$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft File: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft (raw, json) Hash identifier: wvaU5Qnzq+0isRzcJc4UEb8hkWqOb6hANED7lJ4guP8= Subject key identifier: DA:25:EB:1F:13:EB:85:B4:7D:F8:12:A9:31:0D:CB:C3:F1:D7:18:91 Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Certificate serial: 0A9DFE3C7BD762609866B1409BF148D7FC9FB5F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:31:05 +0000 Manifest this update: Tue 12 May 2026 16:26:05 +0000 Manifest next update: Wed 13 May 2026 20:12:05 +0000 Files and hashes: 1: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: NybJNfrfr/FQtxQSfpzK5NCbywm4KAHMLV7iC5XOQDQ=) 2: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 0DjkrTA9ouNvrCsdojisPz41tYiFCwdDrjUDolphH5E=) 3: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: PJEb98fYS4vg3BBgZ6XrL5za6qVUTLmXWj6MOSgyH3k=) 4: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: wQj10i6uxR8PMgl15oZaZmKj6Dkq8me1CXWhGz38VZw=) 5: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=) 6: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl (hash: VUB491R8MDyVhbimXqKfquZ6/0cvKBhoZBCpOMjUpeQ=) 7: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: IfGffrMHINPuRfD4RL+78GjC4IFDiYDYpPLVDptGnC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9d:fe:3c:7b:d7:62:60:98:66:b1:40:9b:f1:48:d7:fc:9f:b5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Validity Not Before: May 12 16:26:05 2026 GMT Not After : May 13 20:12:05 2026 GMT Subject: CN=DA25EB1F13EB85B47DF812A9310DCBC3F1D71891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:a6:99:5c:4f:ec:f6:33:d9:f8:de:ea:87: 9e:61:4e:be:56:57:84:31:64:91:48:6a:fd:09:74: 51:8e:b0:36:86:62:55:bf:2d:0b:23:97:a6:30:c2: 44:f8:ea:a5:d9:55:29:d6:dd:9c:74:e3:eb:b5:2f: 1a:2d:15:66:39:d8:bc:c9:11:ec:10:c8:fb:a8:71: 4a:4e:58:f5:5e:42:b5:3d:2c:a6:91:d7:41:2f:22: dc:26:16:9f:fa:51:e9:d3:d4:21:6d:98:4a:25:6a: bf:83:2a:31:4f:07:99:0e:61:36:ee:37:d9:56:79: 5c:2e:0e:25:a2:f2:03:cb:04:bf:84:04:a4:a1:08: 30:d9:61:60:40:31:7e:0c:77:92:ed:50:d5:3e:db: c6:2c:9e:b3:2e:b4:04:a1:4a:22:0e:87:83:19:10: f0:30:11:46:3c:10:52:34:cb:54:27:55:32:f1:c7: 52:cf:33:8c:a9:78:94:67:9d:09:37:d8:ea:1c:2a: 5f:69:b4:ef:2c:3c:3a:c0:68:cf:ec:7c:ed:b2:84: 22:c5:49:3b:54:80:14:aa:f8:fe:b2:23:6b:86:98: c5:20:b4:c8:6c:17:a6:58:0e:ce:59:b7:84:43:40: 7f:97:47:76:0c:47:d4:fb:56:4d:09:6c:b2:a5:5f: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:25:EB:1F:13:EB:85:B4:7D:F8:12:A9:31:0D:CB:C3:F1:D7:18:91 X509v3 Authority Key Identifier: keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4b:5c:4b:c4:11:92:c4:26:d5:86:5c:82:90:aa:08:69:06: 96:e6:51:ea:61:cf:04:ec:23:16:15:70:08:1b:2b:23:f7:e7: bc:1f:14:ec:86:71:02:b7:7f:fc:a5:12:cd:61:b3:de:97:3a: 68:22:97:54:04:a0:9d:b9:1b:81:c8:e5:8c:d4:9e:e1:0e:aa: e0:a7:fb:82:be:70:0f:19:e6:51:92:59:36:4b:32:bf:0c:08: d3:5d:69:a7:e6:57:ed:19:11:88:53:7e:48:d4:30:ec:82:25: 49:32:52:7a:76:55:03:0b:32:72:8e:0d:52:5f:6e:75:c9:26: ab:69:3d:8c:2b:bd:39:aa:80:b2:06:aa:be:87:8d:3c:74:1e: bd:6e:4b:d0:3c:9a:e4:73:d7:19:f7:4f:eb:88:8a:1e:98:00: c6:8b:c4:82:90:4b:37:45:ad:eb:1e:a9:d0:e0:6c:00:49:b8: 8e:ff:11:c2:6e:97:6d:4f:53:fb:1b:5c:72:07:94:a1:0a:4d: d5:4a:03:c9:77:b2:c4:65:56:18:e9:a6:3b:0a:d1:84:de:4d: 14:c4:34:cf:f8:9b:b1:a2:73:8d:14:1f:07:de:c5:96:90:f1: e1:2f:08:15:3a:cc:49:74:44:72:6b:88:e0:c0:d8:fc:c2:d7: 60:49:72:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCp3+PHvXYmCYZrFAm/FI1/yftfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcw M0ZBOUUyODAeFw0yNjA1MTIxNjI2MDVaFw0yNjA1MTMyMDEyMDVaMDMxMTAvBgNV BAMTKERBMjVFQjFGMTNFQjg1QjQ3REY4MTJBOTMxMERDQkMzRjFENzE4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDd6aZXE/s9jPZ+N7qh55hTr5W V4QxZJFIav0JdFGOsDaGYlW/LQsjl6YwwkT46qXZVSnW3Zx04+u1LxotFWY52LzJ EewQyPuocUpOWPVeQrU9LKaR10EvItwmFp/6UenT1CFtmEolar+DKjFPB5kOYTbu N9lWeVwuDiWi8gPLBL+EBKShCDDZYWBAMX4Md5LtUNU+28YsnrMutAShSiIOh4MZ EPAwEUY8EFI0y1QnVTLxx1LPM4ypeJRnnQk32OocKl9ptO8sPDrAaM/sfO2yhCLF STtUgBSq+P6yI2uGmMUgtMhsF6ZYDs5Zt4RDQH+XR3YMR9T7Vk0JbLKlX7spAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2iXrHxPrhbR9+BKpMQ3Lw/HXGJEwHwYDVR0j BBgwFoAUZiodHwuD3OrHPZc1FJeaFwP6nigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTViMWU1N2UtYTBmMS00NjdmLWE0NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYw QjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcwM0ZBOUUyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjJBMUQxRjBCODNEQ0VBQzczRDk3MzUxNDk3OUExNzAzRkE5 RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlB MTcwM0ZBOUUyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdLXEvEEZLEJtWGXIKQqghpBpbmUephzwTs IxYVcAgbKyP357wfFOyGcQK3f/ylEs1hs96XOmgil1QEoJ25G4HI5YzUnuEOquCn +4K+cA8Z5lGSWTZLMr8MCNNdaafmV+0ZEYhTfkjUMOyCJUkyUnp2VQMLMnKODVJf bnXJJqtpPYwrvTmqgLIGqr6HjTx0Hr1uS9A8muRz1xn3T+uIih6YAMaLxIKQSzdF reseqdDgbABJuI7/EcJul21PU/sbXHIHlKEKTdVKA8l3ssRlVhjppjsK0YTeTRTE NM/4m7Gic40UHwfexZaQ8eEvCBU6zEl0RHJriODA2PzC12BJcpY= -----END CERTIFICATE-----Generated at Tue May 12 22:20:04 2026 by rpki-client