
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
File: 62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft (raw, json)
Hash identifier: 40nZ4mv3jCvY/sLtINwKmx0LikqDHEF58rjBu+8NJU4=
Subject key identifier: 2C:6A:7A:32:F1:AF:DB:1D:1C:2C:B7:7C:F5:B4:ED:0F:29:D5:27:7A
Authority key identifier: 62:CC:55:FF:7E:46:DD:8B:E3:BD:A9:CC:26:0F:D6:CB:5C:AE:7F:79
Certificate issuer: /CN=62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79
Certificate serial: 07E6D84FE2F6903299B63822569E74C326EA583C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 11:45:56 +0000
Manifest this update: Mon 21 Sep 2026 11:40:56 +0000
Manifest next update: Tue 22 Sep 2026 14:28:56 +0000
Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: NoLVaaDOlsaGhgYap1uw6NFZLTQBT/IcZ3Ebg++K2jc=)
2: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: W3urnvB4E+6SEusJQIN6SGkpT8Tewd+aHWIjJ/m7d6s=)
3: 62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl (hash: cNwlJ4kx7Tfmbv/GHnAqNlDfI4EU98aTlVXmheNVB7E=)
4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: dZzrlBZCDkmu4VCWIhI5hpUpjLyVFUXhz7gItuWKI3k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl
rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e6:d8:4f:e2:f6:90:32:99:b6:38:22:56:9e:74:c3:26:ea:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79
Validity
Not Before: Sep 21 11:40:56 2026 GMT
Not After : Sep 22 14:28:56 2026 GMT
Subject: CN=2C6A7A32F1AFDB1D1C2CB77CF5B4ED0F29D5277A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:b3:4e:64:76:21:3f:45:e4:f3:a7:38:1d:
52:ff:fd:b4:1d:2d:61:cf:85:89:a0:9b:04:ee:fe:
86:24:0e:5b:25:34:7b:30:57:ef:6c:36:9d:98:fa:
01:5a:0a:9c:32:84:92:1c:63:44:a7:90:97:70:90:
0f:26:d7:3e:ad:b5:ef:25:c2:5f:29:8d:42:72:f5:
cd:9b:ab:9f:b8:7d:51:ca:3c:6e:94:a5:f8:55:e7:
d1:f2:03:c2:b3:62:6f:24:7d:a1:f0:69:3e:39:ce:
f1:41:b6:8e:73:7f:f6:af:60:c8:f0:23:03:a2:ef:
58:d0:4e:75:85:57:6c:af:1b:25:44:7d:5b:da:86:
cc:70:18:17:34:62:84:ae:91:f3:53:c9:e6:4a:d0:
e7:ef:0b:72:29:49:f1:15:cf:80:2e:fb:28:c3:48:
78:7d:cd:71:0a:87:68:c6:66:1f:31:8b:75:6c:72:
59:54:52:37:2d:ed:e4:46:38:1a:77:91:bf:a2:bc:
dc:3d:31:75:9b:90:a5:bc:99:27:42:fe:db:1f:9c:
3f:2b:20:a9:47:8d:4e:68:b4:54:ed:4f:90:db:20:
8c:67:b3:fd:61:05:36:28:36:96:08:36:56:65:7e:
af:41:18:c7:2c:4d:07:bb:2b:91:a2:d4:be:27:9a:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6A:7A:32:F1:AF:DB:1D:1C:2C:B7:7C:F5:B4:ED:0F:29:D5:27:7A
X509v3 Authority Key Identifier:
keyid:62:CC:55:FF:7E:46:DD:8B:E3:BD:A9:CC:26:0F:D6:CB:5C:AE:7F:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bb:6a:c7:a1:d0:23:0d:7a:1b:18:e5:51:93:49:d0:61:c0:
02:97:85:2b:11:79:19:50:c9:4b:ee:b9:bd:05:5c:50:76:aa:
55:cd:cf:3e:e2:fb:f6:60:b2:64:00:90:5f:01:be:6a:ff:1a:
cb:84:6f:6d:34:87:fc:47:d7:b2:49:f6:4a:69:80:3e:8e:bb:
52:db:11:ca:7a:24:65:bc:68:03:d9:fe:2f:90:56:87:e6:ef:
ca:84:50:d1:67:67:d2:c0:a5:87:b4:6a:e7:08:a2:82:52:32:
08:e8:82:0d:ce:61:e3:5e:16:3b:29:34:9a:6f:bf:11:2c:00:
4f:86:09:61:51:4c:00:a5:60:6d:e4:81:3a:5c:bc:f3:46:3b:
cb:6b:d6:c6:3c:41:5b:3c:3b:a5:e0:c3:62:46:51:2b:cc:d3:
e9:b8:fd:0e:a8:1e:f9:a9:09:e6:42:84:9e:e2:01:b5:fe:84:
3c:f4:d6:87:6d:73:45:d2:5c:62:1f:b0:11:cd:87:ef:79:c4:
84:9a:cc:bf:11:56:90:2b:d6:59:30:1f:58:a7:71:93:82:de:
23:c3:eb:e3:16:4e:04:be:22:4f:0c:2e:6e:57:cb:25:f1:dc:
86:01:e7:4f:72:7e:21:2b:41:1c:0d:22:ef:cd:be:8a:b3:c5:
27:59:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:37:47 2026 by rpki-client