$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft File: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft (raw, json) Hash identifier: K+l7kMVduIp1Qssb1pSvgeutpZTsut1VB+kW04Jqux0= Subject key identifier: 5D:6B:3C:CE:C3:CD:2E:82:AD:75:2D:54:DD:21:4F:71:09:72:81:84 Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Certificate serial: 0EDE8B76D6656E78EE3ECF0876E2B5256D2507C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft Manifest number: E7 Signing time: Thu 22 Oct 2026 23:43:15 +0000 Manifest this update: Thu 22 Oct 2026 23:38:15 +0000 Manifest next update: Sat 24 Oct 2026 03:22:15 +0000 Files and hashes: 1: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: NybJNfrfr/FQtxQSfpzK5NCbywm4KAHMLV7iC5XOQDQ=) 2: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: PJEb98fYS4vg3BBgZ6XrL5za6qVUTLmXWj6MOSgyH3k=) 3: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 0DjkrTA9ouNvrCsdojisPz41tYiFCwdDrjUDolphH5E=) 4: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: IfGffrMHINPuRfD4RL+78GjC4IFDiYDYpPLVDptGnC4=) 5: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=) 6: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl (hash: h9wYXcHQD5OIj9xHRVEqcPVQCzQwuk/qJ/avL1zKk1s=) 7: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: wQj10i6uxR8PMgl15oZaZmKj6Dkq8me1CXWhGz38VZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 03:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:de:8b:76:d6:65:6e:78:ee:3e:cf:08:76:e2:b5:25:6d:25:07:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Validity Not Before: Oct 22 23:38:15 2026 GMT Not After : Oct 24 03:22:15 2026 GMT Subject: CN=5D6B3CCEC3CD2E82AD752D54DD214F7109728184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:0c:93:5f:58:07:63:66:6e:94:f4:f5:ac: 36:4e:79:3f:db:ea:b5:45:10:74:e8:68:49:2d:9c: b9:fe:9c:3c:10:09:9d:aa:34:da:6f:0f:43:6c:4d: c1:61:f3:90:74:ab:23:c0:3b:49:61:fe:06:63:c9: 5a:8c:28:13:b8:b7:54:35:7f:e4:1b:5a:9c:70:c2: 2c:88:c3:8b:39:c4:db:23:cd:59:bc:f1:2e:36:67: 46:38:ae:88:c7:67:cb:b5:35:60:f2:19:5f:2e:a5: 2a:b3:a5:58:57:75:3d:2c:8f:83:d8:bc:c4:c9:dc: b2:f0:30:3d:90:51:ab:da:b1:e0:af:da:46:2e:0d: 27:2e:99:17:a3:e6:89:e9:61:17:37:d1:12:4e:ab: b4:27:db:9f:af:c9:17:b3:ee:1e:d6:8d:f8:8b:d7: 55:9d:4c:00:12:53:ed:ee:9e:d2:16:32:ee:f1:08: 04:99:6b:67:19:10:0b:e8:48:be:e2:b8:2e:9c:2e: b2:fb:5d:fb:31:8a:b5:70:8a:4c:7a:26:18:06:9a: fb:58:9e:c7:4d:ea:87:cc:3e:a9:50:b5:52:11:8b: 0d:ce:74:a5:8a:f6:92:9d:6f:87:3d:a9:5d:44:93: 06:0e:d0:8c:11:ed:bb:76:e0:d8:32:71:ba:2c:81: e4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6B:3C:CE:C3:CD:2E:82:AD:75:2D:54:DD:21:4F:71:09:72:81:84 X509v3 Authority Key Identifier: keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fa:82:56:69:9a:22:9f:0a:f7:b5:59:c7:a5:d4:46:e2:01: 9b:0f:cb:ff:b8:8c:9a:c9:6f:ed:2d:63:f4:cf:d3:80:ae:24: 52:88:42:24:ce:6f:a6:d6:74:ca:d7:33:09:52:f1:15:9f:9c: e0:13:60:8e:ba:79:1d:92:65:fb:52:98:89:ff:26:87:12:8e: c1:85:e8:a7:7a:0a:6e:ce:a0:e5:39:b4:b9:02:0e:e5:64:64: 69:61:07:c2:21:c8:89:f8:1b:51:35:cb:57:00:9f:bc:dd:ef: 02:48:a6:e2:41:1b:43:cb:6a:05:fb:97:06:ca:38:11:46:ae: 43:aa:29:2e:0e:a2:83:ce:01:90:7f:a2:a7:ca:e4:63:00:fd: 04:ed:f9:e9:fc:f7:61:94:64:73:ad:d8:b9:0e:92:26:23:6e: 5c:60:98:18:1f:c9:07:5a:37:e7:bc:c7:db:a9:47:25:46:82: 1a:0a:6e:95:a1:ce:b9:af:8a:e8:e9:62:c3:cf:e6:2a:89:df: 3f:99:13:02:09:d5:38:8f:a2:75:32:65:8c:bf:3f:71:5c:72: be:be:5f:90:50:ab:aa:be:55:93:31:9b:7f:3d:41:89:52:a3: ca:9f:ff:43:e4:3b:09:28:7b:2a:10:8a:59:27:56:06:38:d9: 42:50:b9:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDt6LdtZlbnjuPs8IduK1JW0lB8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcw M0ZBOUUyODAeFw0yNjEwMjIyMzM4MTVaFw0yNjEwMjQwMzIyMTVaMDMxMTAvBgNV BAMTKDVENkIzQ0NFQzNDRDJFODJBRDc1MkQ1NEREMjE0RjcxMDk3MjgxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9wQyTX1gHY2ZulPT1rDZOeT/b 6rVFEHToaEktnLn+nDwQCZ2qNNpvD0NsTcFh85B0qyPAO0lh/gZjyVqMKBO4t1Q1 f+QbWpxwwiyIw4s5xNsjzVm88S42Z0Y4rojHZ8u1NWDyGV8upSqzpVhXdT0sj4PY vMTJ3LLwMD2QUavaseCv2kYuDScumRej5onpYRc30RJOq7Qn25+vyRez7h7WjfiL 11WdTAASU+3untIWMu7xCASZa2cZEAvoSL7iuC6cLrL7XfsxirVwikx6JhgGmvtY nsdN6ofMPqlQtVIRiw3OdKWK9pKdb4c9qV1EkwYO0IwR7bt24NgycbosgeQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXWs8zsPNLoKtdS1U3SFPcQlygYQwHwYDVR0j BBgwFoAUZiodHwuD3OrHPZc1FJeaFwP6nigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTViMWU1N2UtYTBmMS00NjdmLWE0NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYw QjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcwM0ZBOUUyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjJBMUQxRjBCODNEQ0VBQzczRDk3MzUxNDk3OUExNzAzRkE5 RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlB MTcwM0ZBOUUyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHz6glZpmiKfCve1Wcel1EbiAZsPy/+4jJrJ b+0tY/TP04CuJFKIQiTOb6bWdMrXMwlS8RWfnOATYI66eR2SZftSmIn/JocSjsGF 6Kd6Cm7OoOU5tLkCDuVkZGlhB8IhyIn4G1E1y1cAn7zd7wJIpuJBG0PLagX7lwbK OBFGrkOqKS4OooPOAZB/oqfK5GMA/QTt+en892GUZHOt2LkOkiYjblxgmBgfyQda N+e8x9upRyVGghoKbpWhzrmviujpYsPP5iqJ3z+ZEwIJ1TiPonUyZYy/P3Fccr6+ X5BQq6q+VZMxm389QYlSo8qf/0PkOwkoeyoQilknVgY42UJQueY= -----END CERTIFICATE-----Generated at Fri Oct 23 14:35:59 2026 by rpki-client