$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft File: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft (raw, json) Hash identifier: MPZdeKWx9wFLqw9YtC9kX0bBMYNRVG5hMOsELZFJMaA= Subject key identifier: 44:3D:B6:73:5E:F7:DA:3D:A3:3D:B8:07:84:25:AF:37:56:0B:55:6C Authority key identifier: 62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 Certificate issuer: /CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Certificate serial: 7E37F3AC8C59D5F5F080A049A931402AC0B29226 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 18:07:46 +0000 Manifest this update: Fri 25 Sep 2026 18:02:46 +0000 Manifest next update: Sat 26 Sep 2026 20:47:46 +0000 Files and hashes: 1: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl (hash: jEjSvtl6A/e5ys6l2+SHXN/65i9SwrZyLyXutKiiHes=) 2: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: TPY0QfWu0WIEQ0Ox00Nhc0zNlG2IHpXeSDITO1+Bl9s=) 3: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dMpOdFIr/26lFAOFd0rVU1j1+PEZcg+h3DrP/cQE0/8=) 4: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: R7nG2SifNw+u1p+kwJm+heoPGDPMZn3VsOSr7vY8Y1E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:37:f3:ac:8c:59:d5:f5:f0:80:a0:49:a9:31:40:2a:c0:b2:92:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Validity Not Before: Sep 25 18:02:46 2026 GMT Not After : Sep 26 20:47:46 2026 GMT Subject: CN=443DB6735EF7DA3DA33DB8078425AF37560B556C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:8a:5a:48:93:8e:1d:e8:ac:a7:36:b7:86: cf:1d:3e:31:3d:0b:cc:4a:26:14:bd:a2:1b:d2:1a: 88:2d:55:d6:20:f3:9e:18:89:70:6b:e1:2b:00:ea: 96:e8:d6:dc:7b:61:22:df:e5:0e:27:15:d4:c3:5c: 8e:f4:87:84:8e:f8:ec:53:40:ea:fa:f7:66:71:96: fe:44:72:5d:2e:58:03:2c:59:77:a8:19:ae:cf:61: af:08:fe:88:dc:d3:98:30:c2:fa:ad:9e:6b:e5:3b: 65:1b:d7:bd:26:34:30:9c:d5:23:97:29:54:d5:c5: c9:8d:b8:c2:e4:3d:d9:be:52:bc:70:0f:dc:0a:bd: 3f:5e:01:f6:32:3d:50:be:10:10:9c:09:e0:1c:30: 2d:b5:c1:1b:b9:ec:bd:b2:87:10:30:40:0f:39:9a: d6:3d:c4:2c:77:a9:96:f1:b4:ab:17:79:18:9c:52: f1:74:37:2b:f2:26:ca:44:9d:61:97:d8:54:89:63: f4:13:db:9a:dd:59:b1:97:5d:50:2d:bb:64:be:9f: fa:da:19:bf:c3:e8:12:2d:b9:99:14:7b:06:54:e3: c0:29:2a:95:f6:a2:77:7d:70:18:4e:5d:d4:0d:ca: b3:73:16:e8:1d:b3:d9:95:8b:97:ce:ca:7e:81:a5: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3D:B6:73:5E:F7:DA:3D:A3:3D:B8:07:84:25:AF:37:56:0B:55:6C X509v3 Authority Key Identifier: keyid:62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:97:a2:83:52:d9:fa:0e:e2:e6:e4:85:38:8f:af:09:a0:00: 15:c3:d2:86:d0:ba:5c:ac:68:58:be:48:9d:f4:47:ea:b6:4a: 07:2e:7b:8c:59:f4:14:12:23:dc:f8:0c:b2:86:a9:95:2c:ef: d4:f1:dd:84:9f:92:19:c6:b8:4d:49:3d:e0:c8:a9:24:fa:5e: 46:81:19:4f:34:11:ba:44:82:f7:20:1e:df:ae:45:1b:32:b1: a7:e9:30:2c:bd:a9:85:5c:86:f8:49:2d:d3:80:19:fe:83:ba: 67:41:af:48:a5:a5:8c:b7:b8:5c:51:b4:aa:ae:bf:2d:20:73: 07:e7:d3:4f:dc:12:5c:a3:08:3c:b8:38:f8:0f:1f:e9:86:2a: 79:9d:a8:84:47:64:e5:e1:ac:22:8b:3c:77:98:91:a0:df:4c: 52:15:5e:96:5b:38:ca:ab:0f:c1:eb:3f:68:af:7e:47:ef:ca: fc:39:61:2e:f8:e4:f6:dc:ae:76:3c:2e:0b:32:a4:2b:f1:f8: 8e:b8:81:95:68:e2:49:f0:9b:21:72:e3:c1:5e:44:96:bc:3e: 55:15:91:b2:79:6c:73:20:3d:8c:2b:87:33:a1:09:a5:67:2c: be:56:0c:84:ec:f3:47:cb:ba:85:31:82:aa:16:fe:e7:c8:d2: 23:93:82:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjfzrIxZ1fXwgKBJqTFAKsCykiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQw MkI0RDhBMTAeFw0yNjA5MjUxODAyNDZaFw0yNjA5MjYyMDQ3NDZaMDMxMTAvBgNV BAMTKDQ0M0RCNjczNUVGN0RBM0RBMzNEQjgwNzg0MjVBRjM3NTYwQjU1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfIpaSJOOHeispza3hs8dPjE9 C8xKJhS9ohvSGogtVdYg854YiXBr4SsA6pbo1tx7YSLf5Q4nFdTDXI70h4SO+OxT QOr692Zxlv5Ecl0uWAMsWXeoGa7PYa8I/ojc05gwwvqtnmvlO2Ub170mNDCc1SOX KVTVxcmNuMLkPdm+UrxwD9wKvT9eAfYyPVC+EBCcCeAcMC21wRu57L2yhxAwQA85 mtY9xCx3qZbxtKsXeRicUvF0NyvyJspEnWGX2FSJY/QT25rdWbGXXVAtu2S+n/ra Gb/D6BItuZkUewZU48ApKpX2ond9cBhOXdQNyrNzFugds9mVi5fOyn6BpRxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURD22c1732j2jPbgHhCWvN1YLVWwwHwYDVR0j BBgwFoAUYpOOMd7iKO1WJ7JfvaO3lAK02KEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU3Yjk0NzYtN2UzOC00YzUwLWE2MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFE RUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQwMkI0RDhBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjkzOEUzMURFRTIyOEVENTYyN0IyNUZCREEzQjc5NDAyQjRE OEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3 OTQwMkI0RDhBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCXooNS2foO4ubkhTiPrwmgABXD0obQulys aFi+SJ30R+q2Sgcue4xZ9BQSI9z4DLKGqZUs79Tx3YSfkhnGuE1JPeDIqST6XkaB GU80EbpEgvcgHt+uRRsysafpMCy9qYVchvhJLdOAGf6DumdBr0ilpYy3uFxRtKqu vy0gcwfn00/cElyjCDy4OPgPH+mGKnmdqIRHZOXhrCKLPHeYkaDfTFIVXpZbOMqr D8HrP2ivfkfvyvw5YS745PbcrnY8LgsypCvx+I64gZVo4knwmyFy48FeRJa8PlUV kbJ5bHMgPYwrhzOhCaVnLL5WDITs80fLuoUxgqoW/ufI0iOTggU= -----END CERTIFICATE-----Generated at Fri Sep 25 21:58:05 2026 by rpki-client