
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
File: 29047775725807ADDC2CF5B31E6B548D16ACA73D.mft (raw, json)
Hash identifier: 6IWi7fUmr1wjqvTgYOflxbd1COMV8NJ1cOVyME/jeuw=
Subject key identifier: 19:0F:74:35:8C:BC:79:5D:58:C1:68:B1:2F:AF:49:E3:A4:6F:00:F0
Authority key identifier: 29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D
Certificate issuer: /CN=29047775725807ADDC2CF5B31E6B548D16ACA73D
Certificate serial: 3DA49492BB89BF6C6F377D549C816DA0B8ABC2E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 19:12:54 +0000
Manifest this update: Wed 16 Sep 2026 19:07:54 +0000
Manifest next update: Thu 17 Sep 2026 21:37:54 +0000
Files and hashes: 1: 29047775725807ADDC2CF5B31E6B548D16ACA73D.crl (hash: 9XPiPqciwJrTe9TvQsTQQqqM79z1hDM3vl+M7KZzCHY=)
2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: Euiddqe4QqVPakY6ZLb5tUk6+F4coEUNqu/76ax8PhM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl
rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a4:94:92:bb:89:bf:6c:6f:37:7d:54:9c:81:6d:a0:b8:ab:c2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29047775725807ADDC2CF5B31E6B548D16ACA73D
Validity
Not Before: Sep 16 19:07:54 2026 GMT
Not After : Sep 17 21:37:54 2026 GMT
Subject: CN=190F74358CBC795D58C168B12FAF49E3A46F00F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:00:87:2a:cc:f4:02:20:e0:ee:81:3c:f0:
99:71:9f:98:7c:f4:68:f2:f6:05:be:59:4e:14:50:
3d:de:2d:75:0b:95:4b:df:f8:07:b1:25:7d:12:1a:
95:ff:12:de:ae:f1:e7:5b:ea:2b:2e:f0:ec:6e:dc:
71:73:28:f4:ac:a5:8d:8c:9e:03:f3:95:cc:91:7e:
e8:1b:5c:55:3b:33:75:55:c4:27:b3:51:f7:75:0d:
fd:9f:bc:7a:7b:77:ab:c2:a7:cb:3c:3f:f6:b7:dc:
6f:63:61:41:5d:9f:12:d4:5f:45:7d:ec:5a:70:ac:
5d:34:1d:a8:c0:0d:5d:84:f9:29:82:af:96:98:9b:
8b:fa:91:6d:5f:56:99:40:3a:58:41:33:bd:f1:cd:
f3:a1:65:0f:30:67:45:e6:6d:b3:98:ed:4a:a6:2b:
0c:80:a1:5a:68:e4:75:06:0e:3a:88:c0:a9:90:eb:
b6:8e:dd:7e:09:73:5e:0a:3c:39:3c:41:c4:7a:f1:
97:7d:d9:41:e9:19:03:b5:9d:ff:f4:79:c5:ce:bd:
e8:b5:42:15:79:ae:bc:2b:93:12:59:27:f9:63:fd:
cc:8b:34:c8:b3:41:f5:0a:97:95:96:a2:8c:fe:cb:
d6:45:3f:df:71:e8:92:1a:61:09:f6:72:08:4b:dd:
2b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0F:74:35:8C:BC:79:5D:58:C1:68:B1:2F:AF:49:E3:A4:6F:00:F0
X509v3 Authority Key Identifier:
keyid:29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:77:a8:1e:a7:a4:ad:f1:54:ff:af:2c:14:34:a1:83:e6:08:
c0:2b:07:76:2d:b2:69:9e:ca:a2:56:87:3a:77:f7:65:d4:e5:
a9:57:c5:4f:57:81:c3:9b:e6:a6:2d:cd:a7:02:1d:f4:85:b2:
cf:47:5e:70:3a:1e:2a:34:ff:0b:fe:8d:71:1c:8d:c6:a5:8b:
17:28:f2:d0:bd:3d:87:d3:da:6e:10:2d:d5:d2:33:7c:b7:94:
ff:29:ac:93:56:82:17:36:85:09:ce:e1:ce:8a:38:8f:f0:92:
10:52:aa:8a:84:3d:bb:35:6e:64:37:11:7d:06:51:52:54:44:
b3:d1:56:74:36:d9:de:42:19:bd:34:8d:3b:99:54:2a:58:79:
53:3d:9b:77:94:14:c7:36:9d:a9:a9:38:12:4e:ba:ef:ae:f5:
63:11:5e:a9:80:68:28:cb:23:81:06:70:eb:a2:ca:70:93:08:
2a:ab:8d:74:fd:8c:29:d0:cb:51:07:5d:ed:72:ab:fa:42:98:
2b:32:7e:32:0a:4b:cc:df:57:30:ba:e0:4a:7c:4e:47:37:d3:
d2:b2:6f:5d:87:7a:bf:72:62:8d:23:b2:ac:29:bf:9f:02:0b:
99:fe:20:8c:08:71:6a:93:c2:1e:c0:c6:e9:c0:37:c0:25:95:
3b:bd:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 11:29:07 2026 by rpki-client