
$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
File: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft (raw, json)
Hash identifier: KNq/WrKw6nsxt0Y9COXIA2ACQEsjHc5BbhJI9QGyudU=
Subject key identifier: FD:12:69:7C:1A:CA:37:5A:2A:0E:71:89:41:60:3A:BC:3E:94:A0:3F
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Certificate issuer: /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial: 614D6066701355EBE83E9B0DBAEA9F3DAB08C146
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
Manifest number: 2B
Signing time: Wed 03 Jun 2026 01:06:05 +0000
Manifest this update: Wed 03 Jun 2026 01:01:05 +0000
Manifest next update: Thu 04 Jun 2026 04:31:05 +0000
Files and hashes: 1: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: Ceh8rJrQm7Qi4u0ZWtFtIRi76jfUMfkPpmVXy/7YVr4=)
2: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: f7mNVMXrNdEsNoFnuQE41PlKhPiJR8mRcK26l9bSldY=)
3: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: gz0mtebVHRYvwcZULFWZzRpAOfu5PGcdFQ6/2J/rYJg=)
4: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: 0OL8yRFc3dc/04Uo3qwJLQPh9f57dZz2AXVP9/HkiQ8=)
5: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl (hash: GPy6Z8v3hm4KxKS3Tj5wb8tzHG1cJ0K7DwqRySxCkj4=)
6: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: vG4Mb3wY0nH5gNgPEIFeNyHxuUNv8KkKuwMYPOjoYEg=)
7: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: iPYJKyy3LjL+wdadigRDVFan06P6sm3qFgCQgu9haaI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4d:60:66:70:13:55:eb:e8:3e:9b:0d:ba:ea:9f:3d:ab:08:c1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Validity
Not Before: Jun 3 01:01:05 2026 GMT
Not After : Jun 4 04:31:05 2026 GMT
Subject: CN=FD12697C1ACA375A2A0E718941603ABC3E94A03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:c4:8d:41:6a:f9:e1:0d:2f:b4:b1:57:39:
fc:73:08:e9:8f:f7:1f:3d:d7:be:aa:9a:a4:c0:f4:
e6:e8:72:92:2b:7c:17:dd:1f:0e:b7:df:8e:7d:b6:
5b:69:9e:76:cf:61:01:e2:24:c6:0c:29:bb:89:c8:
3d:2a:e0:c3:62:fb:5e:e9:ab:6d:6a:2a:6e:4e:70:
47:49:c1:f3:67:04:17:9b:68:4a:90:5a:b5:24:33:
16:a8:80:40:a2:e9:8b:96:59:f4:46:a7:7d:e0:57:
de:b4:3f:54:e0:be:f7:7d:4e:70:13:be:fc:8d:b9:
27:fb:72:9e:d3:e9:23:f2:7f:96:b7:d2:29:b7:f4:
b9:df:7d:13:fb:9d:b8:66:21:9c:9c:a8:b8:b6:17:
21:97:8f:9f:38:fc:bf:ca:d6:37:3d:d3:aa:2d:4a:
8a:19:5f:d5:47:ad:9c:62:32:2d:fe:a2:d1:1b:7d:
b8:a2:a4:1c:73:78:70:52:db:8b:be:ff:b2:4c:ed:
07:e5:cc:0d:5c:c1:b9:06:e9:db:72:22:27:04:27:
a3:1f:4d:25:d1:0b:55:ba:62:5b:6c:08:e5:b6:ed:
54:7e:eb:18:4d:98:96:86:36:37:f4:53:e6:c9:9f:
f6:0f:f7:5f:4a:8a:55:e9:d0:6f:74:52:6f:87:8a:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:69:7C:1A:CA:37:5A:2A:0E:71:89:41:60:3A:BC:3E:94:A0:3F
X509v3 Authority Key Identifier:
keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:dd:65:c5:2d:63:17:e5:e7:95:68:a3:e9:d1:0e:6a:43:86:
fd:31:a0:eb:bc:ac:b4:c8:e0:bc:d7:6c:86:3d:34:50:5c:19:
81:2e:ab:34:de:0d:e1:bf:67:de:56:01:b3:8b:e7:d6:37:f4:
31:75:94:75:96:73:ab:ed:41:cf:7a:32:76:2a:8b:70:33:9c:
31:96:b0:0d:e5:42:83:e0:52:b4:cb:00:da:9b:2d:fc:5c:43:
bd:c5:ca:6f:5d:51:42:59:78:1b:50:13:2b:91:79:15:3a:5c:
ce:2e:cd:82:12:ae:60:4f:81:d5:14:f1:37:1b:0d:82:93:8b:
47:43:78:91:49:4f:c5:3f:d9:fd:5c:6c:7a:c2:83:6f:7d:61:
2f:a2:da:a2:ed:94:a8:3a:f9:6f:34:b9:9e:af:48:59:12:1a:
82:57:d6:e3:3c:e5:fc:d2:07:8e:c2:74:32:36:12:24:2a:ff:
0f:a1:92:97:1a:f6:58:79:67:2b:24:eb:7d:b6:cf:9a:f9:ce:
cd:c7:aa:44:3b:15:0e:78:8f:8e:01:88:cc:3a:9d:21:70:14:
ba:15:f8:e3:40:81:a2:eb:18:f0:ab:72:4c:04:c4:1d:5f:84:
9a:51:ee:6f:d9:cc:2e:80:73:9d:c4:69:f1:46:63:8e:b2:fc:
9e:81:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:19 2026 by rpki-client