$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft File: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft (raw, json) Hash identifier: bf1SgsoKFJCV/4GYvV43R4sZDjJ0vrvNDcrAZZIQie4= Subject key identifier: 80:6A:09:F4:18:A9:85:12:66:27:DB:5B:50:63:4C:58:B7:A7:B8:2E Authority key identifier: 62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 Certificate issuer: /CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Certificate serial: 3D1A5A3FC2410168FA4666D4F0765A2BE4E4CF30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:27:26 +0000 Manifest this update: Tue 12 May 2026 23:22:26 +0000 Manifest next update: Thu 14 May 2026 01:56:26 +0000 Files and hashes: 1: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dMpOdFIr/26lFAOFd0rVU1j1+PEZcg+h3DrP/cQE0/8=) 2: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: R7nG2SifNw+u1p+kwJm+heoPGDPMZn3VsOSr7vY8Y1E=) 3: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl (hash: 1ZEgv+XAxcNz1Q373iQ8ZQQs7+j0iW1dZQIBkJH8Xm4=) 4: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: TPY0QfWu0WIEQ0Ox00Nhc0zNlG2IHpXeSDITO1+Bl9s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1a:5a:3f:c2:41:01:68:fa:46:66:d4:f0:76:5a:2b:e4:e4:cf:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Validity Not Before: May 12 23:22:26 2026 GMT Not After : May 14 01:56:26 2026 GMT Subject: CN=806A09F418A985126627DB5B50634C58B7A7B82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:a5:97:ca:1f:17:8a:f3:38:cd:40:cf:9b: 61:78:eb:2f:cb:65:c1:5e:7c:21:8f:ac:f8:0b:9e: 77:27:68:47:f3:d1:1b:a0:0d:95:e4:ca:0e:52:02: 61:fc:10:0e:e5:ee:ac:68:f6:c1:96:ff:d0:e9:1f: c6:98:87:ef:63:90:37:e2:79:f7:1d:53:24:60:82: b7:36:96:28:45:7c:6f:cb:10:6d:41:f1:65:4f:e5: 7b:12:dd:9b:6f:7d:71:b3:b1:21:fe:ae:4f:5e:a1: fb:7b:98:bd:ef:d9:0e:96:3d:7b:d3:4b:ef:c0:d7: cf:c1:20:fc:47:cb:5f:58:57:3e:ab:84:a0:fc:86: c1:b5:67:d0:fb:8a:dc:86:27:98:a0:f2:3f:8c:85: ec:35:e2:a6:13:37:de:27:b7:d9:93:56:22:42:23: ee:8c:54:91:90:f5:5d:1a:54:5f:4c:d0:63:b6:ec: 53:f9:6f:f1:87:e0:1f:8a:7a:23:21:cf:04:f1:42: 77:2e:0c:ad:83:4e:e7:9e:90:1c:56:a9:30:62:c2: 4f:b4:e0:2f:01:74:d0:3e:7b:bb:b6:4a:0c:3b:e6: 40:e1:0e:ed:3c:46:aa:bc:9d:9e:5b:55:b7:70:a5: aa:c4:ac:55:ed:3f:b5:aa:16:56:30:84:e2:5a:a9: d7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6A:09:F4:18:A9:85:12:66:27:DB:5B:50:63:4C:58:B7:A7:B8:2E X509v3 Authority Key Identifier: keyid:62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b7:db:ef:15:94:0e:95:50:15:22:48:2a:22:f1:21:b4:06: 89:36:f8:cd:db:19:63:31:bd:26:0f:b0:f1:7b:76:a1:41:98: 7c:87:0a:74:cc:40:f4:70:e4:99:5a:2e:52:cf:20:99:f6:25: d4:b8:ca:bc:92:da:52:f1:36:9a:f5:f3:20:69:88:9b:9e:bc: 67:93:b4:e5:89:a1:86:da:cd:0e:15:7a:fc:8d:ce:aa:c4:e3: 0e:c5:7b:04:ac:0e:85:ad:a4:07:32:0c:b9:96:fd:bb:fa:25: ad:39:17:f7:58:6a:0f:51:0e:73:3b:86:33:37:02:ab:7b:34: 39:4b:e4:50:45:98:83:f8:7f:45:dc:1e:53:80:d2:81:82:b8: e3:fd:18:98:4d:51:cf:9b:2b:c0:d4:b7:aa:c2:c4:02:91:42: 27:b7:27:bf:58:e7:68:0d:cb:d1:0a:fe:55:52:41:e6:57:0d: 7c:01:f5:a2:d7:96:49:c4:93:54:db:06:a5:93:1e:bd:dc:5d: bc:eb:9e:ec:1a:f2:30:ed:25:c0:80:e5:22:ba:d1:75:2e:ed: 40:13:5c:90:cb:54:80:44:fe:8b:c0:b5:2d:5e:66:24:38:6c: ce:49:3f:8d:55:fe:02:5f:e9:3b:75:a5:d9:19:8a:dc:61:27: 6e:d4:0e:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRpaP8JBAWj6RmbU8HZaK+TkzzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQw MkI0RDhBMTAeFw0yNjA1MTIyMzIyMjZaFw0yNjA1MTQwMTU2MjZaMDMxMTAvBgNV BAMTKDgwNkEwOUY0MThBOTg1MTI2NjI3REI1QjUwNjM0QzU4QjdBN0I4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCet6WXyh8XivM4zUDPm2F46y/L ZcFefCGPrPgLnncnaEfz0RugDZXkyg5SAmH8EA7l7qxo9sGW/9DpH8aYh+9jkDfi efcdUyRggrc2lihFfG/LEG1B8WVP5XsS3ZtvfXGzsSH+rk9eoft7mL3v2Q6WPXvT S+/A18/BIPxHy19YVz6rhKD8hsG1Z9D7ityGJ5ig8j+Mhew14qYTN94nt9mTViJC I+6MVJGQ9V0aVF9M0GO27FP5b/GH4B+KeiMhzwTxQncuDK2DTueekBxWqTBiwk+0 4C8BdNA+e7u2Sgw75kDhDu08Rqq8nZ5bVbdwparErFXtP7WqFlYwhOJaqddLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgGoJ9BiphRJmJ9tbUGNMWLenuC4wHwYDVR0j BBgwFoAUYpOOMd7iKO1WJ7JfvaO3lAK02KEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU3Yjk0NzYtN2UzOC00YzUwLWE2MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFE RUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQwMkI0RDhBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjkzOEUzMURFRTIyOEVENTYyN0IyNUZCREEzQjc5NDAyQjRE OEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3 OTQwMkI0RDhBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI232+8VlA6VUBUiSCoi8SG0Bok2+M3bGWMx vSYPsPF7dqFBmHyHCnTMQPRw5JlaLlLPIJn2JdS4yryS2lLxNpr18yBpiJuevGeT tOWJoYbazQ4VevyNzqrE4w7FewSsDoWtpAcyDLmW/bv6Ja05F/dYag9RDnM7hjM3 Aqt7NDlL5FBFmIP4f0XcHlOA0oGCuOP9GJhNUc+bK8DUt6rCxAKRQie3J79Y52gN y9EK/lVSQeZXDXwB9aLXlknEk1TbBqWTHr3cXbzrnuwa8jDtJcCA5SK60XUu7UAT XJDLVIBE/ovAtS1eZiQ4bM5JP41V/gJf6Tt1pdkZitxhJ27UDsI= -----END CERTIFICATE-----Generated at Wed May 13 06:18:53 2026 by rpki-client