
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
File: F29E13162A7FAF445019923879EB8E64CC4CFA65.mft (raw, json)
Hash identifier: 9uBvrXTsA41VO1YtGTxlukOBS4hE8YJ4WhNlshH+GU8=
Subject key identifier: DF:D7:F6:78:D4:AA:47:FC:AA:08:13:5C:35:B1:87:B4:F4:61:68:2C
Authority key identifier: F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
Certificate issuer: /CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Certificate serial: 16F55B10B8839EB236B71A42DA46ACEAC291160F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 12:41:55 +0000
Manifest this update: Wed 23 Sep 2026 12:36:55 +0000
Manifest next update: Thu 24 Sep 2026 15:29:55 +0000
Files and hashes: 1: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: i9DIEYpTvsRA/97CVQ0+R48i5YUIqshxUph75Vcam7w=)
2: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: dBbvr3vnMoWgLvpZmo0fsQX3iK4npJkSb3PT2yQQy7k=)
3: F29E13162A7FAF445019923879EB8E64CC4CFA65.crl (hash: /L1liKjBV2nvHxQcp4fuBhKh2eZ0yCKowJLnoFYNvNI=)
4: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: 7Y5Lnjk/jo6ehCKFeCJqfiCvTxN0dIqmd+ed5g2g9WI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 15:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f5:5b:10:b8:83:9e:b2:36:b7:1a:42:da:46:ac:ea:c2:91:16:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Validity
Not Before: Sep 23 12:36:55 2026 GMT
Not After : Sep 24 15:29:55 2026 GMT
Subject: CN=DFD7F678D4AA47FCAA08135C35B187B4F461682C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:ec:32:ce:3f:55:14:a8:b6:d6:4b:90:27:
27:ad:8f:7f:5c:e7:a1:f8:17:11:94:04:33:1d:a4:
a7:78:f5:7c:cf:6c:c0:71:b1:64:9b:62:4b:db:81:
c0:d5:4e:56:09:1d:6a:09:b7:7f:82:02:47:d8:0d:
a9:9c:ed:11:0a:37:dc:7f:81:f7:79:18:a6:20:5d:
ec:b8:ea:b8:7f:1d:43:79:4a:00:46:e1:ba:03:59:
d9:f9:1f:47:5b:78:f1:4f:c9:a8:bb:0d:e1:81:dd:
e2:73:34:02:21:68:cd:78:ad:69:9e:31:77:c2:f0:
2b:bf:5d:a8:7e:94:9b:38:2a:d8:8d:5f:b6:bf:c9:
bc:95:f1:4d:e8:f4:32:bf:cd:d7:ec:5b:18:6a:81:
57:ab:ab:54:eb:62:2c:74:5a:97:1c:3b:e8:4b:ef:
42:3f:1e:32:20:25:82:67:97:04:f5:bd:9f:9f:0a:
5d:2e:0f:35:8f:8a:0d:9a:fb:be:d3:4a:6c:36:65:
c0:f9:e6:2c:18:05:fb:ec:56:d1:32:49:cf:33:a7:
ee:37:31:34:a2:df:b8:0a:b4:f1:8d:85:36:b9:3d:
52:e3:d1:8b:8d:87:2c:64:16:a4:b2:3c:d0:9d:ac:
1b:d1:22:33:4a:50:01:ab:93:29:59:f1:d1:22:01:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:F6:78:D4:AA:47:FC:AA:08:13:5C:35:B1:87:B4:F4:61:68:2C
X509v3 Authority Key Identifier:
keyid:F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:42:9a:7a:cc:5d:a3:7d:66:08:d4:41:44:a5:39:b1:3a:5c:
da:81:bf:7a:dc:be:10:79:f2:17:d1:19:18:ef:57:b8:57:e1:
fc:3c:f0:85:bc:69:7d:ac:71:c5:7d:ab:0f:c0:02:c3:63:61:
19:17:a7:72:a7:d3:55:d0:3d:22:b7:44:7a:43:2d:3b:56:99:
1e:11:44:69:96:ac:7e:5c:53:74:c2:6b:6e:ad:69:5b:a4:c2:
a1:f1:c9:f9:8f:03:bc:f3:b8:d2:31:8b:0b:6e:1d:1c:7a:0a:
e9:74:81:58:59:25:b9:73:9d:b4:05:1b:94:f6:0c:31:2b:ae:
4d:de:84:3a:43:fc:2a:14:db:0d:1f:e6:57:fb:97:d3:4f:b0:
d4:36:66:ea:40:7f:ca:fb:54:26:8c:43:aa:74:4f:3a:9b:c3:
cd:5e:02:66:ec:95:26:02:85:88:f6:64:0f:d6:93:d4:d7:72:
c7:19:2d:c8:91:51:09:c8:f4:09:eb:4e:22:bb:03:77:b6:98:
cd:b6:82:75:81:42:03:57:6b:96:b6:77:ba:20:04:b0:29:58:
30:c7:e7:6b:16:1c:5c:aa:bb:c1:38:aa:c8:8c:20:5d:23:3a:
d4:98:0a:c5:f4:f3:2c:37:db:3b:f4:6f:ff:a7:77:cb:cf:4f:
a3:50:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:29:10 2026 by rpki-client