
$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
File: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft (raw, json)
Hash identifier: AQwNK60oUJIA4ru7mJizgMgqyXh9jSH/x+adTHcz0yU=
Subject key identifier: C8:F9:61:4A:FC:51:B1:2B:8D:38:E9:6B:59:5A:40:CE:6A:EB:F3:EB
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Certificate issuer: /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial: 1D96C55EA7DF52A79AE1AEF2E882E31D3274AEE7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 00:31:31 +0000
Manifest this update: Tue 21 Jul 2026 00:26:31 +0000
Manifest next update: Wed 22 Jul 2026 03:43:31 +0000
Files and hashes: 1: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl (hash: JYzvrSwdp3CcHBW6wIEbE+IphgZVMUyxlC9DZc7Mx1Q=)
2: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: Ceh8rJrQm7Qi4u0ZWtFtIRi76jfUMfkPpmVXy/7YVr4=)
3: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: f7mNVMXrNdEsNoFnuQE41PlKhPiJR8mRcK26l9bSldY=)
4: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: 0OL8yRFc3dc/04Uo3qwJLQPh9f57dZz2AXVP9/HkiQ8=)
5: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: iPYJKyy3LjL+wdadigRDVFan06P6sm3qFgCQgu9haaI=)
6: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: vG4Mb3wY0nH5gNgPEIFeNyHxuUNv8KkKuwMYPOjoYEg=)
7: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: gz0mtebVHRYvwcZULFWZzRpAOfu5PGcdFQ6/2J/rYJg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:96:c5:5e:a7:df:52:a7:9a:e1:ae:f2:e8:82:e3:1d:32:74:ae:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Validity
Not Before: Jul 21 00:26:31 2026 GMT
Not After : Jul 22 03:43:31 2026 GMT
Subject: CN=C8F9614AFC51B12B8D38E96B595A40CE6AEBF3EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:8e:06:20:bf:b1:e4:60:57:0d:26:40:27:
d8:61:81:a2:e0:18:02:f8:54:88:89:48:44:44:12:
43:ae:b1:39:58:dd:57:0a:bc:de:b6:39:cf:d7:9b:
e4:c6:00:e7:ca:eb:6c:e0:8e:00:51:b4:9d:30:b5:
96:d7:e0:02:2e:7c:04:04:9a:e8:d8:32:7e:e2:6a:
80:b6:5c:2a:07:e5:24:d2:e8:c9:68:6b:0b:ca:f6:
0e:4a:cc:3c:4b:1b:bd:30:2f:fb:1f:a9:1d:bc:68:
5b:15:20:a6:57:6a:5f:13:ee:a8:c0:9e:76:24:dc:
74:7b:a2:d7:f2:b8:75:98:c3:de:9d:96:92:6b:28:
a3:58:17:f6:fe:1f:ba:f6:01:b3:2f:bb:42:de:45:
27:c8:4c:58:5a:db:e1:92:2b:2b:99:cd:a8:5b:76:
94:c8:b1:81:22:b8:1f:30:bf:a6:c4:63:9f:04:80:
b9:1f:59:f3:c8:f4:41:29:c7:fa:fa:99:a3:fc:1d:
53:73:4a:63:9f:a5:d4:8d:c4:62:2a:c5:c2:8b:5d:
4f:ba:db:34:1b:75:71:80:1f:a5:44:cc:63:ca:c5:
7b:df:ff:69:bf:92:94:f1:97:1d:89:bd:a9:e4:53:
58:15:d7:cf:33:6d:fa:ac:81:fc:3d:d7:79:ce:9b:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F9:61:4A:FC:51:B1:2B:8D:38:E9:6B:59:5A:40:CE:6A:EB:F3:EB
X509v3 Authority Key Identifier:
keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cc:ad:6e:64:f1:81:4f:38:95:3b:42:f0:e1:f0:99:ae:70:
f9:ec:e8:f3:1c:b7:f5:38:24:63:0f:d4:1b:ba:41:44:37:35:
36:15:72:dd:b8:ef:f9:e9:22:c2:bf:38:f9:36:81:ae:e9:c1:
9e:f0:da:b0:8e:4c:74:ee:9e:04:14:3c:90:82:a6:36:d1:0e:
53:f0:bd:c6:f8:d9:48:82:07:f7:32:02:d5:a9:4b:3d:a4:7f:
93:bb:17:d3:a5:d7:7d:33:0d:28:1e:a4:62:70:ac:07:6c:89:
fc:00:8f:e2:e9:21:77:08:92:e2:6a:74:36:ef:4f:c2:72:8d:
3b:1f:68:72:64:8a:50:e5:97:69:d1:0b:fd:ab:ee:d0:6d:a9:
4f:14:bc:16:07:62:be:c1:59:c9:72:e5:b8:6f:d3:d7:9b:87:
c2:30:45:09:50:91:b8:51:ef:f9:40:48:38:3d:b8:a0:8b:8f:
0d:48:e6:3a:57:4e:fb:cd:0b:de:09:ee:67:82:39:2e:90:9d:
97:9a:40:b5:29:a7:2c:90:ec:b7:77:ca:14:c1:99:2d:f3:a1:
91:c7:32:3e:b1:b8:b6:4d:ac:20:df:c3:76:26:10:51:02:d6:
53:e0:18:6b:7a:c2:68:46:7b:53:dd:c9:c6:2d:4d:ad:2d:4b:
80:90:c5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:42:43 2026 by rpki-client