$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft File: 62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft (raw, json) Hash identifier: qAtmTTC7RgaxeLpkAaWr/CDNReTv997Csnr4YZs9zVI= Subject key identifier: A9:D1:D9:D7:53:02:78:FD:65:63:A1:DA:E2:EC:2E:06:6D:5D:65:42 Authority key identifier: 62:C5:A0:28:9D:A4:18:08:F9:2D:77:9B:1E:B9:5E:02:7D:BE:14:C3 Certificate issuer: /CN=62C5A0289DA41808F92D779B1EB95E027DBE14C3 Certificate serial: 5A7E1AF44B89832625933F8DAB30A9AA15AC9EF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft Manifest number: DE Signing time: Thu 15 Oct 2026 06:28:04 +0000 Manifest this update: Thu 15 Oct 2026 06:23:04 +0000 Manifest next update: Fri 16 Oct 2026 07:04:04 +0000 Files and hashes: 1: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: U59FIe3i4pxz4GAu82OkBppPPwOYvcD39wfDI1neTlA=) 2: 62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl (hash: UD0WVLe9c5kMiP96o3geEFeRMdR8TPrQ0d8p1HPhTkc=) 3: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: TLLFYxm3onSkry2YGDxevUL55V3n3RHX/1N7Y+FOZ9w=) 4: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: mcWbJEiXl5it2u7QuEmPSl23YbD8dPwCyZHEOHxWrkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7e:1a:f4:4b:89:83:26:25:93:3f:8d:ab:30:a9:aa:15:ac:9e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62C5A0289DA41808F92D779B1EB95E027DBE14C3 Validity Not Before: Oct 15 06:23:04 2026 GMT Not After : Oct 16 07:04:04 2026 GMT Subject: CN=A9D1D9D7530278FD6563A1DAE2EC2E066D5D6542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:d0:48:e3:d4:ce:e5:2d:a7:47:3a:31:ce: fc:c3:35:ce:16:03:e5:b1:f2:5d:13:89:71:d0:52: 62:4d:52:b7:91:b8:d5:0d:dd:31:00:92:08:bc:8f: 18:78:20:69:ba:d6:c7:cc:42:09:ed:a0:6f:de:18: 06:a4:90:a6:70:07:20:bc:00:89:2e:f7:f7:fb:4b: cf:76:de:59:6d:aa:cd:b5:97:42:bc:a1:a6:46:8e: 9c:91:43:aa:d3:f1:bd:31:cb:8a:60:99:2e:99:58: d2:d5:ab:95:1b:38:a5:3d:ee:56:fa:2a:1f:10:18: f0:ec:fb:19:b4:8a:40:69:81:17:8e:bf:66:f5:88: 56:c8:51:ed:55:1f:79:83:1c:43:f0:98:34:57:de: a6:85:a2:6b:65:b3:a7:7d:a2:9f:2f:66:00:89:0c: 10:d1:2e:03:49:b1:ed:4d:43:dc:85:30:86:f2:57: e9:d9:02:d9:fb:b1:6e:06:e2:b7:8a:ce:0b:dd:63: b6:01:0f:ff:7e:83:88:2d:c0:7e:bd:2a:3e:6c:1a: 8a:ad:b0:19:e8:c2:e6:66:6e:db:f3:74:b1:ec:c4: 1e:3b:92:ba:a3:3c:94:6f:0e:96:09:af:cd:cc:67: ba:86:62:5d:a8:28:3f:14:90:4a:a1:bf:d5:b3:43: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D1:D9:D7:53:02:78:FD:65:63:A1:DA:E2:EC:2E:06:6D:5D:65:42 X509v3 Authority Key Identifier: keyid:62:C5:A0:28:9D:A4:18:08:F9:2D:77:9B:1E:B9:5E:02:7D:BE:14:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:84:ef:fb:5a:70:11:08:34:a7:11:97:96:fb:e1:bb:b3:5b: ef:d0:b2:11:98:92:78:34:16:8a:6a:a2:ff:1b:df:95:66:68: 05:94:ff:25:d6:8b:4b:d5:81:36:b1:e4:df:84:36:30:65:85: 3d:49:d4:b1:02:56:4b:f3:f0:d0:6f:ea:b0:e4:58:45:1f:5f: 30:4f:1c:96:68:58:af:b9:c2:0a:0c:9d:b7:4e:44:ef:e5:6a: 77:b1:f2:33:5e:22:8b:69:3f:67:ca:4f:e9:18:99:0f:3d:42: 17:e1:dc:65:99:6e:c6:8d:9b:16:40:e2:78:ca:b7:ee:6e:dd: c1:ff:ff:43:76:47:72:c6:c1:18:18:68:de:bf:62:30:d5:77: 52:d6:dc:a2:ef:34:5f:4d:cd:33:92:67:d4:2a:8b:fc:bb:c3: 5d:62:ee:5f:30:f0:0d:6f:53:d0:e9:c9:79:85:0a:1d:1a:fd: 2d:9e:00:35:8d:09:44:1e:4f:26:06:90:6c:ef:4f:a6:bd:bb: 73:be:09:1b:5d:8f:19:24:68:08:d5:b1:94:d0:cd:1d:01:da: 67:a9:0a:87:84:15:a9:ca:ee:19:af:77:60:40:0c:75:3c:c3: 26:64:88:ea:c1:f0:89:fd:a4:71:9a:a7:83:8a:ea:4b:54:0d: a3:33:25:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWn4a9EuJgyYlkz+NqzCpqhWsnvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJDNUEwMjg5REE0MTgwOEY5MkQ3NzlCMUVCOTVFMDI3 REJFMTRDMzAeFw0yNjEwMTUwNjIzMDRaFw0yNjEwMTYwNzA0MDRaMDMxMTAvBgNV BAMTKEE5RDFEOUQ3NTMwMjc4RkQ2NTYzQTFEQUUyRUMyRTA2NkQ1RDY1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzNBI49TO5S2nRzoxzvzDNc4W A+Wx8l0TiXHQUmJNUreRuNUN3TEAkgi8jxh4IGm61sfMQgntoG/eGAakkKZwByC8 AIku9/f7S8923lltqs21l0K8oaZGjpyRQ6rT8b0xy4pgmS6ZWNLVq5UbOKU97lb6 Kh8QGPDs+xm0ikBpgReOv2b1iFbIUe1VH3mDHEPwmDRX3qaFomtls6d9op8vZgCJ DBDRLgNJse1NQ9yFMIbyV+nZAtn7sW4G4reKzgvdY7YBD/9+g4gtwH69Kj5sGoqt sBnowuZmbtvzdLHsxB47krqjPJRvDpYJr83MZ7qGYl2oKD8UkEqhv9WzQ8x/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqdHZ11MCeP1lY6Ha4uwuBm1dZUIwHwYDVR0j BBgwFoAUYsWgKJ2kGAj5LXebHrleAn2+FMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI2NGE3OGMtZGQ0Yy00YzlkLWJjZjAtNmRlNmNkYjkyNWIwLzAvNjJDNUEwMjg5 REE0MTgwOEY5MkQ3NzlCMUVCOTVFMDI3REJFMTRDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MkM1QTAyODlEQTQxODA4RjkyRDc3OUIxRUI5NUUwMjdEQkUx NEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvNjJDNUEwMjg5REE0MTgwOEY5MkQ3NzlCMUVCOTVF MDI3REJFMTRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISE7/tacBEINKcRl5b74buzW+/QshGYkng0 Fopqov8b35VmaAWU/yXWi0vVgTax5N+ENjBlhT1J1LECVkvz8NBv6rDkWEUfXzBP HJZoWK+5wgoMnbdORO/lanex8jNeIotpP2fKT+kYmQ89Qhfh3GWZbsaNmxZA4njK t+5u3cH//0N2R3LGwRgYaN6/YjDVd1LW3KLvNF9NzTOSZ9Qqi/y7w11i7l8w8A1v U9DpyXmFCh0a/S2eADWNCUQeTyYGkGzvT6a9u3O+CRtdjxkkaAjVsZTQzR0B2mep CoeEFanK7hmvd2BADHU8wyZkiOrB8In9pHGap4OK6ktUDaMzJSw= -----END CERTIFICATE-----Generated at Thu Oct 15 10:28:10 2026 by rpki-client