
$ rpki-client -vvf rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft
File: 2817CA07C241F9335DFE7BF74F08903016146551.mft (raw, json)
Hash identifier: JMzT4+6Ug0thMOtKpxFpb/rSIGAD9t05pqwZAC2isSA=
Subject key identifier: 0F:A1:03:6C:59:89:B5:B5:A8:7E:2D:B2:42:46:D7:F3:AB:35:6B:94
Authority key identifier: 28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51
Certificate issuer: /CN=2817CA07C241F9335DFE7BF74F08903016146551
Certificate serial: 07D4B33FB8D57A845911D57F99BDEC6F6B855BCF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 23:53:57 +0000
Manifest this update: Thu 23 Jul 2026 23:48:57 +0000
Manifest next update: Sat 25 Jul 2026 02:47:57 +0000
Files and hashes: 1: 2817CA07C241F9335DFE7BF74F08903016146551.crl (hash: aaDUdmxOZ1ziVtWiKsU4yNo0IiKiFM3L56gd/siEi5M=)
2: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: aNd3sMubki/QRY6vhkS/b1HBjD1fodR7gVyQrC+rvgs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl
rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d4:b3:3f:b8:d5:7a:84:59:11:d5:7f:99:bd:ec:6f:6b:85:5b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2817CA07C241F9335DFE7BF74F08903016146551
Validity
Not Before: Jul 23 23:48:57 2026 GMT
Not After : Jul 25 02:47:57 2026 GMT
Subject: CN=0FA1036C5989B5B5A87E2DB24246D7F3AB356B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:60:52:d5:5b:10:5d:79:56:0c:30:d9:28:
89:d0:6b:48:63:b9:a7:e4:81:9f:3e:79:ff:0b:cc:
10:d6:f6:64:4c:c7:b2:49:b1:9d:95:56:b3:b2:cd:
2a:59:6b:86:20:b7:2a:1c:8d:18:15:47:3a:40:01:
ce:e2:1a:bc:9b:ac:c3:a0:d8:d3:4c:49:5e:e8:28:
1d:8c:51:17:4d:50:ce:1d:7d:7a:3b:b2:a8:dd:d4:
bb:38:de:6a:d7:62:cf:b5:71:17:54:82:3d:7d:b8:
1a:6a:f6:67:b7:86:1b:c3:42:1f:87:a4:4c:e5:f3:
70:3a:b0:eb:7b:64:e9:0f:ab:ab:aa:b5:57:ca:8a:
9b:9c:c4:ab:ac:c5:51:df:92:f5:33:98:c7:b5:0c:
aa:ff:27:39:d1:6a:bc:19:b9:4e:b2:d0:56:44:f1:
11:86:f3:18:75:ec:fa:37:8a:b0:75:52:58:a5:9a:
13:e6:3e:6b:22:a6:fd:ec:13:fd:0d:8f:78:d6:8c:
81:b1:11:4d:7f:65:35:66:f3:ac:32:0a:ac:1e:a8:
cd:80:b1:7e:b7:f8:2d:fd:9c:4e:7b:d3:d4:7d:59:
ab:50:6d:8d:27:99:b1:18:eb:16:0d:de:3f:55:0e:
f4:c4:07:ec:b5:4c:12:b2:ec:0a:74:5d:95:57:d0:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:03:6C:59:89:B5:B5:A8:7E:2D:B2:42:46:D7:F3:AB:35:6B:94
X509v3 Authority Key Identifier:
keyid:28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5d:23:af:0d:09:a4:9d:66:f8:b3:42:28:47:ca:a9:3f:8e:
30:09:29:38:21:8c:c9:df:be:c5:19:4a:d7:2b:35:ff:7d:26:
7c:12:cd:a8:81:b0:d0:ae:8b:dd:07:ca:a8:9f:cf:08:87:a7:
88:ce:b6:81:3c:2f:52:c6:bf:4f:90:ad:db:17:02:0d:28:ff:
41:26:4d:7f:ca:de:a2:d5:ad:23:ae:9f:ba:a0:d7:5e:96:50:
57:5f:ff:c5:9d:a6:39:a3:bb:82:0f:f6:78:81:26:aa:7f:5e:
08:6b:36:7d:7e:0f:ef:ed:ab:52:e4:a9:ee:77:b9:b1:2d:ed:
4e:0f:06:32:12:36:50:a3:ce:3c:70:23:df:7c:ba:31:cf:04:
47:0e:81:e7:58:ad:bb:69:33:20:47:63:a5:cd:91:8b:06:eb:
8d:4c:5c:bc:92:a4:ac:6a:62:c0:37:c4:f0:df:37:50:f2:69:
c9:3c:b3:81:c9:a1:50:ea:d1:90:5f:fa:94:41:48:39:38:79:
c3:4f:64:e7:8c:2b:15:4f:23:59:af:c6:58:1e:a5:29:a2:f8:
6f:a8:4f:e6:0b:9f:a3:f8:b1:c2:c2:5a:ec:3e:e1:fa:c1:a6:
cb:b3:13:18:53:37:af:97:b7:a3:aa:82:36:1a:d4:6e:a7:d1:
fa:60:05:e9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUB9SzP7jVeoRZEdV/mb3sb2uFW88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkwMzAx
NjE0NjU1MTAeFw0yNjA3MjMyMzQ4NTdaFw0yNjA3MjUwMjQ3NTdaMDMxMTAvBgNV
BAMTKDBGQTEwMzZDNTk4OUI1QjVBODdFMkRCMjQyNDZEN0YzQUIzNTZCOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbMGBS1VsQXXlWDDDZKInQa0hj
uafkgZ8+ef8LzBDW9mRMx7JJsZ2VVrOyzSpZa4YgtyocjRgVRzpAAc7iGrybrMOg
2NNMSV7oKB2MURdNUM4dfXo7sqjd1Ls43mrXYs+1cRdUgj19uBpq9me3hhvDQh+H
pEzl83A6sOt7ZOkPq6uqtVfKipucxKusxVHfkvUzmMe1DKr/JznRarwZuU6y0FZE
8RGG8xh17Po3irB1UlilmhPmPmsipv3sE/0Nj3jWjIGxEU1/ZTVm86wyCqweqM2A
sX63+C39nE5709R9WatQbY0nmbEY6xYN3j9VDvTEB+y1TBKy7Ap0XZVX0OutAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUD6EDbFmJtbWofi2yQkbX86s1a5QwHwYDVR0j
BBgwFoAUKBfKB8JB+TNd/nv3TwiQMBYUZVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Nzk1YzFhZTgtZDk3ZC00MDQ4LTlhN2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdD
MjQxRjkzMzVERkU3QkY3NEYwODkwMzAxNjE0NjU1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yODE3Q0EwN0MyNDFGOTMzNURGRTdCRjc0RjA4OTAzMDE2MTQ2
NTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh
N2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkw
MzAxNjE0NjU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACBdI68NCaSdZvizQihHyqk/jjAJKTghjMnf
vsUZStcrNf99JnwSzaiBsNCui90HyqifzwiHp4jOtoE8L1LGv0+QrdsXAg0o/0Em
TX/K3qLVrSOun7qg116WUFdf/8Wdpjmju4IP9niBJqp/XghrNn1+D+/tq1Lkqe53
ubEt7U4PBjISNlCjzjxwI998ujHPBEcOgedYrbtpMyBHY6XNkYsG641MXLySpKxq
YsA3xPDfN1Dyack8s4HJoVDq0ZBf+pRBSDk4ecNPZOeMKxVPI1mvxlgepSmi+G+o
T+YLn6P4scLCWuw+4frBpsuzExhTN6+Xt6OqgjYa1G6n0fpgBek=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:39 2026 by rpki-client