Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
File:                     295E13E5C8926C8780CF0694E90F77298E60C812.mft (raw, json)
Hash identifier:          xHH9IoUMke02OwVEWQJmnfpTqty2CtwSaevV8IWNWa4=
Subject key identifier:   68:AA:10:17:6F:6B:FF:98:5F:AE:B6:0A:FB:C5:01:48:F7:F8:44:B9
Authority key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
Certificate issuer:       /CN=295E13E5C8926C8780CF0694E90F77298E60C812
Certificate serial:       50FC541BDF223109066FF62144EED5FE6105B3B8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
Manifest number:          A8
Signing time:             Fri 04 Sep 2026 23:50:37 +0000
Manifest this update:     Fri 04 Sep 2026 23:45:37 +0000
Manifest next update:     Sun 06 Sep 2026 00:33:37 +0000
Files and hashes:         1: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 8uDSee80WU9BwE7TeL4b74xk08iB/J8lbI5bPlFFs2Y=)
                          2: 295E13E5C8926C8780CF0694E90F77298E60C812.crl (hash: WWhI05oO6xKZl9xYtuGm4optB1lBZdPhF37mQnLE5Ys=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
                          rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 23:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fc:54:1b:df:22:31:09:06:6f:f6:21:44:ee:d5:fe:61:05:b3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295E13E5C8926C8780CF0694E90F77298E60C812
        Validity
            Not Before: Sep  4 23:45:37 2026 GMT
            Not After : Sep  6 00:33:37 2026 GMT
        Subject: CN=68AA10176F6BFF985FAEB60AFBC50148F7F844B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:f2:e0:9a:49:b4:69:f5:04:f0:95:ee:61:
                    7f:b2:12:d8:8a:70:d4:d2:19:99:44:b2:5f:8d:97:
                    38:25:70:91:6f:cf:36:4d:55:65:bd:ac:b0:5e:1e:
                    e3:5d:d9:d5:cb:5d:b4:4f:fb:2a:3b:d9:c0:18:a6:
                    57:d5:2f:25:0f:87:c3:71:4f:c3:6d:a2:b2:ba:18:
                    db:7a:4c:20:64:54:4c:ef:0c:80:1d:e4:66:33:31:
                    a7:c5:a3:2e:e3:1c:02:7e:34:0a:3e:74:14:11:b7:
                    2b:7d:48:e3:69:01:5d:10:51:0a:5e:7c:ad:e0:77:
                    3c:cd:90:29:3a:47:dd:a3:2b:c8:d0:c0:6e:93:b1:
                    90:2f:39:ac:85:c8:30:58:49:f7:10:68:06:e6:12:
                    74:43:d5:7f:ae:d9:37:c3:8e:28:74:33:21:cc:2a:
                    b1:32:8f:e1:4e:df:0a:28:4b:d0:7b:e6:88:fd:68:
                    10:7d:2b:1c:8a:67:08:b3:fb:d4:80:20:9f:3e:37:
                    af:15:38:e1:24:e7:08:3e:ec:fe:5d:a8:84:16:08:
                    fc:39:01:ba:e9:bb:70:34:30:6e:90:1c:20:a9:80:
                    89:17:6c:25:f6:7f:8b:e0:56:97:28:b7:f3:1a:7e:
                    4e:cb:22:b9:17:e9:1b:45:5b:aa:1a:60:45:50:d2:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AA:10:17:6F:6B:FF:98:5F:AE:B6:0A:FB:C5:01:48:F7:F8:44:B9
            X509v3 Authority Key Identifier:
                keyid:29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8a:2e:be:0b:87:84:ae:ab:97:7d:e1:03:e0:bb:4a:b3:6c:
         ba:74:01:5e:55:7b:8d:e9:f9:da:94:8b:69:8f:3e:ff:0b:6f:
         02:14:20:7a:dd:cc:4e:16:8e:d4:ef:12:9a:54:ad:b6:d8:64:
         38:21:d8:05:8b:9b:2d:a9:c6:53:26:a7:55:61:22:e1:a2:a5:
         34:9e:62:04:60:64:d1:82:37:4f:44:db:1d:83:2b:6c:9e:b2:
         e6:0a:53:26:cb:2f:81:c5:47:83:d4:bf:c5:08:be:c3:16:08:
         d5:af:10:ce:fb:42:71:b9:95:0d:2c:b5:7c:4a:cb:a8:ed:39:
         a9:e9:a9:30:e4:59:17:97:37:fa:fc:d3:c7:6e:54:36:b4:68:
         bb:89:93:5c:0e:f0:6b:d6:82:4b:e8:51:42:39:b5:7f:0a:d9:
         1d:28:8f:c1:e1:a8:ba:d6:d2:b8:56:44:7e:01:0e:44:e6:f6:
         eb:ff:53:10:38:e2:51:86:fe:c5:33:81:58:ae:df:47:83:c6:
         74:68:78:0e:13:48:58:fe:4a:e8:cd:f9:f3:56:5e:d3:6f:6c:
         a7:0a:c0:77:13:93:cc:2b:bc:06:fc:bd:53:a5:11:37:d6:65:
         17:6f:ef:ef:89:0e:58:96:8b:0b:0b:35:56:e7:a1:a3:f7:e0:
         ab:7d:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:35:52 2026 by rpki-client