
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
File: 62201E20A182AFCB9985132733F2FBD1BB09C210.mft (raw, json)
Hash identifier: B7AwwOz77Z8O7zLC+0GFCbvQi+kTSzFofXfvviBl/Ms=
Subject key identifier: E3:FD:EF:65:58:EE:9B:F3:FB:A3:23:F4:4A:6C:72:9F:4F:00:1E:4D
Authority key identifier: 62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
Certificate issuer: /CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Certificate serial: 6A6E8CF2B241F5D99022CA2148D47450A6BEE621
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 01:59:48 +0000
Manifest this update: Tue 12 May 2026 01:54:48 +0000
Manifest next update: Wed 13 May 2026 05:32:48 +0000
Files and hashes: 1: 62201E20A182AFCB9985132733F2FBD1BB09C210.crl (hash: f4XfixiUSxYktr5HceWDNAagW6R128MmuMKQ6RiheBc=)
2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: cdTAWLi8m26n5P7CJT3lqMoZoU5FXrpIaSroPqf5DL0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl
rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:6e:8c:f2:b2:41:f5:d9:90:22:ca:21:48:d4:74:50:a6:be:e6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Validity
Not Before: May 12 01:54:48 2026 GMT
Not After : May 13 05:32:48 2026 GMT
Subject: CN=E3FDEF6558EE9BF3FBA323F44A6C729F4F001E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:db:98:db:c3:19:db:41:25:46:5c:8c:72:
93:ef:20:0f:51:cc:bf:56:f8:46:b6:69:0c:fe:47:
79:8b:90:4c:9a:65:db:0f:6a:1f:46:92:8e:3f:6f:
9f:aa:47:51:36:86:0f:4a:ea:30:25:61:43:b1:01:
f0:5b:15:35:03:7d:75:9a:f6:c3:fd:61:97:fe:61:
71:41:62:07:c9:b4:c3:56:0b:f7:a8:23:45:21:cb:
cb:11:d7:2e:27:1c:2a:e3:ec:20:55:f4:17:70:e3:
16:83:20:87:8b:02:04:fb:44:14:e1:e3:61:75:c4:
d6:4e:61:5c:07:05:6b:42:71:7e:b7:ef:ed:2c:e4:
b3:27:fb:63:29:2e:49:d4:af:c3:69:63:33:a2:ee:
ad:3b:f3:1b:a2:9e:67:f1:d4:fd:d5:0f:b8:1a:7c:
86:74:b2:0f:72:65:0b:33:8d:2e:39:4a:ff:9c:10:
f7:67:26:bb:15:fa:92:53:7a:b8:27:f2:65:6f:1e:
6e:0a:d2:6a:9e:57:32:8e:55:ec:81:f6:6a:9c:75:
0e:52:05:8e:ab:f6:58:07:55:50:a5:47:e9:06:6d:
89:69:df:a6:03:42:17:1c:cc:fe:6a:e1:1f:75:d1:
55:5b:12:07:10:c4:9c:98:98:94:54:ba:b1:5e:87:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FD:EF:65:58:EE:9B:F3:FB:A3:23:F4:4A:6C:72:9F:4F:00:1E:4D
X509v3 Authority Key Identifier:
keyid:62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:81:13:73:3e:99:75:7c:7f:3c:d3:5c:69:02:ad:b8:05:9c:
05:26:9b:de:ab:66:02:93:9f:50:e2:8f:e7:91:ce:8d:fe:1c:
8d:d4:73:ed:4a:d4:3a:e6:2f:ba:06:74:03:1e:02:9f:c5:74:
2b:fe:da:ed:f6:46:e4:8b:2f:14:2b:e5:48:85:25:5d:72:70:
df:28:38:65:53:e6:20:44:27:c9:cd:43:46:cc:c1:fe:df:31:
4b:05:25:12:75:53:4a:1d:71:5a:a5:58:13:b5:a7:6a:01:1a:
04:9f:89:66:98:25:2b:94:a0:a5:18:be:ad:48:a7:40:35:62:
bd:ed:a1:6e:0a:df:10:94:a6:0d:46:ff:7f:81:bb:3d:75:9c:
61:6c:e8:2b:ea:ef:ef:ea:3e:af:e1:66:aa:86:82:82:28:f6:
12:3c:e1:98:1b:4e:d9:66:f2:6a:a6:01:a2:6f:5a:10:64:ce:
ef:71:a8:1c:a3:5a:ab:24:ba:b7:28:93:cc:21:ea:6d:e7:e9:
48:a9:f1:70:94:57:47:37:ea:fb:fa:ab:91:af:36:00:9c:d7:
ae:a5:4e:ed:cb:a1:ec:81:27:d2:58:34:2d:f6:3e:f7:e1:e3:
42:d9:a8:c0:ee:56:9f:0a:7b:18:8a:89:61:80:2d:ca:e8:82:
86:bb:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:11 2026 by rpki-client