
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.mft
File: 62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.mft (raw, json)
Hash identifier: GyoQQYeufMQbz1T2XOeOFztg+PV/GmHbfNqeQtoZPTI=
Subject key identifier: 6B:C6:1D:65:89:F9:0F:31:16:30:68:4C:3A:97:3A:51:95:63:49:7B
Authority key identifier: 62:B2:A4:31:21:16:C7:B4:1E:1F:AF:11:0B:76:B3:7E:3A:D6:6D:D4
Certificate issuer: /CN=62B2A4312116C7B41E1FAF110B76B37E3AD66DD4
Certificate serial: 1960094063D74D49A7499A7E5E2E9B5CAA304A78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 11:20:28 +0000
Manifest this update: Mon 21 Sep 2026 11:15:28 +0000
Manifest next update: Tue 22 Sep 2026 13:08:28 +0000
Files and hashes: 1: 3130332e37332e37372e302f32342d3234203d3e20313335343734.roa (hash: ZKwRXTBUvSlAaz3jwCkugufGLnLAIl1YngLs+w7+/4Q=)
2: 62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.crl (hash: p7rXPeHST1dKmBssao7lkmSyS0o58MIsxZm4T+e9UVs=)
3: 323430363a663138303a3a2f33322d3332203d3e20313335343734.roa (hash: 3rOAi8k8stl86mFqGKreWcTbEEAFU4VlaCFaMidaKjM=)
4: 323430363a663138303a31303a3a2f34382d3438203d3e20313335343734.roa (hash: 2ov+aBIFp6nLZ/5872K4BbFDePKC8I2fPS+IGAv+z1w=)
5: 3130332e37332e37382e302f32342d3234203d3e20313335343734.roa (hash: fT68kWtVG7tb/2BD15Iw8Gz0m1fnSGaiw117JzC3oaA=)
6: 3130332e37332e37392e302f32342d3234203d3e20313335343734.roa (hash: QymkbIz+i7WZkTFzq0JlTTqi1L5hDqlQaNY8gJyzeUM=)
7: 3130332e37332e37362e302f32342d3234203d3e20313335343734.roa (hash: KgofiVV7byfxlL6Vf1XpG4C/w7NT33LktkrgEON9NAk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.crl
rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:60:09:40:63:d7:4d:49:a7:49:9a:7e:5e:2e:9b:5c:aa:30:4a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62B2A4312116C7B41E1FAF110B76B37E3AD66DD4
Validity
Not Before: Sep 21 11:15:28 2026 GMT
Not After : Sep 22 13:08:28 2026 GMT
Subject: CN=6BC61D6589F90F311630684C3A973A519563497B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:3f:80:84:e5:56:6a:66:8a:66:32:ae:57:
ef:b1:2a:00:09:cf:15:5f:95:fc:af:d7:36:2b:dd:
ba:89:c0:2c:cd:9b:f6:67:b4:29:94:5b:12:56:70:
f0:f2:65:94:38:b7:eb:d7:a8:07:cd:d2:65:35:68:
98:d6:6f:72:f0:b3:97:f3:37:b8:90:e9:29:28:78:
d1:08:aa:90:3b:d8:8c:67:32:09:e2:76:0c:47:5c:
a2:ac:53:f5:3a:bf:e0:83:6d:e5:3c:6a:eb:eb:8a:
3a:e6:16:58:d1:f1:e9:93:5b:f0:55:8a:b2:be:4c:
ef:87:b9:cb:d6:7f:e2:42:27:93:70:e0:0e:81:9a:
ce:5e:f1:1b:2c:54:c1:17:dd:44:63:b4:ba:85:cd:
06:40:5b:f3:cc:ed:7c:02:61:37:0f:85:c8:c0:dd:
99:d7:3e:3d:99:9b:78:78:e2:8d:89:1c:dc:5a:ee:
6e:21:9b:ed:04:6d:f3:cc:2e:d5:2d:b7:ec:e6:74:
5d:17:52:b6:ca:b9:06:3e:50:e4:df:fa:8f:23:30:
24:42:5f:cb:7e:76:6c:10:b9:76:60:d0:33:9a:7c:
ce:7e:cc:5c:ef:24:75:b3:9a:5d:3e:96:2f:8f:4c:
f1:fa:40:4b:5a:00:5b:2e:a4:59:04:98:f4:18:28:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C6:1D:65:89:F9:0F:31:16:30:68:4C:3A:97:3A:51:95:63:49:7B
X509v3 Authority Key Identifier:
keyid:62:B2:A4:31:21:16:C7:B4:1E:1F:AF:11:0B:76:B3:7E:3A:D6:6D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ff:d8:4e:b5:0c:bb:2f:d8:86:19:47:3c:7d:32:51:a2:23:
60:b0:99:01:a8:3b:53:0c:20:d0:0b:94:6d:1e:06:db:dc:b0:
eb:13:25:03:ce:73:51:a9:00:34:a1:0f:85:95:75:18:68:47:
1b:af:58:a3:24:b4:17:c0:f3:ea:95:bc:2d:11:95:e4:38:04:
df:49:b7:84:8a:6b:95:50:4a:fc:56:2e:7c:54:f5:0f:d8:aa:
ee:18:e1:df:17:fd:c1:71:ca:f4:e0:7b:73:4c:e1:d5:3a:c7:
f0:e1:8d:4a:96:f0:bd:00:0a:1b:92:72:94:40:08:a4:3d:a7:
e0:91:36:76:d8:51:da:a5:63:94:a2:62:23:91:31:87:99:3a:
59:9c:65:70:e8:66:3a:6d:c2:1b:1a:22:77:80:7c:02:50:08:
0b:04:a4:84:f2:84:a2:5e:96:95:d0:4a:3b:5b:78:af:67:12:
a1:97:27:dc:4a:c2:48:02:b9:22:28:ca:27:48:c1:b3:09:72:
86:e8:89:d7:81:cb:ee:70:db:e4:ce:6a:33:fb:6d:94:5a:2b:
35:a5:84:17:a6:46:d1:1d:9c:a3:43:8d:e7:c7:41:89:9e:03:
96:b6:80:78:c5:64:67:df:ce:33:60:26:f5:1e:41:f3:d9:09:
bc:92:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:39:48 2026 by rpki-client