$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft File: 62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft (raw, json) Hash identifier: 2bU7WlNfPhXtGpBU9vq1t7a5QgfExGlI/ABB0TwAiDs= Subject key identifier: 5E:84:CC:5C:FA:9C:4A:02:29:B2:8E:78:AC:99:3F:82:C5:6B:79:EA Authority key identifier: 62:C5:A0:28:9D:A4:18:08:F9:2D:77:9B:1E:B9:5E:02:7D:BE:14:C3 Certificate issuer: /CN=62C5A0289DA41808F92D779B1EB95E027DBE14C3 Certificate serial: 18080E4642A91936878CEDBAF9E1F6BB370E8834 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft Manifest number: BE Signing time: Sun 20 Sep 2026 19:46:22 +0000 Manifest this update: Sun 20 Sep 2026 19:41:22 +0000 Manifest next update: Mon 21 Sep 2026 19:53:22 +0000 Files and hashes: 1: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: mcWbJEiXl5it2u7QuEmPSl23YbD8dPwCyZHEOHxWrkg=) 2: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: TLLFYxm3onSkry2YGDxevUL55V3n3RHX/1N7Y+FOZ9w=) 3: 62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl (hash: SQLM19vNBFresuWjrv2zMMMZz15w60yrtKUZiMTOch8=) 4: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: U59FIe3i4pxz4GAu82OkBppPPwOYvcD39wfDI1neTlA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:08:0e:46:42:a9:19:36:87:8c:ed:ba:f9:e1:f6:bb:37:0e:88:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62C5A0289DA41808F92D779B1EB95E027DBE14C3 Validity Not Before: Sep 20 19:41:22 2026 GMT Not After : Sep 21 19:53:22 2026 GMT Subject: CN=5E84CC5CFA9C4A0229B28E78AC993F82C56B79EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:2e:8d:14:bc:06:65:c6:86:9c:0c:01:37: e5:18:6c:f9:07:d0:e4:a2:db:72:85:86:db:61:8b: 7a:b1:3f:5c:75:a3:1c:b2:99:f0:27:bd:a6:d1:c0: d1:e4:cc:c9:a0:98:40:8d:4e:66:87:86:a1:54:d9: fa:c4:ce:5b:bf:aa:1b:4e:e8:e8:4a:1c:00:7b:9c: 3f:0f:d8:83:72:dd:cc:69:5a:b4:1d:36:11:ec:28: bf:7c:69:a0:8b:e7:b1:8c:1f:81:61:ed:20:b9:45: 82:ea:40:4f:15:2a:8a:21:70:e2:8e:a8:7f:93:a6: 89:b4:c9:29:40:6b:d8:6f:a8:40:89:fb:c3:21:1d: 2b:da:50:6c:9b:ed:94:87:2d:cc:d0:20:92:53:53: 81:c5:7b:09:d7:e4:48:8c:a8:26:6c:23:6e:60:85: 3a:89:ae:4b:2e:0e:d9:0b:63:73:5a:72:3e:3e:e8: 2e:01:ef:16:85:91:1a:b0:07:6a:88:2e:c3:6b:1c: 8b:18:c5:8e:cf:99:14:54:aa:5f:b4:72:77:d9:95: c4:a1:3e:7b:0b:19:8e:0f:92:71:51:ac:91:14:6f: 91:90:d8:fa:72:bf:84:95:a3:ff:6a:f5:a1:40:d6: 21:ca:48:5e:bc:aa:0f:58:e8:5e:16:87:f8:e3:43: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:84:CC:5C:FA:9C:4A:02:29:B2:8E:78:AC:99:3F:82:C5:6B:79:EA X509v3 Authority Key Identifier: keyid:62:C5:A0:28:9D:A4:18:08:F9:2D:77:9B:1E:B9:5E:02:7D:BE:14:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:19:7f:ae:7b:70:9f:fa:61:30:2a:98:68:62:64:19:8c:9f: e5:e2:a1:a7:6c:f6:6e:9f:f5:2a:61:91:db:07:6c:8f:27:63: ab:c7:68:1c:9b:2f:89:f4:6a:a1:73:f9:57:44:a7:b7:0d:d1: 8b:cc:45:b4:40:35:52:b2:15:26:5a:2c:fb:42:6e:5c:5d:1f: f4:4b:5b:5c:0d:18:e1:e2:95:3a:3e:d3:ec:c5:c3:52:5c:30: 40:8f:fd:8e:6e:b5:50:dc:02:d2:6a:e9:83:c3:00:63:66:08: 54:ff:98:7e:7b:1e:88:4f:70:82:e7:b9:30:4a:c1:cb:42:78: f2:ed:48:5d:b8:92:22:79:78:4b:08:81:8c:0b:14:d9:15:02: 74:63:9c:a5:0e:a3:97:82:e8:7d:a6:8d:54:6d:c6:b6:ee:0b: e8:79:95:7c:b6:5a:a0:5e:5e:fd:2d:a7:13:4a:ae:10:f8:11: fd:1d:bb:a5:d6:d1:b3:76:74:a6:11:e6:de:dc:48:34:0b:db: 81:61:19:2c:b6:6d:94:b7:de:1c:04:ef:c9:be:0b:c8:3c:c6: 68:56:89:56:58:68:27:b7:1c:f4:ca:0f:f9:42:20:32:a2:46: 1d:7c:db:23:45:3f:43:53:cc:ac:69:61:fb:bb:89:29:65:f1: 2d:f0:63:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAgORkKpGTaHjO26+eH2uzcOiDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJDNUEwMjg5REE0MTgwOEY5MkQ3NzlCMUVCOTVFMDI3 REJFMTRDMzAeFw0yNjA5MjAxOTQxMjJaFw0yNjA5MjExOTUzMjJaMDMxMTAvBgNV BAMTKDVFODRDQzVDRkE5QzRBMDIyOUIyOEU3OEFDOTkzRjgyQzU2Qjc5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbC6NFLwGZcaGnAwBN+UYbPkH 0OSi23KFhtthi3qxP1x1oxyymfAnvabRwNHkzMmgmECNTmaHhqFU2frEzlu/qhtO 6OhKHAB7nD8P2INy3cxpWrQdNhHsKL98aaCL57GMH4Fh7SC5RYLqQE8VKoohcOKO qH+Tpom0ySlAa9hvqECJ+8MhHSvaUGyb7ZSHLczQIJJTU4HFewnX5EiMqCZsI25g hTqJrksuDtkLY3Nacj4+6C4B7xaFkRqwB2qILsNrHIsYxY7PmRRUql+0cnfZlcSh PnsLGY4PknFRrJEUb5GQ2Ppyv4SVo/9q9aFA1iHKSF68qg9Y6F4Wh/jjQ/EdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXoTMXPqcSgIpso54rJk/gsVreeowHwYDVR0j BBgwFoAUYsWgKJ2kGAj5LXebHrleAn2+FMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI2NGE3OGMtZGQ0Yy00YzlkLWJjZjAtNmRlNmNkYjkyNWIwLzAvNjJDNUEwMjg5 REE0MTgwOEY5MkQ3NzlCMUVCOTVFMDI3REJFMTRDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MkM1QTAyODlEQTQxODA4RjkyRDc3OUIxRUI5NUUwMjdEQkUx NEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvNjJDNUEwMjg5REE0MTgwOEY5MkQ3NzlCMUVCOTVF MDI3REJFMTRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8Zf657cJ/6YTAqmGhiZBmMn+Xioads9m6f 9SphkdsHbI8nY6vHaBybL4n0aqFz+VdEp7cN0YvMRbRANVKyFSZaLPtCblxdH/RL W1wNGOHilTo+0+zFw1JcMECP/Y5utVDcAtJq6YPDAGNmCFT/mH57HohPcILnuTBK wctCePLtSF24kiJ5eEsIgYwLFNkVAnRjnKUOo5eC6H2mjVRtxrbuC+h5lXy2WqBe Xv0tpxNKrhD4Ef0du6XW0bN2dKYR5t7cSDQL24FhGSy2bZS33hwE78m+C8g8xmhW iVZYaCe3HPTKD/lCIDKiRh182yNFP0NTzKxpYfu7iSll8S3wYzU= -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:24 2026 by rpki-client