$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft File: 62531E8BF877F9190055D7D857C21ECBDCFAC237.mft (raw, json) Hash identifier: SBVXaXXXR0DtTbAAVh7fI4Py1N3DS+5aV5M8M715mu0= Subject key identifier: D7:D9:C7:AA:61:05:17:17:78:F1:05:64:B7:2E:41:A7:B4:00:1E:C5 Authority key identifier: 62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 Certificate issuer: /CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Certificate serial: 70DF830413E304AA38BCC569A14D6A6DB5875B91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 21:55:02 +0000 Manifest this update: Fri 17 Jul 2026 21:50:02 +0000 Manifest next update: Sat 18 Jul 2026 23:42:02 +0000 Files and hashes: 1: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (hash: RzRSXdrIXGBvVPeHVDu3wO8XEsc3GFR1CCktt00WYd8=) 2: 3130332e3135332e36312e302f32342d3234203d3e20313430343536.roa (hash: AqK7gho3oaBdn6U0bSz26oZHpcnwMKNpGmX9XBUu4+k=) 3: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (hash: SOPJ6LptzafhaHhbYxOp6YPrbTR/9ZdExcQFIaJyuIA=) 4: 62531E8BF877F9190055D7D857C21ECBDCFAC237.crl (hash: 2Ekvn7MmvkvLZ26G7v/Sw2BWZYFj20I6Y01BdpKNO2o=) 5: 3130332e3135332e36302e302f32342d3234203d3e20313430343536.roa (hash: N+subOKk1O0aLwezy/FI1acpxPEti6iKIkHeL/X8z5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:df:83:04:13:e3:04:aa:38:bc:c5:69:a1:4d:6a:6d:b5:87:5b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Validity Not Before: Jul 17 21:50:02 2026 GMT Not After : Jul 18 23:42:02 2026 GMT Subject: CN=D7D9C7AA6105171778F10564B72E41A7B4001EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:a7:72:e8:e4:35:92:10:ee:84:7a:d1:d8: cf:1d:ad:3f:24:80:90:b8:fa:5f:e2:cb:ae:a8:e3: a7:d7:3e:fc:18:c7:58:87:83:38:e1:ab:79:4f:51: 9f:12:79:7b:dc:33:8d:ef:eb:84:92:da:95:ca:c2: 31:9c:5b:95:15:39:8d:b5:c1:8a:ba:07:82:e9:6e: 45:09:af:d7:0c:a5:ba:75:2a:99:dc:72:d4:77:c2: 62:ea:6c:cd:1c:0e:57:a5:62:3a:f8:5a:67:60:77: dd:d2:39:ba:2d:06:2b:f2:23:b4:f9:ad:bb:11:4c: a2:d7:77:07:48:2e:5f:3f:e8:36:4c:e2:c8:74:26: 43:26:90:23:9f:ab:fc:a8:50:de:20:ea:05:e1:10: ea:e7:47:12:be:e3:c2:35:e7:ad:72:dc:c2:55:09: db:33:6e:9c:dd:51:ee:71:98:4a:15:ae:97:9d:36: 31:66:65:31:ca:6f:01:74:d0:61:48:23:4a:c7:82: 65:55:3a:56:fd:fb:b7:ef:ac:67:ab:66:2f:9d:36: 97:d1:24:51:74:f4:76:77:11:af:2e:f0:49:c0:9e: c0:ad:a6:74:bf:5b:ba:01:82:02:a3:73:96:1b:12: 87:81:3c:4e:93:46:41:35:0a:1b:e5:98:bb:00:26: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D9:C7:AA:61:05:17:17:78:F1:05:64:B7:2E:41:A7:B4:00:1E:C5 X509v3 Authority Key Identifier: keyid:62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:79:42:f8:73:4a:4e:34:e7:fc:e7:99:d5:6c:5d:bb:34:fc: 9d:47:86:90:81:a4:e0:fe:65:78:25:d3:73:ff:d5:40:82:24: d1:5d:5c:85:17:c5:84:58:74:e9:16:31:98:8a:4f:53:a9:4f: 93:98:8a:36:51:26:56:b3:eb:25:86:13:16:3a:d4:ad:c3:c8: a8:fa:e2:d1:95:73:34:17:d9:0d:bd:bd:2e:d2:fc:a5:c2:ab: a6:fb:9e:c4:b0:91:fe:bf:51:b7:21:0a:9c:f6:af:f0:52:2c: 7e:c5:86:2d:6f:4b:ac:53:03:de:6a:80:e2:fe:29:be:71:85: e4:2f:20:81:f7:ea:4a:03:33:79:6a:88:dd:88:cd:28:6d:98: 8d:87:09:2c:19:53:4d:26:90:28:fd:c0:b6:81:23:73:35:03: 2b:cb:1c:88:f2:70:f0:94:81:fa:dd:ef:3d:66:d5:b2:07:5e: ba:62:23:fc:de:a7:0e:7a:6d:8c:90:3b:72:cb:0c:9b:35:9f: a8:78:ba:e6:ab:2d:64:45:26:d2:c3:0b:b8:44:e7:8f:53:b6: 8f:a7:92:2e:f6:2d:e4:7c:2f:94:bc:34:3b:cb:b8:12:98:87: f3:ab:bf:f9:76:00:a7:a2:99:d6:84:b7:9a:06:12:b5:96:73: 39:18:a4:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcN+DBBPjBKo4vMVpoU1qbbWHW5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JE Q0ZBQzIzNzAeFw0yNjA3MTcyMTUwMDJaFw0yNjA3MTgyMzQyMDJaMDMxMTAvBgNV BAMTKEQ3RDlDN0FBNjEwNTE3MTc3OEYxMDU2NEI3MkU0MUE3QjQwMDFFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qqdy6OQ1khDuhHrR2M8drT8k gJC4+l/iy66o46fXPvwYx1iHgzjhq3lPUZ8SeXvcM43v64SS2pXKwjGcW5UVOY21 wYq6B4LpbkUJr9cMpbp1KpncctR3wmLqbM0cDlelYjr4Wmdgd93SObotBivyI7T5 rbsRTKLXdwdILl8/6DZM4sh0JkMmkCOfq/yoUN4g6gXhEOrnRxK+48I1561y3MJV CdszbpzdUe5xmEoVrpedNjFmZTHKbwF00GFII0rHgmVVOlb9+7fvrGerZi+dNpfR JFF09HZ3Ea8u8EnAnsCtpnS/W7oBggKjc5YbEoeBPE6TRkE1ChvlmLsAJkYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU19nHqmEFFxd48QVkty5Bp7QAHsUwHwYDVR0j BBgwFoAUYlMei/h3+RkAVdfYV8Iey9z6wjcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE5NTIwZmQtOGRlNS00YTY5LTg1ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJG ODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JEQ0ZBQzIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjUzMUU4QkY4NzdGOTE5MDA1NUQ3RDg1N0MyMUVDQkRDRkFD MjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE5NTIwZmQtOGRlNS00YTY5LTg1 ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFF Q0JEQ0ZBQzIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADB5QvhzSk405/znmdVsXbs0/J1HhpCBpOD+ ZXgl03P/1UCCJNFdXIUXxYRYdOkWMZiKT1OpT5OYijZRJlaz6yWGExY61K3DyKj6 4tGVczQX2Q29vS7S/KXCq6b7nsSwkf6/UbchCpz2r/BSLH7Fhi1vS6xTA95qgOL+ Kb5xheQvIIH36koDM3lqiN2IzShtmI2HCSwZU00mkCj9wLaBI3M1AyvLHIjycPCU gfrd7z1m1bIHXrpiI/zepw56bYyQO3LLDJs1n6h4uuarLWRFJtLDC7hE549Tto+n ki72LeR8L5S8NDvLuBKYh/Orv/l2AKeimdaEt5oGErWWczkYpAI= -----END CERTIFICATE-----Generated at Sat Jul 18 07:15:47 2026 by rpki-client