
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
File: 295E13E5C8926C8780CF0694E90F77298E60C812.mft (raw, json)
Hash identifier: xHH9IoUMke02OwVEWQJmnfpTqty2CtwSaevV8IWNWa4=
Subject key identifier: 68:AA:10:17:6F:6B:FF:98:5F:AE:B6:0A:FB:C5:01:48:F7:F8:44:B9
Authority key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
Certificate issuer: /CN=295E13E5C8926C8780CF0694E90F77298E60C812
Certificate serial: 50FC541BDF223109066FF62144EED5FE6105B3B8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
Manifest number: A8
Signing time: Fri 04 Sep 2026 23:50:37 +0000
Manifest this update: Fri 04 Sep 2026 23:45:37 +0000
Manifest next update: Sun 06 Sep 2026 00:33:37 +0000
Files and hashes: 1: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 8uDSee80WU9BwE7TeL4b74xk08iB/J8lbI5bPlFFs2Y=)
2: 295E13E5C8926C8780CF0694E90F77298E60C812.crl (hash: WWhI05oO6xKZl9xYtuGm4optB1lBZdPhF37mQnLE5Ys=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 23:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:fc:54:1b:df:22:31:09:06:6f:f6:21:44:ee:d5:fe:61:05:b3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295E13E5C8926C8780CF0694E90F77298E60C812
Validity
Not Before: Sep 4 23:45:37 2026 GMT
Not After : Sep 6 00:33:37 2026 GMT
Subject: CN=68AA10176F6BFF985FAEB60AFBC50148F7F844B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:f2:e0:9a:49:b4:69:f5:04:f0:95:ee:61:
7f:b2:12:d8:8a:70:d4:d2:19:99:44:b2:5f:8d:97:
38:25:70:91:6f:cf:36:4d:55:65:bd:ac:b0:5e:1e:
e3:5d:d9:d5:cb:5d:b4:4f:fb:2a:3b:d9:c0:18:a6:
57:d5:2f:25:0f:87:c3:71:4f:c3:6d:a2:b2:ba:18:
db:7a:4c:20:64:54:4c:ef:0c:80:1d:e4:66:33:31:
a7:c5:a3:2e:e3:1c:02:7e:34:0a:3e:74:14:11:b7:
2b:7d:48:e3:69:01:5d:10:51:0a:5e:7c:ad:e0:77:
3c:cd:90:29:3a:47:dd:a3:2b:c8:d0:c0:6e:93:b1:
90:2f:39:ac:85:c8:30:58:49:f7:10:68:06:e6:12:
74:43:d5:7f:ae:d9:37:c3:8e:28:74:33:21:cc:2a:
b1:32:8f:e1:4e:df:0a:28:4b:d0:7b:e6:88:fd:68:
10:7d:2b:1c:8a:67:08:b3:fb:d4:80:20:9f:3e:37:
af:15:38:e1:24:e7:08:3e:ec:fe:5d:a8:84:16:08:
fc:39:01:ba:e9:bb:70:34:30:6e:90:1c:20:a9:80:
89:17:6c:25:f6:7f:8b:e0:56:97:28:b7:f3:1a:7e:
4e:cb:22:b9:17:e9:1b:45:5b:aa:1a:60:45:50:d2:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AA:10:17:6F:6B:FF:98:5F:AE:B6:0A:FB:C5:01:48:F7:F8:44:B9
X509v3 Authority Key Identifier:
keyid:29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8a:2e:be:0b:87:84:ae:ab:97:7d:e1:03:e0:bb:4a:b3:6c:
ba:74:01:5e:55:7b:8d:e9:f9:da:94:8b:69:8f:3e:ff:0b:6f:
02:14:20:7a:dd:cc:4e:16:8e:d4:ef:12:9a:54:ad:b6:d8:64:
38:21:d8:05:8b:9b:2d:a9:c6:53:26:a7:55:61:22:e1:a2:a5:
34:9e:62:04:60:64:d1:82:37:4f:44:db:1d:83:2b:6c:9e:b2:
e6:0a:53:26:cb:2f:81:c5:47:83:d4:bf:c5:08:be:c3:16:08:
d5:af:10:ce:fb:42:71:b9:95:0d:2c:b5:7c:4a:cb:a8:ed:39:
a9:e9:a9:30:e4:59:17:97:37:fa:fc:d3:c7:6e:54:36:b4:68:
bb:89:93:5c:0e:f0:6b:d6:82:4b:e8:51:42:39:b5:7f:0a:d9:
1d:28:8f:c1:e1:a8:ba:d6:d2:b8:56:44:7e:01:0e:44:e6:f6:
eb:ff:53:10:38:e2:51:86:fe:c5:33:81:58:ae:df:47:83:c6:
74:68:78:0e:13:48:58:fe:4a:e8:cd:f9:f3:56:5e:d3:6f:6c:
a7:0a:c0:77:13:93:cc:2b:bc:06:fc:bd:53:a5:11:37:d6:65:
17:6f:ef:ef:89:0e:58:96:8b:0b:0b:35:56:e7:a1:a3:f7:e0:
ab:7d:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:35:52 2026 by rpki-client