
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
File: F29E13162A7FAF445019923879EB8E64CC4CFA65.mft (raw, json)
Hash identifier: R8UQtae8B0v7RPC2PTGYJkRJCYoGM+V9ReO4a8nXWJ0=
Subject key identifier: 1D:B4:61:44:3A:B7:32:AC:0B:67:51:AE:52:B6:0C:09:6F:28:B9:7D
Authority key identifier: F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
Certificate issuer: /CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Certificate serial: 1EEB296E49A7FE2622D67F85C48E9DB8A62A5719
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
Manifest number: A7
Signing time: Thu 03 Sep 2026 06:10:24 +0000
Manifest this update: Thu 03 Sep 2026 06:05:24 +0000
Manifest next update: Fri 04 Sep 2026 10:06:24 +0000
Files and hashes: 1: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: 7Y5Lnjk/jo6ehCKFeCJqfiCvTxN0dIqmd+ed5g2g9WI=)
2: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: i9DIEYpTvsRA/97CVQ0+R48i5YUIqshxUph75Vcam7w=)
3: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: dBbvr3vnMoWgLvpZmo0fsQX3iK4npJkSb3PT2yQQy7k=)
4: F29E13162A7FAF445019923879EB8E64CC4CFA65.crl (hash: y2u7Q7C6Ao4M3AvwdrQHeoxKG4Ch9A8mOHC8HDcafGc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 10:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:eb:29:6e:49:a7:fe:26:22:d6:7f:85:c4:8e:9d:b8:a6:2a:57:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Validity
Not Before: Sep 3 06:05:24 2026 GMT
Not After : Sep 4 10:06:24 2026 GMT
Subject: CN=1DB461443AB732AC0B6751AE52B60C096F28B97D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:cc:65:ee:3d:b1:5b:26:b9:df:86:75:03:
58:4c:6f:f7:60:94:2b:3b:a6:61:e4:0e:4b:f8:20:
4a:4c:5c:df:ce:0a:74:79:aa:f3:1f:9b:93:20:7e:
fb:c5:d9:6d:93:a8:c8:db:ff:eb:28:17:bd:54:6b:
d6:41:82:a8:6e:f5:72:ce:c3:51:07:fe:f4:9d:c5:
1d:3e:4c:d7:d9:7a:33:20:42:2c:f9:71:a1:4a:ed:
64:6e:9d:60:41:ef:ad:9f:00:63:20:b8:d5:e6:a3:
95:77:9d:2e:f7:6e:da:13:07:77:f1:e8:60:af:44:
eb:6d:44:ce:44:c2:56:0b:60:cf:22:e5:8e:84:d4:
b4:d9:62:a3:e3:cd:4e:24:66:6f:dc:70:99:f8:8a:
d1:71:34:c5:ca:23:fa:63:d5:d3:eb:e3:d4:27:3e:
03:56:75:29:f7:ca:75:f1:b6:c3:c9:05:01:18:40:
69:2d:d7:da:cb:ed:b8:b9:b7:7d:ef:b6:87:66:7a:
65:bb:26:de:2a:66:23:53:75:22:5e:a3:b0:05:4e:
7c:95:b5:d8:7c:26:9c:7c:47:5d:00:5e:7d:0a:6e:
a8:5f:67:7f:43:54:e8:d4:f8:32:00:75:dc:c8:2b:
c5:a3:48:d5:62:5a:23:3f:52:07:14:96:6e:8c:bc:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B4:61:44:3A:B7:32:AC:0B:67:51:AE:52:B6:0C:09:6F:28:B9:7D
X509v3 Authority Key Identifier:
keyid:F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8d:cd:9b:35:ab:54:a5:7b:1f:04:d8:d0:c9:e1:99:40:6e:
8b:05:85:c3:b9:b2:9b:b5:1c:50:c7:1c:2d:66:80:0a:9e:2b:
bd:85:31:84:32:95:a1:d1:15:b5:69:fa:28:0b:e8:de:45:86:
ea:d4:5a:45:af:95:a6:0f:8b:ea:2e:27:31:c7:73:62:05:70:
37:23:b6:57:81:42:9e:85:f9:64:ac:9f:d4:ac:13:94:a9:ef:
63:ca:88:2e:89:9a:a4:77:5d:ee:11:ec:1a:9f:88:40:dd:79:
da:ac:5d:e6:98:a4:12:f7:f4:ad:a9:14:2a:2b:37:a2:1f:99:
f6:65:65:90:8a:89:04:c9:08:9c:08:f2:9e:68:6b:cb:53:14:
c8:c4:2e:36:74:e0:e4:92:31:e9:09:c5:ae:d9:ad:69:83:4f:
d6:46:d6:d3:c3:59:05:33:ae:46:6a:49:31:a0:03:50:4d:04:
cf:cf:e6:33:97:88:17:cd:de:ac:ea:99:71:95:26:fc:f6:c5:
9f:83:38:1e:59:1e:c0:4b:83:e2:b6:91:7c:12:2f:09:b3:cc:
22:39:17:d7:73:ea:18:61:e4:36:21:67:e7:74:03:b7:5d:20:
b4:7f:3e:dc:02:d8:e0:77:01:1e:7d:f4:98:63:34:6b:3b:6a:
34:b6:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:06:43 2026 by rpki-client