
$ rpki-client -vvf rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
File: 1029DD535EA34FFB57B387F3086D6C55F6685227.mft (raw, json)
Hash identifier: gcXEWip7rb6jjvPrb10ZnxTi+PQeQ3fgFLZgwQ5OWVI=
Subject key identifier: 9E:3B:40:2A:22:C3:73:0C:03:84:96:F8:9C:0B:7F:6C:B6:2E:BF:B7
Authority key identifier: 10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27
Certificate issuer: /CN=1029DD535EA34FFB57B387F3086D6C55F6685227
Certificate serial: 4E090E40973530DE1EBB168F142AD2426F645401
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 04:55:26 +0000
Manifest this update: Fri 24 Jul 2026 04:50:26 +0000
Manifest next update: Sat 25 Jul 2026 06:54:26 +0000
Files and hashes: 1: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: jjOCUf6cliEtxrLXbZn2dk07IB2wq2ND31yEFCqIvbc=)
2: 1029DD535EA34FFB57B387F3086D6C55F6685227.crl (hash: H2FqUvwAF2Oz5t47o65o3ypct603Vb37U0oDNGMXjao=)
3: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: QFaIaeqQHBfggokFY9Zd55eDaonsJzUZS5+52YBP+KY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl
rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:09:0e:40:97:35:30:de:1e:bb:16:8f:14:2a:d2:42:6f:64:54:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1029DD535EA34FFB57B387F3086D6C55F6685227
Validity
Not Before: Jul 24 04:50:26 2026 GMT
Not After : Jul 25 06:54:26 2026 GMT
Subject: CN=9E3B402A22C3730C038496F89C0B7F6CB62EBFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:32:eb:c9:a4:27:f3:7f:ee:c9:8a:4c:37:84:
7e:7d:a3:b6:3f:7d:43:59:1c:8a:55:25:95:d3:05:
9d:a6:ae:be:3a:e2:de:2d:06:82:78:86:b9:4a:d4:
10:26:2d:3f:db:dc:c7:6e:79:ad:09:25:15:2d:2c:
82:b0:1f:fe:fb:62:f7:fa:f7:dd:be:30:4f:fb:49:
fc:b1:96:61:e3:69:47:71:43:bb:99:d7:21:a8:3a:
3d:ca:05:44:b3:80:d2:23:2b:1a:db:d1:f0:5d:c9:
36:9a:7f:36:4d:99:b9:38:e3:d2:3f:f7:8b:c3:8a:
7f:91:e2:a3:c5:e9:01:84:9c:df:e4:d8:5d:ad:00:
25:04:7d:ed:47:8b:7a:c4:17:f4:6a:af:4c:1b:b6:
f8:03:90:33:a6:50:e9:1c:40:d3:0c:d3:c6:b7:23:
f3:73:67:ff:67:8b:a6:7d:7b:32:7e:a9:ac:ff:af:
45:01:89:b6:64:e1:b2:68:76:49:e9:57:2b:71:97:
4b:f4:32:30:22:e5:d8:2f:fd:8e:73:33:a6:cc:63:
53:a9:15:12:48:01:ab:bf:cd:43:c0:9f:c6:98:97:
fd:0a:69:74:27:c5:bc:86:aa:a8:dc:78:73:1e:90:
5b:32:ce:63:0c:35:39:05:21:a4:b9:07:dc:95:21:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3B:40:2A:22:C3:73:0C:03:84:96:F8:9C:0B:7F:6C:B6:2E:BF:B7
X509v3 Authority Key Identifier:
keyid:10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bc:9e:f8:38:e7:63:57:13:a2:34:21:a6:de:08:91:dc:e0:
0a:37:3f:57:d8:82:bf:14:95:7a:6a:45:3d:49:72:51:fd:da:
bc:81:38:a2:22:98:e1:6a:39:e4:2c:db:a0:bd:95:5d:45:8a:
e7:2c:9a:fa:b9:f4:c0:9c:da:92:e9:9a:e9:05:6b:77:9d:bc:
4f:63:d1:b3:7f:e0:00:90:af:0a:c9:c6:2e:2e:24:dc:53:f2:
d3:1f:46:d8:fc:a8:4c:7b:87:f5:ce:6f:23:b1:22:ef:d4:2a:
03:2d:df:05:2b:87:57:c6:b9:0c:a5:86:25:84:75:73:a0:e2:
c1:1d:04:c9:1a:1e:a9:74:06:da:41:8e:5d:62:36:5c:24:81:
f6:e1:16:6d:08:6d:c9:33:13:12:b8:57:08:66:d6:85:11:65:
99:c0:1c:53:f0:bb:b7:33:7c:32:92:51:e8:d1:95:f5:e1:d1:
91:77:ff:84:c4:2c:b9:ce:fe:38:36:16:6e:ff:9f:fe:14:8c:
f3:d3:7a:5a:5e:8b:68:62:f8:40:8c:aa:53:35:c4:41:2c:ad:
93:0a:db:25:3e:14:b4:ad:f2:e9:89:67:f9:9c:52:1f:53:48:
ba:6a:08:ba:ea:25:01:59:6b:9d:54:9a:21:80:6d:a0:70:52:
eb:54:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:35 2026 by rpki-client