$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft File: 62531E8BF877F9190055D7D857C21ECBDCFAC237.mft (raw, json) Hash identifier: 3iqSpWyZknaXsglCf5O48j20wol3B7V9DrE3P+n+lIc= Subject key identifier: 25:ED:8D:CB:A0:F6:1F:32:18:71:D2:1E:40:3A:C9:3F:99:3B:1A:27 Authority key identifier: 62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 Certificate issuer: /CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Certificate serial: 68692C420C1454E2D90A3238019565D5C1798015 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:03:23 +0000 Manifest this update: Tue 12 May 2026 20:58:23 +0000 Manifest next update: Wed 13 May 2026 21:32:23 +0000 Files and hashes: 1: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (hash: RzRSXdrIXGBvVPeHVDu3wO8XEsc3GFR1CCktt00WYd8=) 2: 3130332e3135332e36302e302f32342d3234203d3e20313430343536.roa (hash: N+subOKk1O0aLwezy/FI1acpxPEti6iKIkHeL/X8z5w=) 3: 62531E8BF877F9190055D7D857C21ECBDCFAC237.crl (hash: IA8THaBCgaobdtIdp+1yr4/R6VPecJWRdIYQdSIQ1Ec=) 4: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (hash: SOPJ6LptzafhaHhbYxOp6YPrbTR/9ZdExcQFIaJyuIA=) 5: 3130332e3135332e36312e302f32342d3234203d3e20313430343536.roa (hash: AqK7gho3oaBdn6U0bSz26oZHpcnwMKNpGmX9XBUu4+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:69:2c:42:0c:14:54:e2:d9:0a:32:38:01:95:65:d5:c1:79:80:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Validity Not Before: May 12 20:58:23 2026 GMT Not After : May 13 21:32:23 2026 GMT Subject: CN=25ED8DCBA0F61F321871D21E403AC93F993B1A27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:56:0f:d3:59:0e:6b:39:29:c5:6e:8c:28: 0b:6b:45:c3:a4:7b:01:18:c6:75:69:39:a8:7e:c8: e0:82:ee:57:01:c6:75:ea:5b:16:62:5b:fc:6d:48: f8:66:31:72:ab:86:12:b4:99:a8:a9:dc:4f:65:54: 71:50:61:c2:29:ef:0e:37:68:72:eb:90:62:fa:31: ca:75:42:e3:82:3b:11:c6:61:95:1e:79:10:46:04: 71:68:ab:9e:58:b5:78:5c:5a:01:e5:61:26:aa:8a: ff:dd:fe:ad:aa:78:05:b9:48:6b:2c:53:63:95:f0: 7a:6c:e8:d0:55:d3:57:43:d1:fa:07:c8:d5:84:f6: de:3f:e5:8a:a6:0a:4d:49:08:73:b0:b2:09:84:a6: 81:9f:bc:e5:f1:d8:28:2b:d1:73:e9:1a:78:ae:f0: 53:0e:4c:79:b9:97:c5:f4:31:09:02:91:07:79:27: 64:4b:37:fe:75:a7:35:d2:62:a6:3f:f9:de:cf:42: 7c:af:ba:34:ca:c8:f4:31:70:db:43:10:04:50:da: 97:7e:94:02:80:d8:1c:1c:c6:e7:0e:b5:9a:4d:c2: 01:8d:57:e2:c0:5d:3e:ac:a7:89:e0:fd:43:8c:48: fd:11:b9:c9:d3:7f:31:72:8f:f2:fc:36:3c:e3:75: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:ED:8D:CB:A0:F6:1F:32:18:71:D2:1E:40:3A:C9:3F:99:3B:1A:27 X509v3 Authority Key Identifier: keyid:62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:f8:08:29:06:26:fc:65:f1:7c:04:54:69:f1:a7:aa:b3:00: 4a:c7:c9:1b:22:84:83:07:5d:ad:aa:a4:11:bc:76:88:18:6d: 57:6e:3c:42:8b:86:43:d9:83:83:d1:e0:a2:0f:e7:48:fe:d1: 7c:f8:7a:04:88:a4:55:04:1b:c9:88:a0:73:fd:76:e4:99:0b: 8e:c3:20:ff:17:ce:f2:02:95:ba:60:d2:db:0a:44:0e:d3:b6: bf:d8:13:53:a9:9a:89:fb:fd:fc:c9:86:94:b4:03:74:29:df: 68:bd:88:13:27:ff:12:b5:18:62:14:fc:ca:fc:0e:8f:8f:4e: 68:b9:65:95:34:55:f6:cb:28:81:e5:e9:29:25:53:a0:ce:74: 8f:91:7e:97:9e:4e:12:0e:94:d5:36:16:70:bc:d2:1f:e3:24: 3d:e9:91:5f:0c:b5:9e:2c:5c:18:4a:27:31:b8:69:0d:2d:bd: e5:5c:63:ee:02:45:dc:2a:cd:46:db:e2:f9:83:d8:34:4a:ba: 0b:28:35:72:6f:0b:70:d9:3e:6f:2f:3d:54:37:71:b8:b0:3a: ac:41:75:ca:cf:10:9f:44:53:a1:fb:e7:3a:f7:5c:6d:46:8d: b1:99:5f:e9:ac:f4:3d:87:e5:aa:de:a7:ff:ee:d9:37:00:c7: b0:59:3d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaGksQgwUVOLZCjI4AZVl1cF5gBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JE Q0ZBQzIzNzAeFw0yNjA1MTIyMDU4MjNaFw0yNjA1MTMyMTMyMjNaMDMxMTAvBgNV BAMTKDI1RUQ4RENCQTBGNjFGMzIxODcxRDIxRTQwM0FDOTNGOTkzQjFBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9FYP01kOazkpxW6MKAtrRcOk ewEYxnVpOah+yOCC7lcBxnXqWxZiW/xtSPhmMXKrhhK0maip3E9lVHFQYcIp7w43 aHLrkGL6Mcp1QuOCOxHGYZUeeRBGBHFoq55YtXhcWgHlYSaqiv/d/q2qeAW5SGss U2OV8Hps6NBV01dD0foHyNWE9t4/5YqmCk1JCHOwsgmEpoGfvOXx2Cgr0XPpGniu 8FMOTHm5l8X0MQkCkQd5J2RLN/51pzXSYqY/+d7PQnyvujTKyPQxcNtDEARQ2pd+ lAKA2BwcxucOtZpNwgGNV+LAXT6sp4ng/UOMSP0RucnTfzFyj/L8NjzjdYYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJe2Ny6D2HzIYcdIeQDrJP5k7GicwHwYDVR0j BBgwFoAUYlMei/h3+RkAVdfYV8Iey9z6wjcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE5NTIwZmQtOGRlNS00YTY5LTg1ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJG ODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JEQ0ZBQzIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjUzMUU4QkY4NzdGOTE5MDA1NUQ3RDg1N0MyMUVDQkRDRkFD MjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE5NTIwZmQtOGRlNS00YTY5LTg1 ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFF Q0JEQ0ZBQzIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANr4CCkGJvxl8XwEVGnxp6qzAErHyRsihIMH Xa2qpBG8dogYbVduPEKLhkPZg4PR4KIP50j+0Xz4egSIpFUEG8mIoHP9duSZC47D IP8XzvIClbpg0tsKRA7Ttr/YE1Opmon7/fzJhpS0A3Qp32i9iBMn/xK1GGIU/Mr8 Do+PTmi5ZZU0VfbLKIHl6SklU6DOdI+RfpeeThIOlNU2FnC80h/jJD3pkV8MtZ4s XBhKJzG4aQ0tveVcY+4CRdwqzUbb4vmD2DRKugsoNXJvC3DZPm8vPVQ3cbiwOqxB dcrPEJ9EU6H75zr3XG1GjbGZX+ms9D2H5arep//u2TcAx7BZPcU= -----END CERTIFICATE-----Generated at Wed May 13 02:15:32 2026 by rpki-client