
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
File: 63C42504F704E536ADDF4D41DF027965A62F7B11.mft (raw, json)
Hash identifier: FW9lLLUUbX13UXKWG3IDpTiDi5dJMMvO7Ijl0iwrsWw=
Subject key identifier: 51:94:33:64:E5:CF:4A:37:E8:08:D2:66:C8:39:F7:5B:32:D1:82:E9
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 14E02D437A9448CA6798E2A97F66E52002CEC808
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 15:35:21 +0000
Manifest this update: Wed 23 Sep 2026 15:30:21 +0000
Manifest next update: Thu 24 Sep 2026 16:04:21 +0000
Files and hashes: 1: 323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa (hash: E7tRyXIBozKmAWDPU94JKnpIjpmZW93mBbGB/vhSTfw=)
2: 323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa (hash: UMElmVxVGeAJIKPTmGSXx95CBCTsQ3LOa1MQYwRIjcw=)
3: 323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa (hash: gcK+pqJGEc+f4D2WBOCc7GUa0VaQrxTAkfx+JnB9KGI=)
4: 323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa (hash: I4hXtaqkriV2QirRqH9cwQ/d2faPVKnfLsriv/RsIUs=)
5: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: kzxAv68uNPEKfG1HQVRXBBVOkPQgcn/faHJQz7/53H0=)
6: 323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa (hash: dnzOeOUcbijY19xCxBtYtQBVd5nl1yqrwv2rQGxHNeM=)
7: 323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa (hash: G3mpZmD64zWPzoaI+PEWGj9N85YGqwYb2GjVMXfv318=)
8: 63C42504F704E536ADDF4D41DF027965A62F7B11.crl (hash: dZ5PNjs7V18oCC7WXNi+qRRAnC0oPonXs6OdXdFTY0k=)
9: 323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa (hash: LPbZZDjsgtFNtJ3osMn5sdN6+owdYw48/PzxXoM+D8Y=)
10: 323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa (hash: MlWAkCDNZTZEl14oCloyLy5YDRvWhR8KK3xXXVx2zXs=)
11: 323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa (hash: P/CRBCwgpqum8FYFDzwyHXHMI8YL0EQQHVLJv9xYjmQ=)
12: 323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa (hash: gavXjP1843btT/INQ5H4TJbB2kVozgzR0wx4AZmGfs4=)
13: 323430323a383738303a313033313a3a2f34382d3438203d3e203633383539.roa (hash: QV29NHQ6gKTUnh8gl26mnAbhFcTrX7cqcb4Z8q99Km0=)
14: 323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa (hash: QEvplEmBTKzvLNJjG+BuTZvEQ5RxcrPMpi8Wq9iAPuY=)
15: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: kDMH4liiT4ctFaAjxOkI+G3H0xW1ccalXWrAA+Sk+Tw=)
16: 323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa (hash: mKDRLLuItZdGKqg74M0ldsqeCk9UewXSi/RAFWP012I=)
17: 323430323a383738303a313037383a3a2f34382d3438203d3e203633383539.roa (hash: HHhXOt4Y3AtwU0dvY9ZMDvp4/FDXY2pF7raH1bssvBQ=)
18: 323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa (hash: BHe0m+lPcGp48MevadQczbSKo8lgsMBfVDuyo6gH4Z8=)
19: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: HnFnN/gwcfh/Pmdxl8AW6aaxwuqBWxhzBe0aqoQ5fWA=)
20: 323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa (hash: 1ASrzbPmwcd/DHS8urHeUWc9E+d1UpvPQYSfQKHBx4w=)
21: 323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa (hash: 41vzNeJSTKVYMid2VrmfKQGDFALw1Z1aA0Bk6HWTfDA=)
22: 323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa (hash: 2QQzbibx13e9OznQwDFFooXULfjO91bpIYzgasoVnLs=)
23: 323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa (hash: vYET56HFYpChL6bGq11j5RB2Wr1FAT/zt+FKBjbdqwQ=)
24: 323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa (hash: 5hgqs02RXm1ZntrYSk4tQ5/RQyJ8uqBgUr+Y2soYwvI=)
25: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: mS1r5MFJ4uAuaLA8mGOTn1ZK/uISEXGX1CXLizmvMz4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 16:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e0:2d:43:7a:94:48:ca:67:98:e2:a9:7f:66:e5:20:02:ce:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: Sep 23 15:30:21 2026 GMT
Not After : Sep 24 16:04:21 2026 GMT
Subject: CN=51943364E5CF4A37E808D266C839F75B32D182E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:2c:e8:93:21:85:af:85:60:72:f0:b1:a6:
f4:25:e3:29:62:f4:71:af:eb:15:42:df:4a:cd:91:
1d:00:85:51:5a:76:49:35:40:de:4b:45:02:2f:9f:
11:43:f7:02:ab:3c:ad:e6:f7:8c:74:a1:60:b3:e2:
98:3b:c6:a3:3b:ef:00:61:9d:97:b4:ba:d2:f7:63:
f0:88:31:50:6e:ec:27:d4:11:a6:c9:bf:7a:4d:4a:
d4:cc:d9:d7:92:af:3f:bb:87:b9:ad:39:07:ee:a7:
f2:a0:03:10:da:da:b3:8d:2f:a5:2c:82:29:d8:9b:
4b:3c:e8:7d:12:95:32:6e:39:1f:1c:36:59:73:b2:
19:2c:60:a6:c9:9e:b6:0e:bb:50:81:f8:c8:3e:c8:
d5:1d:3f:fd:f8:a6:62:94:60:06:77:2b:53:ca:61:
e3:ad:77:a9:5d:91:02:93:c6:ce:7c:cb:83:42:fb:
b1:a9:f9:a6:0c:e7:f4:22:ab:ed:b9:2e:f5:3f:6d:
10:c2:9e:03:25:14:f3:1c:60:49:0b:ec:52:1f:81:
12:c3:f8:21:60:1f:c8:6f:21:64:85:6d:d1:53:c8:
4a:0a:90:ab:88:36:8b:78:9f:05:e9:e7:97:5d:b8:
5a:55:65:1d:d0:6f:da:09:30:f8:88:c0:80:a7:25:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:33:64:E5:CF:4A:37:E8:08:D2:66:C8:39:F7:5B:32:D1:82:E9
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:4d:2e:30:12:cf:c6:21:48:99:55:17:0c:47:4c:13:a6:
ad:92:be:4e:35:8a:e1:df:32:b8:be:3d:de:1a:1a:c2:5b:5a:
c5:25:e6:37:ef:7a:99:c1:1e:a5:eb:96:8f:b5:fc:3c:4b:8e:
e8:7f:48:f7:d9:a8:0a:83:14:29:83:b2:cf:f1:d4:39:5f:60:
f6:c5:4a:6d:d1:d6:cb:7e:3a:6c:3c:b3:bb:6a:b4:ad:ff:a4:
34:21:bb:a3:b7:0a:73:8b:11:55:5c:7b:42:14:e9:40:15:70:
9b:da:4c:9f:a2:9d:61:10:12:52:24:f8:d3:96:34:58:ac:c5:
88:bf:68:a8:40:3b:d8:ca:ac:e9:98:74:0c:5c:23:91:88:56:
c7:d0:25:07:10:a0:97:ff:df:a6:9b:62:bd:3e:0d:19:32:90:
98:5d:22:de:51:28:7e:79:c0:16:69:49:09:81:0a:9c:67:a1:
aa:3e:6a:be:b6:48:08:b9:68:89:16:a6:ed:8a:84:cc:a8:db:
0b:57:88:e4:92:c8:0e:43:89:cc:5f:68:2a:5a:43:18:a4:11:
a4:82:2c:dd:10:5c:48:36:b5:12:37:58:34:4f:77:2a:94:21:
6e:00:a3:cd:ab:5a:65:66:73:4a:53:c8:3b:c9:0f:b7:b7:db:
0f:af:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:43:07 2026 by rpki-client