
$ rpki-client -vvf rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
File: F29E13162A7FAF445019923879EB8E64CC4CFA65.mft (raw, json)
Hash identifier: 1ISsSChmyljwrNjRvC7ZMIlBu1hcisrourC8iYpmjTY=
Subject key identifier: 77:24:57:5B:25:17:8C:49:A1:15:13:1E:D3:C3:60:CB:49:C1:70:B5
Authority key identifier: F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
Certificate issuer: /CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Certificate serial: 40A46F4665D0DF7D3F611A616DDD0A4FBA58C1D3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 15:34:30 +0000
Manifest this update: Fri 19 Jun 2026 15:29:30 +0000
Manifest next update: Sat 20 Jun 2026 16:43:30 +0000
Files and hashes: 1: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: 7Y5Lnjk/jo6ehCKFeCJqfiCvTxN0dIqmd+ed5g2g9WI=)
2: F29E13162A7FAF445019923879EB8E64CC4CFA65.crl (hash: baccbVLO/vk8wDx4TZBNElrk15uEONfF6w9zgnaPlEI=)
3: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: i9DIEYpTvsRA/97CVQ0+R48i5YUIqshxUph75Vcam7w=)
4: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: dBbvr3vnMoWgLvpZmo0fsQX3iK4npJkSb3PT2yQQy7k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 16:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a4:6f:46:65:d0:df:7d:3f:61:1a:61:6d:dd:0a:4f:ba:58:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Validity
Not Before: Jun 19 15:29:30 2026 GMT
Not After : Jun 20 16:43:30 2026 GMT
Subject: CN=7724575B25178C49A115131ED3C360CB49C170B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:17:88:73:19:48:8e:dd:6b:48:2c:56:7d:
18:46:29:ff:37:7f:98:35:46:f2:4f:b7:8b:32:5d:
e7:07:9f:9f:22:e1:a8:f3:08:63:90:55:dd:db:18:
43:ff:e2:cf:7c:01:c0:92:1c:06:83:90:77:4c:e3:
2a:56:b1:68:cc:63:4f:28:fa:f0:8e:3c:7c:0f:b7:
9d:d4:96:75:12:f0:0f:c7:3f:26:15:04:8e:a9:fc:
5e:3b:2a:c2:d8:8b:88:ba:96:00:e2:80:22:f8:05:
8d:7c:89:30:e4:bf:cc:15:0d:a8:3f:4c:9d:46:b0:
7b:84:02:bc:3f:2e:6b:49:f1:88:23:8c:4a:d5:43:
1d:57:3c:e6:76:65:a9:ff:0b:11:59:d5:8c:b6:11:
0b:b6:76:bf:4d:49:52:4f:11:f2:a9:59:5e:9b:9c:
d9:ae:79:cc:2d:79:cd:e9:ea:b2:83:f0:d5:c2:e3:
95:3b:13:cb:c3:e9:b6:6c:ce:29:fe:2a:50:fa:d6:
a7:8f:08:f0:84:54:ae:c6:37:b5:f4:fd:34:53:04:
6a:0c:e3:42:5d:31:81:67:ee:f5:4d:b1:e6:93:a2:
e4:3f:c2:f9:cf:1e:cd:25:88:af:48:dd:88:76:77:
bc:ad:1b:6f:4d:03:2a:62:03:64:c9:fe:bd:38:36:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:24:57:5B:25:17:8C:49:A1:15:13:1E:D3:C3:60:CB:49:C1:70:B5
X509v3 Authority Key Identifier:
keyid:F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0b:4d:b5:e2:55:2a:e3:88:b6:5a:10:c0:6b:df:52:44:4e:
18:7f:b3:f0:c3:7c:56:83:57:cd:14:65:3d:d4:20:29:f6:19:
6a:06:db:f6:ef:00:95:b3:b9:56:8b:a8:99:0f:8d:2d:99:fe:
1e:82:39:3a:75:11:a9:58:95:90:d3:7f:2a:03:8a:e1:2e:d1:
06:81:b7:56:5a:f4:79:d4:76:76:f4:c8:18:d9:ae:b4:a5:fb:
12:d0:7a:e9:87:80:c6:82:34:7c:6f:3f:47:22:5b:34:0b:ae:
58:30:d8:f4:47:45:88:5c:77:57:49:9c:57:51:44:82:d3:93:
25:30:f4:72:55:17:75:e3:32:b2:d0:e2:3e:5c:fe:61:34:4b:
ef:c4:7a:e9:8b:11:bc:5d:80:0e:59:66:5d:61:e1:af:47:56:
56:8e:61:ce:54:87:2d:9e:60:c8:74:09:e0:39:03:70:17:82:
b6:02:92:f5:a9:dc:88:9b:96:ad:84:62:72:e3:60:b5:a9:c8:
0c:97:9c:c0:f7:93:92:78:01:73:eb:fd:72:5a:89:fe:fb:79:
62:b8:b9:75:0a:5b:24:9c:cc:d4:e4:1b:aa:a5:ef:0e:cb:3b:
41:6f:23:23:39:d0:23:21:ce:68:a9:b2:fc:99:1c:cc:1b:32:
35:52:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:37:35 2026 by rpki-client