$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft File: 62531E8BF877F9190055D7D857C21ECBDCFAC237.mft (raw, json) Hash identifier: hVE11Aa4idHB+D1QfDA1UytjNl/Fh9qLg6Z0bC2Yi2s= Subject key identifier: 4A:64:34:95:53:0C:9B:B4:4D:47:FF:28:03:88:E5:B4:A4:BF:21:BA Authority key identifier: 62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 Certificate issuer: /CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Certificate serial: 6E5BE64A38B6832424C7DFCAD359FAB2D7A92A29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 16:44:46 +0000 Manifest this update: Sat 13 Jun 2026 16:39:46 +0000 Manifest next update: Sun 14 Jun 2026 19:21:46 +0000 Files and hashes: 1: 3130332e3135332e36312e302f32342d3234203d3e20313430343536.roa (hash: AqK7gho3oaBdn6U0bSz26oZHpcnwMKNpGmX9XBUu4+k=) 2: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (hash: SOPJ6LptzafhaHhbYxOp6YPrbTR/9ZdExcQFIaJyuIA=) 3: 62531E8BF877F9190055D7D857C21ECBDCFAC237.crl (hash: K5oJ3C1Y3A03xMirwtaCs0LEVNC5uBBNij97msT4BvQ=) 4: 3130332e3135332e36302e302f32342d3234203d3e20313430343536.roa (hash: N+subOKk1O0aLwezy/FI1acpxPEti6iKIkHeL/X8z5w=) 5: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (hash: RzRSXdrIXGBvVPeHVDu3wO8XEsc3GFR1CCktt00WYd8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5b:e6:4a:38:b6:83:24:24:c7:df:ca:d3:59:fa:b2:d7:a9:2a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Validity Not Before: Jun 13 16:39:46 2026 GMT Not After : Jun 14 19:21:46 2026 GMT Subject: CN=4A643495530C9BB44D47FF280388E5B4A4BF21BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:55:be:bf:be:42:94:0c:22:8d:ed:3a:55:0d: 5a:4d:b3:46:c5:6e:8b:19:f0:cf:6f:de:66:ed:6e: 86:14:1b:e0:f7:ec:91:1f:53:4a:4f:96:56:d5:ca: 08:92:0e:94:6c:87:d9:7c:5f:03:16:a9:8e:eb:23: bd:2a:82:1a:2d:79:10:db:06:85:6b:21:8a:e7:74: 5b:f4:37:d7:d1:a7:ca:a1:e4:e5:60:4d:c0:3c:05: f4:fb:5e:69:f0:1f:c8:75:6a:c3:9a:54:76:4d:1d: a7:53:69:75:f5:d0:da:01:68:6b:f3:fe:b4:9b:79: 27:28:e1:cf:74:e6:1c:0c:36:5c:cc:8f:7f:04:4c: 1f:f9:16:49:21:86:33:55:d0:0a:3e:ad:39:a2:4a: e9:47:9e:a3:90:6b:83:64:88:4e:70:66:3a:03:5a: 68:d7:14:ec:a7:8b:84:b6:ae:4e:71:de:cc:06:3e: 69:bb:79:9e:6f:af:41:0c:e9:9d:17:fa:42:09:2b: e7:ba:3f:31:72:3e:45:0d:52:b0:9f:d0:9b:98:6d: 77:a9:d7:a4:dc:7b:79:30:23:58:ae:9d:c3:0b:ca: 1c:7c:1b:02:70:71:8c:3f:26:99:69:0e:b0:8c:87: ff:34:01:46:13:44:96:82:af:ab:fe:5e:28:65:69: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:64:34:95:53:0C:9B:B4:4D:47:FF:28:03:88:E5:B4:A4:BF:21:BA X509v3 Authority Key Identifier: keyid:62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:ca:b8:3d:b4:a0:89:f9:72:49:bf:01:3a:55:a2:00:9d:f2: d7:47:d7:a4:7b:a3:74:db:41:0d:1f:e5:9b:d8:29:20:2e:0d: cd:47:39:dd:24:13:0e:5b:83:63:1f:3e:97:62:75:b3:d1:f3: 1c:d8:97:63:77:c6:7b:6c:e7:0c:61:04:20:60:df:b9:4d:5f: 0a:65:8a:d8:f8:7f:38:93:ff:ed:21:98:56:94:53:55:05:ad: 79:02:4f:77:d0:fc:b4:d9:aa:7f:2d:03:20:c7:50:79:49:2a: 0a:74:1e:7a:2c:f0:3b:60:1b:bc:3f:ea:be:0c:0f:e0:64:43: 9a:88:63:8f:5d:2d:01:79:9b:99:7a:7f:c3:db:b0:5c:dc:5e: c3:55:95:bc:f5:90:d4:f8:57:3f:78:54:2b:e2:16:86:7e:b6: 9d:1a:77:86:6a:e1:7c:46:77:92:28:fc:da:bd:09:73:72:91: 40:27:f8:f2:fc:40:55:0c:f3:f9:11:73:5d:44:a2:8d:ed:17: ba:88:dc:68:5a:8e:5b:93:cf:37:58:dc:7d:21:b8:a6:0d:12: aa:d4:53:f0:b8:3f:82:b7:0a:84:25:ee:d2:6a:c1:20:e7:ba: 5e:37:bb:da:60:ad:2a:3e:0a:57:85:24:7a:40:81:c4:68:91: da:7c:58:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUblvmSji2gyQkx9/K01n6stepKikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JE Q0ZBQzIzNzAeFw0yNjA2MTMxNjM5NDZaFw0yNjA2MTQxOTIxNDZaMDMxMTAvBgNV BAMTKDRBNjQzNDk1NTMwQzlCQjQ0RDQ3RkYyODAzODhFNUI0QTRCRjIxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwVb6/vkKUDCKN7TpVDVpNs0bF bosZ8M9v3mbtboYUG+D37JEfU0pPllbVygiSDpRsh9l8XwMWqY7rI70qghoteRDb BoVrIYrndFv0N9fRp8qh5OVgTcA8BfT7XmnwH8h1asOaVHZNHadTaXX10NoBaGvz /rSbeSco4c905hwMNlzMj38ETB/5FkkhhjNV0Ao+rTmiSulHnqOQa4NkiE5wZjoD WmjXFOyni4S2rk5x3swGPmm7eZ5vr0EM6Z0X+kIJK+e6PzFyPkUNUrCf0JuYbXep 16Tce3kwI1iuncMLyhx8GwJwcYw/JplpDrCMh/80AUYTRJaCr6v+Xihlad3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSmQ0lVMMm7RNR/8oA4jltKS/IbowHwYDVR0j BBgwFoAUYlMei/h3+RkAVdfYV8Iey9z6wjcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE5NTIwZmQtOGRlNS00YTY5LTg1ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJG ODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JEQ0ZBQzIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjUzMUU4QkY4NzdGOTE5MDA1NUQ3RDg1N0MyMUVDQkRDRkFD MjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE5NTIwZmQtOGRlNS00YTY5LTg1 ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFF Q0JEQ0ZBQzIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANnKuD20oIn5ckm/ATpVogCd8tdH16R7o3Tb QQ0f5ZvYKSAuDc1HOd0kEw5bg2MfPpdidbPR8xzYl2N3xnts5wxhBCBg37lNXwpl itj4fziT/+0hmFaUU1UFrXkCT3fQ/LTZqn8tAyDHUHlJKgp0Hnos8DtgG7w/6r4M D+BkQ5qIY49dLQF5m5l6f8PbsFzcXsNVlbz1kNT4Vz94VCviFoZ+tp0ad4Zq4XxG d5Io/Nq9CXNykUAn+PL8QFUM8/kRc11Eoo3tF7qI3GhajluTzzdY3H0huKYNEqrU U/C4P4K3CoQl7tJqwSDnul43u9pgrSo+CleFJHpAgcRokdp8WOc= -----END CERTIFICATE-----Generated at Sat Jun 13 20:28:18 2026 by rpki-client