
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft
File: 29FA80F6176C25C691091C10B9D90672CFD66E6D.mft (raw, json)
Hash identifier: NP+b0LLZh7b2hBjR2B64Qmq+skEISOvWxg4lpdxQDx4=
Subject key identifier: 14:96:F6:78:F3:0D:82:4D:95:5A:9E:33:87:53:87:64:F2:35:8C:AB
Authority key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D
Certificate issuer: /CN=29FA80F6176C25C691091C10B9D90672CFD66E6D
Certificate serial: 0451BEB4AFEEF283BC6895367D5AF387C1DF247E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 08:53:48 +0000
Manifest this update: Wed 17 Jun 2026 08:48:48 +0000
Manifest next update: Thu 18 Jun 2026 12:14:48 +0000
Files and hashes: 1: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: RoLrz7G1R33kfqGbX8nuSO6gHFL4kaqL21h4DNDlHHo=)
2: 29FA80F6176C25C691091C10B9D90672CFD66E6D.crl (hash: KVFsYkn9c0AhL/wr7fa1ca+Rab2aCMHXqdV6liO3iWE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl
rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:51:be:b4:af:ee:f2:83:bc:68:95:36:7d:5a:f3:87:c1:df:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D
Validity
Not Before: Jun 17 08:48:48 2026 GMT
Not After : Jun 18 12:14:48 2026 GMT
Subject: CN=1496F678F30D824D955A9E3387538764F2358CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:4c:5b:49:90:0d:be:7c:72:6d:4b:57:13:
86:43:35:d1:60:6b:f6:58:8e:6c:e4:bc:0a:4d:ea:
52:cf:a7:e3:75:bd:33:05:cd:59:a2:3c:8c:71:12:
4e:3d:6a:29:e9:fa:b3:b1:b2:9e:92:5e:4c:57:db:
3d:87:44:86:67:4e:e3:55:4a:a6:b3:c7:7a:c7:43:
2a:bc:49:e6:11:3b:c9:6c:18:40:34:14:d7:b6:e0:
a2:7f:22:fd:b6:35:35:3f:ca:c9:50:11:32:0c:a0:
e7:a7:67:5a:92:97:db:31:57:c6:d6:50:1d:55:ea:
68:0a:bf:21:bc:d6:d3:f8:cd:95:c6:e4:aa:a7:26:
7f:ff:17:f0:39:98:e4:20:55:05:cf:2f:fa:3e:b2:
a3:64:48:b4:cc:60:73:16:2b:29:2d:5a:47:44:8b:
57:de:ff:d2:52:21:33:a0:5f:94:dc:7a:3f:c7:07:
6c:2a:49:4b:41:79:78:f6:7e:37:4b:8c:ca:f7:6d:
3d:15:44:fd:7b:5f:76:20:24:80:8e:9c:b0:88:ed:
82:1e:52:54:11:9f:0a:62:ce:dc:cc:7d:3a:b0:8e:
3e:ae:c3:2c:34:02:f3:41:32:e6:a3:d3:cb:e0:87:
32:25:d8:9b:65:76:e1:4c:8b:db:18:82:64:2f:41:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:F6:78:F3:0D:82:4D:95:5A:9E:33:87:53:87:64:F2:35:8C:AB
X509v3 Authority Key Identifier:
keyid:29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:73:c4:73:fa:7a:a5:b4:dd:ef:be:a1:c0:3d:4a:7b:83:98:
5f:08:f9:52:09:f7:29:b9:c3:e4:a3:98:01:2d:c3:13:77:2d:
87:da:a7:20:f2:e6:ed:52:5b:c6:f6:df:8a:4b:b4:b3:4d:28:
6f:db:4c:3d:75:7d:b9:89:00:b1:b2:d6:d2:f1:93:e2:03:b9:
2a:8f:cc:aa:81:18:33:80:43:1a:6f:b9:c7:96:83:35:7c:95:
d2:0b:35:68:16:bd:ab:04:44:7a:00:22:9e:30:16:2e:a1:1a:
a8:a7:b2:6d:f6:77:77:76:6a:9d:86:26:55:bf:d9:eb:42:91:
d0:14:f1:2a:0b:c0:d4:39:8f:b1:61:e5:89:ab:9a:97:e7:97:
8d:52:3d:4b:0d:5b:1d:c8:28:ce:78:a3:d3:14:a3:ed:32:58:
4c:c6:bc:1b:75:b5:b2:f2:02:cf:6e:6a:55:65:f7:fc:dc:25:
9f:a0:49:66:33:8f:59:a2:a8:1a:b9:e3:f6:a0:3f:36:a2:46:
2a:96:a6:f1:6b:41:de:84:b6:4d:e4:cb:8f:3b:05:31:b6:16:
19:41:fe:f5:b3:36:32:8d:ba:a4:42:5d:77:3c:ea:83:f6:78:
06:f1:80:5f:6c:5f:01:5f:0b:95:12:35:54:a4:69:b5:7d:ae:
5d:9b:9f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:38 2026 by rpki-client