$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft File: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft (raw, json) Hash identifier: txLrqIRcLdPlm9ni82BX9FuW+QvT7uS9UQsWFOL9B0s= Subject key identifier: 13:21:16:58:34:07:B6:BC:E6:03:46:8A:78:E2:23:32:D4:64:0C:C1 Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Certificate serial: 6083D0E1C1068411C46C03ACED20C52C8A8706AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:35:07 +0000 Manifest this update: Thu 23 Jul 2026 20:30:07 +0000 Manifest next update: Fri 24 Jul 2026 22:29:07 +0000 Files and hashes: 1: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl (hash: vG4vV8bIzuSgsEE0GxYUQ8lj/g8e6aGhKBxGWL1BMKo=) 2: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: wQj10i6uxR8PMgl15oZaZmKj6Dkq8me1CXWhGz38VZw=) 3: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 0DjkrTA9ouNvrCsdojisPz41tYiFCwdDrjUDolphH5E=) 4: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: PJEb98fYS4vg3BBgZ6XrL5za6qVUTLmXWj6MOSgyH3k=) 5: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=) 6: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: IfGffrMHINPuRfD4RL+78GjC4IFDiYDYpPLVDptGnC4=) 7: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: NybJNfrfr/FQtxQSfpzK5NCbywm4KAHMLV7iC5XOQDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:83:d0:e1:c1:06:84:11:c4:6c:03:ac:ed:20:c5:2c:8a:87:06:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Validity Not Before: Jul 23 20:30:07 2026 GMT Not After : Jul 24 22:29:07 2026 GMT Subject: CN=132116583407B6BCE603468A78E22332D4640CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:9c:c9:b4:91:50:5f:18:3d:2f:2a:1c:a3: 9b:e4:95:9d:5c:03:bb:de:8c:34:c7:22:bc:94:88: 3c:01:78:88:51:5f:63:a7:f9:e5:93:0e:22:7f:01: 79:3c:74:a2:df:e5:f3:96:b6:95:c8:cc:9f:08:84: 1e:7a:dd:8d:fe:7c:6b:03:3c:2a:ba:36:fa:72:ca: 80:0a:f3:38:ab:24:4f:e2:52:cb:dd:cf:e1:aa:04: fb:4e:a6:b1:de:70:b5:d3:d7:cd:c6:2d:ce:f1:e1: 34:69:38:68:fc:06:db:70:55:5f:a2:64:b7:f5:dc: cc:ca:7e:aa:6a:9e:1b:63:7b:1a:9d:2d:96:c5:e8: 49:27:27:85:bb:74:bd:2f:9b:dc:16:24:bd:c6:45: cc:1e:9a:2c:91:03:b3:68:52:3e:13:38:7a:0d:39: a8:91:f6:f6:7c:3f:06:05:81:19:72:ab:d5:da:9b: 02:52:ed:b6:19:d4:84:60:9c:b4:a7:8e:4d:24:9c: 1d:01:69:4a:66:3e:5b:53:11:c8:3c:d0:da:ee:96: 74:37:a4:89:b9:d7:5b:87:47:66:46:e7:6f:ba:7e: d0:bc:0a:b2:fc:41:c0:83:ac:c8:2d:51:c9:86:c2: 84:07:27:f3:de:37:b0:ce:79:d4:2c:52:1b:03:3c: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:21:16:58:34:07:B6:BC:E6:03:46:8A:78:E2:23:32:D4:64:0C:C1 X509v3 Authority Key Identifier: keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:da:6a:c7:6e:9f:87:6d:48:22:01:9b:b3:8b:d6:93:dd:2a: 62:2c:fd:73:38:e8:46:29:9a:8e:2a:bf:11:e9:17:f7:0e:c6: ca:ed:da:75:3b:e1:38:e2:a2:71:c9:2e:13:0c:53:dc:db:49: ff:42:4c:34:d6:69:31:41:31:a2:e8:4a:f6:79:6e:aa:0a:a9: e7:f7:4a:ee:c2:68:5b:c1:a8:d1:ce:27:58:04:23:06:d1:75: 6c:06:a7:53:21:cd:1f:1a:68:d5:e1:a1:73:e5:cf:80:a0:6c: a0:27:ae:50:e9:f6:24:ac:bd:ed:91:76:cd:be:25:c9:94:b2: 5a:69:86:c9:03:5e:38:e0:46:c4:e5:95:9b:5a:4d:63:ed:08: ad:2e:37:9f:cb:b6:41:9d:1c:7d:ab:6d:43:e9:33:cc:f8:a4: 8f:f1:e9:6e:8c:c8:90:49:03:7a:62:fa:4c:8e:bf:d0:73:db: e7:e5:33:ed:c3:ab:54:a0:01:e6:85:3f:1b:f2:3f:dd:59:60: 86:f9:22:24:a6:e2:d9:14:03:5a:88:16:5b:00:b2:a6:5d:06: ea:e5:e0:57:9e:66:b4:21:22:0b:ab:bd:8c:35:98:1e:d2:52: 0c:61:89:9f:2d:f6:92:17:5b:02:bd:62:29:d1:29:4f:55:c0: e2:8f:fa:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIPQ4cEGhBHEbAOs7SDFLIqHBq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcw M0ZBOUUyODAeFw0yNjA3MjMyMDMwMDdaFw0yNjA3MjQyMjI5MDdaMDMxMTAvBgNV BAMTKDEzMjExNjU4MzQwN0I2QkNFNjAzNDY4QTc4RTIyMzMyRDQ2NDBDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgpzJtJFQXxg9Lyoco5vklZ1c A7vejDTHIryUiDwBeIhRX2On+eWTDiJ/AXk8dKLf5fOWtpXIzJ8IhB563Y3+fGsD PCq6NvpyyoAK8zirJE/iUsvdz+GqBPtOprHecLXT183GLc7x4TRpOGj8BttwVV+i ZLf13MzKfqpqnhtjexqdLZbF6EknJ4W7dL0vm9wWJL3GRcwemiyRA7NoUj4TOHoN OaiR9vZ8PwYFgRlyq9XamwJS7bYZ1IRgnLSnjk0knB0BaUpmPltTEcg80NrulnQ3 pIm511uHR2ZG52+6ftC8CrL8QcCDrMgtUcmGwoQHJ/PeN7DOedQsUhsDPE6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEyEWWDQHtrzmA0aKeOIjMtRkDMEwHwYDVR0j BBgwFoAUZiodHwuD3OrHPZc1FJeaFwP6nigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTViMWU1N2UtYTBmMS00NjdmLWE0NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYw QjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcwM0ZBOUUyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjJBMUQxRjBCODNEQ0VBQzczRDk3MzUxNDk3OUExNzAzRkE5 RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlB MTcwM0ZBOUUyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTaasdun4dtSCIBm7OL1pPdKmIs/XM46EYp mo4qvxHpF/cOxsrt2nU74TjionHJLhMMU9zbSf9CTDTWaTFBMaLoSvZ5bqoKqef3 Su7CaFvBqNHOJ1gEIwbRdWwGp1MhzR8aaNXhoXPlz4CgbKAnrlDp9iSsve2Rds2+ JcmUslpphskDXjjgRsTllZtaTWPtCK0uN5/LtkGdHH2rbUPpM8z4pI/x6W6MyJBJ A3pi+kyOv9Bz2+flM+3Dq1SgAeaFPxvyP91ZYIb5IiSm4tkUA1qIFlsAsqZdBurl 4FeeZrQhIgurvYw1mB7SUgxhiZ8t9pIXWwK9YinRKU9VwOKP+nM= -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:51 2026 by rpki-client