
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
File: 62201E20A182AFCB9985132733F2FBD1BB09C210.mft (raw, json)
Hash identifier: 97mqU6X19RPooA4QDoUv4ERTwZl6SjOk/cWElzxRDNY=
Subject key identifier: D1:53:33:03:D6:0E:95:A9:79:C7:EC:8D:32:9A:2A:DE:03:48:3E:54
Authority key identifier: 62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
Certificate issuer: /CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Certificate serial: 6AC929B9367A57E9637371F7EB994C2B7389AD63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 23:55:38 +0000
Manifest this update: Wed 23 Sep 2026 23:50:38 +0000
Manifest next update: Fri 25 Sep 2026 02:21:38 +0000
Files and hashes: 1: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: cdTAWLi8m26n5P7CJT3lqMoZoU5FXrpIaSroPqf5DL0=)
2: 62201E20A182AFCB9985132733F2FBD1BB09C210.crl (hash: o6Lufd4h4Qbh056u9gsR6yCkHQFOaEShUcSnoIl3vAM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl
rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c9:29:b9:36:7a:57:e9:63:73:71:f7:eb:99:4c:2b:73:89:ad:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Validity
Not Before: Sep 23 23:50:38 2026 GMT
Not After : Sep 25 02:21:38 2026 GMT
Subject: CN=D1533303D60E95A979C7EC8D329A2ADE03483E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:3c:99:cf:13:4a:87:29:6e:b2:76:65:6c:
2d:b3:2f:8a:10:0e:b5:a4:cb:8d:85:af:f4:d2:07:
99:64:bf:7b:94:54:cc:ac:8d:eb:9b:97:b7:ee:d6:
2e:73:43:ba:58:4b:78:13:e7:eb:60:7e:76:48:59:
ba:a5:a0:ca:4f:c0:6f:56:f9:ba:56:49:71:8c:c9:
00:46:ce:10:14:55:8c:15:a3:b9:48:3f:d8:1c:8b:
5e:39:db:c7:76:30:dc:ff:c1:88:78:ba:ef:29:bc:
0e:04:3b:f7:8c:24:18:cd:7e:71:5e:50:47:a0:4d:
46:8d:53:88:19:0c:4c:61:e7:06:43:98:84:b5:c8:
bb:03:b2:f6:7a:ba:5b:32:f0:2e:34:a4:df:b5:90:
bc:fe:86:b5:9e:ad:ef:7c:73:e3:15:56:cd:3c:29:
c2:3b:dc:51:6e:3b:07:3c:1b:44:6d:94:55:ee:fa:
ee:cb:67:c8:7d:f3:72:f1:cc:c4:ce:9b:cf:d2:9b:
22:01:47:80:4f:8b:ce:c9:dd:8a:ef:95:51:e0:78:
60:1c:4a:bb:76:6c:83:7c:c9:74:a6:80:fa:9f:8f:
00:8d:b5:a3:bb:66:99:2d:0b:66:bf:94:0f:ad:ce:
6c:cc:69:f4:ac:ed:d2:20:fc:dc:08:fd:6d:e7:14:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:33:03:D6:0E:95:A9:79:C7:EC:8D:32:9A:2A:DE:03:48:3E:54
X509v3 Authority Key Identifier:
keyid:62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:bc:c8:b0:19:b9:a7:63:05:b1:db:49:e3:d7:4b:21:a0:
dc:4f:29:56:55:ea:8f:54:f1:e8:5d:c8:b6:09:79:54:78:fc:
c5:73:d2:32:80:39:4b:dd:a3:75:80:16:25:38:ad:38:f3:b2:
21:17:35:04:53:51:15:d5:8b:a7:4d:98:b3:79:23:99:3e:27:
eb:c7:d2:90:02:18:c3:7a:eb:01:01:dd:b9:1e:43:18:a9:8d:
34:c5:7d:9d:62:63:1b:95:e7:7d:07:98:30:9c:68:20:18:b8:
9e:74:c5:39:2b:7d:9d:f4:d6:bf:3a:13:f1:96:73:c4:97:7b:
a3:a1:2d:95:dd:85:60:06:d4:c8:b6:d8:89:74:e2:85:00:18:
7b:b7:fa:ea:6c:7f:c3:cc:b7:8f:72:8c:fa:02:fb:73:f0:ec:
ec:f6:4d:18:5d:f7:78:01:f6:2e:d4:d0:f2:cb:f9:9e:0f:d9:
58:cd:02:63:00:ae:f5:ad:76:8d:ac:e6:79:57:dd:82:f9:4e:
80:b9:75:66:09:2e:5f:4f:b4:b3:49:3b:c5:1f:e5:d4:20:af:
cd:7a:c4:f4:40:63:6b:c9:8a:73:8c:91:69:a0:72:04:3e:a6:
33:d8:71:27:78:52:9e:ee:23:a9:fc:be:bb:70:50:6d:14:74:
33:a1:44:e3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaskpuTZ6V+ljc3H365lMK3OJrWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjIyMDFFMjBBMTgyQUZDQjk5ODUxMzI3MzNGMkZCRDFC
QjA5QzIxMDAeFw0yNjA5MjMyMzUwMzhaFw0yNjA5MjUwMjIxMzhaMDMxMTAvBgNV
BAMTKEQxNTMzMzAzRDYwRTk1QTk3OUM3RUM4RDMyOUEyQURFMDM0ODNFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6jyZzxNKhylusnZlbC2zL4oQ
DrWky42Fr/TSB5lkv3uUVMysjeubl7fu1i5zQ7pYS3gT5+tgfnZIWbqloMpPwG9W
+bpWSXGMyQBGzhAUVYwVo7lIP9gci14528d2MNz/wYh4uu8pvA4EO/eMJBjNfnFe
UEegTUaNU4gZDExh5wZDmIS1yLsDsvZ6ulsy8C40pN+1kLz+hrWere98c+MVVs08
KcI73FFuOwc8G0RtlFXu+u7LZ8h983LxzMTOm8/SmyIBR4BPi87J3YrvlVHgeGAc
Srt2bIN8yXSmgPqfjwCNtaO7ZpktC2a/lA+tzmzMafSs7dIg/NwI/W3nFP2fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0VMzA9YOlal5x+yNMpoq3gNIPlQwHwYDVR0j
BBgwFoAUYiAeIKGCr8uZhRMnM/L70bsJwhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmNlMGZlNWEtZTQ2OC00OWQ5LTkzMWItYWI0YjkyNGE0NWMyLzAvNjIyMDFFMjBB
MTgyQUZDQjk5ODUxMzI3MzNGMkZCRDFCQjA5QzIxMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MjIwMUUyMEExODJBRkNCOTk4NTEzMjczM0YyRkJEMUJCMDlD
MjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz
MWItYWI0YjkyNGE0NWMyLzAvNjIyMDFFMjBBMTgyQUZDQjk5ODUxMzI3MzNGMkZC
RDFCQjA5QzIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEpvvMiwGbmnYwWx20nj10shoNxPKVZV6o9U
8ehdyLYJeVR4/MVz0jKAOUvdo3WAFiU4rTjzsiEXNQRTURXVi6dNmLN5I5k+J+vH
0pACGMN66wEB3bkeQxipjTTFfZ1iYxuV530HmDCcaCAYuJ50xTkrfZ301r86E/GW
c8SXe6OhLZXdhWAG1Mi22Il04oUAGHu3+upsf8PMt49yjPoC+3Pw7Oz2TRhd93gB
9i7U0PLL+Z4P2VjNAmMArvWtdo2s5nlX3YL5ToC5dWYJLl9PtLNJO8Uf5dQgr816
xPRAY2vJinOMkWmgcgQ+pjPYcSd4Up7uI6n8vrtwUG0UdDOhROM=
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:13:33 2026 by rpki-client