
$ rpki-client -vvf rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
File: 295E13E5C8926C8780CF0694E90F77298E60C812.mft (raw, json)
Hash identifier: wpNqOFYUbTZSoxafbXiOe9CMURm2FrqWZsMXag7e4ek=
Subject key identifier: C4:CD:7E:78:EB:7B:EE:8C:15:21:38:EB:30:E2:91:66:01:40:EF:41
Authority key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
Certificate issuer: /CN=295E13E5C8926C8780CF0694E90F77298E60C812
Certificate serial: 0A6B30D809F05D3482189217E683918605D2B2E8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 15:35:46 +0000
Manifest this update: Mon 20 Jul 2026 15:30:46 +0000
Manifest next update: Tue 21 Jul 2026 18:07:46 +0000
Files and hashes: 1: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 8uDSee80WU9BwE7TeL4b74xk08iB/J8lbI5bPlFFs2Y=)
2: 295E13E5C8926C8780CF0694E90F77298E60C812.crl (hash: glPwTsTL0uabqSrZmscgzamj2fmdbHuVXh6CVqXKQ0s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 18:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6b:30:d8:09:f0:5d:34:82:18:92:17:e6:83:91:86:05:d2:b2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295E13E5C8926C8780CF0694E90F77298E60C812
Validity
Not Before: Jul 20 15:30:46 2026 GMT
Not After : Jul 21 18:07:46 2026 GMT
Subject: CN=C4CD7E78EB7BEE8C152138EB30E291660140EF41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:33:17:33:73:8a:b2:00:bd:5e:dd:58:0f:
8a:f3:28:39:2b:70:56:c6:e7:da:f5:03:75:87:b3:
07:7b:d1:62:a0:af:7a:4c:1e:e7:da:22:77:77:b1:
41:65:82:7b:be:a2:47:1f:dc:38:a0:fa:f0:9d:f4:
ad:58:29:ea:b4:ac:bd:7b:f0:3b:8e:dd:80:1b:08:
69:2c:93:14:91:1c:95:c5:35:3d:2d:e2:77:d4:0c:
63:ad:96:72:75:b3:2a:6e:cb:15:87:8d:d4:11:60:
ef:29:af:64:63:89:7f:9a:bf:5f:5b:26:06:67:a0:
65:41:7a:63:ce:e7:ca:cb:46:92:10:3c:ed:5b:ba:
b1:08:5b:7b:e1:79:54:10:ce:64:83:68:5f:95:3a:
c9:89:cb:39:dd:61:fe:55:13:1e:b3:b4:79:2b:71:
5c:a6:1f:d2:a9:d9:01:b2:3b:24:53:4a:21:46:c1:
de:ad:70:e8:80:c7:08:1a:93:d2:d8:b8:2c:d1:e9:
4b:dd:b6:e6:8c:9f:d5:01:6f:af:67:15:52:24:e1:
1f:2d:9e:c9:de:3a:de:e8:66:14:b2:32:56:0e:66:
6a:60:a9:2f:8b:91:7d:00:e7:8d:f9:a0:d9:76:56:
d0:cd:77:a5:d3:d7:f2:85:b9:cd:05:04:e1:75:7e:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CD:7E:78:EB:7B:EE:8C:15:21:38:EB:30:E2:91:66:01:40:EF:41
X509v3 Authority Key Identifier:
keyid:29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:14:94:74:86:97:32:de:72:f1:78:6f:d2:91:09:4a:92:53:
17:e3:ed:4d:24:87:c1:6b:13:34:e4:16:d1:f1:8f:80:d4:ee:
44:e3:a4:1d:66:10:4e:1f:59:68:f7:1b:26:a8:3a:9e:03:67:
c3:03:e7:e1:38:97:4c:1b:85:1a:a4:21:aa:1b:3d:82:5e:21:
da:52:6b:d8:c5:0b:09:a4:21:a6:b5:43:c2:d7:5f:ab:fd:9b:
15:e6:76:f1:16:f3:a5:a3:90:99:2f:85:fb:f7:e9:56:89:1e:
90:2b:cc:48:17:dd:75:77:ae:6e:54:1b:21:6d:33:2a:c9:16:
20:da:4a:56:bd:af:16:bb:14:d4:dd:cf:62:8b:2b:8c:67:1f:
81:e1:91:f2:58:da:1a:2a:16:49:dc:fc:96:ff:48:ef:90:d8:
8f:f3:6f:96:07:ea:eb:68:05:de:8a:dd:a3:5b:23:95:5e:8d:
6d:c0:b4:0a:50:6d:b2:8b:5c:84:04:b4:39:87:2d:b2:1b:f6:
a9:5b:90:23:34:c6:38:c0:d8:da:a5:55:cb:41:c7:83:63:ae:
74:65:bd:52:19:a0:5f:6b:c7:00:1f:f2:26:c5:32:1e:11:c0:
a7:63:1b:4e:d5:78:ca:36:8d:97:f1:28:63:9e:dc:fc:e7:03:
fc:95:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:53:32 2026 by rpki-client