
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
File: 1029DD535EA34FFB57B387F3086D6C55F6685227.mft (raw, json)
Hash identifier: mex6LaVAhH17sBrBvvlWBDt4caVQyDvBP01pHQtPX2A=
Subject key identifier: 22:E2:7E:DA:D1:02:CA:E6:30:DD:A5:15:7C:2C:AE:2E:FC:FA:3F:C7
Authority key identifier: 10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27
Certificate issuer: /CN=1029DD535EA34FFB57B387F3086D6C55F6685227
Certificate serial: 09B7528050FB8BB1F77AC2CD2D54C6F6CE1DAD14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 03:29:56 +0000
Manifest this update: Thu 24 Sep 2026 03:24:56 +0000
Manifest next update: Fri 25 Sep 2026 05:11:56 +0000
Files and hashes: 1: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: jjOCUf6cliEtxrLXbZn2dk07IB2wq2ND31yEFCqIvbc=)
2: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: QFaIaeqQHBfggokFY9Zd55eDaonsJzUZS5+52YBP+KY=)
3: 1029DD535EA34FFB57B387F3086D6C55F6685227.crl (hash: hurIVpdDYauX3HgsKP+EtSPFyrOUfugWnvC8osGvYV0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl
rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 05:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b7:52:80:50:fb:8b:b1:f7:7a:c2:cd:2d:54:c6:f6:ce:1d:ad:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1029DD535EA34FFB57B387F3086D6C55F6685227
Validity
Not Before: Sep 24 03:24:56 2026 GMT
Not After : Sep 25 05:11:56 2026 GMT
Subject: CN=22E27EDAD102CAE630DDA5157C2CAE2EFCFA3FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:c2:30:09:f3:98:2f:b5:74:2d:49:d1:0c:
41:7a:39:55:bc:f7:d1:85:d9:93:df:b8:d4:19:4a:
89:32:c0:88:7d:b8:e8:3b:83:04:8f:92:a0:66:74:
75:f8:ba:1d:c3:09:6e:91:fe:14:2b:d8:60:65:f4:
f6:9b:b8:d2:12:8a:d2:16:54:cc:bb:ce:13:f5:95:
f2:76:e5:bc:d0:d4:08:31:f1:9e:59:07:c2:84:1d:
c4:a5:06:56:9e:de:05:ea:73:8f:1f:a1:2d:41:99:
9b:a6:2c:f4:29:d1:f9:6b:1b:a3:ac:51:77:f8:a5:
29:b3:d7:52:bc:46:86:3b:bf:68:1f:ef:25:6e:d2:
7c:9a:40:2b:b0:1d:e8:a3:1a:6c:e1:92:b7:91:3f:
2c:9d:6c:3e:f0:74:a4:d3:7a:bc:a5:d6:cc:a4:07:
d1:e9:be:d1:11:3a:8f:02:12:94:a8:8d:60:35:e6:
96:60:cf:0c:3b:bb:b0:d1:65:a1:af:8d:f1:6f:28:
48:07:05:4d:52:f2:2b:35:8e:57:46:97:9f:b2:7d:
8f:11:b9:38:9b:0f:51:53:bd:7c:c4:00:55:fd:bc:
1e:d4:c6:a8:b6:c0:28:13:17:07:48:23:93:32:e2:
20:e3:21:c7:6f:95:a9:02:d7:b9:73:82:54:79:b9:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E2:7E:DA:D1:02:CA:E6:30:DD:A5:15:7C:2C:AE:2E:FC:FA:3F:C7
X509v3 Authority Key Identifier:
keyid:10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ea:3e:c8:1f:4f:43:7d:09:0c:ce:b1:ff:a1:88:d3:50:d3:
d2:fc:ce:8e:5d:4c:00:36:00:7f:8b:c5:4f:d9:30:8c:5f:64:
43:d3:42:9b:a8:e9:49:66:5d:0e:a4:d0:d9:5d:1c:23:70:ea:
98:11:53:09:66:23:55:d8:f5:6a:21:3a:2b:cc:05:5c:0d:03:
6c:8b:24:19:09:32:42:f1:de:0a:f5:44:3a:0b:51:b2:5d:96:
9e:87:83:69:e3:da:ea:fb:ff:37:2b:85:2c:45:a3:33:29:9e:
19:56:33:9c:58:6c:ab:c1:21:8d:1f:3a:3b:42:56:8a:0c:5b:
ad:a4:b5:06:75:9b:e7:e3:20:bf:df:e6:2c:86:b3:6a:3a:17:
f3:46:f6:98:56:78:c6:c9:96:cf:8c:a8:05:e2:c0:59:41:7a:
9e:70:a5:68:ca:f3:de:28:95:2b:8c:16:05:9a:3d:e1:8f:2f:
5c:1d:93:41:63:0e:7d:64:8d:cf:f3:a5:95:99:4c:62:bb:af:
2d:63:3d:78:d4:be:18:7f:df:6a:76:2e:dd:62:94:e9:c4:ed:
d7:64:c5:0c:43:3c:77:0f:0e:26:46:be:db:9f:c9:12:4b:3d:
cc:71:f7:ef:a1:0e:a3:7c:e8:1c:e5:e3:a7:f6:ae:80:39:29:
74:7e:e0:41
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCbdSgFD7i7H3esLNLVTG9s4drRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAyOURENTM1RUEzNEZGQjU3QjM4N0YzMDg2RDZDNTVG
NjY4NTIyNzAeFw0yNjA5MjQwMzI0NTZaFw0yNjA5MjUwNTExNTZaMDMxMTAvBgNV
BAMTKDIyRTI3RURBRDEwMkNBRTYzMEREQTUxNTdDMkNBRTJFRkNGQTNGQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhsIwCfOYL7V0LUnRDEF6OVW8
99GF2ZPfuNQZSokywIh9uOg7gwSPkqBmdHX4uh3DCW6R/hQr2GBl9PabuNISitIW
VMy7zhP1lfJ25bzQ1Agx8Z5ZB8KEHcSlBlae3gXqc48foS1BmZumLPQp0flrG6Os
UXf4pSmz11K8RoY7v2gf7yVu0nyaQCuwHeijGmzhkreRPyydbD7wdKTTeryl1syk
B9HpvtEROo8CEpSojWA15pZgzww7u7DRZaGvjfFvKEgHBU1S8is1jldGl5+yfY8R
uTibD1FTvXzEAFX9vB7Uxqi2wCgTFwdII5My4iDjIcdvlakC17lzglR5uaaZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIuJ+2tECyuYw3aUVfCyuLvz6P8cwHwYDVR0j
BBgwFoAUECndU16jT/tXs4fzCG1sVfZoUicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzI0ZGExNTItMDAyNC00MzZkLTk5MGQtMzIzODA2ZTAxNjk5LzAvMTAyOURENTM1
RUEzNEZGQjU3QjM4N0YzMDg2RDZDNTVGNjY4NTIyNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDI5REQ1MzVFQTM0RkZCNTdCMzg3RjMwODZENkM1NUY2Njg1
MjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5
MGQtMzIzODA2ZTAxNjk5LzAvMTAyOURENTM1RUEzNEZGQjU3QjM4N0YzMDg2RDZD
NTVGNjY4NTIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHfqPsgfT0N9CQzOsf+hiNNQ09L8zo5dTAA2
AH+LxU/ZMIxfZEPTQpuo6UlmXQ6k0NldHCNw6pgRUwlmI1XY9WohOivMBVwNA2yL
JBkJMkLx3gr1RDoLUbJdlp6Hg2nj2ur7/zcrhSxFozMpnhlWM5xYbKvBIY0fOjtC
VooMW62ktQZ1m+fjIL/f5iyGs2o6F/NG9phWeMbJls+MqAXiwFlBep5wpWjK894o
lSuMFgWaPeGPL1wdk0FjDn1kjc/zpZWZTGK7ry1jPXjUvhh/32p2Lt1ilOnE7ddk
xQxDPHcPDiZGvtufyRJLPcxx9++hDqN86Bzl46f2roA5KXR+4EE=
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:22:11 2026 by rpki-client