
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft
File: 62531E8BF877F9190055D7D857C21ECBDCFAC237.mft (raw, json)
Hash identifier: miC9Wg91lfUvDrfi9luxVFZu1TpYyU32vFAhvMrqq74=
Subject key identifier: D6:BB:EA:83:5F:DA:FD:B9:22:B5:13:C7:49:A0:CE:16:BD:90:FA:67
Authority key identifier: 62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37
Certificate issuer: /CN=62531E8BF877F9190055D7D857C21ECBDCFAC237
Certificate serial: 592608A69415ABD34D55688BDC47DB17C93356DA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 06:23:35 +0000
Manifest this update: Wed 29 Jul 2026 06:18:35 +0000
Manifest next update: Thu 30 Jul 2026 08:21:35 +0000
Files and hashes: 1: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (hash: RzRSXdrIXGBvVPeHVDu3wO8XEsc3GFR1CCktt00WYd8=)
2: 3130332e3135332e36302e302f32342d3234203d3e20313430343536.roa (hash: N+subOKk1O0aLwezy/FI1acpxPEti6iKIkHeL/X8z5w=)
3: 3130332e3135332e36312e302f32342d3234203d3e20313430343536.roa (hash: AqK7gho3oaBdn6U0bSz26oZHpcnwMKNpGmX9XBUu4+k=)
4: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (hash: SOPJ6LptzafhaHhbYxOp6YPrbTR/9ZdExcQFIaJyuIA=)
5: 62531E8BF877F9190055D7D857C21ECBDCFAC237.crl (hash: op8ZFDQH+CdpxtShTltFP5aQG07dEstJWtOzuvrAY+0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl
rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:26:08:a6:94:15:ab:d3:4d:55:68:8b:dc:47:db:17:c9:33:56:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237
Validity
Not Before: Jul 29 06:18:35 2026 GMT
Not After : Jul 30 08:21:35 2026 GMT
Subject: CN=D6BBEA835FDAFDB922B513C749A0CE16BD90FA67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:cd:3d:74:80:a8:ae:0f:ed:33:ef:cd:e7:
93:e0:0a:2f:13:59:2a:81:8b:36:70:20:cc:65:36:
3c:b6:84:3f:e7:36:32:e9:e2:ec:be:f0:c1:14:d1:
09:5f:5c:36:d4:f0:b6:64:0f:42:f7:4c:e6:06:7a:
5e:87:af:c3:b2:bd:4a:4a:48:17:84:5e:18:76:15:
02:0d:27:11:1e:76:bc:66:8c:ba:14:87:45:d9:e5:
ec:99:e6:a9:15:7c:97:aa:54:68:65:c5:79:57:a4:
88:67:8f:54:c0:05:b2:7a:9f:35:d2:70:f9:07:d7:
be:63:00:fc:2c:ac:9f:57:00:25:db:96:44:54:0f:
7a:6b:07:86:83:5c:c8:a9:25:8e:3b:d7:aa:20:54:
50:5c:20:fb:b4:e0:40:5f:26:43:b2:d1:1c:2b:5c:
59:99:0a:37:2c:97:b0:9b:2a:0c:a2:9d:eb:9d:ec:
34:4c:36:18:9f:11:2a:c8:44:ef:82:d6:8a:54:b9:
60:d8:7f:9f:19:5d:8a:b6:16:ed:4f:09:50:87:ac:
91:2f:f0:9f:6f:95:93:48:bd:ce:62:d7:9d:ba:06:
6d:e2:37:14:ad:23:a1:80:b9:61:34:7b:2e:14:24:
b6:fe:72:39:6d:f8:a0:29:c2:89:47:28:34:0d:a2:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BB:EA:83:5F:DA:FD:B9:22:B5:13:C7:49:A0:CE:16:BD:90:FA:67
X509v3 Authority Key Identifier:
keyid:62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:08:3b:4f:4e:c4:63:fb:e4:4c:af:44:4d:6f:35:c3:99:3c:
7e:80:c9:9d:57:3a:2a:21:e7:e2:d6:ca:78:05:17:b9:1c:4a:
51:bb:67:2f:0b:cf:50:12:76:f7:2c:48:a5:0c:5a:3e:bb:d4:
02:fe:fb:e1:98:83:b8:44:d4:df:96:9d:d1:7e:60:19:80:7d:
7a:91:20:a2:fd:2f:04:75:5d:fc:9c:b4:ee:82:c5:bd:9e:7d:
f6:a0:03:db:64:00:02:6f:5a:4c:71:bf:10:d0:34:8f:2a:95:
e4:f4:c5:77:69:d5:16:10:8d:9c:6e:5d:eb:5c:42:05:94:07:
33:4f:80:29:61:b9:b8:86:8a:10:92:1e:dd:6f:2c:de:2e:bf:
9c:12:c1:b4:5b:b5:98:31:de:62:e5:d9:79:07:72:30:7a:47:
e6:d3:85:96:6a:ee:d4:ca:9b:94:28:b3:f9:bd:1f:dd:fd:0d:
0c:f4:50:d7:00:96:4b:0c:97:7a:ed:5f:b5:66:8b:ce:3f:5d:
16:82:46:d2:a6:4c:e5:04:df:97:47:4e:1b:f2:7d:de:3d:8f:
76:2e:99:3a:71:94:ec:ae:de:b1:24:12:ad:75:08:7f:bc:b9:
33:ac:d1:32:a7:47:9e:1e:e1:4b:cf:17:fe:97:a9:26:65:11:
eb:ad:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:58 2026 by rpki-client