
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
File: 62201E20A182AFCB9985132733F2FBD1BB09C210.mft (raw, json)
Hash identifier: XKjm6b/gg9lwLWKwPM50q64Be4hmdJ2yWwIMJ8M7ZM8=
Subject key identifier: D2:E6:F8:AA:DE:5E:ED:AD:88:E4:B6:35:28:5C:BD:89:4B:22:4A:D8
Authority key identifier: 62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
Certificate issuer: /CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Certificate serial: 5E2EC5772662930B2E069A1335EB11C6898AD745
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 20:37:06 +0000
Manifest this update: Mon 21 Sep 2026 20:32:06 +0000
Manifest next update: Tue 22 Sep 2026 22:41:06 +0000
Files and hashes: 1: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: cdTAWLi8m26n5P7CJT3lqMoZoU5FXrpIaSroPqf5DL0=)
2: 62201E20A182AFCB9985132733F2FBD1BB09C210.crl (hash: MX5AH+PnUhg/6RMzAqBPWlwQwtmSjIAJ0zRY5ZEkTh0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl
rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2e:c5:77:26:62:93:0b:2e:06:9a:13:35:eb:11:c6:89:8a:d7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Validity
Not Before: Sep 21 20:32:06 2026 GMT
Not After : Sep 22 22:41:06 2026 GMT
Subject: CN=D2E6F8AADE5EEDAD88E4B635285CBD894B224AD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:db:5f:fd:4b:16:d7:5e:0d:2f:ff:e6:9c:
55:44:3f:75:fc:cd:90:29:ff:99:3b:f4:59:73:d3:
c1:97:85:b2:50:57:3c:c6:94:05:53:46:4e:4f:6f:
a6:28:c6:00:d1:95:0f:f8:f9:94:87:50:f8:77:01:
dc:d9:e8:0c:35:70:8e:37:64:9d:1b:5d:da:6d:1d:
69:89:61:ea:4e:f8:2e:47:83:cb:26:d3:d8:97:3a:
fb:69:3d:08:56:a2:83:98:a9:1e:ed:67:75:ba:af:
cd:4d:a3:e5:57:4f:31:6c:7f:08:59:43:ae:3f:29:
a7:42:56:10:d8:6d:df:d5:74:db:a9:b2:a0:8d:ec:
e0:51:9e:28:71:ff:de:f1:09:f4:e0:a2:ce:64:34:
dc:8a:c7:1e:61:a8:6d:16:8c:f9:7e:0f:4d:09:41:
58:80:f4:30:74:87:20:39:02:44:6b:36:45:29:40:
88:60:46:9d:da:6f:fe:5a:1a:c4:84:71:81:21:12:
55:b4:bf:a4:b3:23:17:37:45:1f:bd:e9:90:c2:20:
77:5e:e3:a0:c5:8f:d7:5b:03:45:3b:37:30:29:34:
64:ef:52:dd:b7:28:4a:6c:24:fb:68:73:5b:fa:ef:
d4:d4:8e:84:69:46:67:6d:d9:08:bf:53:8c:79:90:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:F8:AA:DE:5E:ED:AD:88:E4:B6:35:28:5C:BD:89:4B:22:4A:D8
X509v3 Authority Key Identifier:
keyid:62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3e:87:8c:fd:58:66:9e:89:70:63:ec:eb:4d:ae:10:62:87:
39:24:65:54:6c:dd:09:56:a2:70:06:fd:53:bf:58:f5:ca:5e:
2d:4b:5d:62:09:ed:7d:65:46:d4:11:ba:7d:ac:06:e0:3d:2c:
48:35:8b:40:1c:3c:ff:65:f7:3d:25:59:e5:32:d6:d8:d7:3b:
5e:ad:97:a9:a6:3d:15:dc:10:56:6a:e8:29:2a:5e:71:6a:bd:
d2:4c:28:7b:4a:d0:e9:2d:82:a7:0b:ca:f8:ec:ca:b1:11:71:
4a:6a:42:76:fe:6f:b4:2e:f0:72:6f:b7:21:57:de:5b:69:68:
25:f2:e3:1e:dd:20:41:24:b2:84:1d:e5:f2:82:aa:b6:f3:48:
14:06:66:82:d6:b2:a0:4b:dc:58:0a:f9:e2:7a:56:2e:ad:5f:
b8:76:44:22:33:98:92:5b:fb:c0:d2:e3:bb:dd:b5:19:a3:d0:
9d:4e:9a:31:38:4f:c2:19:0e:9b:f5:93:e1:21:ae:8d:d4:05:
6d:24:98:b1:5d:c0:d3:6d:cd:cb:7b:60:fe:e1:4a:d8:e2:38:
8c:f9:46:81:3d:64:ac:7f:05:80:d8:d8:b2:52:c1:b6:23:19:
99:d6:b1:78:ec:f8:74:1d:b9:a6:e7:a1:b4:2c:45:33:a3:13:
8f:bf:28:57
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXi7FdyZikwsuBpoTNesRxomK10UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjIyMDFFMjBBMTgyQUZDQjk5ODUxMzI3MzNGMkZCRDFC
QjA5QzIxMDAeFw0yNjA5MjEyMDMyMDZaFw0yNjA5MjIyMjQxMDZaMDMxMTAvBgNV
BAMTKEQyRTZGOEFBREU1RUVEQUQ4OEU0QjYzNTI4NUNCRDg5NEIyMjRBRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDna9tf/UsW114NL//mnFVEP3X8
zZAp/5k79Flz08GXhbJQVzzGlAVTRk5Pb6YoxgDRlQ/4+ZSHUPh3AdzZ6Aw1cI43
ZJ0bXdptHWmJYepO+C5Hg8sm09iXOvtpPQhWooOYqR7tZ3W6r81No+VXTzFsfwhZ
Q64/KadCVhDYbd/VdNupsqCN7OBRnihx/97xCfTgos5kNNyKxx5hqG0WjPl+D00J
QViA9DB0hyA5AkRrNkUpQIhgRp3ab/5aGsSEcYEhElW0v6SzIxc3RR+96ZDCIHde
46DFj9dbA0U7NzApNGTvUt23KEpsJPtoc1v679TUjoRpRmdt2Qi/U4x5kOcVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0ub4qt5e7a2I5LY1KFy9iUsiStgwHwYDVR0j
BBgwFoAUYiAeIKGCr8uZhRMnM/L70bsJwhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmNlMGZlNWEtZTQ2OC00OWQ5LTkzMWItYWI0YjkyNGE0NWMyLzAvNjIyMDFFMjBB
MTgyQUZDQjk5ODUxMzI3MzNGMkZCRDFCQjA5QzIxMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MjIwMUUyMEExODJBRkNCOTk4NTEzMjczM0YyRkJEMUJCMDlD
MjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz
MWItYWI0YjkyNGE0NWMyLzAvNjIyMDFFMjBBMTgyQUZDQjk5ODUxMzI3MzNGMkZC
RDFCQjA5QzIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGs+h4z9WGaeiXBj7OtNrhBihzkkZVRs3QlW
onAG/VO/WPXKXi1LXWIJ7X1lRtQRun2sBuA9LEg1i0AcPP9l9z0lWeUy1tjXO16t
l6mmPRXcEFZq6CkqXnFqvdJMKHtK0OktgqcLyvjsyrERcUpqQnb+b7Qu8HJvtyFX
3ltpaCXy4x7dIEEksoQd5fKCqrbzSBQGZoLWsqBL3FgK+eJ6Vi6tX7h2RCIzmJJb
+8DS47vdtRmj0J1OmjE4T8IZDpv1k+Ehro3UBW0kmLFdwNNtzct7YP7hStjiOIz5
RoE9ZKx/BYDY2LJSwbYjGZnWsXjs+HQduabnobQsRTOjE4+/KFc=
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:06:48 2026 by rpki-client