
$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json)
Hash identifier: ZMD4Xf6GSKK6k9TX69tmMoU4t3e8GGCNDqfuMXr4peU=
Subject key identifier: 2F:5C:D2:01:72:F7:D1:B2:A5:47:FC:ED:9F:E5:17:E9:71:8E:72:00
Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD
Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
Certificate serial: 32C7F59EA21A262CB1E51365C4623659931F87CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
Manifest number: ED
Signing time: Sat 28 Feb 2026 14:11:09 +0000
Manifest this update: Sat 28 Feb 2026 14:06:09 +0000
Manifest next update: Tue 03 Mar 2026 21:36:09 +0000
Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa (hash: gzXm2H1SRhJOnW165GmOJoJuVcF7cAXPU5ZcWnDj+6k=)
2: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=)
3: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: DRM7z8ywO4A0x9pwFXpxQooZr635xxGWKM0Du7pXXg0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl
rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 21:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c7:f5:9e:a2:1a:26:2c:b1:e5:13:65:c4:62:36:59:93:1f:87:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
Validity
Not Before: Feb 28 14:06:09 2026 GMT
Not After : Mar 3 21:36:09 2026 GMT
Subject: CN=2F5CD20172F7D1B2A547FCED9FE517E9718E7200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:53:1d:7e:e9:ee:e4:18:ca:4d:29:1c:e9:
65:3f:01:8f:75:76:a8:af:1b:16:49:e3:9c:7e:b9:
d8:c4:e8:b9:18:63:9e:e9:d6:d0:53:91:d7:b6:62:
33:88:5f:45:79:46:ad:17:24:f9:a2:a2:ad:3c:c6:
f2:e8:ed:e7:4c:f1:57:c5:0e:75:87:ef:bf:e0:26:
e9:46:bd:23:3a:38:f3:69:9b:53:a0:7d:b7:1a:84:
a2:df:21:93:47:1f:3d:e5:5b:04:bf:fc:c1:fd:4e:
35:db:05:76:dd:39:66:42:22:09:1f:0b:36:f1:7b:
f1:af:e5:f9:2f:6d:cd:cf:ba:67:da:46:69:ff:fc:
df:d1:8c:fd:2e:ba:4a:a8:69:34:25:ca:0c:76:10:
b2:1c:38:83:9d:a1:0e:10:6d:01:46:58:2d:ff:f7:
a3:ff:8b:e6:cf:6b:c4:6a:86:b6:15:29:85:db:de:
93:3b:f1:dd:36:1f:24:3b:0c:97:78:5a:71:7d:03:
30:09:8e:04:83:2f:e2:ce:27:ce:0c:7d:90:a9:d7:
0e:75:c9:79:f0:fe:81:b2:48:fb:1c:a8:d7:5a:a4:
4e:bb:fd:12:60:c8:51:56:25:8d:c1:45:eb:8c:ad:
b3:b4:eb:07:48:3b:b6:d1:4e:17:bc:4a:85:a2:e0:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5C:D2:01:72:F7:D1:B2:A5:47:FC:ED:9F:E5:17:E9:71:8E:72:00
X509v3 Authority Key Identifier:
keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:a2:0f:7c:be:bc:4c:cf:99:b1:e9:da:90:ba:ce:84:7a:
9f:3d:a3:ae:2b:3a:79:c9:81:33:55:f0:b0:7c:55:f3:10:0a:
76:ae:9f:cc:5f:c3:19:58:e4:01:ef:48:2c:88:51:54:4d:26:
83:99:ce:1c:f6:17:80:91:58:a3:4f:dc:df:a9:96:5c:d8:d1:
f6:7d:8c:f0:87:d2:2f:50:1a:69:36:0a:db:e0:d1:66:51:95:
68:7c:e4:89:fa:ca:10:84:d9:12:62:36:7b:0e:55:eb:1f:9a:
73:ff:88:88:0f:1f:ff:a7:64:f1:2e:d7:8a:5b:6e:34:77:a3:
d9:19:85:da:fe:ae:c3:f5:b1:a7:71:a6:ea:30:35:1b:87:0e:
25:84:dc:9d:63:4a:88:00:a1:42:9f:5c:f5:66:5d:b5:a2:6f:
16:c8:15:c2:87:11:10:a1:f2:66:29:14:36:8a:5e:1e:d4:ad:
0b:50:e3:a0:00:2e:5f:e1:9e:95:e3:3e:63:08:fb:4d:40:69:
41:3e:3e:09:d2:20:0e:c1:9e:0f:a3:f2:20:0e:2f:b0:2d:26:
b2:0e:6f:6d:ad:1a:29:9e:04:31:be:00:0b:22:f1:7e:bc:17:
6b:94:0a:74:35:b4:2c:01:6f:92:e1:99:fb:19:5c:61:68:58:
52:58:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:20 2026 by rpki-client