
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
File: 62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft (raw, json)
Hash identifier: ddvDN2AWSeNadGOix+4O1NUPuP+/gWh8hWz59CgMsJw=
Subject key identifier: 3F:A2:15:B9:D1:A0:32:73:53:11:1C:2D:14:0C:54:B7:7F:47:EA:64
Authority key identifier: 62:CC:55:FF:7E:46:DD:8B:E3:BD:A9:CC:26:0F:D6:CB:5C:AE:7F:79
Certificate issuer: /CN=62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79
Certificate serial: 02F8AEA2D23479A1D81B2C8FF76BD415ECBD4894
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:00:09 +0000
Manifest this update: Tue 12 May 2026 04:55:09 +0000
Manifest next update: Wed 13 May 2026 06:52:09 +0000
Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: dZzrlBZCDkmu4VCWIhI5hpUpjLyVFUXhz7gItuWKI3k=)
2: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: W3urnvB4E+6SEusJQIN6SGkpT8Tewd+aHWIjJ/m7d6s=)
3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: NoLVaaDOlsaGhgYap1uw6NFZLTQBT/IcZ3Ebg++K2jc=)
4: 62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl (hash: Va3HUKBl8ZfCnSpKuIRaLkBLW0mxrUSBz1UaABvgo2g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl
rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f8:ae:a2:d2:34:79:a1:d8:1b:2c:8f:f7:6b:d4:15:ec:bd:48:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79
Validity
Not Before: May 12 04:55:09 2026 GMT
Not After : May 13 06:52:09 2026 GMT
Subject: CN=3FA215B9D1A0327353111C2D140C54B77F47EA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:91:22:d4:f5:4b:f8:cf:c1:d6:21:d0:22:
a3:ee:4c:48:3d:99:51:7f:ba:5b:24:f5:f7:fd:69:
9a:41:95:46:91:31:7a:54:8e:ef:70:d7:47:0a:09:
e8:73:79:b9:7a:c8:76:34:a5:b7:44:1b:76:61:69:
af:10:2d:9d:08:ae:02:f0:52:66:a0:f5:5d:12:3e:
52:96:24:0b:f3:06:9c:46:d4:97:e1:48:8c:57:95:
db:8c:17:b9:74:42:35:d3:ab:0b:ba:7d:32:df:8e:
04:67:79:ae:fa:56:f1:0b:f4:d9:c1:f8:0c:ee:bb:
d4:59:04:6a:44:a3:a7:a2:ef:33:b0:e8:ff:ff:67:
bc:08:74:72:34:3d:bc:c3:7d:8a:45:4a:2a:45:45:
f3:dd:7f:5c:87:80:09:18:e0:ad:17:48:ef:80:98:
3c:87:30:95:14:6a:33:5b:e5:d7:65:ad:16:1e:b6:
49:47:b7:b6:e7:40:d8:ad:75:58:95:4c:b1:d8:db:
7d:2b:9c:26:ed:b7:85:a0:a2:f1:df:32:1c:66:68:
88:e3:44:30:b9:dd:ee:4f:4a:9f:5e:f1:da:eb:96:
84:0e:63:34:77:c9:0d:26:78:d1:9c:5b:f7:05:30:
38:fb:6d:7c:a3:1c:40:57:03:1c:46:35:a4:8c:64:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:15:B9:D1:A0:32:73:53:11:1C:2D:14:0C:54:B7:7F:47:EA:64
X509v3 Authority Key Identifier:
keyid:62:CC:55:FF:7E:46:DD:8B:E3:BD:A9:CC:26:0F:D6:CB:5C:AE:7F:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8c:b3:ae:93:ac:3d:7f:5a:01:48:6f:91:07:fe:79:e9:ba:
70:3c:27:b5:0f:63:b4:c8:e8:a1:0d:bd:62:a9:d2:41:29:ad:
66:b5:f8:e9:9d:0b:e3:9b:09:43:c0:bf:4e:a5:96:57:ad:3b:
79:af:e8:75:d6:16:6c:55:66:2b:d0:cf:96:88:5a:07:f1:3a:
ca:c4:6e:59:36:bf:bf:01:03:be:41:34:53:20:53:f2:2a:df:
02:92:13:49:8b:e3:c8:2f:9c:7c:b5:a7:9d:7c:9c:58:e0:ed:
33:ba:a0:bf:6d:c7:35:2e:b3:5b:90:3d:9b:b2:63:96:fe:de:
fb:62:4f:09:6f:b3:8b:ba:80:39:ff:3d:d8:4f:18:18:41:e3:
08:e6:73:b0:ea:47:24:e0:74:e2:32:5a:da:cb:7c:6a:ee:9f:
33:40:e2:28:a2:51:e2:97:fa:3b:2e:a0:67:93:a9:f7:dd:00:
fd:95:c8:7d:f4:42:66:82:4a:be:36:6d:7d:01:cd:1c:71:96:
42:32:75:87:6f:29:da:12:0d:7c:6e:4b:0c:2c:db:78:18:b9:
2d:a1:55:91:8b:bb:8e:f5:d9:d5:23:6d:a9:66:46:62:74:f7:
4e:73:6b:79:f7:1e:57:41:82:2a:d7:93:63:30:10:c4:9a:5a:
fc:c9:16:f7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAviuotI0eaHYGyyP92vUFey9SJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJDQzU1RkY3RTQ2REQ4QkUzQkRBOUNDMjYwRkQ2Q0I1
Q0FFN0Y3OTAeFw0yNjA1MTIwNDU1MDlaFw0yNjA1MTMwNjUyMDlaMDMxMTAvBgNV
BAMTKDNGQTIxNUI5RDFBMDMyNzM1MzExMUMyRDE0MEM1NEI3N0Y0N0VBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDroJEi1PVL+M/B1iHQIqPuTEg9
mVF/ulsk9ff9aZpBlUaRMXpUju9w10cKCehzebl6yHY0pbdEG3Zhaa8QLZ0IrgLw
Umag9V0SPlKWJAvzBpxG1JfhSIxXlduMF7l0QjXTqwu6fTLfjgRnea76VvEL9NnB
+Azuu9RZBGpEo6ei7zOw6P//Z7wIdHI0PbzDfYpFSipFRfPdf1yHgAkY4K0XSO+A
mDyHMJUUajNb5ddlrRYetklHt7bnQNitdViVTLHY230rnCbtt4WgovHfMhxmaIjj
RDC53e5PSp9e8drrloQOYzR3yQ0meNGcW/cFMDj7bXyjHEBXAxxGNaSMZBenAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUP6IVudGgMnNTERwtFAxUt39H6mQwHwYDVR0j
BBgwFoAUYsxV/35G3YvjvanMJg/Wy1yuf3kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTQ3Y2Q1YTItYTc0Mi00NTBjLWIxOTAtNTAwZTc1NDUyMGRlLzAvNjJDQzU1RkY3
RTQ2REQ4QkUzQkRBOUNDMjYwRkQ2Q0I1Q0FFN0Y3OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82MkNDNTVGRjdFNDZERDhCRTNCREE5Q0MyNjBGRDZDQjVDQUU3
Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx
OTAtNTAwZTc1NDUyMGRlLzAvNjJDQzU1RkY3RTQ2REQ4QkUzQkRBOUNDMjYwRkQ2
Q0I1Q0FFN0Y3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEGMs66TrD1/WgFIb5EH/nnpunA8J7UPY7TI
6KENvWKp0kEprWa1+OmdC+ObCUPAv06llletO3mv6HXWFmxVZivQz5aIWgfxOsrE
blk2v78BA75BNFMgU/Iq3wKSE0mL48gvnHy1p518nFjg7TO6oL9txzUus1uQPZuy
Y5b+3vtiTwlvs4u6gDn/PdhPGBhB4wjmc7DqRyTgdOIyWtrLfGrunzNA4iiiUeKX
+jsuoGeTqffdAP2VyH30QmaCSr42bX0BzRxxlkIydYdvKdoSDXxuSwws23gYuS2h
VZGLu4712dUjbalmRmJ0905za3n3HldBgirXk2MwEMSaWvzJFvc=
-----END CERTIFICATE-----
Generated at Tue May 12 22:46:46 2026 by rpki-client