
$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json)
Hash identifier: vLsfPc90QN5MMgNmz64yDOKXs32jU3qUd0Z8BUNDvXY=
Subject key identifier: 52:09:08:62:0B:09:75:3D:EB:85:F7:D0:15:91:10:08:B5:60:53:23
Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Certificate serial: 30A7CC885E89DA0F00721344D9F598A6DB0B12F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
Manifest number: 021E
Signing time: Wed 15 Apr 2026 17:31:21 +0000
Manifest this update: Wed 15 Apr 2026 17:26:21 +0000
Manifest next update: Sat 18 Apr 2026 22:51:21 +0000
Files and hashes: 1: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=)
2: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=)
3: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=)
4: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: 4eq3n3/yTSn7TyOiSSoDDZSoxHOhfDTHYX1Kp93K0VM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl
rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 22:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a7:cc:88:5e:89:da:0f:00:72:13:44:d9:f5:98:a6:db:0b:12:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Validity
Not Before: Apr 15 17:26:21 2026 GMT
Not After : Apr 18 22:51:21 2026 GMT
Subject: CN=520908620B09753DEB85F7D015911008B5605323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bb:5a:cb:e7:16:a5:85:72:79:45:65:6d:12:
da:76:6f:1a:4d:a3:0a:09:68:f0:d1:aa:9c:cd:c4:
f3:69:bf:22:43:b7:f5:90:1f:b5:13:20:19:0c:46:
3a:f2:88:4c:d7:bb:47:27:d4:9b:bc:a2:3e:7e:88:
24:21:32:58:98:39:7f:9e:8c:c0:a0:57:df:9e:41:
48:43:25:05:c6:3e:87:5a:d5:5e:3a:35:e6:67:41:
d1:93:8a:71:83:68:d5:f6:9d:ec:3f:57:97:d4:bd:
50:08:e1:4f:66:e8:10:ff:31:25:7d:2a:91:07:b2:
4c:ca:f0:af:f6:68:9f:ff:f2:f0:d4:56:c5:60:67:
43:06:92:e5:31:2e:43:92:f9:b8:8e:9e:2f:e7:9b:
a8:b2:bc:df:9d:21:12:01:a2:3f:98:3e:34:ee:4a:
5a:0b:ae:7c:07:d0:bb:2a:89:36:51:ad:b4:ab:97:
32:b2:76:a2:ab:46:bc:6f:c1:9b:15:51:49:15:1f:
e4:4c:b1:73:00:b6:f4:f7:cc:de:2a:3c:bf:9c:36:
15:9a:1b:07:79:1b:15:d1:86:b7:62:27:d1:45:c2:
b9:dc:ec:57:a7:a0:25:ae:a9:5d:7f:9d:68:c4:ac:
6a:ec:49:a2:ef:cf:27:5c:e0:e9:99:fa:68:0a:3a:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:08:62:0B:09:75:3D:EB:85:F7:D0:15:91:10:08:B5:60:53:23
X509v3 Authority Key Identifier:
keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f8:36:2e:39:0d:bd:13:c2:26:85:5d:06:06:0c:82:60:61:
3b:f7:43:d4:38:c0:fa:cd:28:3c:0e:eb:a9:6a:69:84:79:1d:
a0:10:19:5e:5a:b8:0c:46:29:23:cb:00:5c:69:00:bd:a6:51:
b3:cd:c5:34:83:08:29:6d:51:8b:1a:11:e3:c2:ce:52:68:a3:
f7:55:19:61:b6:e3:11:8c:72:06:8d:0a:7f:24:12:45:91:c3:
a6:00:ee:0e:77:97:73:34:b6:f8:9a:5f:12:e8:04:30:e8:a2:
2a:e0:45:3d:04:a9:27:42:a6:52:96:8c:66:15:4b:5e:60:38:
f3:ea:c1:4f:20:36:02:dc:65:3f:93:5d:1c:e0:bf:d1:02:7c:
2e:32:d7:44:a1:92:33:00:38:d0:2c:ea:e2:5f:c7:f7:b4:fe:
dc:b5:92:a1:29:dd:9b:26:e9:c6:2d:50:c8:b8:4c:1a:92:d5:
de:a5:07:ec:6f:6a:7f:f8:ba:5b:7f:d8:10:4b:da:ba:d6:14:
6a:6f:77:31:ba:69:ee:5c:82:61:ae:24:00:7a:04:00:4d:af:
4a:62:00:7f:58:84:a6:ff:a9:58:c5:aa:1b:99:6f:f8:91:7a:
3f:ba:d3:4b:df:c4:cf:32:97:79:a4:13:eb:69:ea:b2:8c:07:
fc:f3:9a:8c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMKfMiF6J2g8AchNE2fWYptsLEvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy
QTRBN0MwNzAeFw0yNjA0MTUxNzI2MjFaFw0yNjA0MTgyMjUxMjFaMDMxMTAvBgNV
BAMTKDUyMDkwODYyMEIwOTc1M0RFQjg1RjdEMDE1OTExMDA4QjU2MDUzMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwu1rL5xalhXJ5RWVtEtp2bxpN
owoJaPDRqpzNxPNpvyJDt/WQH7UTIBkMRjryiEzXu0cn1Ju8oj5+iCQhMliYOX+e
jMCgV9+eQUhDJQXGPoda1V46NeZnQdGTinGDaNX2new/V5fUvVAI4U9m6BD/MSV9
KpEHskzK8K/2aJ//8vDUVsVgZ0MGkuUxLkOS+biOni/nm6iyvN+dIRIBoj+YPjTu
SloLrnwH0LsqiTZRrbSrlzKydqKrRrxvwZsVUUkVH+RMsXMAtvT3zN4qPL+cNhWa
Gwd5GxXRhrdiJ9FFwrnc7FenoCWuqV1/nWjErGrsSaLvzydc4OmZ+mgKOnPrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUgkIYgsJdT3rhffQFZEQCLVgUyMwHwYDVR0j
BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB
MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB
N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi
YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC
RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEX4Ni45Db0TwiaFXQYGDIJgYTv3Q9Q4wPrN
KDwO66lqaYR5HaAQGV5auAxGKSPLAFxpAL2mUbPNxTSDCCltUYsaEePCzlJoo/dV
GWG24xGMcgaNCn8kEkWRw6YA7g53l3M0tviaXxLoBDDooirgRT0EqSdCplKWjGYV
S15gOPPqwU8gNgLcZT+TXRzgv9ECfC4y10ShkjMAONAs6uJfx/e0/ty1kqEp3Zsm
6cYtUMi4TBqS1d6lB+xvan/4ult/2BBL2rrWFGpvdzG6ae5cgmGuJAB6BABNr0pi
AH9YhKb/qVjFqhuZb/iRej+600vfxM8yl3mkE+tp6rKMB/zzmow=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:30 2026 by rpki-client