$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft File: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft (raw, json) Hash identifier: c+l4lZBdN2pBR0svgK1xejVo38WRTG0ITe0fTivJy44= Subject key identifier: AA:39:52:0D:54:AC:6D:B0:1C:CA:BB:41:77:4B:F8:93:46:5F:9B:F9 Authority key identifier: 62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 Certificate issuer: /CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Certificate serial: 6AAC74C472CC89FD6CFA71DEBE8FB1B5A09D12F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:55:54 +0000 Manifest this update: Wed 03 Jun 2026 00:50:54 +0000 Manifest next update: Thu 04 Jun 2026 04:41:54 +0000 Files and hashes: 1: 62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl (hash: hO+EKH4A8XHTam3PuSphSRFimBlJuRJhznd6LV781o8=) 2: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dMpOdFIr/26lFAOFd0rVU1j1+PEZcg+h3DrP/cQE0/8=) 3: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: TPY0QfWu0WIEQ0Ox00Nhc0zNlG2IHpXeSDITO1+Bl9s=) 4: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: R7nG2SifNw+u1p+kwJm+heoPGDPMZn3VsOSr7vY8Y1E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ac:74:c4:72:cc:89:fd:6c:fa:71:de:be:8f:b1:b5:a0:9d:12:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62938E31DEE228ED5627B25FBDA3B79402B4D8A1 Validity Not Before: Jun 3 00:50:54 2026 GMT Not After : Jun 4 04:41:54 2026 GMT Subject: CN=AA39520D54AC6DB01CCABB41774BF893465F9BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:e4:58:69:32:cc:4a:07:df:56:48:f6:e8: dd:c9:f9:9c:fd:19:cc:65:88:54:51:70:f5:d9:82: 02:9e:b5:40:bd:41:13:dc:99:90:65:55:08:a6:b3: bd:b7:41:eb:b7:9a:f3:58:d4:2d:82:7b:fe:1c:3f: 75:d4:e5:29:79:5f:58:d3:6e:4b:be:95:c3:c7:4f: 67:a6:5b:f7:8d:de:43:bc:58:93:9e:b1:13:3b:d3: 5b:0f:52:28:87:c8:d1:fa:38:00:11:3c:25:fb:f2: 56:a5:d5:50:c0:14:6c:3b:df:c8:83:f6:a1:6d:54: b1:b4:e5:71:39:bf:51:d1:2d:79:8d:51:fb:ec:4d: 47:7b:31:2f:c3:49:b6:b2:4d:da:4c:d8:a2:1b:18: ee:12:69:ab:4e:83:6f:fd:a4:49:2f:40:12:95:44: a8:0b:2b:48:f4:31:a5:94:fb:f3:4b:d2:76:25:d3: 10:9d:fc:f6:87:f4:78:79:66:f3:e3:d2:80:d1:7e: 51:41:06:16:d6:d4:3d:e9:b4:5a:1e:9d:62:0f:67: e8:39:3d:e9:f8:be:d6:ba:de:1a:33:8e:45:d1:7c: fc:a7:c4:e0:21:01:97:f5:04:29:b9:a4:7a:b5:e5: 38:06:c7:f2:36:29:d7:38:0b:5e:ba:8c:5e:5e:b4: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:39:52:0D:54:AC:6D:B0:1C:CA:BB:41:77:4B:F8:93:46:5F:9B:F9 X509v3 Authority Key Identifier: keyid:62:93:8E:31:DE:E2:28:ED:56:27:B2:5F:BD:A3:B7:94:02:B4:D8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/62938E31DEE228ED5627B25FBDA3B79402B4D8A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:4f:a2:a9:6e:24:ad:06:89:02:e0:9c:9e:f9:f1:f4:9d: 55:24:f2:a4:53:c6:e8:dc:c4:5b:10:2c:1d:84:19:9c:d5:03: a6:78:86:cf:0f:3f:30:ad:be:2c:54:ec:be:d7:fd:6b:ce:f6: 70:7b:dd:5f:e1:b2:d3:f5:ec:c5:c0:6d:ac:fe:ae:68:37:45: 5f:82:bc:b4:3f:18:0e:29:f7:7a:a4:8b:37:1b:e2:f3:80:77: c5:ca:5e:0f:07:19:69:3e:5c:30:a7:fb:4e:5d:36:86:3c:8b: a2:3e:c2:62:ee:00:3b:cc:d5:d6:a9:52:3f:ca:23:5b:e4:0f: 07:86:d0:ef:b4:83:64:68:8d:d0:11:8b:03:15:85:46:0e:d1: 5c:8e:33:50:9b:fd:5b:90:c0:4b:1e:41:e4:4f:a6:40:03:82: 75:f7:46:ed:8a:d9:99:a8:e2:1d:b0:f4:cd:62:d6:5f:c7:bb: a5:b9:f7:35:39:a0:51:be:25:26:71:74:66:8d:5b:20:35:7f: c0:cd:2a:e4:c0:af:5f:ec:77:46:31:93:5c:7b:fe:20:6d:ae: 99:1e:6b:3d:7a:8a:0d:41:b5:1e:e4:63:32:9a:da:13:6a:13: 32:62:54:fe:7e:6a:0a:5a:74:5d:ac:21:e0:c0:65:73:79:50: 53:0e:8b:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqx0xHLMif1s+nHevo+xtaCdEvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQw MkI0RDhBMTAeFw0yNjA2MDMwMDUwNTRaFw0yNjA2MDQwNDQxNTRaMDMxMTAvBgNV BAMTKEFBMzk1MjBENTRBQzZEQjAxQ0NBQkI0MTc3NEJGODkzNDY1RjlCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsuRYaTLMSgffVkj26N3J+Zz9 GcxliFRRcPXZggKetUC9QRPcmZBlVQims723Qeu3mvNY1C2Ce/4cP3XU5Sl5X1jT bku+lcPHT2emW/eN3kO8WJOesRM701sPUiiHyNH6OAARPCX78lal1VDAFGw738iD 9qFtVLG05XE5v1HRLXmNUfvsTUd7MS/DSbayTdpM2KIbGO4SaatOg2/9pEkvQBKV RKgLK0j0MaWU+/NL0nYl0xCd/PaH9Hh5ZvPj0oDRflFBBhbW1D3ptFoenWIPZ+g5 Pen4vta63hozjkXRfPynxOAhAZf1BCm5pHq15TgGx/I2Kdc4C166jF5etGH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqjlSDVSsbbAcyrtBd0v4k0Zfm/kwHwYDVR0j BBgwFoAUYpOOMd7iKO1WJ7JfvaO3lAK02KEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU3Yjk0NzYtN2UzOC00YzUwLWE2MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFE RUUyMjhFRDU2MjdCMjVGQkRBM0I3OTQwMkI0RDhBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjkzOEUzMURFRTIyOEVENTYyN0IyNUZCREEzQjc5NDAyQjRE OEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvNjI5MzhFMzFERUUyMjhFRDU2MjdCMjVGQkRBM0I3 OTQwMkI0RDhBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFstT6KpbiStBokC4Jye+fH0nVUk8qRTxujc xFsQLB2EGZzVA6Z4hs8PPzCtvixU7L7X/WvO9nB73V/hstP17MXAbaz+rmg3RV+C vLQ/GA4p93qkizcb4vOAd8XKXg8HGWk+XDCn+05dNoY8i6I+wmLuADvM1dapUj/K I1vkDweG0O+0g2RojdARiwMVhUYO0VyOM1Cb/VuQwEseQeRPpkADgnX3Ru2K2Zmo 4h2w9M1i1l/Hu6W59zU5oFG+JSZxdGaNWyA1f8DNKuTAr1/sd0Yxk1x7/iBtrpke az16ig1BtR7kYzKa2hNqEzJiVP5+agpadF2sIeDAZXN5UFMOi2s= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:30 2026 by rpki-client