$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft File: 62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json) Hash identifier: 9m6e69v6CLxtf+sxoLEdrdE0RiArrnxtMDtZL/IYekI= Subject key identifier: A9:3E:9D:99:D9:20:D8:3D:4F:DD:23:5D:41:05:D4:74:56:61:1F:65 Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90 Certificate serial: 5A94CE876593987911FB9AB50EE3A3E12FBF24B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft Manifest number: 0134 Signing time: Tue 21 Apr 2026 20:30:52 +0000 Manifest this update: Tue 21 Apr 2026 20:25:52 +0000 Manifest next update: Fri 24 Apr 2026 23:51:52 +0000 Files and hashes: 1: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: VMI1GBk9dTc65EfVkH+C5R2IJFZR9QlYekLAz2xLPZU=) 2: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: /o/cyoWQ33H0XdVpB564UefArVEwZoJies3mfU0cuOY=) 3: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: b9/eaMWjy2vKRrDC1ZqHXCTzkaUl6nUCiifmyR0bhv0=) 4: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: xeraR1/wll53tMLyVMceOA6ym3r6pHZ/xzb1tYl21wM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:94:ce:87:65:93:98:79:11:fb:9a:b5:0e:e3:a3:e1:2f:bf:24:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90 Validity Not Before: Apr 21 20:25:52 2026 GMT Not After : Apr 24 23:51:52 2026 GMT Subject: CN=A93E9D99D920D83D4FDD235D4105D47456611F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:f4:bb:3e:a1:6b:21:a5:75:20:84:d4:da: 9b:cc:9f:4f:ed:ac:b0:30:cb:eb:04:1a:2f:f9:3d: a9:b3:31:92:e0:fa:ef:74:48:1b:e2:8d:77:c4:c9: 21:1f:c7:73:dd:af:ff:16:f0:56:81:89:6d:4c:d0: d4:44:4c:60:4e:90:6d:a4:17:8a:cd:b9:33:41:0b: be:76:0b:d7:69:c2:a4:c9:2f:db:18:ac:71:d7:51: f8:2a:09:75:eb:e1:69:24:0f:88:2d:20:9e:14:ca: ae:24:e6:43:e7:c1:42:81:1d:39:43:c7:52:f7:ea: 35:a2:a6:de:ef:3d:7c:bf:b9:1a:95:a6:81:5c:39: 50:fe:e3:5a:63:29:db:0a:04:7c:48:a6:93:e4:eb: 3c:c7:95:a8:ed:60:f4:f9:d7:f5:f9:dd:8e:6b:ea: 18:d6:55:49:b3:83:cf:0f:07:de:81:ac:d6:f8:19: 78:e9:09:b0:9c:06:f2:b2:e3:3e:2c:82:0c:b8:f3: 62:db:a4:47:73:8a:f9:73:44:16:10:02:c5:11:be: 1c:79:f8:0d:d0:22:7f:3c:01:6f:dd:74:e5:9c:96: 3e:5b:71:82:80:ea:96:29:6d:07:aa:41:9d:19:03: 46:c2:1e:a9:c8:f2:71:55:d0:c9:0e:7a:51:37:b8: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3E:9D:99:D9:20:D8:3D:4F:DD:23:5D:41:05:D4:74:56:61:1F:65 X509v3 Authority Key Identifier: keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4f:4f:84:f7:97:73:62:b2:20:53:14:0b:f2:68:57:80:30: a9:5d:43:41:a9:1a:7a:64:3b:7e:d1:99:7b:dd:bf:30:f8:d6: f8:99:3f:1b:25:ff:5e:c9:ed:d2:ad:fe:02:f2:7a:f5:46:5d: 40:f5:ae:3e:43:19:5f:16:88:b9:14:0e:69:e1:ac:9c:6a:9c: ff:58:b7:25:ea:a6:ec:b5:50:83:b0:68:83:6d:14:8e:c4:7e: 1b:87:f7:4e:36:54:10:92:ff:43:03:a9:dc:ad:52:e7:e1:82: 35:e5:be:5f:5d:22:83:01:68:e4:aa:e2:9d:0a:4d:b8:8e:62: 0c:6e:3e:ad:8a:25:c8:cf:f8:17:f1:6c:24:e3:d4:86:60:d0: 33:d2:ab:80:64:b3:da:56:3f:64:b7:73:a8:48:04:ba:27:05: 76:d8:01:c4:3a:a7:a3:92:ed:13:a1:64:bb:d6:39:f1:58:0f: e1:62:4b:4d:67:68:ef:a9:a4:95:19:98:4f:83:13:c4:dd:f6: ca:8f:02:c6:d2:56:28:bb:a0:48:d5:ce:8d:38:ac:1e:f2:64: d0:d4:92:64:91:90:22:53:42:9c:90:84:a9:f1:42:43:21:3e: 8c:28:0e:92:99:1c:4b:81:b9:58:8a:7f:f7:ab:08:dd:db:16: 68:70:34:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpTOh2WTmHkR+5q1DuOj4S+/JLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3 OTgyMEE5MDAeFw0yNjA0MjEyMDI1NTJaFw0yNjA0MjQyMzUxNTJaMDMxMTAvBgNV BAMTKEE5M0U5RDk5RDkyMEQ4M0Q0RkREMjM1RDQxMDVENDc0NTY2MTFGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqfS7PqFrIaV1IITU2pvMn0/t rLAwy+sEGi/5PamzMZLg+u90SBvijXfEySEfx3Pdr/8W8FaBiW1M0NRETGBOkG2k F4rNuTNBC752C9dpwqTJL9sYrHHXUfgqCXXr4WkkD4gtIJ4Uyq4k5kPnwUKBHTlD x1L36jWipt7vPXy/uRqVpoFcOVD+41pjKdsKBHxIppPk6zzHlajtYPT51/X53Y5r 6hjWVUmzg88PB96BrNb4GXjpCbCcBvKy4z4sggy482LbpEdzivlzRBYQAsURvhx5 +A3QIn88AW/ddOWclj5bcYKA6pYpbQeqQZ0ZA0bCHqnI8nFV0MkOelE3uJxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqT6dmdkg2D1P3SNdQQXUdFZhH2UwHwYDVR0j BBgwFoAUYvccdadStFrktRpOcBASSXmCCpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMC82MkY3MUM3NUE3 NTJCNDVBRTRCNTFBNEU3MDEwMTI0OTc5ODIwQTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3OTgy MEE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEy NDk3OTgyMEE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtPT4T3l3NisiBTFAvyaFeAMKldQ0GpGnpk O37RmXvdvzD41viZPxsl/17J7dKt/gLyevVGXUD1rj5DGV8WiLkUDmnhrJxqnP9Y tyXqpuy1UIOwaINtFI7EfhuH9042VBCS/0MDqdytUufhgjXlvl9dIoMBaOSq4p0K TbiOYgxuPq2KJcjP+BfxbCTj1IZg0DPSq4Bks9pWP2S3c6hIBLonBXbYAcQ6p6OS 7ROhZLvWOfFYD+FiS01naO+ppJUZmE+DE8Td9sqPAsbSVii7oEjVzo04rB7yZNDU kmSRkCJTQpyQhKnxQkMhPowoDpKZHEuBuViKf/erCN3bFmhwNNk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:54 2026 by rpki-client