
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft
File: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft (raw, json)
Hash identifier: YcaLwfT5SQaZVddONlRRv0PIhnoL/KwaDCx0LuXXSTI=
Subject key identifier: 74:A3:57:44:C0:2D:59:0D:CA:91:4E:70:99:59:61:DB:5E:34:F2:6A
Authority key identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB
Certificate issuer: /CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB
Certificate serial: 0BC9AEDD62EE440CEA82524D07F994366EDD2260
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 00:16:06 +0000
Manifest this update: Tue 21 Jul 2026 00:11:06 +0000
Manifest next update: Wed 22 Jul 2026 01:50:06 +0000
Files and hashes: 1: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: u4GGrkPMCSBeQdSFpeeb+BeoQUTIplrdOwR16vFL5xY=)
2: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: o77O/i7FZPApyDMVFrPKMkI9xXBxv/ECdKB3uq5eUFw=)
3: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: WE6yzn5zZerVSAjtk4R/8zE12QnoZeSwbNL716L9BEo=)
4: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl (hash: Put93Ko8oq/CFBczkbpoQ4cWZhlkyd3Ze2xqK5d3RQ0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl
rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 01:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c9:ae:dd:62:ee:44:0c:ea:82:52:4d:07:f9:94:36:6e:dd:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB
Validity
Not Before: Jul 21 00:11:06 2026 GMT
Not After : Jul 22 01:50:06 2026 GMT
Subject: CN=74A35744C02D590DCA914E70995961DB5E34F26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:df:29:6d:a5:03:f9:5d:fa:0f:05:ff:a2:
50:c9:72:9c:1a:34:ef:a3:cf:5d:8a:44:3c:b9:02:
e7:45:7d:74:68:fe:40:d3:3d:6c:01:4a:1e:7d:da:
16:cb:c8:c5:1d:87:dc:d2:de:8d:f8:a9:ea:7a:a4:
94:31:a2:c8:8c:d6:36:c2:c1:61:3b:e6:28:55:ee:
31:29:7e:d9:57:08:b0:57:64:f6:25:3b:6a:34:a2:
99:6b:9b:cb:42:53:5c:9d:3f:dd:b1:29:95:aa:4c:
d0:cd:b7:4f:d3:93:94:36:04:47:ce:f8:83:d3:6f:
71:53:0c:01:55:81:cd:49:f6:b1:21:97:a5:06:3b:
47:00:15:e0:9d:8a:f6:a8:05:3d:30:bc:15:d2:99:
88:24:ad:63:d2:7b:84:43:93:55:63:34:63:9d:ce:
53:e3:a4:c1:76:8d:58:3c:4c:39:59:88:4a:9d:df:
79:f5:92:a7:6c:81:d9:45:81:87:11:b4:69:0d:2b:
a6:44:ad:2d:69:4d:e6:4f:25:2d:90:1a:59:43:5f:
7c:3a:60:2c:58:4b:4b:73:fe:cd:18:96:86:fe:96:
f0:19:7e:54:91:c7:b8:35:0a:69:d0:ff:f2:1b:38:
c2:67:c0:f6:ac:46:aa:bf:cc:5e:f6:30:10:fe:c9:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A3:57:44:C0:2D:59:0D:CA:91:4E:70:99:59:61:DB:5E:34:F2:6A
X509v3 Authority Key Identifier:
keyid:17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:11:17:44:fd:a4:b8:68:f6:46:75:07:ab:be:ef:bc:31:2c:
22:52:d8:c6:0a:8f:18:f8:1b:19:00:03:d7:87:23:1e:31:df:
20:e9:85:b0:5e:98:7a:48:f2:1e:a6:04:94:02:e5:93:a8:72:
71:92:c4:af:04:bf:c2:a5:ab:c7:58:81:09:a1:73:ea:7c:ce:
fb:87:5d:9a:50:58:a3:29:ce:66:8f:60:2b:75:b3:2f:3d:37:
91:7f:be:33:d1:ca:3b:99:62:66:f6:a7:9d:1f:9a:2b:e2:80:
ed:7f:05:70:86:17:cf:57:8d:53:78:62:f7:1c:91:5d:d7:52:
0d:47:48:a5:5b:c8:03:86:49:1e:5c:87:9f:d9:60:b4:b2:c3:
6f:1b:b1:5b:80:93:ba:c7:69:8f:49:fc:1d:3a:82:5c:a3:1c:
cf:8a:aa:62:c4:c8:7d:09:c1:40:8a:3d:e1:37:e8:ad:f1:3e:
96:78:07:5a:23:99:0c:7b:41:02:12:19:3e:a0:4b:9a:0a:77:
74:3d:40:ed:02:fb:89:b8:9c:8e:f1:09:f9:40:32:a4:22:8b:
b6:ff:57:f3:88:f6:61:02:16:ed:a5:00:4a:24:82:5c:7c:6d:
f0:b9:3a:c8:29:37:15:ef:83:aa:8b:e1:7f:78:7b:a8:d7:7e:
1e:7b:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:15 2026 by rpki-client