$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft File: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft (raw, json) Hash identifier: oVEdnsY29slwyOuHa+665eqqXWC0/2P3rt6c/tIfAMc= Subject key identifier: 6B:64:71:BD:C2:44:B7:FE:77:91:94:DF:32:EB:61:E3:F5:AD:33:61 Authority key identifier: 62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 Certificate issuer: /CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Certificate serial: 4BE8863A7CFD10F0D0DE68D4C30662055EBEC2CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft Manifest number: C9 Signing time: Mon 28 Sep 2026 21:51:56 +0000 Manifest this update: Mon 28 Sep 2026 21:46:56 +0000 Manifest next update: Tue 29 Sep 2026 23:19:56 +0000 Files and hashes: 1: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl (hash: Tp9kVoJ6Q0YM+xjlnp8aYXUHkq4WXO9rJ/m7lqEx11Q=) 2: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: R7nG2SifNw+u1p+kwJm+heoPGDPMZn3VsOSr7vY8Y1E=) 3: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dMpOdFIr/26lFAOFd0rVU1j1+PEZcg+h3DrP/cQE0/8=) 4: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: TPY0QfWu0WIEQ0Ox00Nhc0zNlG2IHpXeSDITO1+Bl9s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e8:86:3a:7c:fd:10:f0:d0:de:68:d4:c3:06:62:05:5e:be:c2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Validity Not Before: Sep 28 21:46:56 2026 GMT Not After : Sep 29 23:19:56 2026 GMT Subject: CN=6B6471BDC244B7FE779194DF32EB61E3F5AD3361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:17:1b:d3:59:32:d8:64:52:26:bb:b2:bd: 46:60:d0:3b:dc:56:83:d4:72:e7:80:49:c3:42:eb: 9d:18:ca:d0:65:7a:f2:42:f6:ef:13:1d:87:95:6e: 7d:14:e2:d1:e9:cd:5b:31:64:5c:78:f2:f3:04:af: 6e:a1:bf:32:38:66:9f:85:4e:3d:38:1d:95:17:5e: a9:f8:8f:35:56:ea:72:31:c3:b1:cb:dd:36:ee:46: c5:b0:93:96:f3:6b:8f:b3:21:e8:95:4c:35:eb:29: 60:bc:92:62:a1:89:fb:17:0d:9b:14:b0:fd:9c:37: 53:5f:49:16:3d:d0:c0:ca:70:50:bc:e4:76:36:06: 2d:77:79:0a:f7:cb:1c:ae:31:b2:10:a4:b9:82:59: e0:e1:37:8f:5f:68:0b:72:db:cf:fa:ba:39:d8:11: 12:1d:af:47:10:ba:a5:89:7b:d2:18:f1:0b:35:24: a9:5a:6d:04:17:7e:9b:42:26:f4:d9:cc:70:11:97: ac:fe:34:bf:1d:29:7f:70:6b:7c:35:e3:a0:aa:c4: d0:c5:73:28:17:fc:b8:5d:f4:1e:2b:8b:27:ca:1f: 4d:56:4e:d3:59:3a:8f:37:a7:33:06:d0:ba:e9:5e: ac:f9:9a:f9:dc:bd:51:02:60:86:5b:b6:df:f7:03: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:64:71:BD:C2:44:B7:FE:77:91:94:DF:32:EB:61:E3:F5:AD:33:61 X509v3 Authority Key Identifier: keyid:62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0d:54:6f:52:43:4e:86:21:00:f6:6b:42:d0:ad:12:ed:43: fa:32:d3:d2:69:dc:23:4f:88:fa:54:2b:94:fb:1c:29:00:ed: 75:33:97:70:05:3d:b9:3b:b4:0b:3b:57:bf:33:c3:ca:4f:92: 3e:6f:56:72:4e:0d:49:18:53:1a:e3:0f:26:ca:0a:1a:f8:6e: 62:e0:de:e0:b2:9f:66:d1:48:b9:f5:fa:3a:af:b2:5e:6f:54: ba:80:89:24:90:35:d4:20:3e:a0:d7:b6:55:b0:6c:80:00:b7: f2:b1:45:b6:d6:25:b0:4d:4b:48:b7:b4:78:77:43:de:d2:a3: 5e:23:4b:4c:69:82:4a:ee:ce:b8:89:7b:35:82:ac:c2:02:2c: 57:e2:3f:6c:26:62:35:70:f4:1b:2f:5b:2c:d9:a5:20:dd:2d: 6e:11:8c:01:fa:3f:dc:0c:89:da:87:cc:2c:de:9e:7e:15:ba: 17:91:7a:cb:a3:32:a8:dc:99:80:2a:0a:a5:12:67:94:62:ef: 80:a5:84:f2:08:95:64:a6:47:d1:97:1b:a7:3f:e5:90:b8:7b: d5:45:d3:db:4e:9e:5f:62:fb:9a:d5:6b:73:a3:26:1c:a0:0b: 7f:4e:08:77:1a:a1:8d:c9:6c:68:95:a4:2f:75:e6:ce:1f:ea: 2e:be:b0:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+iGOnz9EPDQ3mjUwwZiBV6+ws4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQw MkI0RDhBMTAeFw0yNjA5MjgyMTQ2NTZaFw0yNjA5MjkyMzE5NTZaMDMxMTAvBgNV BAMTKDZCNjQ3MUJEQzI0NEI3RkU3NzkxOTRERjMyRUI2MUUzRjVBRDMzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrRcb01ky2GRSJruyvUZg0Dvc VoPUcueAScNC650YytBlevJC9u8THYeVbn0U4tHpzVsxZFx48vMEr26hvzI4Zp+F Tj04HZUXXqn4jzVW6nIxw7HL3TbuRsWwk5bza4+zIeiVTDXrKWC8kmKhifsXDZsU sP2cN1NfSRY90MDKcFC85HY2Bi13eQr3yxyuMbIQpLmCWeDhN49faAty28/6ujnY ERIdr0cQuqWJe9IY8Qs1JKlabQQXfptCJvTZzHARl6z+NL8dKX9wa3w146CqxNDF cygX/Lhd9B4riyfKH01WTtNZOo83pzMG0LrpXqz5mvncvVECYIZbtt/3A+xfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa2RxvcJEt/53kZTfMuth4/WtM2EwHwYDVR0j BBgwFoAUYpOOMd7iKO1WJ7JfvaO3lAK02KEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU3Yjk0NzYtN2UzOC00YzUwLWE2MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFE RUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQwMkI0RDhBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjkzOEUzMURFRTIyOEVENTYyN0IyNUZCREEzQjc5NDAyQjRE OEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3 OTQwMkI0RDhBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4NVG9SQ06GIQD2a0LQrRLtQ/oy09Jp3CNP iPpUK5T7HCkA7XUzl3AFPbk7tAs7V78zw8pPkj5vVnJODUkYUxrjDybKChr4bmLg 3uCyn2bRSLn1+jqvsl5vVLqAiSSQNdQgPqDXtlWwbIAAt/KxRbbWJbBNS0i3tHh3 Q97So14jS0xpgkruzriJezWCrMICLFfiP2wmYjVw9BsvWyzZpSDdLW4RjAH6P9wM idqHzCzenn4VuheResujMqjcmYAqCqUSZ5Ri74ClhPIIlWSmR9GXG6c/5ZC4e9VF 09tOnl9i+5rVa3OjJhygC39OCHcaoY3JbGiVpC915s4f6i6+sGg= -----END CERTIFICATE-----Generated at Tue Sep 29 01:21:00 2026 by rpki-client