$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft File: 62531E8BF877F9190055D7D857C21ECBDCFAC237.mft (raw, json) Hash identifier: vkBb1QtrdCRuukaiCPAMPej9031b+DhgxsDcnt29u6s= Subject key identifier: 85:AE:09:8D:68:CF:EE:95:3F:23:C0:D0:F1:AB:AB:26:72:C7:5A:C5 Authority key identifier: 62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 Certificate issuer: /CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Certificate serial: 3C7D7837A18DBACA20EE0A266607D017009C7D0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:11:25 +0000 Manifest this update: Tue 02 Jun 2026 09:06:25 +0000 Manifest next update: Wed 03 Jun 2026 09:31:25 +0000 Files and hashes: 1: 3130332e3135332e36302e302f32342d3234203d3e20313430343536.roa (hash: N+subOKk1O0aLwezy/FI1acpxPEti6iKIkHeL/X8z5w=) 2: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (hash: SOPJ6LptzafhaHhbYxOp6YPrbTR/9ZdExcQFIaJyuIA=) 3: 62531E8BF877F9190055D7D857C21ECBDCFAC237.crl (hash: Esxo9APkSsjLTEx9+ibUOStyjVUGFc9znH41cxAG3O0=) 4: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (hash: RzRSXdrIXGBvVPeHVDu3wO8XEsc3GFR1CCktt00WYd8=) 5: 3130332e3135332e36312e302f32342d3234203d3e20313430343536.roa (hash: AqK7gho3oaBdn6U0bSz26oZHpcnwMKNpGmX9XBUu4+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7d:78:37:a1:8d:ba:ca:20:ee:0a:26:66:07:d0:17:00:9c:7d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Validity Not Before: Jun 2 09:06:25 2026 GMT Not After : Jun 3 09:31:25 2026 GMT Subject: CN=85AE098D68CFEE953F23C0D0F1ABAB2672C75AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:f2:39:9e:c2:85:9c:fa:5a:71:8c:a5:14: de:02:06:a5:27:60:7b:49:67:ea:4a:69:dc:2b:0b: e2:2e:84:55:13:ec:3c:08:ac:d2:1f:2d:d8:5e:fa: 49:ae:4c:14:22:3f:12:d6:77:da:da:1a:15:6b:d3: f4:bc:66:c6:cb:96:d1:2a:1f:f0:44:b5:b6:ba:ce: a1:82:6e:87:c5:42:95:0f:f1:68:be:3a:e4:97:e0: 72:e8:93:f4:c4:f5:ed:1f:7b:73:5c:87:69:2b:39: 92:0e:f9:36:d7:21:3b:1a:b5:5d:3b:81:ac:d6:61: e7:02:e4:6c:88:03:29:6b:80:b9:05:a0:0f:02:b4: da:c1:f1:06:a2:2c:6c:15:6a:da:93:d9:d4:41:c9: 43:17:44:b6:41:00:93:03:66:97:81:31:aa:1a:0c: 45:c0:c0:3c:6e:05:bc:58:7f:35:e4:f4:1d:9f:01: 49:83:0e:c3:54:a8:28:1f:c5:36:b3:e8:b6:ca:d4: 05:dd:a7:84:02:4d:ca:6b:9b:c0:54:9d:45:a8:ac: c4:74:c6:61:95:54:be:05:b4:5e:39:00:f4:e2:6f: 7d:eb:f1:16:65:73:aa:0d:e2:74:c4:fc:7a:e3:38: c2:e5:fb:80:4c:c3:ab:ea:69:79:dd:36:6e:b9:9f: ff:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AE:09:8D:68:CF:EE:95:3F:23:C0:D0:F1:AB:AB:26:72:C7:5A:C5 X509v3 Authority Key Identifier: keyid:62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:80:18:73:a5:ea:cf:72:6b:ea:e2:cb:20:0f:3c:04:bc:f5: 37:41:94:82:35:9d:72:c5:71:c9:92:7b:b0:56:09:df:ff:4d: 08:cf:56:26:0e:fc:39:7a:38:19:b4:2e:bc:30:87:62:fd:3d: 9e:e9:36:64:ec:64:e5:b6:2e:48:70:74:cd:43:e0:80:c7:fe: 9f:8c:25:d7:3a:9e:c4:c6:a8:b5:c5:eb:86:ad:49:21:a4:ea: 7a:ba:17:4b:30:53:94:b6:ca:9a:b1:83:99:77:eb:af:7b:36: fb:df:35:42:4d:a3:a9:23:1c:9e:dc:82:a9:42:e6:2c:84:46: 80:30:2e:31:b8:b1:af:68:07:16:47:2a:c5:46:72:f9:61:9d: fb:de:d6:c0:64:ab:97:25:d4:b9:fb:8d:21:41:1d:77:6a:04: 59:67:19:d7:ca:87:cd:9a:80:8a:91:be:07:5d:aa:19:0c:a7: 71:0f:2a:97:5e:69:ae:99:af:5a:2f:11:9c:77:8d:70:05:59: 46:75:e2:2f:e6:4a:aa:64:fd:a0:ec:05:89:a6:e2:19:82:5c: 84:d1:82:a4:ad:6c:0b:1f:1b:e6:f2:d7:26:90:2a:6f:be:46: 0b:a4:d5:bb:38:44:2d:ed:e2:66:e1:2d:d2:c1:09:5f:dc:ad: 46:b8:16:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPH14N6GNusog7gomZgfQFwCcfQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JE Q0ZBQzIzNzAeFw0yNjA2MDIwOTA2MjVaFw0yNjA2MDMwOTMxMjVaMDMxMTAvBgNV BAMTKDg1QUUwOThENjhDRkVFOTUzRjIzQzBEMEYxQUJBQjI2NzJDNzVBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhfI5nsKFnPpacYylFN4CBqUn YHtJZ+pKadwrC+IuhFUT7DwIrNIfLdhe+kmuTBQiPxLWd9raGhVr0/S8ZsbLltEq H/BEtba6zqGCbofFQpUP8Wi+OuSX4HLok/TE9e0fe3Nch2krOZIO+TbXITsatV07 gazWYecC5GyIAylrgLkFoA8CtNrB8QaiLGwVatqT2dRByUMXRLZBAJMDZpeBMaoa DEXAwDxuBbxYfzXk9B2fAUmDDsNUqCgfxTaz6LbK1AXdp4QCTcprm8BUnUWorMR0 xmGVVL4FtF45APTib33r8RZlc6oN4nTE/HrjOMLl+4BMw6vqaXndNm65n//7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUha4JjWjP7pU/I8DQ8aurJnLHWsUwHwYDVR0j BBgwFoAUYlMei/h3+RkAVdfYV8Iey9z6wjcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE5NTIwZmQtOGRlNS00YTY5LTg1ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJG ODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JEQ0ZBQzIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjUzMUU4QkY4NzdGOTE5MDA1NUQ3RDg1N0MyMUVDQkRDRkFD MjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE5NTIwZmQtOGRlNS00YTY5LTg1 ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFF Q0JEQ0ZBQzIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWAGHOl6s9ya+riyyAPPAS89TdBlII1nXLF ccmSe7BWCd//TQjPViYO/Dl6OBm0Lrwwh2L9PZ7pNmTsZOW2LkhwdM1D4IDH/p+M Jdc6nsTGqLXF64atSSGk6nq6F0swU5S2ypqxg5l36697NvvfNUJNo6kjHJ7cgqlC 5iyERoAwLjG4sa9oBxZHKsVGcvlhnfve1sBkq5cl1Ln7jSFBHXdqBFlnGdfKh82a gIqRvgddqhkMp3EPKpdeaa6Zr1ovEZx3jXAFWUZ14i/mSqpk/aDsBYmm4hmCXITR gqStbAsfG+by1yaQKm++Rguk1bs4RC3t4mbhLdLBCV/crUa4FsI= -----END CERTIFICATE-----Generated at Tue Jun 2 22:08:08 2026 by rpki-client