3: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl (hash: GjXM2csCiBQY4HqS3sWHi+Nch+NhJ/A/V9O/Hhb+izY=) 4: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 0DjkrTA9ouNvrCsdojisPz41tYiFCwdDrjUDolphH5E=) 5: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: wQj10i6uxR8PMgl15oZaZmKj6Dkq8me1CXWhGz38VZw=) 6: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: NybJNfrfr/FQtxQSfpzK5NCbywm4KAHMLV7iC5XOQDQ=) 7: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: IfGffrMHINPuRfD4RL+78GjC4IFDiYDYpPLVDptGnC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4f:2a:35:8d:65:ae:af:d9:88:32:6e:5c:71:91:45:e0:04:46:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Validity Not Before: Sep 21 20:57:37 2026 GMT Not After : Sep 22 23:59:37 2026 GMT Subject: CN=C991A819EB69963FC5179F21E90CC2FC065FDB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:6f:33:c2:7c:f3:64:2a:b0:09:6d:da:f5: ed:c3:07:75:83:d8:ef:0c:d8:3e:cd:39:3b:4d:ee: 90:a0:f9:06:86:39:86:7d:32:65:ae:e0:fc:c1:f5: f9:86:c3:1b:e9:2f:0b:5e:e8:5f:9b:8c:6e:74:12: eb:63:39:99:f8:57:3f:42:43:2c:48:68:b4:a8:3b: c5:4f:a9:76:38:9c:6b:b8:5c:ca:95:b7:0a:fd:b1: de:0d:8b:fc:cd:60:47:3b:81:41:46:95:67:bb:32: 2a:49:65:7e:c9:4e:80:0a:35:d0:3d:d3:ba:45:d5: 32:29:a6:5c:d0:b8:f3:e1:52:cb:5d:4d:63:00:34: c3:6f:72:5f:4e:9c:67:df:a5:38:79:88:e2:6b:45: c5:8f:24:5b:0a:07:d7:92:9d:8d:98:c3:70:c6:95: c5:d5:15:d2:b2:3c:15:f0:ea:52:9b:f1:c0:74:08: be:25:44:78:cb:29:9a:46:f5:14:36:f5:3f:ac:c4: ac:36:8d:0b:18:3a:25:d4:ba:a8:5b:ec:e7:d1:c1: 7c:a6:08:cb:a8:3c:7b:dc:61:f9:86:b5:78:bc:74: 89:c9:f0:49:f6:8f:28:e3:84:b7:23:75:fc:1d:6a: 3c:d3:93:8d:69:63:76:19:6f:fa:db:a8:19:b1:01: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:91:A8:19:EB:69:96:3F:C5:17:9F:21:E9:0C:C2:FC:06:5F:DB:86 X509v3 Authority Key Identifier: keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b5:ee:c3:bc:de:76:b6:23:03:41:9c:1f:ff:8d:89:51:e6: 00:04:41:e8:b2:35:fc:a9:65:c8:c4:09:db:dc:dc:e5:96:6f: bc:e8:89:8c:c9:9b:5b:d4:d1:db:e8:d6:96:0c:49:31:ac:ef: 28:3d:be:87:59:c2:74:b1:98:80:b0:6c:0a:fe:69:b2:a2:a6: 90:a8:e2:e2:4b:cc:d4:5f:33:cb:58:41:4b:04:f7:ce:33:d8: 63:20:c0:2a:d1:c5:37:49:3a:2c:04:25:25:59:65:4a:e9:f6: b9:4e:7a:5f:b4:9b:2a:5e:14:b6:9a:8b:7d:ba:42:8b:f5:f7: 41:e6:71:78:43:b3:3e:85:6e:97:46:e9:1b:d1:c1:dd:aa:52: 97:e0:48:29:72:74:01:9d:01:c0:e8:2e:6a:11:a7:b4:aa:56: a0:c5:f4:05:00:68:56:cb:ff:d8:a7:3a:fc:12:a8:2a:df:0d: 22:c9:35:d8:21:ac:26:e0:82:8c:cd:8b:82:33:e3:95:cf:34: f4:09:0c:b0:44:64:55:06:f5:31:4b:83:70:97:56:01:f5:92: 77:44:67:22:58:d8:5a:0c:d3:9b:ee:16:a2:e5:c5:1c:89:e2: d9:d1:27:41:1b:85:3c:b4:cf:3f:01:7b:67:34:23:63:f0:53: f1:27:d1:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUk8qNY1lrq/ZiDJuXHGRReAERqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcw M0ZBOUUyODAeFw0yNjA5MjEyMDU3MzdaFw0yNjA5MjIyMzU5MzdaMDMxMTAvBgNV BAMTKEM5OTFBODE5RUI2OTk2M0ZDNTE3OUYyMUU5MENDMkZDMDY1RkRCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3m8zwnzzZCqwCW3a9e3DB3WD 2O8M2D7NOTtN7pCg+QaGOYZ9MmWu4PzB9fmGwxvpLwte6F+bjG50EutjOZn4Vz9C QyxIaLSoO8VPqXY4nGu4XMqVtwr9sd4Ni/zNYEc7gUFGlWe7MipJZX7JToAKNdA9 07pF1TIpplzQuPPhUstdTWMANMNvcl9OnGffpTh5iOJrRcWPJFsKB9eSnY2Yw3DG lcXVFdKyPBXw6lKb8cB0CL4lRHjLKZpG9RQ29T+sxKw2jQsYOiXUuqhb7OfRwXym CMuoPHvcYfmGtXi8dInJ8En2jyjjhLcjdfwdajzTk41pY3YZb/rbqBmxAZfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZGoGetplj/FF58h6QzC/AZf24YwHwYDVR0j BBgwFoAUZiodHwuD3OrHPZc1FJeaFwP6nigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTViMWU1N2UtYTBmMS00NjdmLWE0NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYw QjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcwM0ZBOUUyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjJBMUQxRjBCODNEQ0VBQzczRDk3MzUxNDk3OUExNzAzRkE5 RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlB MTcwM0ZBOUUyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe17sO83na2IwNBnB//jYlR5gAEQeiyNfyp ZcjECdvc3OWWb7zoiYzJm1vU0dvo1pYMSTGs7yg9vodZwnSxmICwbAr+abKippCo 4uJLzNRfM8tYQUsE984z2GMgwCrRxTdJOiwEJSVZZUrp9rlOel+0mypeFLaai326 Qov190HmcXhDsz6FbpdG6RvRwd2qUpfgSClydAGdAcDoLmoRp7SqVqDF9AUAaFbL /9inOvwSqCrfDSLJNdghrCbggozNi4Iz45XPNPQJDLBEZFUG9TFLg3CXVgH1kndE ZyJY2FoM05vuFqLlxRyJ4tnRJ0EbhTy0zz8Be2c0I2PwU/En0SQ= -----END CERTIFICATE-----Generated at Tue Sep 22 05:49:01 2026 by rpki-client