$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft File: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft (raw, json) Hash identifier: RIQnNNArlEh3Zu0BHUUNh0qjVM8Z12VEXcZmF0JCn6Y= Subject key identifier: 3A:DD:C3:44:4C:77:EC:33:37:98:5C:DF:BD:79:93:8F:FA:4F:7B:E2 Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36 Certificate issuer: /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136 Certificate serial: 25F075947CE381F535E20C9F693760F764AAE04E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 09:54:56 +0000 Manifest this update: Wed 17 Jun 2026 09:49:56 +0000 Manifest next update: Thu 18 Jun 2026 11:53:56 +0000 Files and hashes: 1: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: vG4Mb3wY0nH5gNgPEIFeNyHxuUNv8KkKuwMYPOjoYEg=) 2: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: gz0mtebVHRYvwcZULFWZzRpAOfu5PGcdFQ6/2J/rYJg=) 3: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: 0OL8yRFc3dc/04Uo3qwJLQPh9f57dZz2AXVP9/HkiQ8=) 4: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: Ceh8rJrQm7Qi4u0ZWtFtIRi76jfUMfkPpmVXy/7YVr4=) 5: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: iPYJKyy3LjL+wdadigRDVFan06P6sm3qFgCQgu9haaI=) 6: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl (hash: kfOnVxexvmYentaMitc0Cvvl7EhTKeV1BO5cWiTRrZg=) 7: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: f7mNVMXrNdEsNoFnuQE41PlKhPiJR8mRcK26l9bSldY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f0:75:94:7c:e3:81:f5:35:e2:0c:9f:69:37:60:f7:64:aa:e0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136 Validity Not Before: Jun 17 09:49:56 2026 GMT Not After : Jun 18 11:53:56 2026 GMT Subject: CN=3ADDC3444C77EC3337985CDFBD79938FFA4F7BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:1b:59:2b:77:c1:e5:13:28:89:b2:cc:62: 37:6d:05:84:5a:a8:28:2d:73:70:6e:89:3a:be:2a: be:78:f6:a7:bb:15:84:f7:e7:7e:9b:5a:6b:71:57: 27:2a:f5:ca:61:66:28:89:25:01:35:9c:21:97:44: ad:4c:4a:f6:dd:bb:9d:f2:f8:47:60:2b:0f:8e:c3: 9d:5d:ca:dc:1a:6f:43:13:e0:0e:f6:6c:df:2b:6a: 85:13:d7:7c:d1:10:0d:bf:8a:f6:f4:fb:8c:6b:bc: 52:f6:0f:a6:1e:61:21:fb:c2:02:5b:02:e9:03:43: 23:6b:f0:45:f0:f4:44:07:27:90:e0:1c:e4:17:b9: 76:1a:b6:c6:ae:25:38:14:3c:16:0e:21:e9:56:81: 8d:a0:b4:ce:12:57:1f:c5:a8:f2:f9:d2:ea:f7:23: 69:e1:c4:17:8a:6f:dd:ee:5c:82:8d:9e:1f:31:4f: cc:03:19:60:65:33:58:50:08:22:9b:67:f2:4a:37: 95:f9:e1:03:d5:89:97:f1:62:02:43:8f:b2:8d:58: 66:7c:5a:1e:63:ea:cc:16:49:74:59:c7:ce:40:c0: 57:30:c6:10:90:d1:ee:2b:10:62:63:39:52:0f:e1: 68:7c:74:02:03:3f:12:22:26:c4:c7:d1:cf:57:5d: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DD:C3:44:4C:77:EC:33:37:98:5C:DF:BD:79:93:8F:FA:4F:7B:E2 X509v3 Authority Key Identifier: keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:85:55:18:0c:9a:e2:42:c3:49:f7:3a:c6:96:47:88:fe:67: ee:e1:8e:94:07:6a:d8:a5:c4:0b:54:af:cb:99:1b:f4:15:3e: 75:f8:fc:78:d5:6a:6e:39:d3:e2:51:a7:ff:a4:78:cd:a4:c9: 22:9d:59:3b:89:31:b3:b4:30:10:d8:2e:7b:10:a0:53:e6:78: 9b:bb:75:99:1f:7d:8f:d7:59:7b:44:04:ad:d1:a2:c7:33:3d: c2:eb:35:e2:b6:ed:e1:6d:99:3f:96:88:59:dd:8f:42:eb:4a: b9:a3:06:b7:8d:a5:74:23:39:c9:37:20:83:04:c7:85:6d:75: 62:67:45:52:af:f7:08:b3:cd:8d:31:72:1a:47:d0:dc:2f:68: 6c:1c:dd:c5:fd:29:5f:b6:a6:c2:30:79:a1:79:01:c5:43:d3: 68:63:a0:2e:0f:c2:5c:be:4d:c2:ac:13:f0:2b:a7:f6:e2:b8: a7:34:c5:5e:74:0f:72:52:0b:90:78:48:00:13:54:61:83:96: 3e:76:7d:01:21:20:43:6c:1a:3a:9c:64:5e:a0:cc:33:e3:67: dc:c0:1b:6f:a3:dd:c1:12:4b:10:90:f5:6d:8b:00:f0:51:e5: 51:88:dd:da:f8:d8:3a:74:da:1f:45:d6:b4:31:fb:ef:07:25: c2:20:38:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfB1lHzjgfU14gyfaTdg92Sq4E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E1QTU4NjgwQTA1RDdDREE2OEFGN0MwOThBQTVFMUQx REI2NTEzNjAeFw0yNjA2MTcwOTQ5NTZaFw0yNjA2MTgxMTUzNTZaMDMxMTAvBgNV BAMTKDNBRERDMzQ0NEM3N0VDMzMzNzk4NUNERkJENzk5MzhGRkE0RjdCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJxtZK3fB5RMoibLMYjdtBYRa qCgtc3BuiTq+Kr549qe7FYT3536bWmtxVycq9cphZiiJJQE1nCGXRK1MSvbdu53y +EdgKw+Ow51dytwab0MT4A72bN8raoUT13zREA2/ivb0+4xrvFL2D6YeYSH7wgJb AukDQyNr8EXw9EQHJ5DgHOQXuXYatsauJTgUPBYOIelWgY2gtM4SVx/FqPL50ur3 I2nhxBeKb93uXIKNnh8xT8wDGWBlM1hQCCKbZ/JKN5X54QPViZfxYgJDj7KNWGZ8 Wh5j6swWSXRZx85AwFcwxhCQ0e4rEGJjOVIP4Wh8dAIDPxIiJsTH0c9XXfCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOt3DREx37DM3mFzfvXmTj/pPe+IwHwYDVR0j BBgwFoAUelpYaAoF182mivfAmKpeHR22UTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhmMzliZDQtY2RhYy00MWNmLTg4NTgtZDc0MTBmNjRkMTU1LzAvN0E1QTU4Njgw QTA1RDdDREE2OEFGN0MwOThBQTVFMUQxREI2NTEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTVBNTg2ODBBMDVEN0NEQTY4QUY3QzA5OEFBNUUxRDFEQjY1 MTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvN0E1QTU4NjgwQTA1RDdDREE2OEFGN0MwOThBQTVF MUQxREI2NTEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmFVRgMmuJCw0n3OsaWR4j+Z+7hjpQHatil xAtUr8uZG/QVPnX4/HjVam450+JRp/+keM2kySKdWTuJMbO0MBDYLnsQoFPmeJu7 dZkffY/XWXtEBK3RosczPcLrNeK27eFtmT+WiFndj0LrSrmjBreNpXQjOck3IIME x4VtdWJnRVKv9wizzY0xchpH0NwvaGwc3cX9KV+2psIweaF5AcVD02hjoC4Pwly+ TcKsE/Arp/biuKc0xV50D3JSC5B4SAATVGGDlj52fQEhIENsGjqcZF6gzDPjZ9zA G2+j3cESSxCQ9W2LAPBR5VGI3dr42Dp02h9F1rQx++8HJcIgOLU= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:54 2026 by rpki-client