
$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json)
Hash identifier: OhlJnE9C7AiFIVQjEk1Iz1mbtPhtQV/lmVRyEWqUz6g=
Subject key identifier: 34:70:90:CD:78:63:D8:64:A7:96:8B:BC:44:B4:04:58:39:B2:CA:FC
Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Certificate serial: 5F6880C7C9ADB44C3C9D16D37E5F1493C3DE77CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
Manifest number: 020C
Signing time: Fri 06 Mar 2026 00:01:21 +0000
Manifest this update: Thu 05 Mar 2026 23:56:20 +0000
Manifest next update: Mon 09 Mar 2026 05:57:20 +0000
Files and hashes: 1: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=)
2: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: /T84HhrJRuCqu1hR6oPq7s+0VtP1DS1bid5l6OBpdc4=)
3: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=)
4: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl
rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:68:80:c7:c9:ad:b4:4c:3c:9d:16:d3:7e:5f:14:93:c3:de:77:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Validity
Not Before: Mar 5 23:56:20 2026 GMT
Not After : Mar 9 05:57:20 2026 GMT
Subject: CN=347090CD7863D864A7968BBC44B4045839B2CAFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:28:16:86:f9:53:18:6b:26:21:7e:2a:f9:
38:ff:8c:36:05:a9:55:e7:d7:48:02:d5:ad:ed:38:
24:db:6b:d5:b0:7d:c2:0b:2b:7a:26:81:a3:01:18:
ee:b8:3c:a4:48:b0:65:1c:ee:82:2f:f1:ad:c8:59:
f1:cc:1c:79:1f:76:72:45:c1:c5:40:e0:5a:2a:66:
2c:1f:4b:6e:f9:15:19:b0:87:96:9d:4d:64:0d:45:
4a:7e:b0:3a:a6:64:b1:f5:4d:66:12:84:77:11:cf:
67:35:6c:30:7c:3c:43:55:57:0f:cd:29:57:65:50:
0c:03:b6:70:6b:a9:1a:df:0d:40:ee:e1:4c:66:88:
fd:ca:bd:86:55:7f:b5:31:68:d5:d2:c6:68:6f:08:
e6:71:47:7d:85:28:9b:18:30:18:ee:2f:15:f5:1d:
90:46:f9:b1:03:c5:36:13:8c:63:ab:cc:c2:5c:cc:
e8:e1:36:8d:ef:ee:1e:5f:88:51:6a:ba:b8:fc:42:
88:d4:9c:d1:27:14:15:d0:96:dd:45:9f:78:61:c5:
57:f6:33:60:d6:d4:9f:a2:e1:0e:5b:95:fe:ce:57:
77:d6:6e:63:76:ea:85:a4:99:09:bc:11:31:c8:d1:
ce:9f:c1:de:2e:d0:4a:d3:bb:8a:61:c7:c5:bf:09:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:70:90:CD:78:63:D8:64:A7:96:8B:BC:44:B4:04:58:39:B2:CA:FC
X509v3 Authority Key Identifier:
keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:99:22:d7:9e:6d:f0:e4:58:76:90:d2:3a:ce:c2:c1:e4:2a:
68:39:98:c7:26:29:47:4b:84:c7:3f:85:e1:82:e1:3d:b2:e9:
1d:12:cd:a4:0b:09:97:79:e2:ea:20:05:e7:ce:4d:a8:fb:4b:
27:78:d0:62:28:35:59:bd:ce:cb:5c:67:df:63:ba:68:fc:1c:
77:ea:dc:5a:a1:d1:e3:42:19:29:59:3f:2f:0a:c9:51:29:9f:
b4:9e:05:d0:59:aa:e1:f7:38:19:1d:eb:5c:22:ba:01:72:e5:
e4:9a:c3:32:df:42:15:69:7c:d7:4a:91:84:29:a0:89:e4:bf:
5b:ce:ec:92:66:f5:18:00:2c:54:72:71:9a:0d:27:4a:8c:71:
24:66:73:50:17:3e:69:af:be:4a:90:fa:85:ce:ba:03:67:de:
1e:7d:16:13:de:65:25:4f:8b:7a:79:25:2c:51:57:e3:f1:d3:
c3:d5:8a:9f:70:87:0c:e6:89:10:e7:25:8c:fa:f6:a4:8f:18:
d7:0d:65:98:81:dc:a7:be:5b:31:ff:59:96:92:13:33:e1:f7:
2b:50:64:c0:da:e5:b2:84:8e:d7:e4:c3:46:bc:32:1f:a6:13:
4f:c6:15:a4:89:95:d0:dd:9c:24:8a:ff:7e:79:8a:f6:00:48:
5e:3b:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:48:27 2026 by rpki-client