$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft File: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft (raw, json) Hash identifier: eSXPfMdVN6h22kXldAJjfw/ljDkhdsfCYgV8Ztgluwc= Subject key identifier: 47:0E:49:F9:6C:F5:7F:E4:4A:D7:95:E8:5D:A6:F6:44:47:15:9E:09 Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Certificate serial: 2731CC583969B532C1420C1226B954D9905DF810 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:15:31 +0000 Manifest this update: Thu 24 Sep 2026 20:10:31 +0000 Manifest next update: Fri 25 Sep 2026 22:33:31 +0000 Files and hashes: 1: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: wQj10i6uxR8PMgl15oZaZmKj6Dkq8me1CXWhGz38VZw=) 2: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=) 3: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: NybJNfrfr/FQtxQSfpzK5NCbywm4KAHMLV7iC5XOQDQ=) 4: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl (hash: inhNdCWFVwObP3OryAeFQeKrW3L6jSb0+tihRKQE5gg=) 5: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: PJEb98fYS4vg3BBgZ6XrL5za6qVUTLmXWj6MOSgyH3k=) 6: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 0DjkrTA9ouNvrCsdojisPz41tYiFCwdDrjUDolphH5E=) 7: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: IfGffrMHINPuRfD4RL+78GjC4IFDiYDYpPLVDptGnC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:31:cc:58:39:69:b5:32:c1:42:0c:12:26:b9:54:d9:90:5d:f8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Validity Not Before: Sep 24 20:10:31 2026 GMT Not After : Sep 25 22:33:31 2026 GMT Subject: CN=470E49F96CF57FE44AD795E85DA6F64447159E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:41:c6:aa:f7:c7:3e:25:a9:58:c2:e3:05:50: 0e:48:f5:9c:34:5c:c0:83:11:f3:4f:ef:72:73:87: e8:91:30:aa:2f:3c:50:25:5c:98:e5:db:ab:1a:6d: ee:a2:85:5e:5b:e9:b9:2f:a3:07:9b:7b:b9:3d:55: 55:ef:85:39:c2:a1:b4:d5:52:41:10:10:d2:ce:d7: d2:3f:a8:c0:80:06:42:da:fa:06:f6:c3:14:4f:25: fe:60:52:ad:d9:0c:10:d6:4f:a5:0b:90:9e:99:2a: 0f:44:8b:ac:09:13:90:5d:a6:9b:23:d1:d7:88:cd: 78:f3:d1:62:97:88:5d:6a:12:1f:a4:6a:51:2b:7e: bf:2d:f0:27:dc:b3:a0:61:7f:f5:c5:7c:f4:26:1f: 75:d3:e1:e6:f4:6c:c8:f8:85:bd:b3:ef:c4:4d:6e: 6a:21:13:a3:09:1b:4c:2b:92:4b:c7:56:2f:12:18: f5:e1:ff:a1:6f:b4:69:f5:06:ca:48:30:b8:b0:7a: 91:4b:aa:67:15:eb:b2:1d:5b:a5:db:f9:12:9d:d0: 0e:e9:c8:01:37:24:94:b0:1d:bd:a9:fb:69:14:5e: 1b:39:e1:81:ff:79:b5:a1:d6:5e:f5:0d:f8:f5:d7: 82:82:95:cc:bd:0d:12:eb:7e:78:cb:67:67:0a:5d: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0E:49:F9:6C:F5:7F:E4:4A:D7:95:E8:5D:A6:F6:44:47:15:9E:09 X509v3 Authority Key Identifier: keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:60:85:41:bd:6e:67:01:83:33:3b:8a:79:a3:6a:96:a9:42: 46:4f:f0:27:30:2f:62:38:21:9f:4a:26:59:ca:4d:4c:fe:72: 4e:18:8b:9c:5b:09:c6:34:a3:60:47:13:d1:fc:18:c3:02:7e: 47:9d:b9:9e:52:af:33:46:a1:68:0d:72:95:04:ea:59:12:8c: 38:99:ae:70:6e:28:d4:9c:46:f5:dd:ca:7a:fe:af:b7:92:11: f3:b8:91:47:7e:9e:00:9d:ad:b5:4b:89:e1:5a:39:9e:81:cd: 76:97:2b:50:f9:d9:bd:e5:f3:54:0f:ff:b4:d1:b2:e2:fb:d1: 1b:96:c7:b1:26:d6:74:1e:29:00:b5:09:74:70:64:5e:5a:a4: a3:87:16:43:9e:10:11:42:23:5f:0a:41:f2:cc:55:e0:22:e6: ea:48:bf:b3:20:fe:bf:a6:27:f7:cf:5c:30:ad:85:38:31:b6: 74:03:c4:30:60:13:14:e9:42:d4:96:e9:4e:2e:6e:b2:2c:e4: b6:d9:1a:c9:58:c9:48:04:1f:d5:50:65:d7:d2:0b:7b:63:73: ac:7c:01:73:62:2f:8e:cb:bb:69:53:93:7a:06:ee:28:98:7b: 8b:96:44:8d:4f:89:19:0b:7c:05:72:8a:9a:4a:ba:f1:70:43: cb:9a:fd:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzHMWDlptTLBQgwSJrlU2ZBd+BAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcw M0ZBOUUyODAeFw0yNjA5MjQyMDEwMzFaFw0yNjA5MjUyMjMzMzFaMDMxMTAvBgNV BAMTKDQ3MEU0OUY5NkNGNTdGRTQ0QUQ3OTVFODVEQTZGNjQ0NDcxNTlFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQcaq98c+JalYwuMFUA5I9Zw0 XMCDEfNP73Jzh+iRMKovPFAlXJjl26sabe6ihV5b6bkvowebe7k9VVXvhTnCobTV UkEQENLO19I/qMCABkLa+gb2wxRPJf5gUq3ZDBDWT6ULkJ6ZKg9Ei6wJE5Bdppsj 0deIzXjz0WKXiF1qEh+kalErfr8t8Cfcs6Bhf/XFfPQmH3XT4eb0bMj4hb2z78RN bmohE6MJG0wrkkvHVi8SGPXh/6FvtGn1BspIMLiwepFLqmcV67IdW6Xb+RKd0A7p yAE3JJSwHb2p+2kUXhs54YH/ebWh1l71Dfj114KClcy9DRLrfnjLZ2cKXfhrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURw5J+Wz1f+RK15XoXab2REcVngkwHwYDVR0j BBgwFoAUZiodHwuD3OrHPZc1FJeaFwP6nigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTViMWU1N2UtYTBmMS00NjdmLWE0NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYw QjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcwM0ZBOUUyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjJBMUQxRjBCODNEQ0VBQzczRDk3MzUxNDk3OUExNzAzRkE5 RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlB MTcwM0ZBOUUyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZghUG9bmcBgzM7inmjapapQkZP8CcwL2I4 IZ9KJlnKTUz+ck4Yi5xbCcY0o2BHE9H8GMMCfkeduZ5SrzNGoWgNcpUE6lkSjDiZ rnBuKNScRvXdynr+r7eSEfO4kUd+ngCdrbVLieFaOZ6BzXaXK1D52b3l81QP/7TR suL70RuWx7Em1nQeKQC1CXRwZF5apKOHFkOeEBFCI18KQfLMVeAi5upIv7Mg/r+m J/fPXDCthTgxtnQDxDBgExTpQtSW6U4ubrIs5LbZGslYyUgEH9VQZdfSC3tjc6x8 AXNiL47Lu2lTk3oG7iiYe4uWRI1PiRkLfAVyippKuvFwQ8ua/SQ= -----END CERTIFICATE-----Generated at Fri Sep 25 02:44:22 2026 by rpki-client