
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
File: 295E13E5C8926C8780CF0694E90F77298E60C812.mft (raw, json)
Hash identifier: bMcCRwFZABKQzs1nKl+0baWfuHzDdv9kUVvqEzrCCjw=
Subject key identifier: 50:2A:07:86:E5:52:B7:F2:47:F7:18:EC:49:82:21:04:B6:5A:D7:AD
Authority key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
Certificate issuer: /CN=295E13E5C8926C8780CF0694E90F77298E60C812
Certificate serial: 27CA62431EA59964FCEA58C6F7C283BB72D5EAC0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
Manifest number: D5
Signing time: Fri 09 Oct 2026 01:09:22 +0000
Manifest this update: Fri 09 Oct 2026 01:04:22 +0000
Manifest next update: Sat 10 Oct 2026 04:48:22 +0000
Files and hashes: 1: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 8uDSee80WU9BwE7TeL4b74xk08iB/J8lbI5bPlFFs2Y=)
2: 295E13E5C8926C8780CF0694E90F77298E60C812.crl (hash: h13tAi7BlO/lNLkMF74E5SxweNIeaDgOr+u2wPMtVnA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ca:62:43:1e:a5:99:64:fc:ea:58:c6:f7:c2:83:bb:72:d5:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295E13E5C8926C8780CF0694E90F77298E60C812
Validity
Not Before: Oct 9 01:04:22 2026 GMT
Not After : Oct 10 04:48:22 2026 GMT
Subject: CN=502A0786E552B7F247F718EC49822104B65AD7AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:f0:66:a3:d1:53:4b:2e:25:6b:40:b5:08:
85:82:a9:94:68:e0:f9:9a:74:f3:1b:20:2a:1a:a7:
78:73:c5:da:12:81:f6:00:05:ae:09:6c:1a:86:20:
79:c9:d5:71:39:70:29:d5:6a:f3:52:59:67:0f:50:
9a:71:99:97:73:56:03:8a:60:54:86:37:e0:d5:6c:
db:b5:be:5e:3a:cc:f9:09:70:b3:58:ef:30:81:68:
a4:0c:94:3c:7c:a6:7a:fd:a7:cf:b9:c4:13:6b:1c:
fe:52:53:66:1e:0e:da:f6:a2:c9:e8:bc:0c:37:cb:
76:dd:2a:b8:75:d0:8e:6f:36:5d:2b:74:0a:af:79:
3c:d2:fc:08:94:90:2b:36:36:1d:96:55:09:02:19:
a8:a2:74:a2:3a:6a:ba:7a:39:7c:57:44:7b:03:c1:
90:5a:94:6e:ea:03:2d:e4:df:e3:66:2c:36:b4:0e:
68:18:fa:d1:aa:1c:50:fa:8e:0b:5f:cf:31:d4:5f:
d6:b1:df:47:df:5a:4a:65:ef:0e:68:8b:c3:a7:08:
ab:08:cd:9b:ac:c4:38:f6:d4:40:83:e2:63:34:17:
9a:78:4f:aa:84:48:78:59:f1:60:a6:ea:67:b0:36:
0a:11:ea:0d:b5:ff:c8:03:df:55:8e:fa:f5:74:2f:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2A:07:86:E5:52:B7:F2:47:F7:18:EC:49:82:21:04:B6:5A:D7:AD
X509v3 Authority Key Identifier:
keyid:29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0a:ad:0f:ed:dd:39:d6:c0:ae:3d:8e:78:0f:9c:22:db:d1:
9d:6a:9e:97:59:88:6a:87:76:d4:62:41:9a:b7:d0:98:90:e8:
21:1a:0f:d5:17:1a:da:41:56:89:a0:17:ea:b0:22:4a:e1:25:
42:51:e2:66:ee:70:4f:87:54:aa:45:cf:f8:44:69:03:d8:5b:
0b:fd:40:20:b9:11:54:62:3c:5b:ef:0f:7f:58:e8:62:95:9c:
4f:f8:76:25:d0:04:fd:80:18:8e:e2:08:a3:28:0b:86:09:5d:
1e:6f:16:8d:55:88:eb:c3:41:41:a5:25:45:5b:35:cd:83:21:
ac:24:bf:b0:68:6c:52:ce:1e:bf:89:c3:00:ba:58:c1:da:b4:
c2:82:94:b3:39:73:86:c9:60:7f:5d:38:df:f7:77:db:7a:b9:
cb:ae:ae:25:a5:e4:3a:b0:be:ac:aa:b6:8a:af:4e:28:7f:00:
3b:3e:de:50:76:d7:9a:2d:df:d8:ef:09:e4:7c:97:24:b3:fa:
74:77:72:e0:82:c3:93:cd:04:d8:13:fc:24:12:b6:0f:55:41:
b7:52:d1:a5:8a:89:c9:b8:69:cf:3b:a3:3c:f6:38:c6:6a:1c:
d0:73:f4:17:2e:4b:ed:9d:b7:0f:1d:dd:5c:6d:66:c0:a6:c0:
ba:06:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 05:06:48 2026 by rpki-client