
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
File: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft (raw, json)
Hash identifier: AjHbzGJX+nzVMi64lqi/vLZ43saWRth1c61DTEP5Pvs=
Subject key identifier: 48:C3:F0:5E:03:94:DF:5B:4B:A9:7D:2C:64:3D:B7:78:96:7A:7F:29
Authority key identifier: 17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27
Certificate issuer: /CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27
Certificate serial: 739385CF445193757B67508163B23CDD953D70CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 13:07:47 +0000
Manifest this update: Mon 20 Jul 2026 13:02:47 +0000
Manifest next update: Tue 21 Jul 2026 16:23:47 +0000
Files and hashes: 1: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: 7DAQ/qZeFo+VjQFhi1Qi3yS2FazYT4uy2MibUL7GHjo=)
2: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl (hash: 7uiGfLFe4wxQWjZCrCs1AySx4lUWuSak/r5MLs9lQP8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl
rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 16:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:93:85:cf:44:51:93:75:7b:67:50:81:63:b2:3c:dd:95:3d:70:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27
Validity
Not Before: Jul 20 13:02:47 2026 GMT
Not After : Jul 21 16:23:47 2026 GMT
Subject: CN=48C3F05E0394DF5B4BA97D2C643DB778967A7F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:d2:39:23:db:ad:eb:b6:2d:5a:6c:41:8a:
80:58:a7:9f:7e:d8:57:2e:e3:da:19:67:71:00:dc:
3c:67:d9:9f:d5:9a:19:80:99:4f:44:91:11:f4:e6:
e6:3e:81:4c:a3:24:08:86:fa:14:20:84:f8:40:3d:
41:f5:c5:91:91:74:96:79:87:90:5b:13:a9:33:d4:
70:4c:cd:d6:2b:bc:05:af:a6:91:b2:08:92:b4:98:
8b:83:5d:d5:db:b7:a1:fd:b0:f6:08:f8:1c:47:25:
7c:58:aa:2b:5b:19:d4:27:ea:77:ba:9b:27:4e:20:
af:d5:aa:bd:f0:d0:0a:6b:5e:9f:68:d3:4b:de:31:
ef:25:c9:6f:67:49:38:a0:cb:12:b6:f0:4a:cf:c9:
45:ae:a9:4d:77:a2:bc:f5:84:ff:2e:74:c4:e6:aa:
61:81:9e:f9:1a:1e:4c:39:5f:99:5e:d1:9f:99:af:
a7:36:fe:3e:2f:de:b8:76:35:10:c6:25:58:4d:15:
f3:f5:83:f3:b8:b6:a3:d3:dc:70:d2:98:60:8a:a8:
8f:b7:8d:5b:7d:18:74:12:21:d2:99:f5:8d:3b:df:
9c:51:08:1c:3a:e0:d2:7e:91:b0:d1:f5:fb:00:ff:
93:e9:93:5d:dd:07:30:3f:86:95:d8:ef:cb:10:1b:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C3:F0:5E:03:94:DF:5B:4B:A9:7D:2C:64:3D:B7:78:96:7A:7F:29
X509v3 Authority Key Identifier:
keyid:17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:02:e2:85:00:d5:b1:d3:46:49:63:15:c2:3b:bd:37:47:99:
5f:b9:25:26:1c:57:26:c6:0d:d3:bb:41:28:eb:51:61:a0:7e:
db:df:61:45:df:34:25:8b:95:d2:8f:c6:ba:76:7c:7e:9b:96:
2e:06:c8:b9:6e:91:24:fb:3f:ae:fa:04:06:14:7c:43:88:dd:
3a:72:56:f5:58:f2:b3:15:1a:8f:81:f0:3d:56:c1:d9:9a:e0:
dd:7e:7d:a0:64:35:97:4b:ff:34:60:e9:72:c4:d9:e6:76:04:
b8:0e:00:df:28:14:9c:6e:84:cb:59:b3:86:de:e4:48:0d:78:
8d:0e:02:29:60:a0:d6:62:b9:8c:be:65:3c:2b:66:9b:8f:ee:
d2:54:76:68:e4:77:c3:81:f9:4a:06:5d:19:19:56:60:c7:a1:
65:1b:e1:bf:2a:df:49:43:c2:18:12:ef:1c:b3:ed:1a:17:f2:
6f:29:12:8e:71:43:10:10:d1:25:23:3e:d0:02:7c:7a:86:a8:
81:bd:b8:f8:cc:71:02:46:f2:de:e5:43:f0:af:08:ca:b8:0f:
57:9f:fd:94:c5:13:85:b1:b1:33:46:cc:a6:60:47:be:9b:6c:
8e:d4:56:4c:1a:25:67:6a:46:3b:6c:ad:c8:c3:b9:f0:d8:e6:
3e:cb:1f:d9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc5OFz0RRk3V7Z1CBY7I83ZU9cM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdGMTJGNENGMTZEQzFCMThEQjc2OTRDQjM0NDFDOEI4
MEUwQUMyNzAeFw0yNjA3MjAxMzAyNDdaFw0yNjA3MjExNjIzNDdaMDMxMTAvBgNV
BAMTKDQ4QzNGMDVFMDM5NERGNUI0QkE5N0QyQzY0M0RCNzc4OTY3QTdGMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/dI5I9ut67YtWmxBioBYp59+
2Fcu49oZZ3EA3Dxn2Z/VmhmAmU9EkRH05uY+gUyjJAiG+hQghPhAPUH1xZGRdJZ5
h5BbE6kz1HBMzdYrvAWvppGyCJK0mIuDXdXbt6H9sPYI+BxHJXxYqitbGdQn6ne6
mydOIK/Vqr3w0AprXp9o00veMe8lyW9nSTigyxK28ErPyUWuqU13orz1hP8udMTm
qmGBnvkaHkw5X5le0Z+Zr6c2/j4v3rh2NRDGJVhNFfP1g/O4tqPT3HDSmGCKqI+3
jVt9GHQSIdKZ9Y0735xRCBw64NJ+kbDR9fsA/5Ppk13dBzA/hpXY78sQG9kjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSMPwXgOU31tLqX0sZD23eJZ6fykwHwYDVR0j
BBgwFoAUF/EvTPFtwbGNt2lMs0Qci4DgrCcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjMyZDc2MjctNDdkNy00ZmQwLWFlMGYtNjNiODczZmUyYzg4LzAvMTdGMTJGNENG
MTZEQzFCMThEQjc2OTRDQjM0NDFDOEI4MEUwQUMyNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xN0YxMkY0Q0YxNkRDMUIxOERCNzY5NENCMzQ0MUM4QjgwRTBB
QzI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMyZDc2MjctNDdkNy00ZmQwLWFl
MGYtNjNiODczZmUyYzg4LzAvMTdGMTJGNENGMTZEQzFCMThEQjc2OTRDQjM0NDFD
OEI4MEUwQUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFEC4oUA1bHTRkljFcI7vTdHmV+5JSYcVybG
DdO7QSjrUWGgftvfYUXfNCWLldKPxrp2fH6bli4GyLlukST7P676BAYUfEOI3Tpy
VvVY8rMVGo+B8D1Wwdma4N1+faBkNZdL/zRg6XLE2eZ2BLgOAN8oFJxuhMtZs4be
5EgNeI0OAilgoNZiuYy+ZTwrZpuP7tJUdmjkd8OB+UoGXRkZVmDHoWUb4b8q30lD
whgS7xyz7RoX8m8pEo5xQxAQ0SUjPtACfHqGqIG9uPjMcQJG8t7lQ/CvCMq4D1ef
/ZTFE4WxsTNGzKZgR76bbI7UVkwaJWdqRjtsrcjDufDY5j7LH9k=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:39:36 2026 by rpki-client