
$ rpki-client -vvf rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
File: F29E13162A7FAF445019923879EB8E64CC4CFA65.mft (raw, json)
Hash identifier: qdMk30PMs/roNz3dMia7R7J9x1mWTvXfY5TGn9NUFas=
Subject key identifier: DB:1D:F9:8C:D1:B8:58:F0:B9:84:37:75:B2:38:47:7E:4E:47:B1:26
Authority key identifier: F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
Certificate issuer: /CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Certificate serial: 1545057EEB6611349BAB31BAB2F083A6BABF45D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 15:38:13 +0000
Manifest this update: Tue 16 Jun 2026 15:33:13 +0000
Manifest next update: Wed 17 Jun 2026 17:51:13 +0000
Files and hashes: 1: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: 7Y5Lnjk/jo6ehCKFeCJqfiCvTxN0dIqmd+ed5g2g9WI=)
2: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: dBbvr3vnMoWgLvpZmo0fsQX3iK4npJkSb3PT2yQQy7k=)
3: F29E13162A7FAF445019923879EB8E64CC4CFA65.crl (hash: 4mnku+4FdI635qERvd7lGS2gFetqLL/aWxrzuVI9hG8=)
4: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: i9DIEYpTvsRA/97CVQ0+R48i5YUIqshxUph75Vcam7w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:45:05:7e:eb:66:11:34:9b:ab:31:ba:b2:f0:83:a6:ba:bf:45:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Validity
Not Before: Jun 16 15:33:13 2026 GMT
Not After : Jun 17 17:51:13 2026 GMT
Subject: CN=DB1DF98CD1B858F0B9843775B238477E4E47B126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:6a:9d:47:a8:f4:9b:bc:0f:36:f8:fa:fc:
40:ad:e8:5b:ce:b9:42:dc:18:ab:e4:eb:ab:c3:c7:
d4:75:44:5b:d9:fa:f6:bc:4a:ec:50:f6:34:ec:5e:
da:00:04:2e:29:d4:5b:29:d6:ed:2f:53:2a:c5:17:
54:cf:35:ec:65:71:3a:64:9c:cd:04:24:64:58:f4:
af:86:0b:d3:b3:3e:98:88:89:5e:e7:15:1a:df:8a:
66:df:a7:b8:c1:f8:84:eb:ef:bb:d6:16:b6:67:8d:
be:67:42:86:5b:d9:1c:4f:4e:d2:dc:24:88:a5:09:
31:c1:ba:e1:7e:26:ce:c8:a8:a8:03:1a:bc:45:25:
c7:e7:03:da:46:f8:b2:a4:85:c5:85:b4:85:02:12:
50:68:46:c8:bf:62:b0:77:97:3a:86:be:29:0a:5e:
03:6e:20:32:28:98:5f:44:bc:ac:fd:2d:84:9f:36:
3a:7f:0a:99:4f:06:8f:1e:d8:3b:99:87:19:63:8d:
92:23:bb:41:37:7b:c6:06:3d:a2:66:0a:9b:66:f2:
80:ca:cc:52:91:ee:48:1c:e6:97:1a:16:55:84:d2:
66:f5:89:b4:0a:c6:92:9b:91:45:5a:56:24:73:68:
71:5d:3b:7c:bc:16:af:82:1d:65:f1:28:5a:e7:5d:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1D:F9:8C:D1:B8:58:F0:B9:84:37:75:B2:38:47:7E:4E:47:B1:26
X509v3 Authority Key Identifier:
keyid:F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:68:44:4a:fa:92:60:b5:e3:5a:c3:ef:3b:5e:e8:00:11:
d7:42:bb:6a:95:44:52:16:a4:5f:ff:ca:08:92:4d:67:4b:7e:
35:fa:d9:7b:1c:e2:77:2b:72:b7:ad:8d:26:d7:32:1d:3c:b0:
cd:92:e1:3b:f8:86:22:f5:74:c4:98:bb:bf:0c:2e:17:c1:9f:
16:9e:c0:58:ba:d4:44:6f:bf:ff:32:03:84:eb:ce:9d:c9:7d:
b8:6c:81:97:86:ae:0e:73:8c:bd:d5:0e:47:3c:db:7a:90:76:
ec:b8:a8:45:b4:21:a4:17:23:93:88:ea:de:ae:ed:13:6a:e8:
32:d8:1b:0c:59:49:db:f5:2b:20:f5:e1:7e:21:68:ed:e8:d2:
c1:00:99:71:88:36:ed:9c:15:a2:0d:42:68:a3:0d:b8:ff:08:
f5:2e:f2:0c:42:16:ad:1a:1d:53:b3:b1:9a:ba:5c:77:c6:4b:
87:d1:79:a3:2a:75:45:17:31:8f:61:84:e5:d7:9f:8f:30:6a:
4d:bb:34:97:3d:55:32:41:98:ff:7f:7a:b9:89:06:44:4f:5b:
5b:95:29:5f:09:22:a5:d5:46:ca:10:aa:49:bc:92:c6:4a:a3:
4c:a4:2f:cb:77:d7:32:31:a4:6d:40:59:0b:3f:2c:66:94:ef:
c4:14:34:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:20 2026 by rpki-client