
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
File: 29047775725807ADDC2CF5B31E6B548D16ACA73D.mft (raw, json)
Hash identifier: aP5rGKY5Pi/lZofk+NkeWmvVwPdQuuvyG9rC+sDFOmQ=
Subject key identifier: EA:7F:64:6A:A6:48:EE:C6:37:A3:CD:20:6B:8E:79:2D:8D:CB:17:16
Authority key identifier: 29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D
Certificate issuer: /CN=29047775725807ADDC2CF5B31E6B548D16ACA73D
Certificate serial: 3DF48C4DEAA448A98ED7DBF51A4254F238E3A640
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
Manifest number: FA
Signing time: Thu 05 Nov 2026 00:24:31 +0000
Manifest this update: Thu 05 Nov 2026 00:19:31 +0000
Manifest next update: Fri 06 Nov 2026 03:18:31 +0000
Files and hashes: 1: 29047775725807ADDC2CF5B31E6B548D16ACA73D.crl (hash: 9aBYa5W9A8ve7KGQf7+5yU4J46c1XbvHSG1lFiSpyLc=)
2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: Euiddqe4QqVPakY6ZLb5tUk6+F4coEUNqu/76ax8PhM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl
rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 01:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f4:8c:4d:ea:a4:48:a9:8e:d7:db:f5:1a:42:54:f2:38:e3:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29047775725807ADDC2CF5B31E6B548D16ACA73D
Validity
Not Before: Nov 5 00:19:31 2026 GMT
Not After : Nov 6 03:18:31 2026 GMT
Subject: CN=EA7F646AA648EEC637A3CD206B8E792D8DCB1716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:f7:eb:36:47:02:5a:ae:c4:22:ff:61:d8:
3c:06:3f:3c:84:c9:6b:69:d8:dd:08:d3:17:8f:67:
15:d2:08:c5:99:f5:2a:7b:dc:b9:18:ca:5a:1e:f4:
2d:77:d2:de:4f:7f:e7:39:8b:b0:13:83:4e:6a:26:
99:cc:3f:1f:a3:51:af:bb:a0:b9:5b:47:8f:1c:30:
77:50:be:c9:dc:6f:0a:29:45:34:66:47:d1:76:c1:
47:2f:7f:24:ea:51:25:ae:a1:44:1e:2b:2b:cd:72:
96:31:48:1e:fd:42:17:6f:b8:a0:a5:d8:6b:cf:c8:
16:69:3e:7e:0d:25:00:03:c1:73:d8:62:68:5e:29:
3a:d1:39:7d:6e:fa:1c:75:09:e3:30:d2:c4:bd:88:
c3:33:35:b9:f0:48:73:d0:fd:bf:6e:c7:a1:cc:91:
33:65:35:e6:c2:fd:9b:12:96:c8:66:50:06:10:8a:
d3:ba:4a:91:76:c4:b1:2c:e3:f4:47:65:86:6f:4e:
d1:98:6a:96:1c:61:19:ba:35:35:d9:3d:f6:8f:94:
43:b3:72:e3:56:a0:7d:9f:fa:32:2c:0d:60:52:1b:
44:e7:de:7f:b2:12:15:1f:de:8a:f3:4a:3c:22:28:
08:e8:b3:37:a1:aa:49:c9:29:bb:f4:3e:3e:b7:5e:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7F:64:6A:A6:48:EE:C6:37:A3:CD:20:6B:8E:79:2D:8D:CB:17:16
X509v3 Authority Key Identifier:
keyid:29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1a:ad:a3:f7:aa:8e:bb:ca:e8:20:07:ad:68:0b:6e:8e:0c:
8d:13:93:5c:91:48:f2:af:24:4b:45:47:c6:d7:1a:2c:90:67:
1d:60:48:4d:af:59:db:75:4d:ff:09:e3:c0:e0:ec:4d:dd:c3:
90:ad:6f:52:8f:33:cf:1f:0d:36:f2:71:56:79:22:d8:9e:73:
69:a7:5b:65:76:fa:71:d7:2e:ce:b5:0c:f3:26:6f:25:f7:a3:
5a:6d:5e:58:76:06:75:e9:d3:46:09:b0:f5:8b:8c:c2:3a:0d:
66:84:41:22:24:4d:00:ac:23:67:c1:82:10:b0:0a:bf:63:cc:
60:62:de:13:51:17:44:5b:2b:d7:31:2d:76:d2:81:d3:b1:bd:
b5:c7:aa:b4:ed:6b:49:30:d5:08:12:09:6b:9b:83:d4:43:c2:
3f:73:d6:58:60:8f:59:20:d7:91:23:7a:c5:b4:6a:e0:cc:b8:
9b:20:8c:dc:1a:1a:2f:1e:72:95:03:07:be:ba:a9:86:af:83:
6b:a3:11:b6:86:e8:79:6f:bf:c7:e8:88:3d:99:e1:9e:29:29:
3a:f2:89:f8:4c:36:f9:25:75:07:23:dd:75:e1:1b:d3:d5:7a:
01:de:90:fd:8d:77:44:ac:b2:cd:e9:7f:70:13:f6:4f:5f:36:
a9:d9:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:55:20 2026 by rpki-client