
$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
File: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft (raw, json)
Hash identifier: E+LYOlwYOvg+3UxJhE4s8UiTaGTp8+OgchSqi52QR9Q=
Subject key identifier: D1:DF:BF:B5:28:70:A5:2C:66:05:7A:F0:21:BC:39:01:65:54:57:BB
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Certificate issuer: /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial: 282154563318765CE6D08C8A0DC2C4DD0D2B8E44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:54:15 +0000
Manifest this update: Tue 12 May 2026 07:49:15 +0000
Manifest next update: Wed 13 May 2026 11:10:15 +0000
Files and hashes: 1: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: 0OL8yRFc3dc/04Uo3qwJLQPh9f57dZz2AXVP9/HkiQ8=)
2: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: gz0mtebVHRYvwcZULFWZzRpAOfu5PGcdFQ6/2J/rYJg=)
3: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: vG4Mb3wY0nH5gNgPEIFeNyHxuUNv8KkKuwMYPOjoYEg=)
4: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: f7mNVMXrNdEsNoFnuQE41PlKhPiJR8mRcK26l9bSldY=)
5: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl (hash: xPZ/0XcCMknHJ3FNyoNh4xJld8EdhB9uRlC2FXnt/K8=)
6: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: Ceh8rJrQm7Qi4u0ZWtFtIRi76jfUMfkPpmVXy/7YVr4=)
7: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: iPYJKyy3LjL+wdadigRDVFan06P6sm3qFgCQgu9haaI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:21:54:56:33:18:76:5c:e6:d0:8c:8a:0d:c2:c4:dd:0d:2b:8e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Validity
Not Before: May 12 07:49:15 2026 GMT
Not After : May 13 11:10:15 2026 GMT
Subject: CN=D1DFBFB52870A52C66057AF021BC3901655457BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:45:df:37:35:5c:75:01:fc:ba:1a:fa:71:
b0:19:b9:52:2d:ac:3f:75:3f:8a:31:00:46:68:3a:
ea:9b:1e:12:18:b3:f5:2a:de:b6:33:ac:ad:9e:70:
09:88:87:03:8a:d5:58:2d:9a:46:60:14:e4:ff:bf:
44:30:b2:e0:46:b7:08:e9:fb:18:d9:25:37:37:61:
93:99:03:62:2f:6b:66:15:fc:c8:36:a3:84:38:2c:
04:a4:7a:31:a2:15:42:ab:7a:58:df:6a:ca:61:56:
b0:cc:9c:5d:ea:a6:40:80:e5:43:83:ef:f9:5c:22:
ae:78:ff:e9:a9:6a:92:d9:09:1d:85:a0:e9:dd:1b:
7b:99:ac:99:1f:c7:f1:b8:ce:ea:13:a3:1f:d9:fc:
2d:18:20:25:a4:78:0d:6c:e3:d4:43:c4:21:0c:f2:
1a:84:d3:b5:f1:f4:5f:19:01:8b:38:5e:f0:e1:8c:
49:07:bc:fb:ca:43:f2:9b:73:b8:48:28:44:fa:91:
54:53:1e:f0:9c:79:96:d3:0f:fd:ab:25:8f:02:27:
d8:a4:e1:56:90:93:cd:b7:36:0d:78:b0:32:81:90:
e1:35:59:ef:9d:81:d5:cb:03:43:8c:eb:13:49:c5:
7b:55:ba:92:3b:dc:5f:1d:ba:a6:78:eb:78:b3:50:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:BF:B5:28:70:A5:2C:66:05:7A:F0:21:BC:39:01:65:54:57:BB
X509v3 Authority Key Identifier:
keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1d:96:32:e5:a8:89:c5:3f:2b:01:92:28:0a:ad:d8:90:f1:
f0:9c:d2:be:a5:89:44:d0:34:e6:78:d9:4b:8d:29:fb:28:87:
b5:e8:83:35:3b:f7:41:07:3a:e0:f9:ca:22:f6:14:7b:61:29:
ed:6c:91:51:e1:7a:80:b4:ef:e4:95:cb:2a:66:91:81:21:c2:
0d:0b:8e:3e:59:97:20:e6:e9:4c:de:58:80:d8:46:97:07:88:
58:c9:d1:9c:23:5c:d1:20:51:66:c4:56:13:e8:8c:ae:71:47:
c2:d0:d6:9c:a4:b5:f4:a0:d6:f3:3e:51:aa:bc:30:50:d6:33:
35:c3:1f:95:0b:8c:bd:54:b9:c8:1e:9a:15:4f:f2:e2:99:96:
76:c6:56:1c:94:25:cf:e1:80:c8:53:cd:6c:f1:5a:6c:0f:11:
ce:e6:69:1e:3d:a0:b6:14:51:ef:23:65:92:ab:30:d6:d7:e4:
19:fd:6a:4c:15:73:df:f7:ea:4e:c6:6f:fc:8a:d9:8a:3c:51:
0b:bf:b6:56:a1:3c:50:e6:18:7c:f5:0d:16:83:09:ea:12:4f:
2d:75:b0:35:27:c6:a0:6b:75:c0:3c:af:79:46:92:98:de:a9:
b4:19:d7:89:b0:a4:f9:2d:bc:5e:1a:93:dc:6e:1b:9e:88:10:
93:9f:ea:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:11 2026 by rpki-client