
$ rpki-client -vvf repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
File: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft (raw, json)
Hash identifier: RXURkS/xu82UQkwasWRT92PfykkeWqnzf9eyVDz3Rek=
Subject key identifier: 33:F0:E6:E2:20:F6:4D:C5:5E:22:5B:3C:BE:AA:47:FF:07:9E:21:73
Authority key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E
Certificate issuer: /CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E
Certificate serial: 296EB182303F29CA4C1249289D76E8E506536909
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
Manifest number: 04D0
Signing time: Mon 02 Mar 2026 00:42:15 +0000
Manifest this update: Mon 02 Mar 2026 00:37:15 +0000
Manifest next update: Thu 05 Mar 2026 08:25:15 +0000
Files and hashes: 1: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: 37Na13ceKxwy7/MxF6iCFolj+zTVulov5Ebf5kXzs0E=)
2: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl (hash: Dqj15h8dLb0SlMdD5GuLAYxqLMDONrU9ywHLynNNTrI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl
rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 08:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6e:b1:82:30:3f:29:ca:4c:12:49:28:9d:76:e8:e5:06:53:69:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E
Validity
Not Before: Mar 2 00:37:15 2026 GMT
Not After : Mar 5 08:25:15 2026 GMT
Subject: CN=33F0E6E220F64DC55E225B3CBEAA47FF079E2173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:49:7b:ea:53:96:12:9c:95:2c:0d:c8:45:
59:61:c6:2a:ce:40:77:62:bb:a7:7d:c6:f7:4d:ea:
d5:86:5d:6f:46:7f:5d:76:a0:54:7d:a7:e9:91:a3:
c9:fa:6f:e3:75:4e:ba:27:d4:87:eb:9d:3f:73:c7:
af:94:60:d1:f1:a6:57:96:e1:6f:0e:92:63:bc:a3:
8f:a5:01:b2:d3:f5:f1:da:0d:29:36:2a:d0:49:07:
4a:bd:ad:0e:66:72:4d:66:81:e3:ec:cb:ad:c3:52:
e0:95:05:6d:17:19:28:f1:54:bd:b1:b7:cc:ce:c0:
10:3f:50:dc:79:1d:15:d6:f4:71:4e:a4:01:0d:7a:
20:32:38:9c:4e:ff:f0:ed:1d:1f:d0:9a:e3:f6:fb:
88:a5:df:8c:8c:41:5b:df:55:dd:4e:2a:a7:18:5a:
26:1e:b7:4c:40:a3:43:75:1d:7d:d7:eb:29:d1:2b:
0f:6e:7b:0e:cb:b8:aa:de:aa:f9:a8:78:48:c4:c1:
b3:32:48:8d:e5:a6:37:30:94:fb:b3:2d:b6:cb:68:
97:dc:66:3f:44:f3:69:4d:4f:60:e5:08:30:64:78:
2a:20:80:52:d1:77:68:d2:61:fd:ed:2e:74:b7:4e:
22:46:f2:84:1b:26:0d:7b:8f:e3:4d:3d:93:8f:3c:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:E6:E2:20:F6:4D:C5:5E:22:5B:3C:BE:AA:47:FF:07:9E:21:73
X509v3 Authority Key Identifier:
keyid:62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4a:53:53:14:d7:fe:61:ee:b1:09:fe:70:51:10:2c:b6:f3:
ad:43:54:65:32:19:67:99:d6:aa:32:4f:cd:b7:14:ca:59:4d:
ad:e8:5b:9e:ee:67:d9:3e:02:95:c9:46:d0:e8:c8:65:bf:6b:
87:f6:f4:5c:26:a7:ed:d5:ba:60:5a:06:13:4c:2b:e9:14:bc:
c6:d5:7a:7a:8f:b9:78:75:08:40:b9:b1:4e:f9:42:a0:1f:26:
da:c6:58:c5:f1:a7:63:1d:d5:a0:9a:d6:c7:7e:40:4a:6c:81:
8e:e1:4e:d9:12:e9:80:e6:07:18:a3:91:82:b5:a7:6c:48:93:
68:c5:f3:0b:ce:99:71:2c:83:28:1c:02:c9:ee:e2:61:a3:46:
6d:f3:03:32:1a:49:e6:1d:13:b2:ee:47:55:2b:db:92:b7:2a:
f9:1b:36:a2:21:ea:c2:82:19:13:46:68:ad:56:a7:73:1d:c5:
15:78:db:e6:c6:10:b3:d9:27:23:d9:1c:d4:7f:62:b1:49:9a:
7e:83:93:00:bd:8d:d3:83:09:18:ea:65:b8:74:7e:4c:49:04:
21:17:3e:e2:70:0d:88:d2:92:b0:d0:38:0d:1f:4f:ba:54:17:
c1:ef:0d:ae:32:b8:ca:41:45:6e:ec:42:de:ba:38:07:27:40:
08:17:81:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:07:19 2026 by rpki-client