
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
File: C17D911AD672A9E8EF418B68655CA512262D505A.mft (raw, json)
Hash identifier: zms7TXmaFEu7LaJsUd4tpvvQYsjT2UGR2xVIU/gW+XE=
Subject key identifier: 1B:19:A5:77:4D:DA:88:E1:EF:54:07:EC:F3:5A:91:00:32:DE:BA:2E
Authority key identifier: C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A
Certificate issuer: /CN=C17D911AD672A9E8EF418B68655CA512262D505A
Certificate serial: 11B192A4D0CD7274101A8AF164D2F71446D2E72E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 02:08:25 +0000
Manifest this update: Tue 21 Jul 2026 02:03:25 +0000
Manifest next update: Wed 22 Jul 2026 02:46:25 +0000
Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: 0+S90gnBbogSaKTlt2isB6tdizuU0JZG2EtWgwTn2ys=)
2: C17D911AD672A9E8EF418B68655CA512262D505A.crl (hash: FexukMtTm9zufw+17gkRu94UL9f+sMFFk3Bpj9EebF4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl
rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b1:92:a4:d0:cd:72:74:10:1a:8a:f1:64:d2:f7:14:46:d2:e7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C17D911AD672A9E8EF418B68655CA512262D505A
Validity
Not Before: Jul 21 02:03:25 2026 GMT
Not After : Jul 22 02:46:25 2026 GMT
Subject: CN=1B19A5774DDA88E1EF5407ECF35A910032DEBA2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:23:c8:26:22:5e:4e:2e:8c:e1:ae:2a:c7:
58:51:7f:c0:38:f5:6d:04:ed:2d:5d:aa:ef:d0:a6:
d3:62:03:cc:8a:a7:c5:7d:86:24:d6:fd:04:6e:81:
a0:4c:98:ac:75:b0:03:71:53:cf:ac:df:b6:5f:b7:
e1:2b:fe:ac:9f:18:f1:b9:3c:55:28:33:d6:11:b4:
b5:12:f6:c1:1e:f2:12:3f:0b:14:b8:3e:be:db:5b:
da:54:f6:6e:04:44:dc:5e:f6:b8:a6:dd:49:8e:db:
36:33:57:60:32:a3:dc:e0:da:28:f5:1a:c4:2b:24:
61:7b:3c:2f:7f:00:54:97:4e:da:7e:5d:a8:06:91:
ef:9d:89:3f:01:4e:15:c3:01:34:c0:c1:b1:57:c1:
34:f3:5f:2e:ab:85:2a:56:d8:86:dc:e2:d1:3b:a7:
11:d6:a0:48:bf:4e:2b:97:94:5b:0c:f5:58:67:39:
1b:5d:07:14:0d:04:56:16:17:9d:4e:7c:1d:81:f5:
b8:c2:c7:38:a8:37:ef:9d:cf:20:9d:4d:a8:97:53:
33:95:6f:1f:be:19:b1:af:5f:38:58:50:60:47:be:
7f:37:7c:ab:90:0a:ab:ad:2c:ff:05:f9:ef:ea:f8:
c8:83:31:21:32:ca:7a:67:91:ff:c0:5d:31:28:dd:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:19:A5:77:4D:DA:88:E1:EF:54:07:EC:F3:5A:91:00:32:DE:BA:2E
X509v3 Authority Key Identifier:
keyid:C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:ef:6b:c0:9d:a9:f8:d3:c1:db:ae:ea:a7:bc:fc:c6:5c:
18:ec:66:f4:a5:9f:d3:2b:a2:c9:a2:10:55:b5:c5:a2:22:42:
4c:ef:b9:5b:28:11:3a:2c:a6:6c:68:94:f8:ae:8e:52:aa:f0:
7a:67:f5:61:7b:20:03:99:88:7f:b4:19:74:9d:bf:3f:d3:e8:
4b:92:a9:30:1f:ba:9e:4a:3f:8e:9f:18:1c:38:65:e5:00:0c:
b5:09:08:9c:ec:46:cc:ce:e2:18:6d:c2:bd:c7:86:28:3f:57:
41:65:4a:06:bc:86:e8:95:f7:1a:67:ca:d8:8b:20:40:16:4a:
d3:15:67:12:26:4e:8f:ea:5e:d1:70:bd:d4:97:fa:f3:77:f7:
b9:45:bc:d7:db:19:ab:dc:68:66:fa:80:5a:7d:af:58:e5:75:
4b:d8:da:38:b1:58:89:99:df:b4:22:8f:54:61:a3:1e:25:3d:
00:a9:d2:e5:53:be:5d:0b:ba:1b:4a:72:5f:ac:6f:0b:54:85:
7a:e9:91:fd:f1:b7:da:da:a5:e8:3f:bf:3f:07:99:6c:c5:68:
95:eb:8f:7e:84:fd:d3:b5:47:f0:3c:24:04:22:ed:c2:78:13:
cd:7d:7b:73:da:be:de:36:b4:fe:26:fe:c7:7c:ae:75:99:66:
34:3b:d8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:25 2026 by rpki-client