
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
File: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft (raw, json)
Hash identifier: RV89cLBNDQ987N5wAgMGlz+tlZ0bMjo5u9jBBBpCcSQ=
Subject key identifier: E1:29:94:B6:B4:6B:72:B3:EB:8B:96:7E:B2:54:04:A9:8D:59:94:E0
Authority key identifier: 17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27
Certificate issuer: /CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27
Certificate serial: 3D1DA6CDA0663600D435F3AED8D81C0138CA1C2F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 19:07:13 +0000
Manifest this update: Tue 16 Jun 2026 19:02:13 +0000
Manifest next update: Wed 17 Jun 2026 22:54:13 +0000
Files and hashes: 1: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: 7DAQ/qZeFo+VjQFhi1Qi3yS2FazYT4uy2MibUL7GHjo=)
2: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl (hash: DgOAEAO8ZvmQepK1Y/r8rv/5JvSjL0ChnwAJfxIp1/I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl
rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1d:a6:cd:a0:66:36:00:d4:35:f3:ae:d8:d8:1c:01:38:ca:1c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27
Validity
Not Before: Jun 16 19:02:13 2026 GMT
Not After : Jun 17 22:54:13 2026 GMT
Subject: CN=E12994B6B46B72B3EB8B967EB25404A98D5994E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:9c:4b:cc:45:69:23:21:3b:b8:00:f5:a8:
9a:e0:fd:eb:0f:19:7b:f2:4f:a5:16:55:21:9b:53:
b6:db:34:a9:3c:90:7d:34:09:e1:d1:05:41:d2:f6:
0c:b7:8a:8e:1c:29:a9:b4:31:d6:78:61:41:ec:50:
66:c7:5a:27:41:79:ac:35:3f:87:a2:c5:f3:f5:3a:
97:4c:1e:f3:2f:22:0f:bc:e6:be:62:5b:ff:66:43:
ef:9b:72:38:71:8a:5c:80:d7:b0:91:5e:40:33:63:
39:c3:9f:8a:ce:cb:af:50:5e:25:43:3c:d1:67:2e:
0c:91:b8:de:1f:61:c3:d1:48:50:0d:b8:de:37:74:
4c:0b:79:c5:24:0b:cc:e3:c9:77:d4:70:ee:eb:21:
04:00:d1:59:7d:c7:9f:11:80:30:ef:65:61:bd:6c:
d0:14:f7:3b:ec:0a:1e:00:6f:62:95:b0:7e:d7:b3:
9c:b8:78:d6:ec:9b:c3:3a:21:54:11:63:99:46:d9:
dd:7d:5c:0d:b4:e6:21:1c:05:a5:fb:4d:d6:69:80:
11:4e:25:5b:e2:8e:7b:39:87:bb:1a:86:bc:20:9e:
3f:75:e6:01:35:3e:f4:e6:e5:7d:71:60:fd:00:c1:
c2:c0:65:7c:c4:2d:34:aa:dc:11:ce:7e:bc:f8:eb:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:94:B6:B4:6B:72:B3:EB:8B:96:7E:B2:54:04:A9:8D:59:94:E0
X509v3 Authority Key Identifier:
keyid:17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ea:24:b4:40:c4:11:bf:a2:b1:90:b2:9f:00:ce:31:1e:3c:
9a:ac:ef:b9:f2:18:26:db:48:9c:28:a2:41:ba:1f:fe:88:99:
69:1b:73:80:2d:50:fb:55:8b:be:1a:b1:67:91:24:64:83:42:
05:bd:9d:15:a0:09:2e:ba:2b:64:8a:1c:d2:31:07:b3:f6:cd:
13:b9:d7:58:b0:0d:4a:35:cb:6f:00:94:8a:20:13:30:dc:c2:
00:14:ef:3c:e7:27:69:ca:30:26:97:f4:66:ed:f7:58:29:c5:
62:9d:04:38:da:a3:f0:a7:1b:58:72:2b:9f:c8:2a:4a:98:1a:
f2:ec:55:ec:b4:a1:d9:e3:1c:93:dc:9e:11:c2:f0:43:75:10:
cf:21:cd:1a:a6:c2:01:16:6a:10:70:ce:c7:6e:9a:a6:4a:6d:
79:2c:13:6c:37:79:47:d9:fc:d4:af:22:e4:b6:e7:ba:db:1e:
45:0e:b9:c8:d4:d1:92:44:e1:95:70:56:21:d8:1b:17:4a:ce:
cc:f6:b3:2a:35:a0:3e:5b:b1:2c:46:ec:15:e4:d7:c4:c2:00:
c9:5f:c8:48:50:9e:40:1e:41:0b:91:0c:b2:48:24:2e:17:be:
22:9c:8e:1a:84:d3:29:90:88:30:f3:95:5b:bb:24:a8:79:aa:
8f:b4:89:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:26 2026 by rpki-client