
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft
File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json)
Hash identifier: d9F+DGPAfjS6nwmFkIyZlVLf52UnWhEqS9v1Zog5IJI=
Subject key identifier: E5:43:3C:1A:BA:6C:56:24:3F:90:3E:11:8A:20:2A:A1:E3:48:CE:7C
Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD
Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD
Certificate serial: 1E713C4BE2C97C57F4B8F324C0106FA82D1548ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft
Manifest number: 011B
Signing time: Fri 06 Mar 2026 02:20:41 +0000
Manifest this update: Fri 06 Mar 2026 02:15:41 +0000
Manifest next update: Mon 09 Mar 2026 05:54:41 +0000
Files and hashes: 1: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: 2kDe/YdgjdwHlmH1hA4Jow/ejmOHJM9zHqqo5oD1MsQ=)
2: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl
rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:71:3c:4b:e2:c9:7c:57:f4:b8:f3:24:c0:10:6f:a8:2d:15:48:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD
Validity
Not Before: Mar 6 02:15:41 2026 GMT
Not After : Mar 9 05:54:41 2026 GMT
Subject: CN=E5433C1ABA6C56243F903E118A202AA1E348CE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:15:9b:72:32:38:43:eb:6f:70:e0:a2:6a:
9b:99:41:b9:b5:4d:7b:20:83:db:fc:f2:c5:30:b5:
57:55:4a:69:b4:e3:c0:9e:f4:c9:f6:46:77:e4:6f:
da:ff:9f:10:30:7e:fa:0b:e4:36:9c:86:86:90:48:
74:37:fc:5f:82:85:be:2e:40:ad:be:6a:3a:b5:39:
dd:e1:db:d7:af:0f:c0:ae:a4:27:ed:75:44:cc:34:
61:c1:34:09:6a:88:af:85:5b:10:a7:49:c4:da:b3:
22:e9:2a:44:b3:a8:43:e5:30:f8:b2:f3:3b:ef:df:
bf:a0:4d:e9:f0:b4:32:05:b4:72:60:1e:36:6d:b1:
10:cf:66:68:41:d1:72:15:16:c5:af:0e:5a:16:f6:
95:6d:2c:91:5e:1d:36:06:c5:c4:e9:54:53:d6:ca:
c7:90:de:da:92:93:d7:90:e0:d5:3d:84:1a:d4:73:
38:6c:83:31:63:7b:0c:0d:ea:76:84:da:ca:be:f9:
2a:17:df:ef:fb:36:ce:6b:09:5e:a6:38:5f:56:41:
35:a8:7c:02:e4:4d:3c:1d:4f:f8:c9:a9:40:de:ac:
aa:16:ee:43:98:b0:3c:ee:44:39:91:10:6b:6e:84:
ad:bb:05:69:5e:5f:8d:dd:cf:9b:6f:20:c5:56:f8:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:43:3C:1A:BA:6C:56:24:3F:90:3E:11:8A:20:2A:A1:E3:48:CE:7C
X509v3 Authority Key Identifier:
keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d4:c2:3b:bd:46:c9:89:35:c9:75:16:10:54:98:13:be:38:
c0:fa:e2:76:f6:3d:3b:23:49:3d:ad:d7:16:7a:85:86:74:30:
f9:6d:08:c7:22:a6:15:de:03:81:8d:e1:e9:04:f9:19:40:50:
ce:dc:16:12:85:69:3a:e7:d5:2c:3c:ed:76:39:c5:ef:04:72:
9e:b8:8a:cc:a3:85:13:bf:cc:46:a3:6a:5a:b9:a7:03:32:52:
0f:c2:72:a2:9e:ef:22:ad:55:d3:66:8d:67:97:fe:f5:2a:6a:
63:13:c8:4c:af:b8:7c:c1:fe:6b:3c:e2:f4:56:38:31:c2:5a:
8d:c8:6d:db:1f:0b:26:e2:14:88:f0:c9:16:22:d1:b3:0a:bc:
b9:05:9c:86:b2:cf:68:57:97:e3:74:aa:a9:52:ac:d2:60:1e:
dc:a3:3a:5f:ea:6c:17:43:70:08:42:72:c1:22:d8:0f:36:bc:
cc:d3:e8:b1:15:1d:d9:df:75:e3:82:93:b7:86:18:28:35:aa:
e3:af:23:77:f5:01:2a:f8:d2:c5:38:c2:1b:0e:6b:66:17:14:
ff:fb:26:97:88:63:7c:28:5b:aa:5c:fd:c7:bd:a0:16:63:38:
34:41:42:d3:c0:4f:d8:c4:5f:07:40:9e:56:1a:4b:d6:7e:eb:
68:c3:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:35 2026 by rpki-client