
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
File: 29047775725807ADDC2CF5B31E6B548D16ACA73D.mft (raw, json)
Hash identifier: g+XsOZ8uzHJk1bFSsKsTaLH5lYYGtsoyVlqaGnyj+TI=
Subject key identifier: FF:40:24:11:ED:EF:9B:16:9B:9A:23:B3:82:C3:23:A9:C4:37:A4:07
Authority key identifier: 29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D
Certificate issuer: /CN=29047775725807ADDC2CF5B31E6B548D16ACA73D
Certificate serial: 334A2DACE4819D2773408C1D4BB656C590B20DA1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 11:29:11 +0000
Manifest this update: Tue 02 Jun 2026 11:24:11 +0000
Manifest next update: Wed 03 Jun 2026 14:11:11 +0000
Files and hashes: 1: 29047775725807ADDC2CF5B31E6B548D16ACA73D.crl (hash: rYXC+XVzgvsJrRq4v56TeCTz7RDZva8zQ/Y9+V6Ay+Q=)
2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: Euiddqe4QqVPakY6ZLb5tUk6+F4coEUNqu/76ax8PhM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl
rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4a:2d:ac:e4:81:9d:27:73:40:8c:1d:4b:b6:56:c5:90:b2:0d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29047775725807ADDC2CF5B31E6B548D16ACA73D
Validity
Not Before: Jun 2 11:24:11 2026 GMT
Not After : Jun 3 14:11:11 2026 GMT
Subject: CN=FF402411EDEF9B169B9A23B382C323A9C437A407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:64:ab:49:1a:bd:e8:10:9a:b7:f5:9a:8f:
20:f0:c1:50:c6:94:94:a0:ae:3b:ad:21:3f:98:db:
cf:21:67:78:6f:2f:4a:24:95:94:1d:6d:05:83:e2:
47:b2:b4:47:05:db:42:2d:06:45:64:20:29:c5:05:
6a:c3:75:46:c6:31:d6:40:a7:cb:f0:af:bd:62:38:
80:2d:35:25:6a:f2:60:35:0e:0b:73:ac:49:22:63:
71:75:60:14:a2:26:74:d3:63:85:f1:68:27:e5:3b:
dc:a1:6a:99:1a:0d:4f:85:dd:c4:b2:b9:62:f5:84:
3c:3c:7c:9c:9f:8c:a4:30:7f:9c:ad:5d:a0:6f:aa:
c8:84:cd:f7:d3:1f:ff:d6:9a:9c:94:1c:48:a1:42:
ef:6d:0f:2d:4a:76:5c:a7:69:61:04:cf:3d:51:68:
44:11:b5:d5:3a:d3:29:48:b3:af:0a:c1:46:02:bf:
f3:95:c9:e7:49:f5:a5:82:15:40:b4:3e:36:c1:bf:
64:b8:77:29:17:c8:7c:7c:fd:c0:1e:fc:09:05:3b:
60:bf:dd:f5:66:10:80:12:3e:9f:76:7c:7a:fa:2b:
12:8c:f3:51:4d:b1:89:92:27:ca:04:4b:fd:f2:98:
c4:0e:b9:95:f2:ce:cc:3f:0e:4c:0d:93:dc:c8:a6:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:24:11:ED:EF:9B:16:9B:9A:23:B3:82:C3:23:A9:C4:37:A4:07
X509v3 Authority Key Identifier:
keyid:29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:79:ad:3d:73:ab:1b:50:5f:6d:5c:d2:89:2a:c9:c5:a5:8a:
93:e7:17:c9:08:cb:67:1d:ef:85:e6:cf:56:79:8d:59:57:0b:
e6:b1:b7:7b:bb:fa:bb:3b:88:03:00:3c:cf:12:6a:3a:66:34:
23:a7:fd:04:2d:38:57:8f:1f:fb:db:af:d2:a9:e4:d3:ac:5b:
59:fb:e2:b7:90:4e:bf:10:60:55:f4:3e:32:c4:3b:b5:99:a5:
20:da:3c:b6:c1:2e:4a:0c:7e:0f:a2:3f:5f:f7:c8:ad:88:53:
c9:dc:2d:43:0d:14:28:a4:45:83:fc:9d:9b:04:92:0c:99:42:
aa:0e:cc:62:d0:bb:b7:87:c2:dd:1e:bd:ec:61:3e:4a:56:31:
de:b1:11:75:36:31:31:5d:0e:9f:fd:a8:1d:c3:06:95:53:67:
4a:07:28:7f:42:94:0a:ea:b8:e7:4b:4a:13:d1:45:eb:74:58:
c3:dc:0c:ce:01:65:5f:cd:f4:b0:52:cb:fa:64:13:8a:af:d4:
63:6c:dc:e8:77:70:32:b6:22:37:28:4b:6f:bd:e2:46:46:b0:
97:b8:17:9b:8b:1e:5d:47:e9:e9:94:96:e4:ec:2b:90:21:fb:
97:97:99:04:e8:82:32:9f:da:87:d3:f2:0f:69:bf:09:5c:33:
52:b9:c8:47
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM0otrOSBnSdzQIwdS7ZWxZCyDaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQx
NkFDQTczRDAeFw0yNjA2MDIxMTI0MTFaFw0yNjA2MDMxNDExMTFaMDMxMTAvBgNV
BAMTKEZGNDAyNDExRURFRjlCMTY5QjlBMjNCMzgyQzMyM0E5QzQzN0E0MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DmSrSRq96BCat/WajyDwwVDG
lJSgrjutIT+Y288hZ3hvL0oklZQdbQWD4keytEcF20ItBkVkICnFBWrDdUbGMdZA
p8vwr71iOIAtNSVq8mA1DgtzrEkiY3F1YBSiJnTTY4XxaCflO9yhapkaDU+F3cSy
uWL1hDw8fJyfjKQwf5ytXaBvqsiEzffTH//WmpyUHEihQu9tDy1KdlynaWEEzz1R
aEQRtdU60ylIs68KwUYCv/OVyedJ9aWCFUC0PjbBv2S4dykXyHx8/cAe/AkFO2C/
3fVmEIASPp92fHr6KxKM81FNsYmSJ8oES/3ymMQOuZXyzsw/DkwNk9zIpmgDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/0AkEe3vmxabmiOzgsMjqcQ3pAcwHwYDVR0j
BBgwFoAUKQR3dXJYB63cLPWzHmtUjRaspz0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Nzc5NGRhNDAtYjM3ZS00ZmU2LThmNDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3
MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQxNkFDQTczRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yOTA0Nzc3NTcyNTgwN0FEREMyQ0Y1QjMxRTZCNTQ4RDE2QUNB
NzNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm
NDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0
OEQxNkFDQTczRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGh5rT1zqxtQX21c0okqycWlipPnF8kIy2cd
74Xmz1Z5jVlXC+axt3u7+rs7iAMAPM8SajpmNCOn/QQtOFePH/vbr9Kp5NOsW1n7
4reQTr8QYFX0PjLEO7WZpSDaPLbBLkoMfg+iP1/3yK2IU8ncLUMNFCikRYP8nZsE
kgyZQqoOzGLQu7eHwt0evexhPkpWMd6xEXU2MTFdDp/9qB3DBpVTZ0oHKH9ClArq
uOdLShPRRet0WMPcDM4BZV/N9LBSy/pkE4qv1GNs3Oh3cDK2IjcoS2+94kZGsJe4
F5uLHl1H6emUluTsK5Ah+5eXmQTogjKf2ofT8g9pvwlcM1K5yEc=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:56 2026 by rpki-client