$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft File: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft (raw, json) Hash identifier: T4E6XKBioVcY109qBq/R3Er3/p3uUxV/fTetwl2R+zg= Subject key identifier: 7A:4C:3E:9E:EC:D0:2C:06:82:E3:9D:34:E5:11:D2:59:F1:30:15:EA Authority key identifier: 62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 Certificate issuer: /CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Certificate serial: 226078295000C536FCB8572D970F42A4C40B6D29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 11:15:16 +0000 Manifest this update: Mon 20 Jul 2026 11:10:16 +0000 Manifest next update: Tue 21 Jul 2026 14:27:16 +0000 Files and hashes: 1: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dMpOdFIr/26lFAOFd0rVU1j1+PEZcg+h3DrP/cQE0/8=) 2: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl (hash: pGQ2ynjxyBgt863oedWYaAoSCvRwcVego7PqHTENDLc=) 3: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: R7nG2SifNw+u1p+kwJm+heoPGDPMZn3VsOSr7vY8Y1E=) 4: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: TPY0QfWu0WIEQ0Ox00Nhc0zNlG2IHpXeSDITO1+Bl9s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:60:78:29:50:00:c5:36:fc:b8:57:2d:97:0f:42:a4:c4:0b:6d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Validity Not Before: Jul 20 11:10:16 2026 GMT Not After : Jul 21 14:27:16 2026 GMT Subject: CN=7A4C3E9EECD02C0682E39D34E511D259F13015EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:78:f0:67:93:39:f3:fe:27:3e:a0:56:36: 56:57:40:9f:dc:62:ad:75:ef:50:a6:76:4d:bb:17: 63:53:4d:09:7e:c8:2a:8f:a7:5b:3c:1b:17:cb:01: 9d:17:13:f7:be:de:1d:b7:a8:df:06:0d:85:aa:bf: 61:0c:79:95:18:f0:6e:fe:24:63:47:7d:b6:da:40: 68:45:38:4a:30:75:c7:ed:a7:fb:db:ca:51:37:44: ea:99:89:9b:81:00:b6:15:c7:21:12:52:65:0e:a3: ab:48:84:9e:8d:eb:cc:4c:53:c6:8d:0f:d5:01:c3: 3c:fe:d8:77:eb:6b:a9:39:af:46:11:61:1b:1d:5c: df:dc:62:df:24:b8:67:d5:03:21:f1:6f:6a:5f:3b: 3d:f0:b2:c1:df:e4:16:44:7e:0f:b8:8d:11:98:21: a0:21:4f:91:20:32:63:6b:38:6f:f8:11:61:bd:dd: 23:7b:7f:91:d7:ec:6c:d1:19:57:e0:51:dd:d1:68: 65:aa:e0:bc:59:4f:aa:cc:c4:26:25:f7:8a:a9:9f: f4:a2:56:73:57:ad:08:2b:ec:df:e2:dd:c3:90:a0: f8:40:fc:fb:05:db:f8:6c:a8:f3:a3:e0:03:c2:fc: 16:ef:88:a2:2f:b6:9d:44:c5:1d:45:1c:b3:8d:5b: b6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4C:3E:9E:EC:D0:2C:06:82:E3:9D:34:E5:11:D2:59:F1:30:15:EA X509v3 Authority Key Identifier: keyid:62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c9:2e:c1:fc:d9:d4:2b:a8:d6:ee:d5:55:8f:c5:76:9c:d7: 54:b0:07:3f:bd:ae:96:cc:c8:37:36:89:05:21:a3:c7:65:ab: da:9f:3a:65:97:5a:9a:06:16:79:05:aa:47:ee:d1:b4:e7:16: fc:27:53:63:fa:34:b3:71:f1:7b:6a:54:6d:7f:50:ce:b0:05: c9:64:e2:7c:20:ce:9b:9b:ac:d0:6b:56:16:88:06:a1:09:53: 0c:12:c1:bc:af:e3:3a:8d:91:4a:7f:0b:85:ab:ae:b0:64:e7: ed:34:de:c3:61:26:2e:79:b0:2a:fc:66:d2:7d:b1:cb:e3:ca: 72:df:a2:92:bc:7b:9e:a9:bc:bf:13:50:22:81:bb:a5:85:71: 67:5f:d9:30:31:fc:bd:58:da:e1:88:43:5f:c6:95:96:91:9c: 79:96:2d:71:b1:b5:2e:07:32:65:c0:fa:3a:c3:f7:d5:6c:d9: 5e:81:1c:aa:9c:d9:df:63:6d:93:48:bd:c0:0e:46:e1:59:9b: 79:85:30:14:df:a2:e3:f8:e2:34:c4:db:f8:38:db:6f:e0:7b: 17:5c:46:2d:bc:b9:d2:4f:01:29:25:a3:06:f1:44:84:ee:df: 1f:ed:c4:40:5c:1f:35:3b:f4:9e:17:4d:52:1c:61:4d:d1:88: 8b:1e:3c:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImB4KVAAxTb8uFctlw9CpMQLbSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQw MkI0RDhBMTAeFw0yNjA3MjAxMTEwMTZaFw0yNjA3MjExNDI3MTZaMDMxMTAvBgNV BAMTKDdBNEMzRTlFRUNEMDJDMDY4MkUzOUQzNEU1MTFEMjU5RjEzMDE1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQc3jwZ5M58/4nPqBWNlZXQJ/c Yq1171Cmdk27F2NTTQl+yCqPp1s8GxfLAZ0XE/e+3h23qN8GDYWqv2EMeZUY8G7+ JGNHfbbaQGhFOEowdcftp/vbylE3ROqZiZuBALYVxyESUmUOo6tIhJ6N68xMU8aN D9UBwzz+2Hfra6k5r0YRYRsdXN/cYt8kuGfVAyHxb2pfOz3wssHf5BZEfg+4jRGY IaAhT5EgMmNrOG/4EWG93SN7f5HX7GzRGVfgUd3RaGWq4LxZT6rMxCYl94qpn/Si VnNXrQgr7N/i3cOQoPhA/PsF2/hsqPOj4APC/BbviKIvtp1ExR1FHLONW7ZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUekw+nuzQLAaC45005RHSWfEwFeowHwYDVR0j BBgwFoAUYpOOMd7iKO1WJ7JfvaO3lAK02KEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU3Yjk0NzYtN2UzOC00YzUwLWE2MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFE RUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQwMkI0RDhBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjkzOEUzMURFRTIyOEVENTYyN0IyNUZCREEzQjc5NDAyQjRE OEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3 OTQwMkI0RDhBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbJLsH82dQrqNbu1VWPxXac11SwBz+9rpbM yDc2iQUho8dlq9qfOmWXWpoGFnkFqkfu0bTnFvwnU2P6NLNx8XtqVG1/UM6wBclk 4nwgzpubrNBrVhaIBqEJUwwSwbyv4zqNkUp/C4WrrrBk5+003sNhJi55sCr8ZtJ9 scvjynLfopK8e56pvL8TUCKBu6WFcWdf2TAx/L1Y2uGIQ1/GlZaRnHmWLXGxtS4H MmXA+jrD99Vs2V6BHKqc2d9jbZNIvcAORuFZm3mFMBTfouP44jTE2/g422/gexdc Ri28udJPASklowbxRITu3x/txEBcHzU79J4XTVIcYU3RiIsePB8= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:41 2026 by rpki-client