$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft File: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft (raw, json) Hash identifier: 30TSQqJn5eDr66NTUST+9h5VNz1LiwYBtXnn37YdKro= Subject key identifier: 68:10:4F:C2:3C:32:6F:A9:EA:3F:F4:9C:8C:36:9A:F3:EB:50:1E:0B Authority key identifier: 62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 Certificate issuer: /CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Certificate serial: 519920BEC96B72CD114807DD71C9E51405FBEEA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft Manifest number: 3B Signing time: Sun 14 Jun 2026 21:43:30 +0000 Manifest this update: Sun 14 Jun 2026 21:38:30 +0000 Manifest next update: Mon 15 Jun 2026 22:09:30 +0000 Files and hashes: 1: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dMpOdFIr/26lFAOFd0rVU1j1+PEZcg+h3DrP/cQE0/8=) 2: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl (hash: F5KClxlwTAwJGxSETemZHeCKugI7WOduf6D+7NCxEe8=) 3: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: R7nG2SifNw+u1p+kwJm+heoPGDPMZn3VsOSr7vY8Y1E=) 4: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: TPY0QfWu0WIEQ0Ox00Nhc0zNlG2IHpXeSDITO1+Bl9s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 22:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:99:20:be:c9:6b:72:cd:11:48:07:dd:71:c9:e5:14:05:fb:ee:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Validity Not Before: Jun 14 21:38:30 2026 GMT Not After : Jun 15 22:09:30 2026 GMT Subject: CN=68104FC23C326FA9EA3FF49C8C369AF3EB501E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6c:b1:6e:ff:9f:1d:82:89:e2:12:9c:0e:f2: a8:8c:35:bd:d3:fc:00:72:d2:99:88:f3:02:49:98: aa:de:8b:3b:0a:3f:c0:98:2b:9a:6b:a6:f9:74:ca: ad:51:2a:8e:5b:fb:f1:f9:18:56:a4:03:68:90:c8: 18:5b:d1:98:87:fc:88:08:a3:5e:46:c6:af:f8:be: 84:3b:8b:99:62:29:62:f2:89:aa:7c:26:ee:73:2f: 7e:cd:d1:a5:29:19:21:c1:4c:37:c2:9d:58:66:70: 31:3d:49:4d:7b:f1:dc:dc:a2:c7:30:4b:d8:66:7a: d8:e4:fa:97:45:59:33:d7:df:12:e8:9c:5e:90:21: 4f:fa:b8:63:ce:4e:c3:c8:ea:8f:b2:de:1c:db:2d: 47:c7:60:1e:99:0e:53:ae:41:8f:66:96:cd:42:63: f7:eb:07:18:15:d9:49:68:7a:33:64:82:25:b1:ac: 6b:2a:00:66:80:1b:08:7e:99:f4:71:47:ae:7d:5e: 2f:82:2d:b7:b4:5c:3f:3d:8c:d5:6e:fa:28:05:44: 9f:e7:0e:d7:54:a4:73:39:51:26:c1:74:85:c7:f7: 5e:eb:c5:fc:52:60:fe:f6:6f:f4:1d:a3:4e:34:70: a8:15:7f:9a:26:94:ac:8f:1a:10:e3:fb:3d:98:b8: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:10:4F:C2:3C:32:6F:A9:EA:3F:F4:9C:8C:36:9A:F3:EB:50:1E:0B X509v3 Authority Key Identifier: keyid:62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:11:c3:00:d1:2c:bb:5b:f5:3f:b9:51:fa:ca:6e:79:d6:aa: 2e:5d:75:1b:39:8f:54:63:55:87:bb:02:e6:24:53:ea:31:53: 7b:07:29:13:6f:7e:b5:fb:fa:b2:6f:b3:38:4c:6b:6e:f7:7e: b7:dc:7d:33:d6:0c:3f:7b:fb:cb:46:b5:91:ca:04:32:e2:84: 51:08:ae:67:30:a7:48:77:10:00:d5:3b:9b:25:60:2a:2b:3d: e8:81:4d:be:8f:f1:d3:e7:bb:41:97:39:cb:c3:e1:c3:ab:43: df:d7:3e:0e:fb:30:e7:c1:d9:8f:ee:62:75:02:88:9c:2d:ce: d8:c1:e0:58:e7:97:22:c1:63:95:45:d1:fd:0a:48:b1:87:2b: 6c:1d:73:0e:97:0b:99:29:b0:b9:92:9f:8e:e5:d1:4c:5c:3c: 1c:f0:2b:a2:cd:4f:2d:14:87:c8:75:71:0b:20:ba:6a:bc:8d: 21:2e:92:68:e0:f7:e3:c0:46:67:e5:28:6e:2d:1c:ca:d0:31: 30:c8:33:32:bb:94:f7:90:a2:be:d5:f3:c0:bd:79:cf:bc:58: 04:9e:e0:5d:66:c0:49:59:05:12:ad:0a:ca:c2:4c:5e:e4:4f: a9:92:a3:74:dd:15:14:bf:d2:79:f1:e4:1d:a8:37:e9:03:ec: 5c:d1:a5:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZkgvslrcs0RSAfdccnlFAX77qMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQw MkI0RDhBMTAeFw0yNjA2MTQyMTM4MzBaFw0yNjA2MTUyMjA5MzBaMDMxMTAvBgNV BAMTKDY4MTA0RkMyM0MzMjZGQTlFQTNGRjQ5QzhDMzY5QUYzRUI1MDFFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbLFu/58dgoniEpwO8qiMNb3T /ABy0pmI8wJJmKreizsKP8CYK5prpvl0yq1RKo5b+/H5GFakA2iQyBhb0ZiH/IgI o15Gxq/4voQ7i5liKWLyiap8Ju5zL37N0aUpGSHBTDfCnVhmcDE9SU178dzcoscw S9hmetjk+pdFWTPX3xLonF6QIU/6uGPOTsPI6o+y3hzbLUfHYB6ZDlOuQY9mls1C Y/frBxgV2UloejNkgiWxrGsqAGaAGwh+mfRxR659Xi+CLbe0XD89jNVu+igFRJ/n DtdUpHM5USbBdIXH917rxfxSYP72b/Qdo040cKgVf5omlKyPGhDj+z2YuD1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBBPwjwyb6nqP/ScjDaa8+tQHgswHwYDVR0j BBgwFoAUYpOOMd7iKO1WJ7JfvaO3lAK02KEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU3Yjk0NzYtN2UzOC00YzUwLWE2MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFE RUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQwMkI0RDhBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjkzOEUzMURFRTIyOEVENTYyN0IyNUZCREEzQjc5NDAyQjRE OEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3 OTQwMkI0RDhBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8RwwDRLLtb9T+5UfrKbnnWqi5ddRs5j1Rj VYe7AuYkU+oxU3sHKRNvfrX7+rJvszhMa273frfcfTPWDD97+8tGtZHKBDLihFEI rmcwp0h3EADVO5slYCorPeiBTb6P8dPnu0GXOcvD4cOrQ9/XPg77MOfB2Y/uYnUC iJwtztjB4FjnlyLBY5VF0f0KSLGHK2wdcw6XC5kpsLmSn47l0UxcPBzwK6LNTy0U h8h1cQsgumq8jSEukmjg9+PARmflKG4tHMrQMTDIMzK7lPeQor7V88C9ec+8WASe 4F1mwElZBRKtCsrCTF7kT6mSo3TdFRS/0nnx5B2oN+kD7FzRpa8= -----END CERTIFICATE-----Generated at Mon Jun 15 14:14:43 2026 by rpki-client