$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft File: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft (raw, json) Hash identifier: gvIckd5wH4dYFXsp4Qi+Lk3qi036ZeqgKIvlUniBrZ0= Subject key identifier: C5:96:30:56:50:C8:D2:B6:9C:AE:57:59:5E:FC:F6:4E:65:2A:1B:A6 Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36 Certificate issuer: /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136 Certificate serial: 38A4BCC2EAC725C1876EF4E0A5E6E86F6393AB83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 09:20:10 +0000 Manifest this update: Thu 17 Sep 2026 09:15:10 +0000 Manifest next update: Fri 18 Sep 2026 10:56:10 +0000 Files and hashes: 1: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: Ceh8rJrQm7Qi4u0ZWtFtIRi76jfUMfkPpmVXy/7YVr4=) 2: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: gz0mtebVHRYvwcZULFWZzRpAOfu5PGcdFQ6/2J/rYJg=) 3: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl (hash: xDhpL7avj46jdfsSOivmbtjDUoDbUlzatqySKOBMnw8=) 4: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: 0OL8yRFc3dc/04Uo3qwJLQPh9f57dZz2AXVP9/HkiQ8=) 5: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: iPYJKyy3LjL+wdadigRDVFan06P6sm3qFgCQgu9haaI=) 6: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: f7mNVMXrNdEsNoFnuQE41PlKhPiJR8mRcK26l9bSldY=) 7: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: vG4Mb3wY0nH5gNgPEIFeNyHxuUNv8KkKuwMYPOjoYEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a4:bc:c2:ea:c7:25:c1:87:6e:f4:e0:a5:e6:e8:6f:63:93:ab:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136 Validity Not Before: Sep 17 09:15:10 2026 GMT Not After : Sep 18 10:56:10 2026 GMT Subject: CN=C596305650C8D2B69CAE57595EFCF64E652A1BA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:d3:d0:7f:69:79:89:5f:32:5e:aa:29:1b: cb:96:3b:31:86:c6:4f:b7:bf:4b:61:d4:8c:d3:6c: 82:f5:d4:a7:b9:5f:0a:6c:9b:13:b4:82:4f:fb:4c: 34:42:d3:8b:67:05:e3:21:64:88:18:79:66:9c:f1: 47:b0:44:d0:13:f2:12:11:40:2d:c7:65:66:65:71: de:2c:99:e8:5d:88:18:d6:4d:cc:3c:e5:80:a6:d0: c3:bf:21:36:d5:86:ee:66:db:41:b5:ea:a0:98:00: 97:2d:3f:54:30:f9:47:ee:42:2c:6b:af:c1:2d:b0: cc:bd:45:bf:6b:d8:d9:77:95:c3:b2:42:51:8b:c7: b2:10:e8:e4:4b:ec:09:e7:e9:2e:2e:9b:86:e7:c3: b0:1e:b7:13:79:aa:18:db:52:f5:d2:3b:35:f0:3c: 0e:af:72:b1:44:3d:34:88:81:7f:8f:e0:d4:34:01: 57:e9:5d:5c:47:7b:e8:6d:d7:20:9a:15:19:8b:ad: 0a:02:6b:43:2a:2f:68:a6:1c:11:0d:f2:0a:30:c1: 68:e9:0a:d1:3c:f0:a2:c8:12:a1:0c:da:55:8b:7a: 74:14:1a:06:b9:60:63:0b:b9:2b:73:0b:a1:52:ec: 78:d1:8e:ed:1a:79:1c:51:51:e6:0f:11:2f:41:2b: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:96:30:56:50:C8:D2:B6:9C:AE:57:59:5E:FC:F6:4E:65:2A:1B:A6 X509v3 Authority Key Identifier: keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a0:09:3f:84:de:70:0f:19:59:e4:35:be:63:90:5a:12:06: 4b:7f:d8:7c:b5:29:c4:da:bf:79:1f:5f:8e:b0:d5:ce:7d:f3: 35:be:be:c1:ca:42:ab:00:8b:08:84:4d:b6:0c:c3:9a:c3:c4: 57:0e:5b:4d:e5:43:69:a6:65:13:b7:5f:25:c4:68:d2:ec:99: e2:af:0b:6d:6e:be:0c:db:9f:f5:91:b9:d9:48:a4:9a:66:06: 57:ae:85:7e:f7:d3:79:e2:53:47:ac:66:b5:66:19:6e:30:5a: 9e:03:6f:f0:48:e9:40:ea:f4:58:74:41:c2:ff:a5:1c:50:cc: 46:f5:ad:d5:4d:8e:cb:0b:12:08:ff:43:c4:e9:a1:d4:dc:8b: 57:0b:ac:2f:12:1d:c8:e2:a4:27:7c:22:2a:ea:d3:2d:bc:ad: 64:12:80:be:aa:99:f2:56:24:f0:bb:4e:95:c9:a5:b0:70:0a: a9:74:0f:44:da:aa:7b:fb:b5:33:90:e7:87:43:af:cc:4b:46: a0:60:84:e8:fa:90:c1:d3:23:ca:16:d0:a2:eb:36:88:b0:ee: 0b:39:b0:05:17:03:80:95:6e:a0:a7:49:f7:23:52:dc:e6:b4: 92:95:69:77:fd:17:3e:ca:52:8d:86:4e:3c:0c:ab:6a:7e:be: 3e:41:c9:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKS8wurHJcGHbvTgpebob2OTq4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E1QTU4NjgwQTA1RDdDREE2OEFGN0MwOThBQTVFMUQx REI2NTEzNjAeFw0yNjA5MTcwOTE1MTBaFw0yNjA5MTgxMDU2MTBaMDMxMTAvBgNV BAMTKEM1OTYzMDU2NTBDOEQyQjY5Q0FFNTc1OTVFRkNGNjRFNjUyQTFCQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ttPQf2l5iV8yXqopG8uWOzGG xk+3v0th1IzTbIL11Ke5XwpsmxO0gk/7TDRC04tnBeMhZIgYeWac8UewRNAT8hIR QC3HZWZlcd4smehdiBjWTcw85YCm0MO/ITbVhu5m20G16qCYAJctP1Qw+UfuQixr r8EtsMy9Rb9r2Nl3lcOyQlGLx7IQ6ORL7Ann6S4um4bnw7AetxN5qhjbUvXSOzXw PA6vcrFEPTSIgX+P4NQ0AVfpXVxHe+ht1yCaFRmLrQoCa0MqL2imHBEN8gowwWjp CtE88KLIEqEM2lWLenQUGga5YGMLuStzC6FS7HjRju0aeRxRUeYPES9BK85xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxZYwVlDI0racrldZXvz2TmUqG6YwHwYDVR0j BBgwFoAUelpYaAoF182mivfAmKpeHR22UTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhmMzliZDQtY2RhYy00MWNmLTg4NTgtZDc0MTBmNjRkMTU1LzAvN0E1QTU4Njgw QTA1RDdDREE2OEFGN0MwOThBQTVFMUQxREI2NTEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTVBNTg2ODBBMDVEN0NEQTY4QUY3QzA5OEFBNUUxRDFEQjY1 MTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvN0E1QTU4NjgwQTA1RDdDREE2OEFGN0MwOThBQTVF MUQxREI2NTEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMigCT+E3nAPGVnkNb5jkFoSBkt/2Hy1KcTa v3kfX46w1c598zW+vsHKQqsAiwiETbYMw5rDxFcOW03lQ2mmZRO3XyXEaNLsmeKv C21uvgzbn/WRudlIpJpmBleuhX7303niU0esZrVmGW4wWp4Db/BI6UDq9Fh0QcL/ pRxQzEb1rdVNjssLEgj/Q8TpodTci1cLrC8SHcjipCd8Iirq0y28rWQSgL6qmfJW JPC7TpXJpbBwCql0D0Taqnv7tTOQ54dDr8xLRqBghOj6kMHTI8oW0KLrNoiw7gs5 sAUXA4CVbqCnSfcjUtzmtJKVaXf9Fz7KUo2GTjwMq2p+vj5ByRs= -----END CERTIFICATE-----Generated at Thu Sep 17 13:56:18 2026 by rpki-client