
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft
File: B17A330780AFD953D1D3338525F941E14E1FC919.mft (raw, json)
Hash identifier: FDK9lRB/GPZe5zWMfVv2hqXherO3BQZ/nLIOQbRzcxo=
Subject key identifier: 21:36:56:8D:38:70:BE:4C:FD:98:35:D0:0F:05:85:4D:E7:FD:A3:AA
Authority key identifier: B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19
Certificate issuer: /CN=B17A330780AFD953D1D3338525F941E14E1FC919
Certificate serial: 5FED1AE5F41F5223A3FD1D282B5BD31BA215FBDF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft
Manifest number: CE
Signing time: Sun 04 Oct 2026 01:06:24 +0000
Manifest this update: Sun 04 Oct 2026 01:01:24 +0000
Manifest next update: Mon 05 Oct 2026 01:36:24 +0000
Files and hashes: 1: B17A330780AFD953D1D3338525F941E14E1FC919.crl (hash: /g6E30lQFn8p+Ol3xpguOwtWgZT96M7zYDN+QhoYN48=)
2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: USfTP+9/4GLbvvoIvIbzRlXyQT6cM8ipPFhCCz3Hhmw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl
rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 01:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ed:1a:e5:f4:1f:52:23:a3:fd:1d:28:2b:5b:d3:1b:a2:15:fb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B17A330780AFD953D1D3338525F941E14E1FC919
Validity
Not Before: Oct 4 01:01:24 2026 GMT
Not After : Oct 5 01:36:24 2026 GMT
Subject: CN=2136568D3870BE4CFD9835D00F05854DE7FDA3AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:a6:8b:c5:65:da:b0:d8:a6:8d:4e:92:ae:
5c:83:cd:f2:cd:63:33:f1:e9:43:80:2b:77:91:25:
9a:c6:a8:f1:17:cb:fc:aa:a5:fd:a0:a2:ed:3d:63:
2d:ff:18:1d:4a:1f:0e:5f:cc:8c:6e:97:c5:bc:f1:
df:94:29:4a:3f:4f:89:2d:dc:7b:8f:d3:a3:6c:ea:
c8:e4:19:60:89:28:5a:4f:e3:c3:72:bb:fe:07:a9:
d2:77:06:68:d0:1f:30:5d:db:f8:77:37:9a:76:03:
e2:5c:a1:1f:25:84:f1:08:c8:13:14:88:86:b9:84:
11:dc:dc:de:fc:33:f6:56:e0:3f:2d:8b:e0:c1:87:
d6:68:f0:43:7d:9d:18:71:ac:63:df:60:fd:6b:a0:
81:e7:3e:89:9f:57:85:69:1d:f7:57:65:54:5c:a7:
8a:18:a1:15:b2:b2:bf:d2:7e:bc:c8:e2:42:03:b4:
b8:da:df:9a:f8:bd:c8:5a:58:3e:30:5b:aa:9c:5c:
4c:1a:e5:bd:a9:4a:f0:f6:5c:10:4c:4c:e2:80:e2:
e6:0d:69:7a:be:c9:27:62:e9:78:c1:9f:64:e0:6c:
31:2e:aa:3d:4c:f1:e5:2b:68:01:4e:cc:a8:61:9d:
e8:3c:7a:2d:00:4d:7b:bb:31:c2:e5:29:cf:a8:b3:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:56:8D:38:70:BE:4C:FD:98:35:D0:0F:05:85:4D:E7:FD:A3:AA
X509v3 Authority Key Identifier:
keyid:B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:01:54:a2:d8:40:cd:73:5a:ef:be:df:6f:04:b7:f1:59:fa:
a0:f1:9b:57:41:bd:8d:9c:e3:5c:da:21:a7:85:1d:ed:95:4c:
46:da:d1:8a:bb:81:13:7e:c1:f4:25:c3:59:95:ef:58:2a:e8:
8f:74:e4:3a:74:54:4f:31:6b:82:d0:1b:0b:37:a5:ab:f3:8c:
2b:61:e1:c1:2c:a5:ec:dd:9b:49:8d:e7:f7:cb:eb:4e:39:76:
4d:c7:f3:9f:a1:ce:a6:3e:7f:24:77:2f:f5:0c:cb:87:99:f0:
a2:f9:3d:a9:6a:af:e8:3a:dd:80:26:f8:fd:37:35:16:e8:dd:
d3:c0:67:82:a6:ad:4d:36:60:ab:d5:c8:8a:63:19:de:a5:9a:
ea:05:9a:98:04:6e:2a:19:f3:c7:c3:5d:63:47:a0:27:a0:c7:
9b:5a:fc:87:dd:78:e1:54:45:a5:19:ce:a6:5e:eb:e4:9b:30:
2c:62:80:c1:bc:eb:ef:1b:b6:07:96:54:2d:e3:56:f1:38:9f:
a3:65:0a:0e:55:67:d6:62:7b:ce:21:cf:96:6b:0c:ff:83:aa:
8c:68:b0:a1:41:0b:44:83:e1:d7:94:d7:af:cc:3d:b3:1e:3a:
71:68:3d:2a:f6:83:7b:eb:af:da:11:5d:b6:23:2a:05:11:26:
bb:7b:57:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:30:08 2026 by rpki-client