$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft File: 62531E8BF877F9190055D7D857C21ECBDCFAC237.mft (raw, json) Hash identifier: GMahdiACMCEO4swmXg69o4dSb7ab56fYFrlBvMwWd74= Subject key identifier: 4C:D2:FF:1D:0A:2B:45:1C:9B:70:CE:25:20:7A:9A:09:62:63:E8:E6 Authority key identifier: 62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 Certificate issuer: /CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Certificate serial: 702495B1490B12A1D4A7386F2BD648523F2C0733 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:27:37 +0000 Manifest this update: Thu 24 Sep 2026 01:22:37 +0000 Manifest next update: Fri 25 Sep 2026 02:25:37 +0000 Files and hashes: 1: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (hash: SOPJ6LptzafhaHhbYxOp6YPrbTR/9ZdExcQFIaJyuIA=) 2: 3130332e3135332e36312e302f32342d3234203d3e20313430343536.roa (hash: AqK7gho3oaBdn6U0bSz26oZHpcnwMKNpGmX9XBUu4+k=) 3: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (hash: RzRSXdrIXGBvVPeHVDu3wO8XEsc3GFR1CCktt00WYd8=) 4: 3130332e3135332e36302e302f32342d3234203d3e20313430343536.roa (hash: N+subOKk1O0aLwezy/FI1acpxPEti6iKIkHeL/X8z5w=) 5: 62531E8BF877F9190055D7D857C21ECBDCFAC237.crl (hash: yHrz0JIOEeKMnd52DtpN+uuJ5T6f9a4Utg5tqybfaaY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:24:95:b1:49:0b:12:a1:d4:a7:38:6f:2b:d6:48:52:3f:2c:07:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Validity Not Before: Sep 24 01:22:37 2026 GMT Not After : Sep 25 02:25:37 2026 GMT Subject: CN=4CD2FF1D0A2B451C9B70CE25207A9A096263E8E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:0d:b6:bb:15:96:6e:28:f7:3c:3a:3f:a8: b9:b3:82:b2:25:95:3b:fa:e4:7f:c5:80:b2:0c:ad: ca:cf:de:26:fe:1d:02:f4:c2:1e:c8:d3:a0:98:b1: a1:49:a0:4f:25:c8:b4:02:e1:15:90:7d:af:dd:62: 98:d4:76:7e:a3:aa:ac:93:cf:21:25:f3:90:3f:35: 82:ac:a6:1f:13:c1:85:cd:26:34:73:24:4b:44:b3: 1b:b5:9b:a1:0d:86:0b:55:7a:e4:14:4a:a2:44:25: 42:2f:ea:2b:71:2b:bd:91:34:43:5f:b3:8c:3f:6b: ba:b5:d2:db:41:1b:c6:45:b1:7c:5e:6c:58:69:c7: e8:a7:f1:ff:a1:6b:7d:f9:54:4d:7b:e3:c9:aa:03: b6:b0:91:01:fe:17:cc:5f:18:5f:c5:11:d3:ca:fb: 53:f4:3e:b1:30:c6:77:d1:aa:67:b0:69:26:75:1c: a3:4f:7e:36:be:97:08:15:b5:6b:5a:9d:77:85:e0: 3b:c0:1f:52:6e:cb:2a:7f:ff:78:61:81:ed:8b:c4: 86:37:84:d5:ba:b3:76:d9:66:9d:dd:d9:ef:3b:93: 0c:da:2c:79:d3:a2:df:3c:1b:d3:9c:f3:ec:25:ed: 01:59:31:68:f0:17:7b:06:9e:d7:e8:c8:d2:5f:70: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D2:FF:1D:0A:2B:45:1C:9B:70:CE:25:20:7A:9A:09:62:63:E8:E6 X509v3 Authority Key Identifier: keyid:62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:be:51:dc:58:05:c8:8d:af:39:f0:0b:37:30:b3:1f:4b:99: c6:0c:47:57:88:81:02:4a:9b:2d:6e:6f:f2:97:35:02:fc:42: c7:ed:14:8c:4a:fb:44:5a:f4:c5:9d:cf:7e:2b:1a:2a:22:1e: b4:16:77:49:14:b1:3b:74:07:eb:92:cb:e4:11:a5:31:ba:a9: 88:22:92:2a:6b:25:c4:ef:92:34:65:6b:ad:73:00:c6:78:41: c9:df:ae:ff:44:6f:59:f4:f2:4c:3d:f0:5c:68:9f:78:40:be: c4:90:dd:78:d7:df:d4:10:ea:e6:22:bc:ab:9b:17:f7:ce:14: 60:1d:91:aa:33:57:48:c4:f6:55:62:54:95:31:57:7c:03:ef: 72:9a:43:28:4a:51:2d:cb:52:78:ac:90:06:6e:2e:bb:75:84: 0c:f6:aa:4b:30:26:73:40:02:e2:3d:9e:8d:b5:c6:78:ab:52: 1a:92:63:72:54:ef:6a:8b:db:e3:95:25:58:0d:89:5d:11:d1: 24:2a:a1:9f:ec:4f:a4:ae:bc:a0:d9:6a:ab:4d:9f:06:bd:db: 5c:da:96:7f:07:65:49:9e:2d:c7:a5:18:81:38:ae:a1:30:50: d7:42:dd:31:5c:e9:f7:dc:8b:c1:23:59:cb:f8:48:db:5e:f1: e1:ed:c5:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCSVsUkLEqHUpzhvK9ZIUj8sBzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JE Q0ZBQzIzNzAeFw0yNjA5MjQwMTIyMzdaFw0yNjA5MjUwMjI1MzdaMDMxMTAvBgNV BAMTKDRDRDJGRjFEMEEyQjQ1MUM5QjcwQ0UyNTIwN0E5QTA5NjI2M0U4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIew22uxWWbij3PDo/qLmzgrIl lTv65H/FgLIMrcrP3ib+HQL0wh7I06CYsaFJoE8lyLQC4RWQfa/dYpjUdn6jqqyT zyEl85A/NYKsph8TwYXNJjRzJEtEsxu1m6ENhgtVeuQUSqJEJUIv6itxK72RNENf s4w/a7q10ttBG8ZFsXxebFhpx+in8f+ha335VE1748mqA7awkQH+F8xfGF/FEdPK +1P0PrEwxnfRqmewaSZ1HKNPfja+lwgVtWtanXeF4DvAH1Juyyp//3hhge2LxIY3 hNW6s3bZZp3d2e87kwzaLHnTot88G9Oc8+wl7QFZMWjwF3sGntfoyNJfcO1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTNL/HQorRRybcM4lIHqaCWJj6OYwHwYDVR0j BBgwFoAUYlMei/h3+RkAVdfYV8Iey9z6wjcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE5NTIwZmQtOGRlNS00YTY5LTg1ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJG ODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JEQ0ZBQzIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjUzMUU4QkY4NzdGOTE5MDA1NUQ3RDg1N0MyMUVDQkRDRkFD MjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE5NTIwZmQtOGRlNS00YTY5LTg1 ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFF Q0JEQ0ZBQzIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKC+UdxYBciNrznwCzcwsx9LmcYMR1eIgQJK my1ub/KXNQL8QsftFIxK+0Ra9MWdz34rGioiHrQWd0kUsTt0B+uSy+QRpTG6qYgi kiprJcTvkjRla61zAMZ4Qcnfrv9Eb1n08kw98Fxon3hAvsSQ3XjX39QQ6uYivKub F/fOFGAdkaozV0jE9lViVJUxV3wD73KaQyhKUS3LUniskAZuLrt1hAz2qkswJnNA AuI9no21xnirUhqSY3JU72qL2+OVJVgNiV0R0SQqoZ/sT6SuvKDZaqtNnwa921za ln8HZUmeLcelGIE4rqEwUNdC3TFc6ffci8EjWcv4SNte8eHtxds= -----END CERTIFICATE-----Generated at Thu Sep 24 10:42:46 2026 by rpki-client