
$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json)
Hash identifier: sVTearH6B0p82QA8QpIDqySrIFEiT/lgcAwc0SdAzJA=
Subject key identifier: 63:1D:D8:C1:61:A8:FF:8F:0A:6C:17:8B:F8:49:DD:E4:2E:EF:54:4E
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial: 5F753D007B533AAD741725F1CAC77E4444E93E71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
Manifest number: 0560
Signing time: Mon 02 Mar 2026 05:20:50 +0000
Manifest this update: Mon 02 Mar 2026 05:15:50 +0000
Manifest next update: Thu 05 Mar 2026 05:44:50 +0000
Files and hashes: 1: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: rrZe+HjK+ucWrcUUHH/velfJ+oBDYNUgQAFyUP0ELPI=)
2: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: etc0yctvoqYoGn/V4HvmkHxMIj8UwbwA1TIZF8H1uC4=)
3: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: WnHlAecuf1ssEPwpE4JteGlj7TVgx7RsbQ5uqotjG6I=)
4: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: dVq64zxWLa78rB2/MzuNY9mMV1I4wE6waqwsVjBuNag=)
5: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: oWA2QFYz4vYF2E7W/J4zDdYB9xBPhSOKzYOOJDzlgls=)
6: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: /UXYB4TtCj6DhWGBpWw5uknPOcQXZgKkP3NIlYwqDgE=)
7: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: VrotTTIzDOIqOPMKwmB9Zr+ogm8QEU56tjMylm904jQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 05:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:75:3d:00:7b:53:3a:ad:74:17:25:f1:ca:c7:7e:44:44:e9:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Validity
Not Before: Mar 2 05:15:50 2026 GMT
Not After : Mar 5 05:44:50 2026 GMT
Subject: CN=631DD8C161A8FF8F0A6C178BF849DDE42EEF544E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:35:62:8c:92:68:32:10:7b:be:27:00:55:
24:d4:e5:18:6c:fc:e2:09:f1:7a:b2:71:26:ab:5f:
f1:0d:22:df:a2:7c:96:70:e2:aa:5c:7d:4d:2e:3f:
e8:83:5e:28:5e:07:8f:ca:89:7d:2c:c0:46:6e:d2:
31:9c:55:b7:3c:8a:64:f8:ba:b3:bb:61:3b:a7:6f:
f9:e6:27:e1:5e:e2:59:4c:ac:b7:a4:ed:05:04:38:
7c:91:49:51:a9:d0:db:a7:17:bf:b6:54:60:4e:09:
8b:42:7a:9e:b2:f9:b8:63:c8:e1:81:f2:c4:8b:21:
1c:a7:cf:52:2c:02:9f:89:a5:81:8c:47:dd:4c:a8:
d9:d7:90:19:35:02:49:94:49:ea:56:c3:91:63:e7:
76:b3:a4:27:99:88:8f:8e:6f:e1:92:7c:9d:d8:7b:
1a:11:1e:e5:ef:f6:e4:45:40:dd:27:49:51:c8:ea:
29:db:18:96:8f:f3:60:bb:34:9f:15:68:b0:8c:43:
e4:d0:5f:8d:55:6c:3a:1f:12:ee:1e:06:1c:76:55:
a8:12:27:24:f3:25:42:b4:c6:3e:0c:54:c6:0a:69:
bd:bf:33:e1:d1:f3:b8:76:3f:bf:60:e7:3b:45:68:
c9:c6:1f:49:fc:87:28:97:9a:13:94:d0:8f:75:2b:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:D8:C1:61:A8:FF:8F:0A:6C:17:8B:F8:49:DD:E4:2E:EF:54:4E
X509v3 Authority Key Identifier:
keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4e:95:4c:45:fd:db:7b:65:e0:33:e9:d5:f6:4c:82:e6:9a:
bf:fa:53:7a:e4:cc:50:f5:ca:ac:e7:cf:d7:32:ea:b9:63:95:
f6:a5:01:7e:18:b5:0a:f7:9e:41:8a:f8:d0:f1:9d:32:a0:25:
46:cc:cd:64:da:f5:02:bf:2e:b9:49:2c:3f:8f:43:79:54:3e:
61:92:e1:c0:8e:af:0e:0b:97:1b:e9:e2:a9:2b:98:c7:11:b1:
d2:71:e0:65:cc:41:57:f1:f8:3c:f3:89:69:83:ab:52:2b:29:
6d:0e:03:5f:12:23:e7:e6:5b:2f:d6:88:51:bd:aa:df:76:77:
6a:f7:ce:95:0a:00:12:92:61:a4:02:67:5a:56:e7:29:60:aa:
34:ad:cf:19:9d:e8:1c:a6:6e:e9:87:85:33:b2:e0:f8:c2:90:
3b:b4:66:79:f0:ba:bb:36:41:e8:d7:25:eb:a6:47:56:60:5b:
82:23:64:02:67:3b:39:dc:6a:43:8a:64:94:3f:e1:ea:de:8d:
c3:f3:0f:1f:07:3c:aa:56:78:01:b9:ad:63:61:11:23:be:35:
c2:81:09:bd:5c:d2:30:06:70:74:51:af:f5:e0:bf:82:98:fa:
2c:cc:eb:54:06:e1:2c:55:a4:3d:35:91:83:92:5d:fc:2a:0d:
f7:ef:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:56 2026 by rpki-client