$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft File: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft (raw, json) Hash identifier: kmCEYywR2yP/CWyAAXGuDEeGHNWBGKW8YiojLOlfVWs= Subject key identifier: 30:6F:18:7E:33:F1:1D:A6:6D:6F:9D:2F:CF:F6:EF:C9:01:46:F6:35 Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36 Certificate issuer: /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136 Certificate serial: 518FB58294BA9FFBB8F187D8281EA4E92686035D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:28:19 +0000 Manifest this update: Mon 21 Sep 2026 01:23:19 +0000 Manifest next update: Tue 22 Sep 2026 04:51:19 +0000 Files and hashes: 1: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: gz0mtebVHRYvwcZULFWZzRpAOfu5PGcdFQ6/2J/rYJg=) 2: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl (hash: 8dfRCiM6pYpM8tSS80M1uvzce8kMMCQNqrtx9fM1JNY=) 3: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: Ceh8rJrQm7Qi4u0ZWtFtIRi76jfUMfkPpmVXy/7YVr4=) 4: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: iPYJKyy3LjL+wdadigRDVFan06P6sm3qFgCQgu9haaI=) 5: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: 0OL8yRFc3dc/04Uo3qwJLQPh9f57dZz2AXVP9/HkiQ8=) 6: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: f7mNVMXrNdEsNoFnuQE41PlKhPiJR8mRcK26l9bSldY=) 7: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: vG4Mb3wY0nH5gNgPEIFeNyHxuUNv8KkKuwMYPOjoYEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8f:b5:82:94:ba:9f:fb:b8:f1:87:d8:28:1e:a4:e9:26:86:03:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136 Validity Not Before: Sep 21 01:23:19 2026 GMT Not After : Sep 22 04:51:19 2026 GMT Subject: CN=306F187E33F11DA66D6F9D2FCFF6EFC90146F635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:df:6a:d3:dc:a3:ed:81:7b:96:c8:b5:07: c6:4b:4c:d9:6d:c6:23:2e:e2:e1:59:df:6c:6e:cf: 8e:29:69:96:a4:6f:3a:fa:85:e5:a3:76:5f:ee:55: ce:ce:52:80:43:be:96:46:53:41:5f:03:59:96:69: c3:5f:cb:6d:43:64:e1:7a:ef:7f:72:d1:e2:7e:ce: df:5f:d5:62:a7:98:18:16:5b:7e:45:66:60:a0:86: ea:aa:f5:55:71:60:72:db:51:25:f4:9b:64:48:15: 92:21:2e:cf:91:19:a0:05:9f:eb:bd:01:d9:6a:d8: da:ec:a3:a4:d8:ac:b8:e0:08:46:27:ca:66:0f:dc: 7f:8a:c0:56:64:26:de:3d:9a:7a:a1:d7:a2:67:58: 4c:cc:6d:f3:6e:9d:d7:e0:33:be:bf:88:7d:c2:a9: 3f:d8:81:1b:99:70:06:59:ca:65:ef:18:11:6c:ac: 2b:9a:6e:d4:46:77:98:5b:a6:b8:6a:ef:9e:2d:e6: 56:c7:32:62:46:9e:29:88:4d:82:92:22:97:1b:a1: f8:01:77:f0:79:04:08:b3:a0:f4:ee:86:60:fd:c3: b5:2f:ac:a2:35:33:61:96:2e:50:a5:98:35:ce:41: aa:d8:16:62:04:09:d3:6f:79:97:4c:cc:a1:e1:ad: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6F:18:7E:33:F1:1D:A6:6D:6F:9D:2F:CF:F6:EF:C9:01:46:F6:35 X509v3 Authority Key Identifier: keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:66:5d:95:11:da:e4:d9:ca:4b:54:16:fc:fd:b9:04:b6:26: 11:55:5b:0c:cd:75:cf:60:01:c4:ce:99:01:5f:a5:24:37:c9: a8:b6:0f:e0:1c:e5:79:f6:98:eb:c1:19:07:27:74:7b:96:34: b1:3b:cf:5d:fb:44:d8:34:fd:71:49:16:55:43:7c:9d:af:17: 05:db:b1:9b:9d:36:94:03:4f:2b:c4:48:5c:69:a7:e3:96:61: 00:f4:40:74:02:d8:b3:0f:b0:22:e6:59:73:79:d7:55:a6:46: ee:2b:fd:61:f5:b5:03:95:ec:f8:cc:fe:ea:ce:44:46:76:e3: b7:ba:b9:26:5f:93:6e:76:f0:8f:e2:60:b1:47:1a:19:92:8b: 02:29:11:45:1c:53:d3:f1:95:64:0a:74:80:8d:45:d9:15:ac: 8c:2e:04:5b:e2:94:20:0c:8b:02:e3:15:f4:5c:b3:e0:07:3e: d6:01:97:3f:fa:31:12:47:a8:a3:17:d8:41:2f:7d:7e:b2:a8: 63:80:e7:83:a5:99:4e:04:1e:92:75:00:2f:70:25:41:70:be: 81:c2:74:bf:66:65:21:26:44:92:a5:c0:e7:85:c7:e0:9d:74: 3a:24:f0:d4:f1:63:77:5e:8f:ef:40:df:b9:7d:01:51:ea:18: 39:0f:18:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUY+1gpS6n/u48YfYKB6k6SaGA10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E1QTU4NjgwQTA1RDdDREE2OEFGN0MwOThBQTVFMUQx REI2NTEzNjAeFw0yNjA5MjEwMTIzMTlaFw0yNjA5MjIwNDUxMTlaMDMxMTAvBgNV BAMTKDMwNkYxODdFMzNGMTFEQTY2RDZGOUQyRkNGRjZFRkM5MDE0NkY2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS4N9q09yj7YF7lsi1B8ZLTNlt xiMu4uFZ32xuz44paZakbzr6heWjdl/uVc7OUoBDvpZGU0FfA1mWacNfy21DZOF6 739y0eJ+zt9f1WKnmBgWW35FZmCghuqq9VVxYHLbUSX0m2RIFZIhLs+RGaAFn+u9 Adlq2Nrso6TYrLjgCEYnymYP3H+KwFZkJt49mnqh16JnWEzMbfNundfgM76/iH3C qT/YgRuZcAZZymXvGBFsrCuabtRGd5hbprhq754t5lbHMmJGnimITYKSIpcbofgB d/B5BAizoPTuhmD9w7UvrKI1M2GWLlClmDXOQarYFmIECdNveZdMzKHhrZFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMG8YfjPxHaZtb50vz/bvyQFG9jUwHwYDVR0j BBgwFoAUelpYaAoF182mivfAmKpeHR22UTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhmMzliZDQtY2RhYy00MWNmLTg4NTgtZDc0MTBmNjRkMTU1LzAvN0E1QTU4Njgw QTA1RDdDREE2OEFGN0MwOThBQTVFMUQxREI2NTEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTVBNTg2ODBBMDVEN0NEQTY4QUY3QzA5OEFBNUUxRDFEQjY1 MTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvN0E1QTU4NjgwQTA1RDdDREE2OEFGN0MwOThBQTVF MUQxREI2NTEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNmXZUR2uTZyktUFvz9uQS2JhFVWwzNdc9g AcTOmQFfpSQ3yai2D+Ac5Xn2mOvBGQcndHuWNLE7z137RNg0/XFJFlVDfJ2vFwXb sZudNpQDTyvESFxpp+OWYQD0QHQC2LMPsCLmWXN511WmRu4r/WH1tQOV7PjM/urO REZ247e6uSZfk2528I/iYLFHGhmSiwIpEUUcU9PxlWQKdICNRdkVrIwuBFvilCAM iwLjFfRcs+AHPtYBlz/6MRJHqKMX2EEvfX6yqGOA54OlmU4EHpJ1AC9wJUFwvoHC dL9mZSEmRJKlwOeFx+CddDok8NTxY3dej+9A37l9AVHqGDkPGPo= -----END CERTIFICATE-----Generated at Mon Sep 21 19:44:26 2026 by rpki-client