
$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File: 29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier: NxV8d2Yfo6EoDaKUAPCSDnSOqJ11+vLKBqbRwAqPWbU=
Subject key identifier: 37:C7:F3:1A:22:D7:75:9F:E6:69:FF:74:E9:5F:B7:2A:A5:2C:B6:05
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial: 14AB44FA3CDF1481C1132CFFB374251ECBECD313
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number: 021E
Signing time: Mon 02 Mar 2026 15:11:02 +0000
Manifest this update: Mon 02 Mar 2026 15:06:02 +0000
Manifest next update: Thu 05 Mar 2026 16:36:02 +0000
Files and hashes: 1: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: s4sdV2zqNMH3fGcBnDuis8aX3mvXYgrOkNmd2MBCpEo=)
2: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=)
3: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: LtP1kQmMGBD8rNYEzlai6KwmPf3m3u3XHD/epMWL5xk=)
4: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0=)
5: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: FYQ4GgoWT79qHp4XxDTgktT9zjmOHOsSmJwwOMQ1oFw=)
6: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE=)
7: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: duc90GFuNbL5017UYKgzCGWcF8U4EsnoqNIvTSG815o=)
8: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: A2F1GbTYlcEIUwvBTPhQfv0VuBBIuBdZuIee8bvl4wQ=)
9: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U=)
10: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA=)
11: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: kYJzUEQcWnyFZnM0+lqlLEcfPB6UOEcJYBSDjGHXeZQ=)
12: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: DuOCN8Y1CaVPmV+I5AB0RL+cGssx+n1VlJKlYh6jvNI=)
13: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk=)
14: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ibgEML1LWV3GcYP6GRvOjjWRG6RzbhDfHX86QAq91qs=)
15: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: WS/P4TpGYsCeXm+bcL5xnvrovJjYUoIR2jeGTVeT3mU=)
16: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: vcvaF7qLrZfF67W9/bH4Pv9+bQ+VrLBZL/jJ0+fbzRQ=)
17: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: lpKbOrbrhT2vlvAJL98reUqD6vC4IeP7PUgmebV+YgY=)
18: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ab:44:fa:3c:df:14:81:c1:13:2c:ff:b3:74:25:1e:cb:ec:d3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
Validity
Not Before: Mar 2 15:06:02 2026 GMT
Not After : Mar 5 16:36:02 2026 GMT
Subject: CN=37C7F31A22D7759FE669FF74E95FB72AA52CB605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:90:92:23:28:a3:02:2a:b0:18:97:12:97:
03:1a:66:61:b7:4d:3a:ab:48:34:3b:82:8b:77:de:
11:7f:62:c0:db:9f:0f:5f:36:8d:fc:a3:cb:70:3b:
24:3d:7a:ee:98:a9:f4:26:a9:01:ec:0c:a9:87:8b:
36:35:18:7f:a3:d2:ed:13:cd:b9:2b:eb:5c:9b:6f:
bd:1d:67:f2:ed:c0:3a:90:c4:fe:be:4a:66:62:99:
92:37:6b:c9:e8:04:1b:e3:97:27:22:0b:4d:a2:43:
2a:e7:57:31:fa:6b:a2:e8:5e:f7:e0:90:ae:9f:54:
ef:ff:f2:a4:be:6a:93:67:eb:5a:65:21:14:94:34:
ed:9d:9a:8f:b8:42:a2:7a:6a:69:63:30:28:0b:7d:
71:62:4d:da:d4:47:15:28:16:e6:f1:bb:48:0c:19:
5a:ce:b3:f7:95:85:0e:88:d4:a4:43:81:7a:5d:97:
27:37:b5:16:19:b4:d9:3f:bc:56:15:d1:f2:b3:8b:
03:6a:ad:20:51:8c:c8:c6:c1:e4:e5:66:05:87:84:
18:fb:d5:34:68:8b:dc:14:6d:2e:c2:fc:bc:12:5f:
1b:07:0b:0c:fc:48:8b:62:10:36:d9:05:40:2e:4b:
b4:0d:e2:50:ab:74:c7:ed:6f:ec:14:1f:03:52:0e:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C7:F3:1A:22:D7:75:9F:E6:69:FF:74:E9:5F:B7:2A:A5:2C:B6:05
X509v3 Authority Key Identifier:
keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fe:dd:90:90:52:d4:62:c3:5b:f5:f0:b1:7e:b3:0e:45:cb:
79:ce:53:8b:07:62:1d:14:6f:fe:fe:55:30:5e:ef:b4:07:c1:
4e:56:89:94:8e:79:da:d9:4a:2d:01:33:cc:b9:98:44:81:d9:
da:09:ce:77:46:73:59:6f:81:df:9f:44:06:0f:4b:85:26:86:
8c:fe:ef:b4:c1:5a:05:f1:b9:ea:61:7d:30:ef:6d:36:de:8a:
1d:d6:e1:92:ac:e7:19:03:b1:ca:df:7e:e6:83:5d:b2:5c:8a:
b3:85:db:df:19:c0:ca:90:02:eb:66:7c:79:f7:aa:6c:ef:91:
67:04:c6:47:e1:ce:50:c8:03:ae:bd:8e:af:36:a3:f0:48:b3:
10:6b:35:81:55:f1:43:54:53:9d:52:1b:6b:49:d1:50:04:3d:
52:48:17:fb:fe:de:29:bf:e4:97:0b:74:31:a7:d2:c7:ed:29:
d4:3a:be:b5:a4:19:74:1b:9a:15:f1:11:e0:da:08:7b:46:61:
5a:96:6d:4f:36:f3:d6:a0:42:d6:eb:fc:7d:62:05:05:b1:4e:
22:0c:e9:94:a3:20:19:76:02:c3:c4:81:ee:65:5c:94:12:da:
12:b8:65:83:62:8e:fe:a7:38:ef:dd:04:1c:4d:99:a5:9c:ad:
55:7e:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:59:52 2026 by rpki-client