
$ rpki-client -vvf rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
File: 295E13E5C8926C8780CF0694E90F77298E60C812.mft (raw, json)
Hash identifier: NP0x2uSMApLyw5kNWEMrJDIDxEvjoCpPLs/sIsM7bIU=
Subject key identifier: 18:D9:41:82:36:31:4F:65:7D:40:4E:EF:71:3A:EE:58:57:C9:0D:8D
Authority key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
Certificate issuer: /CN=295E13E5C8926C8780CF0694E90F77298E60C812
Certificate serial: 6238A1F451D0905A2D8CE15041D15D3A27F2FF11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 19:17:26 +0000
Manifest this update: Tue 16 Jun 2026 19:12:26 +0000
Manifest next update: Wed 17 Jun 2026 21:54:26 +0000
Files and hashes: 1: 295E13E5C8926C8780CF0694E90F77298E60C812.crl (hash: 4rm6RGNwrRZLA/djHIiJmHP4SX5Hvn3vfc7VNzEfi5Y=)
2: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 8uDSee80WU9BwE7TeL4b74xk08iB/J8lbI5bPlFFs2Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:38:a1:f4:51:d0:90:5a:2d:8c:e1:50:41:d1:5d:3a:27:f2:ff:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295E13E5C8926C8780CF0694E90F77298E60C812
Validity
Not Before: Jun 16 19:12:26 2026 GMT
Not After : Jun 17 21:54:26 2026 GMT
Subject: CN=18D9418236314F657D404EEF713AEE5857C90D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:92:91:63:cc:a0:a8:6d:42:6f:8e:f1:84:
fc:c6:9e:63:ee:19:88:09:e4:cf:1c:91:28:7d:79:
1f:fe:12:49:25:3b:dd:18:80:9d:66:d4:5f:57:72:
96:49:cd:57:07:0f:2c:ee:f3:60:9e:1b:f1:f5:c0:
0a:a1:10:0d:df:26:c6:ba:6a:b1:f6:4a:90:05:36:
7a:5d:5a:43:19:25:0d:5c:ce:70:3b:ea:bd:84:2c:
8b:f2:80:db:48:5a:49:55:40:26:ee:76:b8:91:f8:
b6:27:0a:9a:7b:d3:5f:92:2a:8a:97:e5:1b:49:d1:
88:12:9b:e9:48:b1:9c:08:88:38:67:6e:7a:be:0e:
8e:06:04:14:60:4f:a8:98:b8:cd:a1:cd:d8:0b:6f:
46:02:56:b2:8d:3f:de:86:d4:d0:17:5b:dc:d8:d6:
c8:8b:71:5a:30:73:e3:db:1a:60:7f:6e:d0:4f:c3:
53:2d:12:4b:47:0e:78:e1:6c:6a:75:1f:76:22:7b:
c8:8b:4f:3e:db:fa:34:75:fb:e2:dd:c8:a4:00:25:
3c:af:46:1e:be:76:89:2c:32:92:ef:b8:45:77:b3:
e0:09:da:99:e1:de:d5:75:d9:55:6e:fc:93:36:c0:
1d:88:69:92:99:88:7e:64:32:cf:c9:bf:32:0b:39:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:41:82:36:31:4F:65:7D:40:4E:EF:71:3A:EE:58:57:C9:0D:8D
X509v3 Authority Key Identifier:
keyid:29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b8:24:45:fe:44:a4:5d:6c:7c:ee:95:2a:e5:75:38:41:aa:
2f:e9:91:32:bf:40:9f:23:df:1d:6f:38:32:61:68:ee:87:6c:
0d:2a:48:ff:c9:d8:92:bd:6d:08:11:2a:a5:35:6c:92:63:bd:
32:75:99:3f:bc:44:a3:e8:05:8f:1f:0c:45:80:78:b2:d5:ed:
58:3b:32:3b:15:ac:7b:29:22:3f:7f:96:0d:ef:23:52:dc:b3:
30:23:fb:c0:f3:d9:6b:bf:73:5f:26:70:3b:5f:50:d6:88:f9:
e7:d6:40:18:cd:e7:df:75:52:82:4b:63:31:58:61:e2:1b:16:
21:83:e1:1d:0e:36:ee:ef:e0:3a:16:43:bc:a3:51:54:10:44:
d2:c0:20:e4:3f:65:18:71:fc:12:3f:b8:cb:da:e7:40:c6:f0:
4c:f2:22:4d:85:db:56:aa:15:f2:bd:b2:4c:dc:52:c6:bd:fb:
d6:54:c2:ad:fa:f2:71:26:96:52:f8:2a:81:b4:4f:43:68:b2:
ae:c6:72:58:1f:a8:ce:da:fc:99:24:a8:cc:c7:de:e5:81:6d:
b4:73:17:71:ec:69:c8:cf:c5:aa:25:3a:cb:dc:1d:5e:aa:6e:
68:f5:4a:2b:cf:2b:56:92:52:cc:a6:6d:8b:a1:69:bc:5d:c3:
be:4a:16:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:51:35 2026 by rpki-client