$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft File: 62531E8BF877F9190055D7D857C21ECBDCFAC237.mft (raw, json) Hash identifier: yiVlhT/aAKYZUDek6MkT2qEnwgWN6Y7kzljX4SlztJ4= Subject key identifier: 35:05:AA:EF:38:78:6A:CC:B3:B3:0D:F5:87:C8:33:1B:3F:A4:A5:51 Authority key identifier: 62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 Certificate issuer: /CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Certificate serial: 6256D7B13DDF16903FEE86E5CC93F866C1283A85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft Manifest number: BE Signing time: Mon 21 Sep 2026 18:19:13 +0000 Manifest this update: Mon 21 Sep 2026 18:14:13 +0000 Manifest next update: Tue 22 Sep 2026 20:16:13 +0000 Files and hashes: 1: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (hash: SOPJ6LptzafhaHhbYxOp6YPrbTR/9ZdExcQFIaJyuIA=) 2: 3130332e3135332e36312e302f32342d3234203d3e20313430343536.roa (hash: AqK7gho3oaBdn6U0bSz26oZHpcnwMKNpGmX9XBUu4+k=) 3: 3130332e3135332e36302e302f32342d3234203d3e20313430343536.roa (hash: N+subOKk1O0aLwezy/FI1acpxPEti6iKIkHeL/X8z5w=) 4: 62531E8BF877F9190055D7D857C21ECBDCFAC237.crl (hash: XjNRDZjLegukmV2lAqjPCJpHEZB98kgGytN/XNzJ5FE=) 5: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (hash: RzRSXdrIXGBvVPeHVDu3wO8XEsc3GFR1CCktt00WYd8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:56:d7:b1:3d:df:16:90:3f:ee:86:e5:cc:93:f8:66:c1:28:3a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Validity Not Before: Sep 21 18:14:13 2026 GMT Not After : Sep 22 20:16:13 2026 GMT Subject: CN=3505AAEF38786ACCB3B30DF587C8331B3FA4A551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:bb:78:d8:db:96:63:b1:45:b7:4b:9c:b1: d4:1b:01:73:ce:e5:d1:2d:9a:d5:bd:17:13:9a:47: 1b:02:b5:84:4b:ba:ac:57:c3:1d:ec:82:b1:f3:56: 8f:b5:14:8c:d5:4e:ad:30:7f:ff:10:25:46:73:b7: 58:77:be:08:63:de:71:e3:ab:de:d8:7c:89:15:4f: fe:a5:e0:b3:b5:20:9c:16:7a:ae:b0:a8:58:84:61: a4:13:40:14:42:fe:1c:ac:f8:3b:7c:c3:5e:42:eb: 4a:89:b1:a3:0a:25:f1:ad:7d:9e:9b:a8:05:c0:62: 05:98:b3:18:54:00:c3:61:2e:4f:2b:6c:05:be:d6: 87:f4:57:86:8d:f8:1f:c6:07:6e:b1:1b:6d:c3:14: bf:bf:96:01:fb:66:b1:93:d5:48:a2:be:bd:df:1e: ad:07:55:0d:d1:23:e1:be:33:35:8f:c1:34:8e:4d: 41:21:a1:7d:11:e7:ac:a2:3e:1d:90:54:60:68:2d: db:67:a3:f6:24:e5:f7:61:ac:a9:5e:30:06:bd:69: 2a:50:ab:f8:65:55:43:1a:7e:bc:8e:b5:46:af:b8: 1e:62:2b:9f:eb:27:e5:75:b3:3a:41:19:fe:42:87: a7:90:bc:c1:82:56:b1:9c:49:28:81:a4:23:c2:5c: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:05:AA:EF:38:78:6A:CC:B3:B3:0D:F5:87:C8:33:1B:3F:A4:A5:51 X509v3 Authority Key Identifier: keyid:62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5b:f8:d4:e9:39:24:6b:e4:ee:65:cb:93:8a:05:c0:0d:ed: 8a:c9:5f:0a:c2:ad:9a:a1:4b:84:e2:c7:96:ac:71:4f:f9:60: 50:76:81:15:db:06:8f:5e:5b:7d:80:3b:f8:bf:e4:54:e7:0c: 83:43:a5:6d:52:9c:e3:48:c3:32:19:5e:38:3c:81:2c:22:b5: a4:c5:39:4a:26:96:1e:b9:4c:b9:74:31:0e:99:4c:1d:8f:7a: f0:67:c5:a9:f1:e4:f0:5d:c0:43:db:f6:58:d6:00:41:06:aa: a6:c7:9f:e3:5a:df:50:73:ba:af:9a:71:ba:8c:54:a2:fd:47: 1e:8a:cd:68:e5:80:3f:d4:37:b4:e0:7e:01:33:6b:9e:e0:e3: 14:5d:18:82:92:07:9c:8a:9a:8b:4a:5a:9a:a4:3b:72:72:c6: 6d:9e:06:61:0d:e8:6b:8f:78:a2:27:35:41:20:a5:d4:7a:23: 5c:80:0e:a4:cb:d8:84:3f:43:88:81:8b:6b:88:46:39:3a:f2: 62:16:bd:91:a4:44:d9:05:f7:3d:3b:d4:46:24:68:f1:e5:5b: 91:e5:02:94:91:34:1d:df:a2:50:6a:8e:d0:dd:c2:6b:09:f7: 19:b4:70:d3:8e:48:ad:f5:64:2b:77:24:90:c3:ff:23:56:20: a4:61:7a:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlbXsT3fFpA/7oblzJP4ZsEoOoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JE Q0ZBQzIzNzAeFw0yNjA5MjExODE0MTNaFw0yNjA5MjIyMDE2MTNaMDMxMTAvBgNV BAMTKDM1MDVBQUVGMzg3ODZBQ0NCM0IzMERGNTg3QzgzMzFCM0ZBNEE1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQart42NuWY7FFt0ucsdQbAXPO 5dEtmtW9FxOaRxsCtYRLuqxXwx3sgrHzVo+1FIzVTq0wf/8QJUZzt1h3vghj3nHj q97YfIkVT/6l4LO1IJwWeq6wqFiEYaQTQBRC/hys+Dt8w15C60qJsaMKJfGtfZ6b qAXAYgWYsxhUAMNhLk8rbAW+1of0V4aN+B/GB26xG23DFL+/lgH7ZrGT1Uiivr3f Hq0HVQ3RI+G+MzWPwTSOTUEhoX0R56yiPh2QVGBoLdtno/Yk5fdhrKleMAa9aSpQ q/hlVUMafryOtUavuB5iK5/rJ+V1szpBGf5Ch6eQvMGCVrGcSSiBpCPCXAd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQWq7zh4asyzsw31h8gzGz+kpVEwHwYDVR0j BBgwFoAUYlMei/h3+RkAVdfYV8Iey9z6wjcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE5NTIwZmQtOGRlNS00YTY5LTg1ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJG ODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JEQ0ZBQzIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjUzMUU4QkY4NzdGOTE5MDA1NUQ3RDg1N0MyMUVDQkRDRkFD MjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE5NTIwZmQtOGRlNS00YTY5LTg1 ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFF Q0JEQ0ZBQzIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1b+NTpOSRr5O5ly5OKBcAN7YrJXwrCrZqh S4Tix5ascU/5YFB2gRXbBo9eW32AO/i/5FTnDINDpW1SnONIwzIZXjg8gSwitaTF OUomlh65TLl0MQ6ZTB2PevBnxanx5PBdwEPb9ljWAEEGqqbHn+Na31Bzuq+acbqM VKL9Rx6KzWjlgD/UN7TgfgEza57g4xRdGIKSB5yKmotKWpqkO3Jyxm2eBmEN6GuP eKInNUEgpdR6I1yADqTL2IQ/Q4iBi2uIRjk68mIWvZGkRNkF9z071EYkaPHlW5Hl ApSRNB3folBqjtDdwmsJ9xm0cNOOSK31ZCt3JJDD/yNWIKRheho= -----END CERTIFICATE-----Generated at Tue Sep 22 08:50:53 2026 by rpki-client