
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.mft
File: 62DC4356F124B284CCF7683F293ACE03AA908BB4.mft (raw, json)
Hash identifier: IgdJGenViX20+FfBarVjrGXKvw104iG+tPPNGIW2VPc=
Subject key identifier: 1A:24:27:AD:09:41:73:8B:A8:A7:06:53:56:F7:33:FB:41:F5:DB:21
Authority key identifier: 62:DC:43:56:F1:24:B2:84:CC:F7:68:3F:29:3A:CE:03:AA:90:8B:B4
Certificate issuer: /CN=62DC4356F124B284CCF7683F293ACE03AA908BB4
Certificate serial: 7D2F0188B5CE0A4426736F693236ED23A4F7F506
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 08:31:45 +0000
Manifest this update: Wed 23 Sep 2026 08:26:45 +0000
Manifest next update: Thu 24 Sep 2026 10:17:45 +0000
Files and hashes: 1: 62DC4356F124B284CCF7683F293ACE03AA908BB4.crl (hash: eewSwUWnAoepROb+XfDU+llB1hIHC+xhA3gntmztooc=)
2: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: Mt7bi92IOZvTb5NYx2JMRJRH6rhwUfWsJY6JbhY9Tfo=)
3: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: bzicCi3fRyUxTzxC7ikngy0DKpsibWnoE0cWZsbGFdA=)
4: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: YhpGgm+xvoxVoDALcvkrwsbfApeiUPYx93T/CtIGM2M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.crl
rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 10:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2f:01:88:b5:ce:0a:44:26:73:6f:69:32:36:ed:23:a4:f7:f5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62DC4356F124B284CCF7683F293ACE03AA908BB4
Validity
Not Before: Sep 23 08:26:45 2026 GMT
Not After : Sep 24 10:17:45 2026 GMT
Subject: CN=1A2427AD0941738BA8A7065356F733FB41F5DB21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:3b:99:9b:ad:d5:3a:70:20:2c:67:dc:37:
95:85:41:ba:91:49:63:a6:09:9c:3b:e1:7f:c9:17:
ff:b1:f2:0b:77:61:a9:e4:ba:d0:6f:86:13:45:01:
fa:96:16:ef:1d:68:30:dc:fc:d6:ee:d0:ac:a8:9e:
ea:e2:d3:75:fb:44:1e:43:21:94:e2:1b:15:2d:ec:
79:94:44:87:6b:7a:77:fa:dc:7c:e3:c2:5d:91:0d:
73:5f:bc:97:51:9b:04:d2:88:51:27:79:58:8c:cc:
99:8e:23:1a:31:88:5a:f4:bc:22:ca:96:cf:3b:56:
56:c5:5e:aa:23:86:a8:25:3d:c8:fc:f6:0d:14:cc:
16:5b:7b:ce:d3:6f:fb:d8:46:9c:93:03:46:74:8f:
68:81:10:48:56:a1:31:03:9d:4b:35:43:33:c5:35:
42:c8:29:7c:39:8d:3c:6b:45:97:a5:25:f2:08:05:
d6:5b:19:67:f2:90:98:dc:3d:2f:c4:3e:e6:b6:a4:
f8:33:8c:ab:b7:d6:2a:29:86:10:82:e2:74:93:7e:
26:d8:da:40:60:bb:fc:45:23:bb:1b:6a:24:69:0b:
01:a1:c5:76:e8:1e:04:04:18:6b:f0:af:9a:85:41:
a0:e3:1e:a0:c5:b0:4f:06:ab:0b:a4:6b:fb:37:b1:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:27:AD:09:41:73:8B:A8:A7:06:53:56:F7:33:FB:41:F5:DB:21
X509v3 Authority Key Identifier:
keyid:62:DC:43:56:F1:24:B2:84:CC:F7:68:3F:29:3A:CE:03:AA:90:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:64:e0:6b:9c:0b:76:ad:0c:a7:14:2f:af:c1:c0:71:78:53:
7d:51:f5:76:c7:17:b0:62:e1:0e:e0:0b:58:25:ac:55:cc:c5:
14:65:a1:f9:6b:c6:f1:f1:a6:7f:83:14:23:e5:00:09:cf:90:
2b:a6:88:e7:8e:79:f8:7d:a1:78:c8:43:67:e2:0f:4f:f6:d4:
e3:c7:35:21:5e:0e:b4:f4:d6:b9:af:a1:2a:e1:d7:fa:5a:04:
87:bf:d5:7d:14:94:7a:bd:1c:44:cc:57:9f:ea:dc:9b:aa:ca:
dc:78:5d:b1:e7:4a:58:cf:e5:12:15:b7:6a:fd:cf:81:9c:1e:
77:20:ef:1b:e4:1f:a3:57:64:7e:bb:4b:57:03:99:51:00:61:
e1:a0:97:52:ec:1c:39:fb:17:14:29:92:2a:d8:67:a5:70:83:
83:74:0e:7b:37:2f:17:56:3c:78:78:83:3c:52:66:34:59:a9:
ba:cb:4c:46:12:b9:82:e8:b2:93:75:7b:de:23:d7:39:28:ef:
4b:f3:63:3e:16:67:8f:0c:5c:6c:d0:2d:c8:99:64:48:67:5f:
5f:b3:d4:e0:d2:7c:78:1c:9e:9d:6f:e8:2f:35:6c:c1:e4:53:
4e:dd:4b:65:11:ed:10:7e:64:e0:14:67:0f:95:d9:6c:bf:dd:
77:75:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:43 2026 by rpki-client