$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/62482930F7AB1E9E6BB54ED59B7845CA361585E8.mft File: 62482930F7AB1E9E6BB54ED59B7845CA361585E8.mft (raw, json) Hash identifier: jDPXBppiPvkSPlkV3MA08zBU952bIyqT9M4HLJ4niK0= Subject key identifier: 7A:FF:F9:EB:60:C4:D0:C7:A8:A2:FD:A1:B1:3D:E4:11:E5:47:B0:DD Authority key identifier: 62:48:29:30:F7:AB:1E:9E:6B:B5:4E:D5:9B:78:45:CA:36:15:85:E8 Certificate issuer: /CN=62482930F7AB1E9E6BB54ED59B7845CA361585E8 Certificate serial: 221EF980B4B0FF262B4BDD328A01577E3CD0FEC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62482930F7AB1E9E6BB54ED59B7845CA361585E8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/62482930F7AB1E9E6BB54ED59B7845CA361585E8.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 07:09:34 +0000 Manifest this update: Fri 25 Sep 2026 07:04:34 +0000 Manifest next update: Sat 26 Sep 2026 10:44:34 +0000 Files and hashes: 1: 62482930F7AB1E9E6BB54ED59B7845CA361585E8.crl (hash: phJ4VFXIvb3MYOHTx2+nt1KJRp9QpKabpCP4fm+Xaa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/62482930F7AB1E9E6BB54ED59B7845CA361585E8.crl rsync://rpki-rsync.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/62482930F7AB1E9E6BB54ED59B7845CA361585E8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62482930F7AB1E9E6BB54ED59B7845CA361585E8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1e:f9:80:b4:b0:ff:26:2b:4b:dd:32:8a:01:57:7e:3c:d0:fe:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62482930F7AB1E9E6BB54ED59B7845CA361585E8 Validity Not Before: Sep 25 07:04:34 2026 GMT Not After : Sep 26 10:44:34 2026 GMT Subject: CN=7AFFF9EB60C4D0C7A8A2FDA1B13DE411E547B0DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:49:5f:db:7b:c8:79:6b:c1:bf:7f:a5:f6: af:aa:25:c6:81:e0:2d:39:79:41:12:ca:d9:fe:52: 21:18:c4:79:0e:cd:2d:3d:34:88:51:82:b8:00:8b: 73:05:6e:0d:bd:bf:81:60:ca:dd:bd:da:8f:21:c7: f3:76:e9:49:be:7a:70:4d:98:2e:02:2c:35:00:35: 7a:36:31:73:6e:37:43:31:76:19:0b:1f:19:94:a2: 62:e3:d8:23:d7:04:fd:e4:cc:69:20:76:3b:27:f9: 43:b3:33:b0:f4:87:81:21:4d:fd:d9:e2:70:c8:27: 7f:eb:cb:4b:b7:a5:9a:1b:38:01:e5:ce:bc:01:b2: 7a:42:3b:1f:29:ae:6a:e8:fb:d8:dc:56:fd:40:d5: 14:d2:37:91:a3:75:02:08:24:e8:0e:8b:67:7d:14: 38:af:99:7a:51:24:d3:7f:c3:c2:a6:74:c7:1a:2b: 3d:30:9f:30:87:97:48:c3:5c:fd:7f:a5:e9:bf:28: 6d:79:b9:3e:a8:7d:da:6e:8f:d4:02:be:85:cf:dd: 6f:f8:26:1d:ef:f3:e7:fb:3d:0c:cd:f4:ca:18:a6: e6:68:7e:a6:49:6e:31:17:ab:3a:fb:94:c7:54:20: 32:0c:c5:d3:e0:48:b7:b6:90:80:39:30:e8:87:6f: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FF:F9:EB:60:C4:D0:C7:A8:A2:FD:A1:B1:3D:E4:11:E5:47:B0:DD X509v3 Authority Key Identifier: keyid:62:48:29:30:F7:AB:1E:9E:6B:B5:4E:D5:9B:78:45:CA:36:15:85:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/62482930F7AB1E9E6BB54ED59B7845CA361585E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62482930F7AB1E9E6BB54ED59B7845CA361585E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/62482930F7AB1E9E6BB54ED59B7845CA361585E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:17:21:a9:3c:1f:86:f8:ed:28:75:a7:87:0c:3d:ae:fc:ae: f8:34:6c:5b:0e:67:61:9f:dc:33:9b:be:c3:44:6f:94:3c:d4: b6:a8:66:11:f3:2b:4d:70:1c:9b:bd:28:3f:f9:23:06:c8:fe: 11:e1:38:c0:7c:d9:d3:49:f5:d9:17:e3:e0:f2:1c:4a:90:ac: 06:4c:89:3e:af:8b:3b:67:23:77:bf:52:ad:e2:85:84:f7:b7: c7:4f:21:e7:be:d6:36:6c:7c:a2:be:c9:a7:21:bc:51:da:71: c6:9c:eb:e0:b9:dd:02:8f:dd:d8:23:05:20:22:05:01:0c:60: f5:e2:16:6b:7b:21:b3:1d:5c:bd:77:54:90:42:9b:47:1f:c0: ad:eb:42:28:f7:f5:6e:c9:ec:61:7a:b8:60:7e:56:a8:20:6f: 2f:49:ed:e2:0e:73:b8:5d:c1:7b:18:ce:64:e6:05:27:eb:0c: e6:83:4a:10:3c:3c:53:6c:c6:50:55:62:a1:ed:7b:d3:5b:ac: 7c:dc:c7:38:da:68:ec:84:02:54:db:34:b8:f8:fc:51:94:29: 1d:c4:9a:c6:e2:8b:ac:e3:9c:0f:37:37:3a:ab:1d:8a:57:69: e1:99:6b:c8:9b:52:51:e7:90:0c:29:85:2c:c5:7a:dd:8e:ed: ae:23:7d:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIh75gLSw/yYrS90yigFXfjzQ/sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0ODI5MzBGN0FCMUU5RTZCQjU0RUQ1OUI3ODQ1Q0Ez NjE1ODVFODAeFw0yNjA5MjUwNzA0MzRaFw0yNjA5MjYxMDQ0MzRaMDMxMTAvBgNV BAMTKDdBRkZGOUVCNjBDNEQwQzdBOEEyRkRBMUIxM0RFNDExRTU0N0IwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJUlf23vIeWvBv3+l9q+qJcaB 4C05eUESytn+UiEYxHkOzS09NIhRgrgAi3MFbg29v4Fgyt292o8hx/N26Um+enBN mC4CLDUANXo2MXNuN0MxdhkLHxmUomLj2CPXBP3kzGkgdjsn+UOzM7D0h4EhTf3Z 4nDIJ3/ry0u3pZobOAHlzrwBsnpCOx8prmro+9jcVv1A1RTSN5GjdQIIJOgOi2d9 FDivmXpRJNN/w8KmdMcaKz0wnzCHl0jDXP1/pem/KG15uT6ofdpuj9QCvoXP3W/4 Jh3v8+f7PQzN9MoYpuZofqZJbjEXqzr7lMdUIDIMxdPgSLe2kIA5MOiHbyldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUev/562DE0Meoov2hsT3kEeVHsN0wHwYDVR0j BBgwFoAUYkgpMPerHp5rtU7Vm3hFyjYVhegwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY4YTMxNWUtMTZmMS00ZjIxLTliYzAtMjY5ZDViZTczZDYwLzAvNjI0ODI5MzBG N0FCMUU5RTZCQjU0RUQ1OUI3ODQ1Q0EzNjE1ODVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjQ4MjkzMEY3QUIxRTlFNkJCNTRFRDU5Qjc4NDVDQTM2MTU4 NUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNjI0ODI5MzBGN0FCMUU5RTZCQjU0RUQ1OUI3ODQ1 Q0EzNjE1ODVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoXIak8H4b47Sh1p4cMPa78rvg0bFsOZ2Gf 3DObvsNEb5Q81LaoZhHzK01wHJu9KD/5IwbI/hHhOMB82dNJ9dkX4+DyHEqQrAZM iT6viztnI3e/Uq3ihYT3t8dPIee+1jZsfKK+yachvFHaccac6+C53QKP3dgjBSAi BQEMYPXiFmt7IbMdXL13VJBCm0cfwK3rQij39W7J7GF6uGB+Vqggby9J7eIOc7hd wXsYzmTmBSfrDOaDShA8PFNsxlBVYqHte9NbrHzcxzjaaOyEAlTbNLj4/FGUKR3E msbii6zjnA83NzqrHYpXaeGZa8ibUlHnkAwphSzFet2O7a4jfek= -----END CERTIFICATE-----Generated at Fri Sep 25 18:37:33 2026 by rpki-client