
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft
File: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft (raw, json)
Hash identifier: 5D75ISu9AOmT/CqAqyPlw2FCcRbUPugxbaUKMx6vchM=
Subject key identifier: 7B:A6:C5:7E:8D:0A:4E:87:CD:7D:94:57:E7:A5:45:17:4D:9F:7D:FD
Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC
Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
Certificate serial: 755C429A1D3755720DC1F1949DC3A268181463A8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:26:02 +0000
Manifest this update: Tue 12 May 2026 16:21:02 +0000
Manifest next update: Wed 13 May 2026 18:31:02 +0000
Files and hashes: 1: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=)
2: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: sRKPnzGfUxDUkQc/uHwTXrV9y9ShQIMBUc92DmR5O3I=)
3: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 3M/zffCD2uZ4gUtU0kj+QpLY9M8dXiZOvxPEwukMu5g=)
4: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl (hash: KFMFMAZMENtzLEWraE38dRbEC+Ynjyy3kY5K/7+v/HY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl
rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5c:42:9a:1d:37:55:72:0d:c1:f1:94:9d:c3:a2:68:18:14:63:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
Validity
Not Before: May 12 16:21:02 2026 GMT
Not After : May 13 18:31:02 2026 GMT
Subject: CN=7BA6C57E8D0A4E87CD7D9457E7A545174D9F7DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:1b:32:b7:ec:f4:d7:bf:61:58:77:d2:e9:
c7:23:47:d5:5d:e2:4d:37:8c:16:b2:c2:b7:d4:58:
6e:67:f2:b2:71:03:83:d8:3e:1b:09:9b:00:38:95:
52:88:27:d1:98:42:67:b1:38:0e:b7:c5:6a:4d:36:
9d:c9:0a:eb:65:e5:1d:a4:e5:5f:f4:c6:9d:98:08:
2f:ad:45:23:98:58:1f:b0:cc:3a:2b:41:8f:25:55:
a5:27:1d:ee:3b:07:8e:ba:8a:50:40:00:fb:b2:57:
2f:57:5a:c5:e0:33:47:55:a9:6e:28:99:f7:8a:44:
8f:4b:a6:c6:af:48:49:76:21:41:50:b2:43:3e:4a:
76:2c:3e:38:ec:fc:21:e2:24:4f:5b:4a:57:f6:07:
83:f3:6b:c2:28:9a:3b:6c:21:53:21:79:85:f4:bc:
c7:16:21:7f:6a:4e:db:10:b2:0f:43:03:09:e8:a0:
59:9d:51:72:af:2a:d4:f8:21:cd:85:c2:0e:c9:69:
b8:da:11:c0:69:81:62:d9:e4:3b:79:be:7d:76:d6:
7c:38:21:75:f5:ee:f3:83:40:ed:1f:aa:32:ed:3e:
f8:ec:02:95:74:8c:6b:a1:82:84:52:e3:2b:ed:b6:
83:72:92:c4:cb:23:fb:35:7a:b1:ab:d3:bc:a1:d8:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A6:C5:7E:8D:0A:4E:87:CD:7D:94:57:E7:A5:45:17:4D:9F:7D:FD
X509v3 Authority Key Identifier:
keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2c:65:40:81:72:a3:e0:d5:b2:e8:22:4e:d0:aa:41:19:59:
c3:19:ca:49:5b:ef:a5:74:63:0a:72:05:fc:ab:8e:f7:ae:da:
10:76:49:6f:78:ad:6e:4e:a7:bc:fe:9b:b4:2c:44:2c:31:3e:
92:22:cc:af:da:39:16:18:0c:8e:ae:38:36:57:79:73:51:fc:
aa:9c:58:67:80:9a:9e:f8:c8:e4:fd:1a:d3:4c:a9:ef:22:72:
7e:c3:6e:e3:d9:6e:8c:bc:0e:d0:ca:81:1d:66:17:1a:db:15:
f1:d9:bf:5f:bb:93:b0:b6:d1:95:7d:e5:6a:0a:51:95:a2:4d:
91:a6:c5:82:ce:46:d5:60:31:40:af:57:25:22:a0:b1:50:bd:
d3:61:15:c0:32:9f:90:3f:19:54:e1:f4:e6:f9:b1:ed:61:f6:
29:c4:98:93:f7:ee:17:51:ef:1e:52:0f:87:b7:00:05:43:b9:
eb:c9:27:97:61:64:f2:b6:00:a9:f0:28:2a:0d:b4:d7:f0:3e:
1b:35:65:94:66:73:ad:4c:6c:89:d5:9f:6a:0c:91:60:f0:3e:
fc:2d:91:bb:17:10:c8:22:45:21:d6:59:4a:7e:34:d5:cf:fe:
e1:c7:4d:d0:d2:90:74:3c:eb:26:ca:51:59:5e:a1:63:a5:e1:
79:ed:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:29 2026 by rpki-client