
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
File: A62202F88CE61D6BD47195FB36103CDD061D7D27.mft (raw, json)
Hash identifier: kH499bMFATx3UBMEMxwR9lMnG7ww45ZPMf0zsZRKylc=
Subject key identifier: 66:EF:04:74:D4:15:38:07:4D:2C:98:25:40:F7:CF:66:8D:86:09:4D
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial: 7DF143A3B1DCF424A2775721DF9CA1AA53057C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
Manifest number: 01DC
Signing time: Tue 04 Nov 2025 07:02:29 +0000
Manifest this update: Tue 04 Nov 2025 06:57:29 +0000
Manifest next update: Fri 07 Nov 2025 10:58:29 +0000
Files and hashes: 1: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: kHcDvJb/DgVTvuuABJZolA65opC22Ih0u8COwgg0FLM=)
2: A62202F88CE61D6BD47195FB36103CDD061D7D27.crl (hash: Hk2v1uOgFrqh5uE/FXrqrQ5cAeRBruBlhsNoUwr/LlI=)
3: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 1bNdVmfT+djOhZ89RO79L01jzFp6ENRtflXpl+KJhHY=)
4: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: ocoZWOXebE29PM9wf4GH+eYs09gSTcPRxglrbyGrg6Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f1:43:a3:b1:dc:f4:24:a2:77:57:21:df:9c:a1:aa:53:05:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Validity
Not Before: Nov 4 06:57:29 2025 GMT
Not After : Nov 7 10:58:29 2025 GMT
Subject: CN=66EF0474D41538074D2C982540F7CF668D86094D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:d5:2d:2d:bc:d0:60:21:2a:df:89:88:e4:
a4:4d:2c:d3:0d:66:ba:23:90:86:cc:39:0a:24:f4:
b1:c7:90:46:6d:67:22:60:9e:55:33:b5:e2:87:49:
89:71:65:a5:0c:ae:2a:b7:8a:d0:6c:a3:81:7d:50:
b6:eb:08:31:e9:b6:c2:b2:e0:ee:b8:72:5e:f2:ec:
64:6d:32:93:b3:31:cd:f6:87:ac:69:9a:ac:9d:99:
9b:d2:00:1d:1b:4c:7a:26:f4:74:e3:19:42:a1:dc:
70:0e:dc:96:1d:24:dd:d3:11:61:f8:b3:68:39:04:
be:d9:67:85:6f:6d:5e:2d:bc:ee:f4:cd:89:f3:f7:
e7:ba:8f:99:12:b6:09:8f:ac:30:90:78:11:54:9c:
52:e5:51:fb:20:ca:99:b0:c4:d7:f2:e1:c5:46:ba:
9f:12:b9:99:2a:12:90:94:4c:d5:06:9d:4f:b4:8f:
16:ff:4c:f1:3a:be:cd:60:ec:13:ed:d4:fb:c6:0d:
b0:57:6c:f1:1c:cf:1f:67:9d:3a:be:36:b0:7a:fd:
06:a2:ad:59:2b:af:f9:49:7f:37:3e:c2:12:36:5b:
0f:e5:c2:5a:bf:ce:9b:90:8f:be:40:9b:5f:46:58:
e2:29:2c:3d:73:14:1f:19:7d:1a:a2:0d:e8:73:54:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EF:04:74:D4:15:38:07:4D:2C:98:25:40:F7:CF:66:8D:86:09:4D
X509v3 Authority Key Identifier:
keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e5:89:d3:cd:c7:86:9e:d6:59:fc:a9:0b:e1:73:23:17:54:
44:83:f4:2a:fc:33:e8:d6:12:06:c0:a3:91:91:4e:86:b6:54:
b7:38:eb:b7:20:b0:d3:5a:bd:15:06:b3:02:c2:43:e8:6f:10:
43:4b:ef:a0:7e:e7:c0:cf:bb:87:2b:5e:da:f7:94:59:5b:3e:
25:bf:da:1b:b8:4e:d1:b5:83:2f:5c:28:48:d9:de:86:54:4a:
28:42:4e:e2:b4:78:88:eb:63:5d:5f:cd:c0:c7:e7:67:9b:f4:
8f:2d:4a:36:4c:4a:42:ae:9d:85:b0:6a:c1:a4:96:cf:eb:f8:
74:14:98:50:0f:1b:1f:17:d7:3c:d7:99:fe:67:41:25:43:bb:
fb:89:c4:8a:c3:7b:0b:8d:46:2e:0e:9d:55:46:b1:ca:3a:bf:
55:d3:7e:e6:a0:68:30:ee:98:61:36:c8:0f:ad:4c:d0:7d:12:
14:d9:ee:4b:d4:fc:d1:cf:69:7c:af:7d:69:05:39:29:e8:ff:
40:65:cd:93:93:a6:59:07:b4:20:71:9e:85:fd:9f:fc:f4:cc:
a2:e9:8a:23:e2:2a:3e:0f:4e:5d:db:c7:9a:94:34:a1:20:33:
af:95:6b:90:55:79:7f:dd:45:08:25:c9:f5:52:a4:0c:86:73:
92:59:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:24 2025 by rpki-client