
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
File: C17D911AD672A9E8EF418B68655CA512262D505A.mft (raw, json)
Hash identifier: FPR1GKGs/iPbTlXZcQx5yKN8mK86rJj44LqUzbTUwoQ=
Subject key identifier: 9F:ED:2B:3C:AC:38:42:DF:85:96:60:5D:F8:24:C9:F8:87:81:75:A3
Authority key identifier: C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A
Certificate issuer: /CN=C17D911AD672A9E8EF418B68655CA512262D505A
Certificate serial: 2637A5E7452E0104E0687FA4F497E3F4D1483D07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 21:20:06 +0000
Manifest this update: Tue 16 Jun 2026 21:15:06 +0000
Manifest next update: Wed 17 Jun 2026 21:40:06 +0000
Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: 0+S90gnBbogSaKTlt2isB6tdizuU0JZG2EtWgwTn2ys=)
2: C17D911AD672A9E8EF418B68655CA512262D505A.crl (hash: wVqkwqXh3OpiMfwniLBR5a8cQJqDI+XDfNHV/4wjyrg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl
rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:37:a5:e7:45:2e:01:04:e0:68:7f:a4:f4:97:e3:f4:d1:48:3d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C17D911AD672A9E8EF418B68655CA512262D505A
Validity
Not Before: Jun 16 21:15:06 2026 GMT
Not After : Jun 17 21:40:06 2026 GMT
Subject: CN=9FED2B3CAC3842DF8596605DF824C9F8878175A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:19:48:a4:b0:db:05:74:26:f9:8b:8a:18:
7b:fa:1f:96:b6:d1:9d:24:15:e7:b0:27:08:0e:b4:
eb:b7:16:19:1b:35:ca:1c:29:ec:47:26:2f:40:09:
95:ed:e4:2a:a2:b3:1a:c2:a8:ca:58:4d:8d:ca:c0:
e2:0f:1c:07:d0:c8:48:43:07:5c:c6:53:dd:a5:47:
f3:fe:38:db:38:0e:e6:00:bf:0c:ce:6f:01:1e:00:
42:cb:8c:16:34:ad:f9:04:7e:a1:86:a5:5f:b6:32:
8a:17:cb:fe:2e:90:d6:9a:e5:eb:c4:e6:48:48:87:
36:5c:f8:4c:a0:e7:76:b9:c4:31:5f:da:17:a8:48:
97:8c:16:25:f3:48:7f:7c:df:5d:59:aa:6c:73:00:
c6:c6:bc:8f:70:4a:11:5d:49:5a:9e:91:fd:13:b3:
52:2d:8c:4a:0c:4a:1b:0e:c8:20:72:18:43:26:f8:
a0:91:40:bb:d9:80:72:7e:35:05:74:c0:e0:b2:48:
3f:15:6c:47:9b:3d:4d:e6:f8:72:ed:b4:04:98:10:
24:81:73:7d:64:53:0d:c2:82:f6:7a:25:70:3a:78:
b0:a4:b6:e6:40:a2:a8:0d:0b:d1:fd:55:d0:dd:3a:
6b:00:df:3f:1d:ee:ae:06:b7:40:a7:7e:e1:ee:e0:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:ED:2B:3C:AC:38:42:DF:85:96:60:5D:F8:24:C9:F8:87:81:75:A3
X509v3 Authority Key Identifier:
keyid:C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d6:0f:d9:e0:82:b6:79:98:e9:c1:f8:43:a7:b5:cd:44:30:
2b:67:3b:71:07:1b:9b:db:76:53:8e:5c:37:c1:7d:ec:59:25:
05:3d:2d:9d:30:15:b4:0c:52:d5:8c:6a:d2:33:b7:30:46:d2:
f6:a2:ab:c4:14:af:54:3a:d4:77:e3:1b:f0:eb:c4:e8:b0:3a:
42:3c:26:12:45:5c:15:0e:7e:fa:63:ba:d5:43:2d:ac:35:b1:
b9:8b:29:a0:59:74:57:86:ad:13:10:5d:6b:5f:20:0c:ea:8c:
d3:13:1b:4f:bb:ef:33:96:70:d5:45:c8:f4:7a:d0:bc:94:0b:
6c:54:b5:76:7f:f6:2b:68:73:72:29:6a:60:bb:ff:a3:ea:fc:
ae:8e:99:ae:3c:f1:e1:b8:7e:4a:8b:41:4d:bb:7c:46:63:be:
e1:59:98:ab:d6:74:d5:39:7f:2a:5d:f0:03:e5:8c:42:dd:eb:
a9:52:23:8a:ea:d9:33:81:bf:23:96:de:80:fb:18:08:1c:35:
7f:2e:44:ea:6d:5d:eb:ce:c2:db:7e:1f:34:30:79:03:81:3e:
31:d0:aa:c7:45:fe:f7:8a:06:f5:c3:f5:79:71:8d:7a:94:23:
5e:5e:7d:ac:8d:0b:ec:a2:87:98:c9:e0:02:79:cc:ac:ae:aa:
f1:c2:8b:fe
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJjel50UuAQTgaH+k9Jfj9NFIPQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIy
NjJENTA1QTAeFw0yNjA2MTYyMTE1MDZaFw0yNjA2MTcyMTQwMDZaMDMxMTAvBgNV
BAMTKDlGRUQyQjNDQUMzODQyREY4NTk2NjA1REY4MjRDOUY4ODc4MTc1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMyhlIpLDbBXQm+YuKGHv6H5a2
0Z0kFeewJwgOtOu3FhkbNcocKexHJi9ACZXt5CqisxrCqMpYTY3KwOIPHAfQyEhD
B1zGU92lR/P+ONs4DuYAvwzObwEeAELLjBY0rfkEfqGGpV+2MooXy/4ukNaa5evE
5khIhzZc+Eyg53a5xDFf2heoSJeMFiXzSH98311ZqmxzAMbGvI9wShFdSVqekf0T
s1ItjEoMShsOyCByGEMm+KCRQLvZgHJ+NQV0wOCySD8VbEebPU3m+HLttASYECSB
c31kUw3CgvZ6JXA6eLCktuZAoqgNC9H9VdDdOmsA3z8d7q4Gt0CnfuHu4KapAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn+0rPKw4Qt+FlmBd+CTJ+IeBdaMwHwYDVR0j
BBgwFoAUwX2RGtZyqejvQYtoZVylEiYtUFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2U4Y2JkYzgtZDE5NS00YzdkLWIzZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFE
NjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIyNjJENTA1QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMTdEOTExQUQ2NzJBOUU4RUY0MThCNjg2NTVDQTUxMjI2MkQ1
MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz
ZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1
MTIyNjJENTA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJTWD9nggrZ5mOnB+EOntc1EMCtnO3EHG5vb
dlOOXDfBfexZJQU9LZ0wFbQMUtWMatIztzBG0vaiq8QUr1Q61HfjG/DrxOiwOkI8
JhJFXBUOfvpjutVDLaw1sbmLKaBZdFeGrRMQXWtfIAzqjNMTG0+77zOWcNVFyPR6
0LyUC2xUtXZ/9itoc3IpamC7/6Pq/K6Oma488eG4fkqLQU27fEZjvuFZmKvWdNU5
fypd8APljELd66lSI4rq2TOBvyOW3oD7GAgcNX8uROptXevOwtt+HzQweQOBPjHQ
qsdF/veKBvXD9XlxjXqUI15efayNC+yih5jJ4AJ5zKyuqvHCi/4=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:02:42 2026 by rpki-client