
$ rpki-client -vvf repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
File: 170979C0E31958FA76259F360B8405233C40BA7A.mft (raw, json)
Hash identifier: YKE4JR46lnI97dqU+W1WsrbEjTjjV/f0OP+lZ+S2h2E=
Subject key identifier: CD:20:D3:C1:10:17:7C:56:5F:F5:9D:2C:1C:CC:95:FA:7B:DC:1B:7B
Authority key identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A
Certificate issuer: /CN=170979C0E31958FA76259F360B8405233C40BA7A
Certificate serial: 687A6DA0D5774636A21C1FFBC19F0A133A42E999
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
Manifest number: 011E
Signing time: Sat 07 Mar 2026 05:20:03 +0000
Manifest this update: Sat 07 Mar 2026 05:15:03 +0000
Manifest next update: Tue 10 Mar 2026 07:01:03 +0000
Files and hashes: 1: 170979C0E31958FA76259F360B8405233C40BA7A.crl (hash: OlgtMCqEkX3XAegfEL115sWTz4EZpGek3T54UgV1TsI=)
2: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: mVf5a9vExgGJKEfnRVhSrrkQjjAkp42h9gYkIf1hcMA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl
rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7a:6d:a0:d5:77:46:36:a2:1c:1f:fb:c1:9f:0a:13:3a:42:e9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170979C0E31958FA76259F360B8405233C40BA7A
Validity
Not Before: Mar 7 05:15:03 2026 GMT
Not After : Mar 10 07:01:03 2026 GMT
Subject: CN=CD20D3C110177C565FF59D2C1CCC95FA7BDC1B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:d2:70:78:d7:6e:9e:58:45:c2:91:5e:3d:
08:c4:18:ba:bb:24:13:ed:cf:7a:f8:ab:54:7d:dd:
7d:91:b3:ab:9b:26:ed:e8:82:fc:3b:09:69:da:45:
ea:26:c3:f1:b4:8b:45:c9:61:ae:1c:93:64:ae:c8:
21:73:95:2d:9f:15:20:ed:8d:f6:16:70:ff:34:27:
bf:bd:28:59:22:dc:a7:47:3e:cb:c8:b9:6a:df:23:
33:da:fe:80:14:7c:80:f4:80:57:2d:83:40:85:3b:
cf:e2:e4:cf:4b:0e:4f:2d:a2:08:1d:b6:53:78:1c:
b6:5b:52:97:76:21:4a:a0:37:55:6e:7b:1d:1b:0a:
c9:80:0b:86:34:84:92:76:85:2f:dd:a7:ba:2d:13:
47:94:60:13:43:68:2e:fc:37:d1:7d:70:57:97:f5:
e7:01:82:01:2e:2d:f5:5a:66:06:24:2f:2e:60:ca:
fa:4c:f6:70:b4:3c:1e:bd:41:ca:9b:fa:15:21:dd:
21:85:d0:97:13:9e:64:e0:70:24:a0:1c:18:36:27:
72:f6:30:65:21:7f:57:89:71:43:46:36:7e:18:e2:
4d:58:19:33:c5:b5:84:a7:87:cd:96:8a:8a:f6:4a:
25:a6:97:44:1e:1f:3b:e7:ff:7b:a4:07:b1:cf:da:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:20:D3:C1:10:17:7C:56:5F:F5:9D:2C:1C:CC:95:FA:7B:DC:1B:7B
X509v3 Authority Key Identifier:
keyid:17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:20:fa:f4:9a:12:a9:4f:ba:db:23:ae:1e:d2:d3:5d:fd:
fa:1b:40:8a:3b:a8:70:bc:8d:38:da:56:8e:68:e2:42:05:fa:
0e:be:21:66:ac:ed:b4:e8:cf:81:81:7b:9d:bc:d8:19:ec:ec:
9a:f6:50:5b:1e:b8:eb:61:9e:a4:ec:69:f0:4c:22:8c:a7:2b:
4d:c4:fb:46:13:84:94:43:36:c7:4a:ff:98:97:35:9b:04:c0:
75:2a:b1:5b:2d:e4:d2:01:5e:c5:78:4f:21:06:7b:d0:0c:51:
c7:cb:35:81:a9:ff:91:91:b2:19:f2:d4:dc:2e:d7:b9:fd:82:
5b:ab:b9:76:fe:d3:20:a0:e2:28:84:75:5c:9a:3d:a2:fa:8b:
ba:3a:2a:90:4a:06:a5:89:4b:32:ba:19:b1:89:02:b0:a9:55:
12:48:0d:a3:01:06:3d:95:1d:fa:b0:68:c0:a5:ca:b1:b4:69:
99:28:a5:3e:27:17:cf:2f:2a:8e:8b:cd:0e:ad:1c:12:5d:70:
4e:f2:f3:3c:8c:17:4d:b5:4a:55:a5:90:04:eb:25:81:75:34:
f7:54:0c:e3:72:b1:6d:d9:e0:a2:8e:62:1e:43:5b:19:d4:d2:
fb:f1:d5:67:9b:3b:3a:41:7d:1f:bc:0d:ae:9a:c1:a9:ec:3b:
f2:ff:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:49:18 2026 by rpki-client