
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
File: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft (raw, json)
Hash identifier: mVUKX4M5J1s28PDRCpHUeBonscvN1SChGlYGSCwyaqg=
Subject key identifier: AB:C2:7D:EF:2F:D6:C8:D6:58:4A:E6:F4:9F:69:67:F9:79:9F:0A:D5
Authority key identifier: 17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27
Certificate issuer: /CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27
Certificate serial: 6F60D4116467B364658C21C162A8B6B84CB8C1F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 09:47:11 +0000
Manifest this update: Tue 02 Jun 2026 09:42:11 +0000
Manifest next update: Wed 03 Jun 2026 13:12:11 +0000
Files and hashes: 1: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: 7DAQ/qZeFo+VjQFhi1Qi3yS2FazYT4uy2MibUL7GHjo=)
2: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl (hash: xUWhab2SD4pSZRcyrI3qaRuvDP3Re8+9IvnwzgdurIs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl
rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 13:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:60:d4:11:64:67:b3:64:65:8c:21:c1:62:a8:b6:b8:4c:b8:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27
Validity
Not Before: Jun 2 09:42:11 2026 GMT
Not After : Jun 3 13:12:11 2026 GMT
Subject: CN=ABC27DEF2FD6C8D6584AE6F49F6967F9799F0AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:d5:6a:23:41:c5:94:e2:7e:52:f7:74:77:
e8:91:24:56:86:82:8d:72:33:b1:ea:c4:2a:e4:b4:
85:f0:7a:f1:50:96:c9:43:fb:1d:52:21:f1:31:af:
8c:78:4c:f5:57:55:93:ea:f4:e3:c9:6f:76:e1:3c:
9c:73:13:e3:f9:e7:f8:7d:cb:e8:89:e8:cb:7d:2e:
35:d6:c4:6a:7d:6e:58:e3:64:90:50:c9:48:aa:b0:
29:b2:36:ac:b7:6a:a9:46:19:58:f8:b2:1c:e9:12:
31:e8:11:f3:dc:55:cc:0c:94:ac:58:8b:07:8e:f6:
01:67:c3:f3:0e:77:3e:7e:62:ad:05:e6:f4:db:90:
ec:c7:ae:7f:96:1c:de:11:c4:d5:b2:fd:8e:68:61:
db:68:e8:48:5a:9a:fa:fa:d1:28:24:99:c7:2f:a4:
7b:7c:8a:5e:2b:d6:d0:fb:1b:24:35:30:0c:7d:d6:
9b:f0:2b:97:5d:3f:9b:ca:1a:07:59:2d:0c:ce:fa:
c9:a3:f4:04:e0:86:a8:0a:0e:04:97:4b:ed:b7:d9:
9a:06:11:3d:f1:99:84:81:60:92:c7:eb:7f:42:05:
49:e8:12:70:69:96:1b:28:f6:4d:bb:af:8c:43:fe:
fc:c3:c1:2c:7d:d8:49:7e:7f:ef:e3:50:12:98:b8:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:7D:EF:2F:D6:C8:D6:58:4A:E6:F4:9F:69:67:F9:79:9F:0A:D5
X509v3 Authority Key Identifier:
keyid:17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4e:69:15:72:c0:1f:f4:25:59:8c:3b:31:48:49:a0:1c:af:
9c:00:0e:57:51:ff:e9:2c:90:4d:d4:6d:4a:ec:be:9d:4e:72:
5d:8c:02:74:4e:4d:ad:ef:ae:20:13:c7:bc:8e:5e:69:dd:33:
de:33:24:09:cd:c1:e3:b9:3f:17:a3:72:c8:86:90:c9:0b:0c:
e8:90:0a:b9:84:f3:f6:8c:ef:23:90:18:92:c7:53:63:c3:f1:
4d:d7:87:ea:a2:09:20:c0:45:6c:d6:4a:2d:fb:82:f9:f7:62:
3c:ae:c1:ae:4b:06:b4:b8:0b:f4:3c:89:e4:3a:fd:6c:1f:a8:
42:ff:45:2f:da:cb:39:c7:24:11:57:fd:e0:67:0b:84:a5:fc:
2d:f3:7f:83:fc:f9:58:da:c6:77:0a:2a:52:a9:62:8a:18:45:
42:23:cc:a6:8d:99:43:0f:33:c3:25:0e:39:d4:f6:78:d8:98:
ae:7a:a9:46:54:11:b0:17:f1:00:e1:5b:5f:85:ff:bc:90:5f:
52:97:36:8c:2d:ce:74:33:5d:64:82:48:bf:3a:16:b5:32:79:
c0:db:e2:d9:0d:89:40:e2:3f:68:d5:3d:03:a2:b1:d7:c6:24:
61:7a:e2:f1:9a:40:a2:5a:74:6f:ee:b9:fd:45:e9:5f:65:6e:
80:8d:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:21:03 2026 by rpki-client