
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft
File: 29FA80F6176C25C691091C10B9D90672CFD66E6D.mft (raw, json)
Hash identifier: jXvQmk4tqIdQfbIROpjFFJv9JTkEPF6bDCP+dq7d+rk=
Subject key identifier: 02:9A:3A:6A:1B:08:92:4B:BB:35:AF:4C:2F:BB:1D:66:11:89:78:D7
Authority key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D
Certificate issuer: /CN=29FA80F6176C25C691091C10B9D90672CFD66E6D
Certificate serial: 466632DD69A151FAC6D7FEC3A27124129770BEEB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 18:03:56 +0000
Manifest this update: Mon 20 Jul 2026 17:58:56 +0000
Manifest next update: Tue 21 Jul 2026 20:05:56 +0000
Files and hashes: 1: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: RoLrz7G1R33kfqGbX8nuSO6gHFL4kaqL21h4DNDlHHo=)
2: 29FA80F6176C25C691091C10B9D90672CFD66E6D.crl (hash: 3N+6NfZ19U1z6I8NBu1O9E8f/6L+x7NYiju9xJZy2Fk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl
rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:66:32:dd:69:a1:51:fa:c6:d7:fe:c3:a2:71:24:12:97:70:be:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D
Validity
Not Before: Jul 20 17:58:56 2026 GMT
Not After : Jul 21 20:05:56 2026 GMT
Subject: CN=029A3A6A1B08924BBB35AF4C2FBB1D66118978D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5e:ee:e2:6c:f7:59:14:9b:32:d8:f8:34:59:
67:bf:d5:25:f0:b8:66:c9:1d:1e:3b:f1:68:78:01:
04:e5:f2:72:06:82:18:4f:59:5a:10:69:4b:cc:a4:
54:65:3e:c1:c1:11:7d:c4:52:db:aa:ca:29:76:21:
9e:00:c3:f5:3e:3a:28:17:dd:d4:08:27:4e:c4:e5:
2e:a9:04:81:21:20:24:0c:75:db:37:ce:07:67:cf:
02:58:24:05:27:4b:8c:98:11:69:5c:9c:1d:98:98:
c1:6b:64:30:6d:9e:89:19:30:ba:1f:66:2f:57:ef:
ba:8d:46:e5:4c:46:22:3e:3c:17:60:35:8b:e5:74:
ae:41:5e:dc:df:7d:bf:a0:f7:2f:c1:e8:5f:ff:bf:
ce:23:d1:ec:c6:13:d2:9d:25:c9:86:31:9e:dd:8c:
e1:e4:b5:7c:7e:d4:99:10:68:b8:1d:64:b6:74:00:
33:43:cc:4a:92:ab:02:32:f6:20:8a:1e:b9:2f:8e:
18:37:51:60:24:3f:04:c9:81:3f:91:be:56:60:c9:
60:48:e7:ab:95:6e:4d:17:04:33:37:25:09:1d:ad:
a0:d4:dc:cd:78:52:0d:7d:b1:f2:86:7a:47:79:ad:
22:e7:07:72:b4:9a:51:4e:3d:e1:ff:56:de:66:c4:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9A:3A:6A:1B:08:92:4B:BB:35:AF:4C:2F:BB:1D:66:11:89:78:D7
X509v3 Authority Key Identifier:
keyid:29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ce:aa:91:df:22:cb:73:29:21:71:6d:05:ce:34:01:57:a0:
f5:c5:62:18:ee:41:2c:4d:e5:96:24:a2:91:cb:df:be:a1:bd:
cb:bb:35:5d:ce:fd:2f:de:6c:15:a3:d0:ba:59:11:ee:32:f5:
2d:93:28:ba:41:96:44:41:8c:87:47:c9:cb:cb:d9:34:5e:c4:
2d:0c:a4:df:a2:3e:6c:4e:06:a8:7f:08:bb:0f:d7:cd:1d:64:
48:19:df:9d:d7:5d:9b:63:16:4b:58:9c:7c:dc:0f:1d:f2:c0:
31:60:f3:74:7a:c9:67:a3:b9:96:54:a2:89:02:69:55:76:ad:
37:80:3d:9b:5d:80:2c:b9:42:fa:65:2c:78:30:63:9f:44:5e:
82:36:a3:70:13:e0:6f:c5:c2:b6:0f:2a:c7:71:42:df:32:16:
cf:7a:72:19:b8:63:b2:fd:c9:1a:45:ca:90:2f:e1:a6:c5:91:
b5:4e:08:7e:b4:a7:07:c9:5e:8e:e1:82:c6:e1:b1:d2:6d:35:
54:11:e4:ed:de:57:ec:48:40:cd:40:5b:2e:27:dc:a5:20:93:
71:ea:8a:75:4a:92:53:9e:7e:be:30:e9:60:f2:95:9b:69:8f:
46:b1:c6:6a:da:7b:45:89:3d:7d:7a:04:2a:23:f5:8d:9d:24:
43:59:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:34 2026 by rpki-client