
$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
File: 62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json)
Hash identifier: MS+8ybGrbH3aFPA5frBYfr9JpM0Su5L1Pqzmz1uPnhs=
Subject key identifier: CA:B6:2E:09:7A:87:DA:D7:95:55:FD:CB:39:31:FC:02:22:BC:A4:FC
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial: 3A942BC3A5B1B5B658E609DBCE56CD1D9D90379F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
Manifest number: 011F
Signing time: Fri 06 Mar 2026 08:20:50 +0000
Manifest this update: Fri 06 Mar 2026 08:15:50 +0000
Manifest next update: Mon 09 Mar 2026 15:12:50 +0000
Files and hashes: 1: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: SP12xLDyV/VP9N1xqFMD2+nxhDzqIZUfpt67MZUwfE8=)
2: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Eu+4u02FPo/RfVFVxOIqvYkg8/wWVoya955tDIny+5E=)
3: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: GWaWKRBrWSX+bUdESxh+m2otGWb/hOeTShn9gb95F3w=)
4: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: 1rNcG3FnowCeWLCjBOKZ77nj2U5RRY5xUfuc4CyOAvA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:94:2b:c3:a5:b1:b5:b6:58:e6:09:db:ce:56:cd:1d:9d:90:37:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
Validity
Not Before: Mar 6 08:15:50 2026 GMT
Not After : Mar 9 15:12:50 2026 GMT
Subject: CN=CAB62E097A87DAD79555FDCB3931FC0222BCA4FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:30:8b:fc:8e:76:e5:c2:5e:07:99:df:c7:
a8:44:14:61:b8:95:69:85:05:c6:08:00:ee:23:cb:
ce:a5:41:52:82:cf:7c:23:d2:45:d8:b9:9f:6b:fc:
19:5a:76:42:aa:18:a4:51:9e:e1:18:cc:1b:17:95:
56:2b:2f:8e:35:8c:6a:dd:ee:e1:93:86:4a:01:22:
e4:98:b7:dc:32:06:4c:cb:1f:20:c9:6d:04:03:fb:
34:e7:f5:80:fd:ea:3c:c1:fc:d1:2d:84:f8:4c:b8:
b5:95:d2:57:a7:e6:06:0d:4c:b5:67:cc:b4:6b:a1:
40:07:e6:f9:8e:0c:bb:a6:99:b6:d3:37:c2:af:76:
fc:5e:e3:65:64:90:7a:33:eb:77:51:9a:3d:8c:76:
db:35:ab:fa:6a:ae:5a:d7:19:99:f0:fe:7f:b4:af:
66:e7:95:e2:b4:70:42:69:9e:04:31:6e:d6:88:08:
8b:e5:b7:e5:4d:a6:52:3f:f1:92:69:a8:07:7b:22:
4f:5f:de:2b:f5:44:19:34:ce:0f:6d:8a:8d:34:3e:
64:05:4c:52:52:14:0b:c8:91:10:6a:f4:5c:a5:7e:
a7:7c:6c:f4:05:94:57:bb:c8:89:32:70:1e:cc:ad:
1b:48:bd:69:45:07:7f:ca:96:a5:5e:42:32:8e:2e:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:2E:09:7A:87:DA:D7:95:55:FD:CB:39:31:FC:02:22:BC:A4:FC
X509v3 Authority Key Identifier:
keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a5:8c:b5:d7:40:68:7d:db:63:57:1e:0a:3d:ba:0a:04:da:
c2:6f:53:ca:05:7d:14:93:92:ee:c9:6e:f5:7d:44:91:80:90:
71:27:17:b2:d4:9c:44:0c:2f:44:fd:a2:98:b6:3f:f9:83:a6:
5d:37:1b:16:43:4e:f4:d7:bb:49:fb:1e:ad:54:14:be:14:69:
55:49:08:7b:ac:7e:7b:a6:a0:c3:29:3e:d2:fa:00:9c:21:41:
52:28:2b:86:a5:8c:12:97:86:cd:ea:c0:2d:e9:ba:c9:64:d2:
78:84:2f:44:0e:a6:82:de:2e:ef:6d:62:3f:c0:f9:07:6a:cb:
0d:36:dc:2d:26:f2:e4:67:4e:3a:5c:3a:b7:16:5a:e8:bd:ed:
a8:0e:89:2d:d7:12:d7:74:82:82:24:5b:ed:e1:de:c4:c5:b5:
5b:18:27:43:17:2c:70:a8:31:86:f3:c2:67:f8:2c:be:b7:93:
16:ac:d5:0c:05:fb:e2:72:ea:ae:2f:fb:77:9b:e8:b1:2c:09:
95:8c:48:3c:e2:ad:e0:c2:0b:e8:60:70:8f:70:3b:f2:60:43:
8b:2d:74:08:ad:f4:4e:33:0b:2c:91:c6:a1:01:ba:bd:44:4c:
c2:0f:6f:40:47:c1:64:c8:d2:c6:7f:31:a1:ea:cf:d8:bf:80:
1a:c9:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:29 2026 by rpki-client