
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft
File: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft (raw, json)
Hash identifier: fX1g4LlL+WsUkUBdV7WdZeJeW/SkdJHC2dIi0INLXBo=
Subject key identifier: 57:F9:B1:13:15:07:80:80:C9:FA:06:01:7D:99:D4:D9:2F:BD:6B:9E
Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4
Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4
Certificate serial: 6CD96BE71FA565080E5CB38E531E445418A148DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 19:05:42 +0000
Manifest this update: Sun 25 Oct 2026 19:00:42 +0000
Manifest next update: Mon 26 Oct 2026 21:55:42 +0000
Files and hashes: 1: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl (hash: sRtENmKCUnJ1U/zxMi2SbM1imUlPD1W1FrGvXrV9Z84=)
2: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: GxU5DwtXFetlD8xuWWi1FQ28pr6GVadjxWaNVjtxKHQ=)
3: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl
rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d9:6b:e7:1f:a5:65:08:0e:5c:b3:8e:53:1e:44:54:18:a1:48:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4
Validity
Not Before: Oct 25 19:00:42 2026 GMT
Not After : Oct 26 21:55:42 2026 GMT
Subject: CN=57F9B11315078080C9FA06017D99D4D92FBD6B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:e2:9c:71:08:86:84:fd:30:cb:56:55:f4:
6c:84:56:31:6c:fb:9b:0a:d6:ba:d8:05:35:a6:d4:
9b:be:34:e6:67:15:d9:b7:c8:7c:8f:78:8a:25:f9:
81:66:67:d8:8f:63:12:46:ca:98:8d:eb:f5:3d:14:
be:af:93:99:00:ad:0e:eb:ee:16:c8:0f:83:ad:5b:
58:5f:77:49:03:6f:60:1e:28:18:64:39:7c:c3:a4:
63:65:1e:d4:94:30:ea:1d:f6:da:2f:24:17:e1:13:
47:4a:51:1a:a0:b1:00:5b:9e:cf:f3:c9:11:91:53:
38:cd:dc:a9:38:37:1d:b7:d8:82:62:29:91:66:e8:
34:39:3f:75:c2:5a:74:04:c1:07:17:00:35:05:4d:
c9:27:60:f9:b9:24:4a:36:7b:99:78:7e:39:dc:39:
28:7c:e9:95:4c:ea:91:55:32:de:c9:18:47:1d:e9:
01:8f:7a:2d:f4:03:52:24:68:0a:7b:8e:74:e6:84:
e5:1c:6e:4f:f5:f4:d4:c8:68:13:3b:6e:78:d0:94:
e6:c4:00:16:55:6e:f9:0e:97:fe:5f:d7:8b:79:aa:
7e:fc:36:7b:39:8c:91:1e:21:61:0c:fc:06:4b:17:
f6:c4:74:a2:97:cf:6d:89:86:48:86:3a:12:b6:59:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:B1:13:15:07:80:80:C9:FA:06:01:7D:99:D4:D9:2F:BD:6B:9E
X509v3 Authority Key Identifier:
keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e9:7a:25:59:e4:6e:7c:73:18:c3:8a:95:fd:fa:02:1f:d1:
9b:b7:dc:60:b3:6e:71:02:a7:01:85:d2:2e:6e:b6:ae:e8:4f:
e7:dd:d0:ea:5a:4b:a0:fd:88:14:72:2a:38:29:7d:07:15:04:
75:cd:82:da:36:ba:56:fd:09:96:29:9b:c7:40:91:bd:9c:76:
8c:d5:df:11:ce:6c:34:89:1a:98:f9:ec:2a:ee:ef:5f:15:2a:
f6:31:bc:94:a3:92:7e:7e:65:bf:64:19:d3:e5:a7:e3:e5:db:
f4:d7:e3:70:e1:cf:bf:3d:c6:4b:4e:c5:c1:39:6b:f6:1e:9d:
6e:2d:a9:d7:d4:60:ba:89:5a:68:04:a1:88:b6:c5:a3:06:4d:
de:18:ad:17:48:16:47:ec:a5:38:5f:80:32:69:6c:67:af:c1:
c9:00:72:a7:bf:0d:fc:ea:d2:3d:69:0a:80:ca:ff:4c:55:6e:
a1:74:56:e8:f0:18:ec:ca:1f:2f:88:dc:14:82:42:46:e2:8f:
b1:3f:c5:d6:75:27:65:2e:a6:a5:75:e4:f5:a4:25:24:d1:21:
46:58:c8:3d:0b:df:f5:86:8a:b1:00:92:86:f5:7b:47:95:b5:
7b:5b:94:35:dd:75:4e:ea:35:30:0d:4f:7e:a2:a2:b4:53:40:
82:6c:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:25 2026 by rpki-client