
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft
File: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft (raw, json)
Hash identifier: TJ4MJBGds4M5axYllWfGp+mU662km1KfoEpVt0XszrI=
Subject key identifier: 93:80:0A:C5:C5:DA:D2:A4:EB:05:51:9C:C5:FC:7B:52:3C:CF:80:98
Authority key identifier: 11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7
Certificate issuer: /CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7
Certificate serial: 67E8F053A4FC49C7FE798E8B9758162564ACECC6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 00:18:20 +0000
Manifest this update: Wed 17 Jun 2026 00:13:20 +0000
Manifest next update: Thu 18 Jun 2026 03:45:20 +0000
Files and hashes: 1: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl (hash: QATY17C09ywU5Fg1pRFhZQZEm2tnQGT2k0wbTFo+y40=)
2: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: 9glYBsYr2QWSfiwb0WHAYJMulo/TgpJ7re/5Z5a0XvI=)
3: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: PhJmneFuDWlTXWctD2qR5ZAYy5+ja872YXywtoKMqcg=)
4: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: TTCI25wdl8MT1j/k3SgrRG2ioIhmgTNO/KKrY8EcLOs=)
5: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: uXphZOgs1UxDr6rlg7GEi/R0AmZWeoVGQk1F8ZBelwY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl
rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e8:f0:53:a4:fc:49:c7:fe:79:8e:8b:97:58:16:25:64:ac:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7
Validity
Not Before: Jun 17 00:13:20 2026 GMT
Not After : Jun 18 03:45:20 2026 GMT
Subject: CN=93800AC5C5DAD2A4EB05519CC5FC7B523CCF8098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:95:30:f0:f0:89:c3:0e:65:9b:18:42:96:
93:96:1d:1c:0c:3a:16:34:3b:0c:b7:ac:b9:e7:63:
7f:83:38:cb:3c:83:ff:7f:1f:c4:7f:60:d8:f8:90:
8d:49:a3:d7:e7:75:13:7b:9b:e1:78:d6:ca:67:1f:
16:c2:09:a2:39:3e:31:77:36:f2:6b:22:79:a6:cc:
3f:27:95:7c:79:fd:05:17:11:0f:82:33:82:96:a0:
91:6f:dc:9e:2a:c4:fc:e0:3b:13:8c:90:c6:4b:06:
18:bc:17:c3:9c:69:2d:81:d6:63:c1:82:e7:8a:6c:
1e:08:4d:af:9c:20:95:db:6f:78:1a:3b:1c:14:4a:
9b:6d:be:5e:f9:ca:f6:05:d4:58:eb:e7:42:c7:81:
d2:25:4d:17:29:f7:d6:fa:0e:39:96:2d:37:cf:11:
78:f4:22:8a:05:aa:bd:10:2d:12:2f:e9:bd:c7:6f:
01:5a:19:fd:6b:8f:71:75:56:98:43:89:65:2f:bf:
f2:dd:10:68:c3:b0:d0:d4:79:6f:91:c6:b4:12:89:
b4:3a:0c:1d:88:5a:fc:3e:a9:83:e5:b4:28:46:58:
07:fd:a5:fd:eb:34:29:1c:d3:c5:69:d3:d7:78:72:
fa:82:ef:8f:77:2a:af:ab:65:05:8a:45:de:e2:b5:
17:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:80:0A:C5:C5:DA:D2:A4:EB:05:51:9C:C5:FC:7B:52:3C:CF:80:98
X509v3 Authority Key Identifier:
keyid:11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:db:85:c3:97:07:f7:99:d9:7a:4a:3a:71:48:8c:8b:7f:90:
52:5d:c9:ce:af:78:b5:dc:7d:67:86:60:d6:1b:91:7a:40:30:
0b:c0:76:f8:be:c5:05:e4:37:67:2f:d8:17:1b:c0:27:fe:d2:
2b:b6:e9:e3:0b:56:7d:22:ab:7b:6e:d9:52:71:3d:2b:6d:45:
3b:c3:f0:f7:36:02:9a:66:0c:1b:81:6d:b7:34:96:99:9e:7c:
1b:6d:2d:cb:30:bc:0f:88:5a:11:88:6b:80:1d:53:f0:0c:68:
6b:dc:b4:ed:db:40:fa:06:69:f0:12:73:22:a9:1c:b1:50:ab:
4e:f9:38:41:ff:6d:74:b7:83:5c:48:05:b7:61:79:e0:a8:ef:
b8:da:7d:1b:3f:22:f5:f2:74:64:cd:5a:b8:e6:02:bb:2a:57:
87:9d:83:d8:98:73:9e:99:38:db:a7:47:db:10:7b:36:33:62:
ed:28:1f:61:4f:13:43:4e:bc:53:f1:32:75:a9:0f:82:97:85:
79:e2:b2:e3:22:c1:7d:33:06:d9:54:4d:dc:50:f4:15:fa:09:
eb:33:f2:e8:2f:7c:c3:72:19:3e:08:6d:4c:96:17:19:f4:59:
a1:7d:e2:dd:69:99:04:97:9c:8f:b9:7e:43:18:d3:a4:43:d2:
a5:d8:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:08 2026 by rpki-client