
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft
File: 62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft (raw, json)
Hash identifier: NJZ458OxxuZOa/fIt7ikVdEiH8qJdS+5QjfwtUMuraw=
Subject key identifier: E4:7A:0D:ED:99:FA:35:99:F1:16:99:F7:5D:C8:5A:FE:F0:DB:FD:D4
Authority key identifier: 62:C5:A0:28:9D:A4:18:08:F9:2D:77:9B:1E:B9:5E:02:7D:BE:14:C3
Certificate issuer: /CN=62C5A0289DA41808F92D779B1EB95E027DBE14C3
Certificate serial: 76DCFCED9F34AC4C251968B77F1C81DCD024AFBE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft
Manifest number: 05
Signing time: Tue 05 May 2026 07:00:57 +0000
Manifest this update: Tue 05 May 2026 06:55:57 +0000
Manifest next update: Wed 06 May 2026 09:06:57 +0000
Files and hashes: 1: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: mcWbJEiXl5it2u7QuEmPSl23YbD8dPwCyZHEOHxWrkg=)
2: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: U59FIe3i4pxz4GAu82OkBppPPwOYvcD39wfDI1neTlA=)
3: 62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl (hash: QaMq6CamK05QJVHNVeXLCRRRB7eTowc2KVcsAGuR9Do=)
4: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: TLLFYxm3onSkry2YGDxevUL55V3n3RHX/1N7Y+FOZ9w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl
rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 09:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:dc:fc:ed:9f:34:ac:4c:25:19:68:b7:7f:1c:81:dc:d0:24:af:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62C5A0289DA41808F92D779B1EB95E027DBE14C3
Validity
Not Before: May 5 06:55:57 2026 GMT
Not After : May 6 09:06:57 2026 GMT
Subject: CN=E47A0DED99FA3599F11699F75DC85AFEF0DBFDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:25:cf:61:65:60:94:2a:0d:9c:e5:7b:ce:
83:de:0f:38:b0:e0:b1:5d:ec:e0:7b:5d:db:a3:b0:
b2:87:52:6d:c2:e9:92:eb:66:f6:11:37:15:58:cf:
a0:58:19:2e:e2:00:b4:a9:1a:1f:3c:c2:4b:68:a3:
10:21:61:8e:00:01:2b:68:41:98:7c:fa:ff:c1:2b:
42:f1:77:3b:dd:d9:9e:fb:2b:80:16:b2:4c:d8:e8:
1a:31:10:ca:39:58:2e:6c:48:d3:ea:cf:e3:0d:62:
3e:e9:e8:3e:17:b7:37:6b:40:3a:38:93:b0:72:1a:
60:39:d5:ca:66:3a:73:78:74:7f:f6:f8:9e:eb:90:
2e:21:f4:3a:35:14:81:cb:de:a0:e6:a6:3a:b8:da:
8d:f6:27:72:b9:d4:91:1c:3e:e5:1f:bb:25:38:19:
a1:4c:db:f5:c9:b1:f9:fe:bf:77:16:e1:78:b1:85:
15:a6:4b:3e:53:83:7d:1e:24:81:b3:3e:06:f0:7f:
5b:2b:f1:9e:30:0b:3f:ac:03:3d:9b:c7:72:86:16:
0a:2d:e1:42:60:da:2b:7d:8f:06:30:64:b2:9d:63:
8f:b9:13:12:49:23:75:b9:c8:51:ef:31:26:9a:ba:
9f:d9:c3:e8:03:28:b7:67:80:72:e7:e5:d8:cb:ea:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7A:0D:ED:99:FA:35:99:F1:16:99:F7:5D:C8:5A:FE:F0:DB:FD:D4
X509v3 Authority Key Identifier:
keyid:62:C5:A0:28:9D:A4:18:08:F9:2D:77:9B:1E:B9:5E:02:7D:BE:14:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bd:b1:c6:8d:cb:4d:8c:35:33:b5:05:cb:c8:35:28:32:ee:
a7:c6:56:f3:f2:13:6c:ca:de:b3:a0:40:a8:fb:16:f4:92:35:
9b:cd:1d:ad:b1:a4:89:80:c9:d8:28:bb:4a:ca:7f:e0:ef:51:
db:02:88:8c:e4:75:48:4a:d6:51:0d:39:76:de:6e:e3:a5:00:
98:38:b7:5c:e1:e6:1a:a3:1a:eb:0b:a2:49:9c:29:a8:b6:c0:
ad:c4:57:be:20:13:98:41:c4:df:d5:97:ac:b8:6f:d9:f8:8a:
92:91:ce:11:03:9c:b5:8a:5d:76:bc:70:8b:68:53:98:d4:fe:
c4:ef:24:8c:a0:54:cd:29:e8:50:b5:94:d6:4d:95:77:70:54:
81:20:90:b4:34:b1:4d:84:45:2b:67:05:28:b3:56:d9:81:37:
51:2a:3d:15:cd:f0:9b:39:b4:1d:9e:34:55:23:c9:ba:70:47:
33:dd:87:6f:8e:3a:69:12:f0:63:ab:d5:12:7f:7a:9c:31:d2:
81:49:0c:34:4a:97:0b:3e:f6:18:3e:cb:e7:68:8b:dd:82:46:
ae:c0:b1:5f:c3:1c:50:86:7b:f6:32:db:39:98:42:33:f4:2c:
df:e8:32:07:52:db:08:ed:93:e3:b0:d3:e5:b8:06:f5:22:5b:
fa:09:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:17:19 2026 by rpki-client