
$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft
File: 717B1F47696EEFA7498BEB563D97EBD8515B883E.mft (raw, json)
Hash identifier: ibe4k4aKZrPRYnb7IoAIMW1/unHWTtu4mXThJOMOldg=
Subject key identifier: 2D:74:2D:32:78:5C:66:EA:64:3D:F0:4F:64:67:16:45:35:51:D1:9B
Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E
Certificate issuer: /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E
Certificate serial: 43CB6146E5B05594C95F1FB815AB953615E48B81
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft
Manifest number: 04D9
Signing time: Fri 17 Apr 2026 09:30:56 +0000
Manifest this update: Fri 17 Apr 2026 09:25:56 +0000
Manifest next update: Mon 20 Apr 2026 11:08:56 +0000
Files and hashes: 1: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: 4nFz268f/uJTcH9+bnn64I8vEEEHTwIdibCbTflD9+Y=)
2: 717B1F47696EEFA7498BEB563D97EBD8515B883E.crl (hash: BD+W+3YjY74mc8duMZmDkOmfwjnr81KDS1n6mpQi19A=)
3: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: 4BUZEUszxbkJAKTn89oXRelHnbQyPtwvUjsittAvrxc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl
rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 11:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cb:61:46:e5:b0:55:94:c9:5f:1f:b8:15:ab:95:36:15:e4:8b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E
Validity
Not Before: Apr 17 09:25:56 2026 GMT
Not After : Apr 20 11:08:56 2026 GMT
Subject: CN=2D742D32785C66EA643DF04F646716453551D19B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:e1:31:ee:17:c6:88:78:f5:21:8a:cf:1b:
4a:68:76:b6:75:60:58:4d:e0:a7:5e:23:95:53:4d:
83:5a:ba:f9:5c:25:12:88:95:0f:ee:9c:74:1c:6e:
2a:00:80:a9:7a:71:57:8d:38:1a:b4:64:19:1e:98:
8b:45:37:01:6e:83:62:4e:74:91:c2:39:f1:f0:c8:
76:7a:e3:2c:7c:ca:ac:ea:89:2a:e2:28:82:2a:e2:
f8:39:01:b8:61:3e:86:2b:98:21:b8:35:b6:3b:a8:
95:01:72:f0:7f:69:57:88:1c:9f:1b:3b:c7:17:7e:
5c:36:34:09:93:d1:5f:99:86:ce:11:79:07:7a:dd:
cc:a6:07:03:89:b4:ff:b5:f8:a7:f3:f2:fe:b9:58:
8b:14:b3:52:c1:5d:f0:43:05:02:bf:36:ee:c7:dd:
68:14:e5:a2:dd:54:64:e1:9d:48:63:ca:ed:77:05:
79:6b:ec:0f:8f:10:97:11:9c:a2:37:4e:ef:c3:08:
c4:db:92:36:c1:f9:35:d6:6b:a8:a4:59:a7:a0:cf:
03:c6:b3:66:71:47:bc:41:b8:49:14:38:2d:0f:0f:
74:44:6e:5c:74:07:83:cf:c2:88:d9:b2:e3:5e:b3:
0e:09:99:8d:cc:13:72:9d:a9:26:ee:71:9c:2a:25:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:2D:32:78:5C:66:EA:64:3D:F0:4F:64:67:16:45:35:51:D1:9B
X509v3 Authority Key Identifier:
keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b9:13:a2:82:49:f5:cb:10:18:26:1c:83:96:0d:49:46:c6:
06:7c:c2:b7:9c:d3:f3:c1:6f:04:7c:5e:94:c8:4b:b8:a3:26:
a7:5a:94:c8:74:15:00:72:9e:11:22:48:d1:e4:ce:d6:b6:bd:
23:be:f9:b5:d2:f9:17:c2:b2:00:6f:65:7b:8e:43:44:1e:6f:
dc:e2:9e:23:e2:42:af:c0:55:dc:96:a6:b8:12:c3:9c:45:1e:
61:fa:f9:7e:95:cc:93:15:dc:68:eb:15:e7:a3:b0:64:5c:c4:
d3:27:6a:2b:c3:87:f8:23:0c:8b:37:16:1c:54:36:33:fb:84:
cb:f1:01:6e:5a:a5:2c:cb:8f:44:c4:49:61:bd:a9:f9:42:1e:
6d:cd:fa:9d:b0:b4:75:44:27:7e:ef:97:a9:cd:7c:3a:35:0d:
16:f5:b6:ac:2f:5b:fb:63:77:22:49:d4:d5:c7:ad:e0:e2:24:
d5:7a:41:b8:0c:0d:1f:b3:25:52:1b:aa:66:69:9a:14:18:68:
22:0d:60:6e:a0:5b:c7:70:d5:11:65:7a:4c:96:c6:cc:1f:50:
19:01:7c:c7:6b:9c:90:1f:46:28:4b:1e:59:96:3e:75:d1:8c:
15:30:c4:ff:41:96:66:69:15:22:d0:75:52:f6:bd:ee:5c:0f:
72:05:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:31 2026 by rpki-client