
$ rpki-client -vvf rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
File: F29E13162A7FAF445019923879EB8E64CC4CFA65.mft (raw, json)
Hash identifier: g5spYLSbon+DdSiL2uIIkbasNCpOb9cVjqzthCXWk6k=
Subject key identifier: 90:94:1F:65:F5:23:99:20:94:10:3B:CC:75:89:DF:8D:71:34:1E:76
Authority key identifier: F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
Certificate issuer: /CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Certificate serial: 0345E41B85C645C669850D2CB0CC91F3A2E64203
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 06:48:20 +0000
Manifest this update: Thu 23 Jul 2026 06:43:20 +0000
Manifest next update: Fri 24 Jul 2026 10:07:20 +0000
Files and hashes: 1: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: dBbvr3vnMoWgLvpZmo0fsQX3iK4npJkSb3PT2yQQy7k=)
2: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: i9DIEYpTvsRA/97CVQ0+R48i5YUIqshxUph75Vcam7w=)
3: F29E13162A7FAF445019923879EB8E64CC4CFA65.crl (hash: jW1TeKSlzYLR5YgRFQ5yZH/ni2VF2XIJCl6DjMboG6Q=)
4: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: 7Y5Lnjk/jo6ehCKFeCJqfiCvTxN0dIqmd+ed5g2g9WI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:45:e4:1b:85:c6:45:c6:69:85:0d:2c:b0:cc:91:f3:a2:e6:42:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Validity
Not Before: Jul 23 06:43:20 2026 GMT
Not After : Jul 24 10:07:20 2026 GMT
Subject: CN=90941F65F523992094103BCC7589DF8D71341E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:d6:9f:c1:a1:d3:6a:2c:01:19:83:08:42:
9b:5c:61:e0:57:0b:8a:41:c3:67:03:91:a2:6f:fa:
ed:be:53:b7:99:f6:23:4b:b3:6c:88:d0:84:19:c6:
a2:5f:15:1e:b1:4a:08:67:55:0f:7b:5e:65:f0:b2:
7a:16:84:72:1c:75:dd:e3:89:ef:dc:69:c7:b5:f6:
99:f4:16:58:30:fd:ed:0e:ac:a5:ed:39:a1:91:89:
8b:4b:8b:03:ad:29:e5:00:c4:69:a1:ae:19:69:9b:
05:08:cf:4c:4e:17:88:eb:f1:8d:89:02:c8:12:6d:
d8:19:1f:13:37:22:cf:7b:30:09:27:44:1c:62:b2:
a8:f2:c1:7f:94:10:ec:82:55:8a:de:0e:ac:8e:41:
83:34:ac:8f:f6:72:21:ff:78:84:c3:45:74:2f:0d:
b0:f5:ae:73:55:60:d1:14:64:b7:25:52:e9:68:e5:
0c:2b:4a:bc:ee:5a:3d:3c:b7:18:6e:34:32:12:a2:
d9:ac:f6:19:b3:f9:e9:91:8d:ec:1e:3f:4e:73:de:
51:d8:59:e4:40:f5:50:d8:3a:06:eb:6a:56:65:69:
ec:0b:8e:be:63:f5:1b:51:54:73:86:7f:f4:bd:ab:
ce:fa:b5:bb:e4:56:e6:b3:2d:74:de:da:f7:a1:14:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:94:1F:65:F5:23:99:20:94:10:3B:CC:75:89:DF:8D:71:34:1E:76
X509v3 Authority Key Identifier:
keyid:F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:48:ee:e5:02:cc:26:f5:9d:17:62:c8:42:ff:ec:76:d6:99:
51:76:73:dc:df:5b:ec:41:9f:fe:99:50:4e:07:dc:71:07:d8:
5a:a1:3f:4b:e3:da:6e:2f:40:da:4c:c4:00:5a:94:44:45:19:
a6:2a:8b:f8:0a:95:bf:7f:2c:29:bb:3c:c0:e2:1a:01:82:e6:
47:7a:6f:51:a9:68:17:15:5b:29:ed:cb:94:6b:0a:cd:d5:13:
c6:4e:88:f1:0a:6e:77:45:5d:56:d9:28:be:ac:0a:0d:36:4d:
ad:69:a8:fb:ae:c8:82:ed:60:66:2a:0f:0c:b6:a0:92:b7:2b:
ec:d2:82:9b:76:21:12:f8:52:b8:f2:0a:e6:0c:44:cb:3b:b7:
aa:ae:10:3d:83:37:72:18:50:b2:b7:b6:4e:ee:ae:72:92:53:
bb:db:40:6d:64:76:36:40:07:1a:2b:e1:1f:04:45:d5:4a:87:
9a:59:7b:f7:8c:e4:e0:fa:58:ee:16:ee:cd:37:be:06:da:a8:
5e:a3:b5:a8:0d:be:69:da:e0:3b:20:00:c9:cf:3c:b7:4e:d7:
52:89:9f:16:81:f5:ed:ba:3f:1b:c2:00:76:4d:89:31:12:80:
47:39:fd:64:66:9e:63:06:5e:ba:4a:45:82:a6:3e:b8:30:5d:
83:28:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:42 2026 by rpki-client