$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft File: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft (raw, json) Hash identifier: HJt5u1HKPAHNnPYm3NMdMX5nkHaqQNhe02WdmBBfb/c= Subject key identifier: 3C:82:D9:F2:3E:A2:91:6F:F5:AC:4C:63:9E:76:66:28:90:50:FB:DD Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Certificate serial: 219631CEED07315897D054C947E58B538B30CB09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 17:41:49 +0000 Manifest this update: Mon 31 Aug 2026 17:36:49 +0000 Manifest next update: Tue 01 Sep 2026 18:31:49 +0000 Files and hashes: 1: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 0DjkrTA9ouNvrCsdojisPz41tYiFCwdDrjUDolphH5E=) 2: 662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl (hash: ZjqDCKaSqa6PZoRhTzZPdLiaREVJ6b4CHTYJau/VGFo=) 3: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: IfGffrMHINPuRfD4RL+78GjC4IFDiYDYpPLVDptGnC4=) 4: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: wQj10i6uxR8PMgl15oZaZmKj6Dkq8me1CXWhGz38VZw=) 5: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: NybJNfrfr/FQtxQSfpzK5NCbywm4KAHMLV7iC5XOQDQ=) 6: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: PJEb98fYS4vg3BBgZ6XrL5za6qVUTLmXWj6MOSgyH3k=) 7: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 18:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:96:31:ce:ed:07:31:58:97:d0:54:c9:47:e5:8b:53:8b:30:cb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28 Validity Not Before: Aug 31 17:36:49 2026 GMT Not After : Sep 1 18:31:49 2026 GMT Subject: CN=3C82D9F23EA2916FF5AC4C639E7666289050FBDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:ef:59:c4:40:02:2a:ef:7e:49:21:cb:2c: ff:92:64:16:d7:25:bb:6f:07:73:b2:fd:4f:d3:d2: 67:25:b1:c4:31:7f:51:d4:92:88:d1:4e:2b:48:99: ab:62:5f:d1:69:72:b0:89:c6:f8:84:d7:c7:59:3f: 05:8f:b0:6d:cb:3e:d8:b6:36:3a:05:40:5c:73:54: a8:1f:ed:96:46:0e:9b:fb:64:0a:e1:2c:74:90:4f: 35:bf:ba:81:c5:3f:30:dc:c3:4b:2d:c2:4a:e6:e5: 0a:38:fd:df:28:36:e8:58:48:89:2f:f5:77:c1:74: d2:74:c0:ba:9a:ec:1c:68:c6:00:ad:0f:32:f4:c1: 18:8c:3f:16:0b:d8:9a:f5:39:9b:0b:6a:4f:64:2a: 3b:ea:23:4b:f6:5f:11:ba:05:fc:36:0d:9a:85:39: 6e:77:a9:49:19:40:b7:ea:8f:e9:94:94:0d:5c:df: 27:b5:f4:73:0f:86:57:fd:32:b1:81:d3:e7:56:66: 91:fc:6a:55:9d:db:1b:8f:1e:f2:91:21:70:f9:16: 0a:a1:c8:9a:f4:f9:31:c0:32:08:de:c4:a7:41:57: ca:e1:92:07:1b:97:a2:ff:c9:63:7f:4a:ea:26:16: 03:4c:15:c5:e0:2e:05:ef:75:0a:31:ae:4c:00:41: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:82:D9:F2:3E:A2:91:6F:F5:AC:4C:63:9E:76:66:28:90:50:FB:DD X509v3 Authority Key Identifier: keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:62:54:50:f8:5c:0c:37:79:19:e6:c1:19:fa:88:39:03:3f: c9:ad:e3:6d:7c:c7:05:8d:80:84:cc:46:ef:a7:e3:d0:04:12: 62:89:29:0f:03:86:47:0a:2d:3b:e5:07:d9:ef:06:75:f7:02: 6f:f9:cc:d2:52:d8:e0:e2:c4:9c:cf:16:36:31:b4:59:a3:0a: 43:1c:1a:dd:b2:12:6a:ee:c0:4b:89:bc:27:45:83:b3:c6:21: 37:cc:86:a3:1e:b9:3b:e5:3a:b2:2a:a5:06:37:ce:ee:02:15: 8b:dc:38:23:94:e6:cb:b9:95:26:a0:78:80:fc:bc:12:77:d5: 79:57:72:4c:c9:20:c4:59:8e:64:85:cb:42:a9:38:ef:0c:34: 6d:e0:09:67:7e:5f:60:cb:51:28:4f:6d:8b:7b:c6:b7:cb:1a: a1:75:03:de:1a:13:4f:63:ba:83:d3:9f:f1:ee:ca:30:5a:c1: 99:2f:36:65:b6:c4:0b:b5:dc:94:ad:ac:61:8b:10:ab:73:b6: 44:0e:b1:1b:8f:4f:21:05:90:6f:f5:e0:e0:7d:a5:30:53:3d: 97:e2:7a:14:db:70:64:3d:9c:5d:dc:37:aa:62:d0:29:3c:6f: a4:f9:d9:8c:2b:bb:32:59:df:28:02:e9:fa:37:f4:6d:69:f1: 78:52:eb:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZYxzu0HMViX0FTJR+WLU4swywkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcw M0ZBOUUyODAeFw0yNjA4MzExNzM2NDlaFw0yNjA5MDExODMxNDlaMDMxMTAvBgNV BAMTKDNDODJEOUYyM0VBMjkxNkZGNUFDNEM2MzlFNzY2NjI4OTA1MEZCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjO9ZxEACKu9+SSHLLP+SZBbX JbtvB3Oy/U/T0mclscQxf1HUkojRTitImatiX9FpcrCJxviE18dZPwWPsG3LPti2 NjoFQFxzVKgf7ZZGDpv7ZArhLHSQTzW/uoHFPzDcw0stwkrm5Qo4/d8oNuhYSIkv 9XfBdNJ0wLqa7BxoxgCtDzL0wRiMPxYL2Jr1OZsLak9kKjvqI0v2XxG6Bfw2DZqF OW53qUkZQLfqj+mUlA1c3ye19HMPhlf9MrGB0+dWZpH8alWd2xuPHvKRIXD5Fgqh yJr0+THAMgjexKdBV8rhkgcbl6L/yWN/SuomFgNMFcXgLgXvdQoxrkwAQRwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPILZ8j6ikW/1rExjnnZmKJBQ+90wHwYDVR0j BBgwFoAUZiodHwuD3OrHPZc1FJeaFwP6nigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTViMWU1N2UtYTBmMS00NjdmLWE0NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYw QjgzRENFQUM3M0Q5NzM1MTQ5NzlBMTcwM0ZBOUUyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjJBMUQxRjBCODNEQ0VBQzczRDk3MzUxNDk3OUExNzAzRkE5 RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvNjYyQTFEMUYwQjgzRENFQUM3M0Q5NzM1MTQ5NzlB MTcwM0ZBOUUyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtiVFD4XAw3eRnmwRn6iDkDP8mt4218xwWN gITMRu+n49AEEmKJKQ8DhkcKLTvlB9nvBnX3Am/5zNJS2ODixJzPFjYxtFmjCkMc Gt2yEmruwEuJvCdFg7PGITfMhqMeuTvlOrIqpQY3zu4CFYvcOCOU5su5lSageID8 vBJ31XlXckzJIMRZjmSFy0KpOO8MNG3gCWd+X2DLUShPbYt7xrfLGqF1A94aE09j uoPTn/HuyjBawZkvNmW2xAu13JStrGGLEKtztkQOsRuPTyEFkG/14OB9pTBTPZfi ehTbcGQ9nF3cN6pi0Ck8b6T52YwruzJZ3ygC6fo39G1p8XhS61Q= -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:40 2026 by rpki-client