
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
File: 7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft (raw, json)
Hash identifier: SLnzEbAmkcAEttw4rJBmgn4gUmgLVgktgiwF9DGjpOc=
Subject key identifier: A9:8A:D3:69:79:20:75:C1:7C:AE:B0:BA:64:CB:89:7B:83:EA:11:AA
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Certificate issuer: /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial: 6524A1225F0E491BD9EA26D4DE170131874553CC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 22:18:46 +0000
Manifest this update: Mon 20 Jul 2026 22:13:46 +0000
Manifest next update: Tue 21 Jul 2026 23:12:46 +0000
Files and hashes: 1: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: lnZUd67/u+q68sxl1PDDYAeJMb51iAPVqKyYmLq4L8A=)
2: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: nJbUH2HeehvwuwWk5Ov+PdaciTDOUHySNuFD9i+1zG8=)
3: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (hash: 1B1TVPRMyjlvdSS5PDnfi+a+7Z7dzoKNS0Tsds8V9X4=)
4: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: K/TdIZS/b961M+WBr5AdYVjyihtdzB52T4G83Wtnnt4=)
5: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: F6rhjUutKa29bUnm7/UxG094I13DCzG5bjD0FGBZBes=)
6: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: LFWm0EcZVdKQjPdOneLLEFWhQfSN5g3Hf6HGlVqHaI8=)
7: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: 9+aWSYM5qln+RUD+mRbEe6cHjWT6vF9wbMbOOp4+klI=)
8: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: gQkyLjmlcDwKcd2z2flGb/EQPjqBxcBo5tmP6HZn8gU=)
9: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: f3sbcSJJAXRFf4psPjs2YrJ+ZQorOa5bzyPsnXVoi58=)
10: 7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl (hash: jET22YQ+hnmoYEz68NnC64XkcFI+WP/26BGMgLcwDqw=)
11: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: mkTvztfJSo91nm3StwqhTN6opwgEonPpDJuRndRoQxg=)
12: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: 9qfFoBhiNHzp+LreK9FNs3OMOxGnSUcOBWmf2OnEzeE=)
13: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: 45AAQ0VUPgUlngwmQc08RYng8iNJmTJSeNFh2/3cLi0=)
14: 3230322e39312e33302e302f32342d3234203d3e20313532303639.roa (hash: tPMzPTpsoYjE3xnLVYHISDf6L6hBGhuk0Owt7ukQ+FM=)
15: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 7Txv9C0CleyV9C9DJEoBZ+ODaZPJvEcP4KfRLd5UzEc=)
16: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: kzOezK5pJW56638YkKVBJp7Z9zkDhQFuaxKkqL/Jq6c=)
17: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: dBMRidIHmDJpAXQnRb7chQxbiE61M8MP8MR8WVkobdk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 23:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:24:a1:22:5f:0e:49:1b:d9:ea:26:d4:de:17:01:31:87:45:53:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Validity
Not Before: Jul 20 22:13:46 2026 GMT
Not After : Jul 21 23:12:46 2026 GMT
Subject: CN=A98AD369792075C17CAEB0BA64CB897B83EA11AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:fc:68:69:d5:59:9a:59:f6:ad:7e:63:63:
a1:3e:f3:59:fa:40:da:c4:91:4e:9c:f8:4f:ed:cd:
b6:2c:a6:11:04:52:77:fe:59:7f:3b:c6:71:db:1c:
80:a5:79:5c:19:8f:3c:b1:65:d8:b2:ea:ef:2d:2f:
c0:1d:6c:46:2f:3e:03:b1:59:4e:5f:f8:67:48:75:
cd:6e:69:38:43:4a:da:f4:11:06:c1:8c:51:9d:ae:
03:0f:d7:d4:1a:08:f9:77:a5:3d:a6:62:7b:c1:45:
59:9f:c0:2e:5c:55:dc:18:e1:d9:64:b4:e3:77:01:
60:50:d0:f7:00:e3:6e:df:6d:9b:e9:7d:47:fc:52:
c2:af:1a:58:9d:c7:3a:91:54:4d:e9:9d:22:d4:7d:
72:6e:15:16:18:2e:b7:21:e5:4b:4c:f9:de:f2:57:
45:10:52:fb:b6:cc:e3:91:7b:6c:60:6e:31:79:5b:
6e:7e:d4:ad:1d:0b:d5:dc:0b:c3:70:a8:16:e3:a0:
a7:a8:9c:fc:58:e3:0d:45:10:01:c8:55:ad:60:aa:
d7:f5:f8:25:8f:f0:d9:51:72:5b:02:b6:44:cd:cd:
f3:94:ea:13:2b:32:93:ab:58:f0:1a:cc:3b:ca:c7:
1d:b7:4f:f5:d0:ce:aa:38:ac:e2:de:f6:06:c9:00:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8A:D3:69:79:20:75:C1:7C:AE:B0:BA:64:CB:89:7B:83:EA:11:AA
X509v3 Authority Key Identifier:
keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8c:e0:59:cb:3f:0b:1a:66:25:6d:d8:7b:ef:21:af:9f:0d:
9c:cf:e0:91:73:eb:20:63:20:35:17:ca:40:c6:b4:ad:2e:95:
1c:1c:1b:a8:32:79:f9:1b:dd:6d:18:6b:57:aa:ca:2d:ec:d9:
c5:96:4a:30:61:76:06:79:ac:95:27:bf:7c:d3:35:6a:9c:ab:
f6:54:db:47:cd:2c:93:05:67:c1:35:d1:c0:3a:1c:ed:d6:18:
bf:92:59:e2:9c:fd:3a:7c:83:09:21:01:34:7a:a8:2a:58:77:
ee:6c:63:52:c3:62:42:25:64:37:45:c1:db:b9:6e:c7:00:35:
43:4c:27:06:9e:a1:8b:51:b1:ab:e4:fb:f0:ba:db:27:27:5f:
6e:56:37:e6:2f:15:59:b9:bf:13:f7:f0:12:16:06:70:4c:7f:
d2:23:d7:4c:e3:78:95:18:55:b7:53:a0:ba:fd:68:5e:45:56:
3f:5f:13:ce:72:c4:48:2f:6d:f4:ef:d5:99:54:57:8c:dc:45:
ee:21:59:2e:16:d2:55:42:13:35:a4:0a:42:9b:18:dc:cd:66:
45:e0:82:fa:71:3a:12:43:00:5c:26:4c:51:f0:d8:3b:14:00:
54:00:f0:e4:d5:30:a1:98:87:07:ff:61:b3:88:63:31:cf:67:
2b:77:c1:9f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZSShIl8OSRvZ6ibU3hcBMYdFU8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIyOURGRTJFMEEzQTU3MEE5MzUyMTYwMUVCMUE2MUZD
MENFQUUwNzAeFw0yNjA3MjAyMjEzNDZaFw0yNjA3MjEyMzEyNDZaMDMxMTAvBgNV
BAMTKEE5OEFEMzY5NzkyMDc1QzE3Q0FFQjBCQTY0Q0I4OTdCODNFQTExQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiGfxoadVZmln2rX5jY6E+81n6
QNrEkU6c+E/tzbYsphEEUnf+WX87xnHbHICleVwZjzyxZdiy6u8tL8AdbEYvPgOx
WU5f+GdIdc1uaThDStr0EQbBjFGdrgMP19QaCPl3pT2mYnvBRVmfwC5cVdwY4dlk
tON3AWBQ0PcA427fbZvpfUf8UsKvGlidxzqRVE3pnSLUfXJuFRYYLrch5UtM+d7y
V0UQUvu2zOORe2xgbjF5W25+1K0dC9XcC8NwqBbjoKeonPxY4w1FEAHIVa1gqtf1
+CWP8NlRclsCtkTNzfOU6hMrMpOrWPAazDvKxx23T/XQzqo4rOLe9gbJAHRfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqYrTaXkgdcF8rrC6ZMuJe4PqEaowHwYDVR0j
BBgwFoAUcinf4uCjpXCpNSFgHrGmH8DOrgcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjlhYjYwYjEtYTI0NC00YTc4LWIzMWItZmVjYTNkMTRlZDlmLzAvNzIyOURGRTJF
MEEzQTU3MEE5MzUyMTYwMUVCMUE2MUZDMENFQUUwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MjI5REZFMkUwQTNBNTcwQTkzNTIxNjAxRUIxQTYxRkMwQ0VB
RTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjlhYjYwYjEtYTI0NC00YTc4LWIz
MWItZmVjYTNkMTRlZDlmLzAvNzIyOURGRTJFMEEzQTU3MEE5MzUyMTYwMUVCMUE2
MUZDMENFQUUwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABaM4FnLPwsaZiVt2HvvIa+fDZzP4JFz6yBj
IDUXykDGtK0ulRwcG6gyefkb3W0Ya1eqyi3s2cWWSjBhdgZ5rJUnv3zTNWqcq/ZU
20fNLJMFZ8E10cA6HO3WGL+SWeKc/Tp8gwkhATR6qCpYd+5sY1LDYkIlZDdFwdu5
bscANUNMJwaeoYtRsavk+/C62ycnX25WN+YvFVm5vxP38BIWBnBMf9Ij10zjeJUY
VbdToLr9aF5FVj9fE85yxEgvbfTv1ZlUV4zcRe4hWS4W0lVCEzWkCkKbGNzNZkXg
gvpxOhJDAFwmTFHw2DsUAFQA8OTVMKGYhwf/YbOIYzHPZyt3wZ8=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:26:46 2026 by rpki-client