
$ rpki-client -vvf repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft
File: 63A008B749DB87C773CA05C5DF448BCA5357BB01.mft (raw, json)
Hash identifier: DZQtXm95Yg/hOPEeqvuy7cmcwLwSeh4b7y4mpvwcdmg=
Subject key identifier: D6:98:5A:FE:DA:3C:B3:E3:8B:09:69:B7:C1:24:12:4B:2C:AB:90:63
Authority key identifier: 63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01
Certificate issuer: /CN=63A008B749DB87C773CA05C5DF448BCA5357BB01
Certificate serial: 74665E59C89679385B66FD4E18E4FB6D4455211F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft
Manifest number: 0361
Signing time: Sat 28 Feb 2026 21:52:22 +0000
Manifest this update: Sat 28 Feb 2026 21:47:22 +0000
Manifest next update: Wed 04 Mar 2026 03:28:22 +0000
Files and hashes: 1: 3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa (hash: Tji5eLarsbsUV7OPBAVD/9yKk9GUehEwx/Ji4JAvY3U=)
2: 3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa (hash: 16U5ENt1Fx7mXMkbXyDTcuDuUq+dB5XA/NthjrW4JLc=)
3: 63A008B749DB87C773CA05C5DF448BCA5357BB01.crl (hash: Qy3k6DtmtfUWcPmNNXKBamyxN+UiDlGQDxlePZ13Q+g=)
4: 3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (hash: eZnK2eskkU6AREBsLNvr+wfApR29iHfhfxaLS8JDmM4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl
rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:66:5e:59:c8:96:79:38:5b:66:fd:4e:18:e4:fb:6d:44:55:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63A008B749DB87C773CA05C5DF448BCA5357BB01
Validity
Not Before: Feb 28 21:47:22 2026 GMT
Not After : Mar 4 03:28:22 2026 GMT
Subject: CN=D6985AFEDA3CB3E38B0969B7C124124B2CAB9063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:77:2a:b0:85:26:b9:6c:d4:36:56:6b:93:
61:53:05:7b:60:4d:52:2d:62:1a:48:27:9d:36:9f:
c6:15:96:34:60:29:a9:6b:e2:66:44:39:77:1e:43:
00:63:45:c4:c9:5c:26:3a:6c:98:13:c5:78:13:d5:
66:05:78:a4:ef:a9:6d:3e:99:34:a8:93:10:50:42:
45:a3:17:4a:83:e2:f4:44:43:a8:39:35:fa:49:a7:
4b:03:cd:c9:32:aa:92:c0:0d:4c:29:1f:1d:e5:21:
3e:74:2b:fa:ff:b5:53:99:bc:a3:87:de:f2:fc:22:
26:c4:42:a2:cd:a4:99:e9:15:bc:f2:50:4d:f6:27:
e0:54:aa:0e:3c:1e:eb:fd:b8:3c:c8:24:a3:6a:72:
9b:2d:24:93:e2:8a:dd:01:9e:c0:28:03:21:89:f4:
a7:32:83:8b:71:49:6c:d1:d7:22:9e:09:a6:b1:41:
6d:a2:80:db:6f:a2:fb:1c:4e:52:1c:42:f9:6e:a2:
9e:77:fe:0a:c4:c1:f4:07:3e:e1:02:14:ce:c9:1c:
cd:67:97:fb:f9:bf:75:47:44:51:85:c5:ad:30:9f:
f7:60:0f:64:a1:26:89:27:0f:32:c7:03:b6:ed:21:
ae:bf:e8:ef:a7:2b:7f:50:37:48:ef:96:a7:93:26:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:5A:FE:DA:3C:B3:E3:8B:09:69:B7:C1:24:12:4B:2C:AB:90:63
X509v3 Authority Key Identifier:
keyid:63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:19:40:3f:53:9b:6f:21:6c:51:a0:d6:35:56:d5:91:87:57:
f5:de:ce:23:d6:86:dd:82:c5:a6:ee:43:11:15:2e:4b:6e:1d:
a7:72:ae:23:8b:b5:e7:7a:5b:62:30:81:74:d4:c5:03:57:1c:
79:0a:10:79:60:93:06:8e:10:29:88:52:2d:57:7a:eb:99:60:
ff:64:81:65:e1:d2:96:01:e8:1e:a5:d8:95:7e:50:e6:17:d0:
71:d4:60:2b:21:c7:24:c6:08:72:f6:cb:d7:51:a2:26:98:99:
63:54:09:cf:56:98:61:52:d7:c4:a3:38:b3:b6:f1:2d:83:83:
88:45:0b:35:6e:29:57:26:a1:2a:f5:dc:04:f0:0d:80:e0:e0:
47:61:bb:05:cb:01:72:f0:fc:ec:57:47:f2:28:e8:b8:7f:7d:
e3:6a:15:09:4d:00:92:05:60:10:a8:b7:e2:ec:d9:25:e3:16:
40:a0:38:0e:cd:c6:12:83:85:57:67:41:ff:f5:e8:9b:31:97:
39:6f:ea:48:4a:fe:ae:ba:44:46:f9:14:42:49:e3:95:8b:6e:
b4:0d:35:d6:0e:77:cc:98:a5:0d:ad:af:5c:a8:6b:21:24:aa:
af:a9:21:78:61:be:ba:5d:f1:32:4d:4e:fd:11:e5:05:77:bb:
5f:78:cf:09
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdGZeWciWeThbZv1OGOT7bURVIR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhCQ0E1
MzU3QkIwMTAeFw0yNjAyMjgyMTQ3MjJaFw0yNjAzMDQwMzI4MjJaMDMxMTAvBgNV
BAMTKEQ2OTg1QUZFREEzQ0IzRTM4QjA5NjlCN0MxMjQxMjRCMkNBQjkwNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/HXcqsIUmuWzUNlZrk2FTBXtg
TVItYhpIJ502n8YVljRgKalr4mZEOXceQwBjRcTJXCY6bJgTxXgT1WYFeKTvqW0+
mTSokxBQQkWjF0qD4vREQ6g5NfpJp0sDzckyqpLADUwpHx3lIT50K/r/tVOZvKOH
3vL8IibEQqLNpJnpFbzyUE32J+BUqg48Huv9uDzIJKNqcpstJJPiit0BnsAoAyGJ
9Kcyg4txSWzR1yKeCaaxQW2igNtvovscTlIcQvluop53/grEwfQHPuECFM7JHM1n
l/v5v3VHRFGFxa0wn/dgD2ShJoknDzLHA7btIa6/6O+nK39QN0jvlqeTJp7BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1pha/to8s+OLCWm3wSQSSyyrkGMwHwYDVR0j
BBgwFoAUY6AIt0nbh8dzygXF30SLylNXuwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NWY5MDAyZC05MjY3LTRmOGItODU5YS1kZmE3ZDg5MTQzYjQvMC82M0EwMDhCNzQ5
REI4N0M3NzNDQTA1QzVERjQ0OEJDQTUzNTdCQjAxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhCQ0E1MzU3
QkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVmOTAwMmQtOTI2Ny00ZjhiLTg1
OWEtZGZhN2Q4OTE0M2I0LzAvNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhC
Q0E1MzU3QkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABEZQD9Tm28hbFGg1jVW1ZGHV/XeziPWht2C
xabuQxEVLktuHadyriOLted6W2IwgXTUxQNXHHkKEHlgkwaOECmIUi1XeuuZYP9k
gWXh0pYB6B6l2JV+UOYX0HHUYCshxyTGCHL2y9dRoiaYmWNUCc9WmGFS18SjOLO2
8S2Dg4hFCzVuKVcmoSr13ATwDYDg4EdhuwXLAXLw/OxXR/Io6Lh/feNqFQlNAJIF
YBCot+Ls2SXjFkCgOA7NxhKDhVdnQf/16Jsxlzlv6khK/q66REb5FEJJ45WLbrQN
NdYOd8yYpQ2tr1yoayEkqq+pIXhhvrpd8TJNTv0R5QV3u194zwk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:08 2026 by rpki-client