
$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File: 29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier: p7Xae7gYbbRXN5Gmjvcd791rnYJHg6/e9/z5WiZBkcE=
Subject key identifier: 96:D0:7F:EF:DD:67:E1:A0:0D:30:C5:BD:C4:F7:AB:DE:4B:68:9E:F6
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial: 015B5E03C38957255D141BF2A208B1489A2D0DF5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number: 0233
Signing time: Fri 17 Apr 2026 22:51:02 +0000
Manifest this update: Fri 17 Apr 2026 22:46:02 +0000
Manifest next update: Tue 21 Apr 2026 10:31:02 +0000
Files and hashes: 1: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: lpKbOrbrhT2vlvAJL98reUqD6vC4IeP7PUgmebV+YgY=)
2: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: X8sFkck8iKlMfvx0sR8YtnhI+uj0l4ddl1VIjvtZNmk=)
3: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ibgEML1LWV3GcYP6GRvOjjWRG6RzbhDfHX86QAq91qs=)
4: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: s4sdV2zqNMH3fGcBnDuis8aX3mvXYgrOkNmd2MBCpEo=)
5: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk=)
6: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE=)
7: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: LtP1kQmMGBD8rNYEzlai6KwmPf3m3u3XHD/epMWL5xk=)
8: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: WS/P4TpGYsCeXm+bcL5xnvrovJjYUoIR2jeGTVeT3mU=)
9: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: vcvaF7qLrZfF67W9/bH4Pv9+bQ+VrLBZL/jJ0+fbzRQ=)
10: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=)
11: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA=)
12: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: A2F1GbTYlcEIUwvBTPhQfv0VuBBIuBdZuIee8bvl4wQ=)
13: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U=)
14: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk=)
15: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: kYJzUEQcWnyFZnM0+lqlLEcfPB6UOEcJYBSDjGHXeZQ=)
16: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: duc90GFuNbL5017UYKgzCGWcF8U4EsnoqNIvTSG815o=)
17: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0=)
18: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: FYQ4GgoWT79qHp4XxDTgktT9zjmOHOsSmJwwOMQ1oFw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 10:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5b:5e:03:c3:89:57:25:5d:14:1b:f2:a2:08:b1:48:9a:2d:0d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
Validity
Not Before: Apr 17 22:46:02 2026 GMT
Not After : Apr 21 10:31:02 2026 GMT
Subject: CN=96D07FEFDD67E1A00D30C5BDC4F7ABDE4B689EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e1:19:31:5f:7a:54:27:b9:9b:64:60:e8:48:
29:ff:c0:3b:f1:8c:56:91:f7:5e:9c:77:0a:ff:cf:
3e:f8:3a:27:d5:9d:05:b2:bb:4c:bf:9c:da:ea:fd:
85:03:08:83:e9:d4:8a:96:c4:89:c9:ce:82:2c:98:
98:66:4a:80:91:8a:85:4a:4e:45:29:1f:40:f3:35:
3b:af:0e:07:48:e6:2b:3f:99:74:77:ea:64:00:3c:
da:12:e9:9e:b5:bc:8b:f0:e5:c4:75:be:8a:4f:68:
4f:f9:9f:79:dc:bf:02:8f:7d:c9:9e:b7:cf:5d:d3:
92:ec:58:54:57:8d:41:de:6e:b1:b7:4c:63:c9:7f:
97:77:76:5b:94:2b:9d:76:b2:c9:52:a6:b2:06:27:
8d:d4:3d:c0:8b:07:54:7b:a5:b4:4f:bd:0d:36:d2:
f7:b5:c1:a0:a7:e2:db:a5:7f:5e:84:9c:b7:81:a1:
ee:04:65:18:90:bc:f8:c5:61:cd:70:09:2c:bd:f4:
bd:44:af:45:62:31:c9:3d:0d:5a:6d:de:f4:d6:fd:
7d:da:1b:07:f6:2c:20:ef:1d:0f:4f:d3:12:be:31:
5f:15:52:57:8f:30:57:5e:66:91:33:1b:9b:24:7a:
36:6b:40:c9:8f:e9:71:0b:9b:ea:5e:17:4c:1a:3d:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D0:7F:EF:DD:67:E1:A0:0D:30:C5:BD:C4:F7:AB:DE:4B:68:9E:F6
X509v3 Authority Key Identifier:
keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8d:fa:35:11:a2:8f:e0:bc:91:ff:a3:a8:f1:78:ca:e6:7b:
3c:e3:b3:37:4e:10:41:22:7c:31:4d:92:07:99:d2:63:ba:d9:
be:7b:65:94:5a:0e:e9:06:13:9e:5e:38:6d:d4:ee:15:ea:cf:
70:69:ba:5b:8f:de:b0:8a:9d:2b:e8:06:ba:89:9d:1a:01:2d:
e0:f6:75:b2:c2:45:26:04:c8:79:ec:58:27:cd:a1:61:f9:7b:
af:7c:7f:a7:bd:48:73:4b:31:f2:08:20:11:f4:bb:30:1f:bf:
18:69:3f:fe:d7:45:75:bd:cc:cd:ad:ab:b9:5a:64:ea:82:64:
8f:6b:fb:d5:40:e4:a5:cc:23:94:6c:2b:06:59:4a:5c:b9:75:
30:52:db:4a:99:e7:2d:42:78:e7:35:f4:7f:21:41:f9:9b:15:
7f:0a:7f:a4:2f:97:2a:2e:fa:3a:50:35:00:af:3a:27:04:b8:
80:65:4c:bc:2e:d3:f6:d3:a3:7b:b1:7a:4d:82:39:f4:d4:b8:
65:79:eb:39:ea:b3:75:44:f3:d9:94:77:30:0d:14:b9:df:69:
52:49:2e:9d:d2:1c:06:90:2f:f6:51:c9:07:66:b3:df:7b:ad:
4b:14:a5:ea:d1:f5:bb:bb:90:10:0a:38:33:31:77:57:e0:b6:
77:58:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:00:11 2026 by rpki-client