
$ rpki-client -vvf repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
File: 170979C0E31958FA76259F360B8405233C40BA7A.mft (raw, json)
Hash identifier: QWNh55xkbuMFXdtwUbeMmiy4uQ90Z6HALUZ84gXsiZc=
Subject key identifier: 2E:A7:02:73:D3:17:39:05:88:8C:0D:C2:2C:30:31:B3:B3:AA:E5:70
Authority key identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A
Certificate issuer: /CN=170979C0E31958FA76259F360B8405233C40BA7A
Certificate serial: 2B3A0C4BD7DDD19E5508AF3803039B2D8EA999BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
Manifest number: 011B
Signing time: Sat 28 Feb 2026 01:30:03 +0000
Manifest this update: Sat 28 Feb 2026 01:25:03 +0000
Manifest next update: Tue 03 Mar 2026 12:03:03 +0000
Files and hashes: 1: 170979C0E31958FA76259F360B8405233C40BA7A.crl (hash: IIczAYcFBXrvAucAoz16OgfkXtIqVWrYGXwgfLicn+E=)
2: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: mVf5a9vExgGJKEfnRVhSrrkQjjAkp42h9gYkIf1hcMA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl
rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 12:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3a:0c:4b:d7:dd:d1:9e:55:08:af:38:03:03:9b:2d:8e:a9:99:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170979C0E31958FA76259F360B8405233C40BA7A
Validity
Not Before: Feb 28 01:25:03 2026 GMT
Not After : Mar 3 12:03:03 2026 GMT
Subject: CN=2EA70273D3173905888C0DC22C3031B3B3AAE570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:ea:50:ee:c7:ac:cd:b4:bb:c2:8b:30:2c:
f6:40:6c:06:8c:5a:b4:47:3a:c8:db:ee:f0:b3:13:
1b:6c:99:08:d7:a5:ee:a5:8a:f7:05:35:b7:59:b6:
fb:e2:74:52:f6:ec:41:61:4c:e6:e4:a3:ba:2d:8a:
6c:de:27:f2:4f:3e:75:23:24:28:3b:51:2c:c6:72:
e1:f1:5d:44:12:71:56:02:b8:15:0d:ec:f8:79:1e:
38:60:86:fd:e8:8b:07:9d:15:a2:ed:f5:76:bd:95:
4a:8f:2c:d6:da:28:64:33:54:fa:d4:44:1b:58:79:
43:6e:1d:09:73:26:16:13:20:08:93:f4:fd:7a:9e:
83:5e:94:b2:a1:cd:a6:f1:8a:63:2d:33:02:7f:74:
a7:a9:83:53:42:eb:e1:ca:83:5f:a4:d2:32:36:3f:
0b:ba:54:64:1f:3f:88:88:09:9c:ad:d7:dd:ff:af:
30:bc:2a:c2:74:62:14:3e:30:13:d3:42:7c:ba:bd:
c5:cc:6d:9d:a3:28:a1:ee:dc:32:2d:43:5b:c7:8a:
df:d6:2a:49:0f:84:a1:cd:75:4f:36:7e:8d:4f:7f:
09:ad:64:10:77:61:02:32:b5:c9:46:82:83:c1:ce:
04:d8:94:b3:ae:bb:19:41:62:e7:f8:04:3a:ca:bd:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:02:73:D3:17:39:05:88:8C:0D:C2:2C:30:31:B3:B3:AA:E5:70
X509v3 Authority Key Identifier:
keyid:17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c3:f7:b7:1e:b2:9d:ed:80:bb:8b:aa:de:68:42:4d:5f:1e:
71:15:62:fd:7f:da:7e:18:72:bf:fc:a0:9a:fd:bb:ab:54:3b:
f2:95:6a:47:e3:b4:2d:96:35:64:db:68:ff:f4:ba:8b:a5:c3:
0c:fc:f9:cc:93:f9:2b:9d:b2:71:25:bd:4f:5b:7f:fc:1b:24:
65:0f:6d:a9:8a:19:a7:ff:88:09:4a:c8:a7:03:fc:30:80:4f:
3e:ec:20:a7:55:58:ab:f4:c6:69:19:b6:61:cb:dc:64:d2:05:
8e:fd:9f:15:ad:89:38:9d:03:35:0d:25:49:57:ce:3b:50:3e:
72:9f:19:82:0e:89:20:df:04:14:4e:77:2b:db:70:ba:1f:e4:
81:f7:f5:6e:6e:55:45:30:cb:13:1f:37:b7:70:53:fe:13:73:
27:28:4b:47:9f:28:97:69:e1:10:18:2b:d2:18:40:57:38:56:
76:9d:db:aa:bd:42:c8:ad:e8:63:8d:f1:ed:ca:7d:6b:6f:70:
44:eb:9c:f2:6f:6e:b9:43:3e:cf:89:67:ee:48:b9:b2:09:76:
0f:ab:79:72:ca:98:42:04:65:ca:e5:e5:1a:99:3b:e5:46:91:
65:ed:3d:72:fe:94:7e:65:bb:77:10:97:5a:3c:33:8b:b8:a8:
08:87:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:28 2026 by rpki-client