
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
File: 7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft (raw, json)
Hash identifier: QQiy1OzCcQrmLVFkENAVsw7DZHh1OwgI9se5/HCWRFc=
Subject key identifier: 9B:DB:1E:39:5B:1A:1B:B7:C3:7A:B6:EE:C3:40:51:A4:0B:F6:85:5A
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 28D57F04A8BFA6C1F487C31160A9C2DEBE03CBEE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
Manifest number: 067E
Signing time: Fri 20 Mar 2026 17:31:42 +0000
Manifest this update: Fri 20 Mar 2026 17:26:42 +0000
Manifest next update: Mon 23 Mar 2026 18:51:42 +0000
Files and hashes: 1: 323430363a323063303a383030303a3a2f33342d3438203d3e20313430343233.roa (hash: GSJJdggvfFwB9qLe1PFp+cO6i4bwj+P0URv6ycjDyRI=)
2: 323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa (hash: EQ3tpkIgRtOjPRF6ogySCbVymNDN0UNWBCm36IHFLvw=)
3: 323430363a323063303a363030303a3a2f33362d3438203d3e20313430343233.roa (hash: OQDE1JKfovvc04Sx9zJJ6eBx//fK4i4KdzEjLHB3q+I=)
4: 323430363a323063303a653030303a3a2f33352d3438203d3e20313430343233.roa (hash: Wd1EQnUO1UXOXRuTwMKUm9ynIfbWR17zRhfMIDi9QVM=)
5: 323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa (hash: DAoksNdeqm4zq9OVQulk35VOaNyz03bL8VO+gSR443A=)
6: 323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa (hash: C4NfNMKEsQWtmuHoZ58Y/ze8FqI+9TbCR7J3W4JbaPI=)
7: 323430363a323063303a633030303a3a2f33352d3438203d3e20313430343233.roa (hash: nd5q1pRIdM0hAIKxdlBv7D7ABN85fx0AF/aqhoAhC6g=)
8: 323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa (hash: NBBC3gMm8DzP3+y5fQNp7hHnSdk72DGcRsLL1yHWoyo=)
9: 323430363a323063303a3a2f33362d3438203d3e20313430343233.roa (hash: 90L0IBK41RYqXPYTIEKjZ4rc490x+qDr8Q2QF/sUHJU=)
10: 323430363a323063303a633030303a3a2f33342d3438203d3e20313430343233.roa (hash: keSBcdNCYqEReSqAhrjzL5oxykgqRQRpni4+yy9z2zM=)
11: 323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa (hash: PQat5U+b+2F8TUbM0TfEWCf1rYTowaZZ4esIP2eke+A=)
12: 323430363a323063303a3a2f33322d3438203d3e20313430343233.roa (hash: asOMw8IReWSdKeOQbCj1mbbh/oBy9IjQ8OQ4TmSDmuA=)
13: 323430363a323063303a633030303a3a2f33362d3438203d3e20313430343233.roa (hash: Ks+d2AdogRBjNZ9pZA56IElrYxGYDP/UtHg6lnLyonU=)
14: 323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa (hash: cnF2P9b7E2pqwVqJJaEPPF1YhyoGEvmpUirEA7GwXxk=)
15: 323430363a323063303a383030303a3a2f33332d3438203d3e20313430343233.roa (hash: nc3F3910+MhR+R2C2cG5slQzSrCjkkgP0aqO39Vsoos=)
16: 3130332e3135312e3232322e302f32332d3234203d3e20313430343233.roa (hash: 0oGN94iFu2wl2uvloAOPpJjmpLcA+no30iiGkG/b4mE=)
17: 323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa (hash: l9N5vizels0zNjqiSpE9IOEX6BvqpauB6B0YkcgHYUY=)
18: 323430363a323063303a353030303a3a2f33362d3438203d3e20313430343233.roa (hash: o8mhCmAB869OPl0fJty0ytAw99/bgZILLNUjM0ECd2Q=)
19: 323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa (hash: /haU1gSh0mI3JilBGNURo1mhP+ctxjmdCNE9UJZppIs=)
20: 323430363a323063303a3a2f33342d3438203d3e20313430343233.roa (hash: I++xj1jDURsOXSW/3PzgvX20S0Z+B3qXmTBSDfrcV50=)
21: 323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa (hash: IDRUhj4vME2Yz9XjUrRGlLFqsHAzHZNAOXuxIKvP7Zs=)
22: 7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl (hash: S8laj+RBszc4OiYGWkiCJ3J+1iXOin2Wry9zDZfiKQE=)
23: 323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa (hash: wQjNwIsUjXh8bpojYORa3AyC+GEAakMlxxX92xWzmRQ=)
24: 323430363a323063303a3a2f33332d3438203d3e20313430343233.roa (hash: sI1qXkcg4tjdRUAEMQbH6N7gWoKW9GAmHrMdOe982TA=)
25: 323430363a323063303a343030303a3a2f33352d3438203d3e20313430343233.roa (hash: z1Z1jjWlENiSJrrLnZ1gAJh4C4XPIwUwDyEKPRK8yTw=)
26: 323430363a323063303a3a2f33352d3438203d3e20313430343233.roa (hash: 4ENHlwTlF+1A/B5bj7Otex0+XhkMg4MDNFvK0FVMiQ4=)
27: 323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa (hash: Gj15b0uJ5jxFlupufbVGiL3vjYYMcdN3H+7eSXsJ59M=)
28: 323430363a323063303a383030303a3a2f33352d3438203d3e20313430343233.roa (hash: sCyqi6yrEDGDnuGOtNb1GJfPU2ui3XCN9TQf3rVuTZc=)
29: 323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa (hash: bt4Vopji+GVCjDjyKmW6QNBO59RohOWW/7HaomcjyK8=)
30: 323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa (hash: qB1wOCs4BRo/hQqUzK0z1A+VcMF+TGReKpAK2oziaGo=)
31: 323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa (hash: D4UheCj+6BumXlNImypw77cjqYua0xeMpBeTdeeD80w=)
32: 323430363a323063303a313030303a3a2f33362d3438203d3e20313430343233.roa (hash: cC9uX5eCE9W4PbREQnsLAtOLKiq0EhKP+Bu1UcCX5ZQ=)
33: 323430363a323063303a613030303a3a2f33352d3438203d3e20313430343233.roa (hash: 8VcmE61BkL8v7Co6gS6UpOWFAKU6mznnUK/+e3v6JTg=)
34: 323430363a323063303a613030303a3a2f33362d3438203d3e20313430343233.roa (hash: CbHTNGnSLVyLwrjgi9pcq8A8dCLDG/7E2BIixrSuYx8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Mar 2026 18:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d5:7f:04:a8:bf:a6:c1:f4:87:c3:11:60:a9:c2:de:be:03:cb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Mar 20 17:26:42 2026 GMT
Not After : Mar 23 18:51:42 2026 GMT
Subject: CN=9BDB1E395B1A1BB7C37AB6EEC34051A40BF6855A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:8a:3d:27:ce:a8:43:d9:a8:f6:7b:55:5a:
1a:a3:1a:b8:dd:95:c5:85:cc:c0:0b:2f:ca:d6:3f:
b8:26:de:b4:76:7f:aa:a8:f7:da:01:e4:6d:c0:bf:
08:e3:dd:b2:09:45:11:5c:6b:d1:5a:4e:26:b4:74:
75:66:20:d3:e5:ce:d6:23:17:eb:cd:16:a4:b2:66:
71:51:9a:56:c5:21:98:e5:7e:db:a1:bf:84:36:cd:
4c:48:fb:fc:bf:72:6f:01:6b:25:58:5c:e6:ba:67:
76:7b:53:b9:99:c8:6e:96:63:ff:20:2c:25:8f:5d:
10:62:8a:e9:51:f0:c1:fb:72:fb:cd:18:94:97:9e:
1f:84:91:24:09:76:46:39:cb:2e:b7:ff:63:37:ad:
ea:ed:46:08:27:a8:5f:ab:d9:c5:d1:c7:73:b5:33:
4e:90:1d:f3:bc:81:d1:49:a7:bc:6a:5c:02:1b:af:
4a:db:e3:14:51:07:ec:c8:41:2d:0f:67:87:fa:52:
41:3c:58:74:a8:44:14:09:d6:91:c7:45:ad:f6:59:
08:2c:43:3f:62:a5:db:2f:1b:c7:45:a7:27:a5:32:
fe:ad:a9:31:6a:b8:fe:9a:de:d3:2a:18:69:fc:1d:
df:62:5a:a5:d1:b0:fb:ce:13:04:05:5d:85:98:cc:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:1E:39:5B:1A:1B:B7:C3:7A:B6:EE:C3:40:51:A4:0B:F6:85:5A
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:17:7a:a0:f9:cd:5f:be:04:ae:1c:ae:b5:0e:59:3b:84:4b:
26:12:e8:99:5a:82:a3:70:d0:62:14:df:ff:fa:74:00:b4:c3:
58:1a:1c:3e:9f:4b:30:a8:0f:e0:a1:00:f9:c9:61:05:d5:19:
d9:6d:87:a7:38:bc:1a:8e:17:10:6d:e4:2e:c5:9d:4b:cd:e2:
8a:80:33:16:e1:62:96:a2:a6:86:5d:fd:c9:18:f0:15:90:2c:
fb:f2:37:f8:88:8d:bb:8c:24:24:53:15:34:d5:90:49:97:d6:
24:f9:10:a2:ee:cd:9b:8f:4e:4d:f1:9f:d7:1a:6f:53:1e:fc:
99:0d:d5:89:a1:a3:9f:4b:39:4d:cb:e1:b1:95:56:55:c6:30:
ab:63:cc:7b:02:6b:4a:90:6f:9e:83:80:21:f0:d3:ae:ad:11:
18:5e:5d:84:df:00:a3:d6:47:06:da:e7:e0:5f:5f:c9:b6:03:
02:a4:d6:06:62:61:87:37:82:b3:d0:7a:2f:37:96:c2:c3:5d:
ba:e7:12:55:1f:a0:a0:ad:54:0a:ce:9d:55:f0:0e:9d:ff:32:
ed:7d:eb:ab:c9:44:a9:b4:c2:b1:a8:7e:6c:f4:1f:72:b8:76:
1b:11:c0:99:ca:5d:8a:e0:e7:4a:16:a9:a3:24:e9:50:6f:6b:
96:8e:11:03
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKNV/BKi/psH0h8MRYKnC3r4Dy+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz
NTJDQjg3NDAeFw0yNjAzMjAxNzI2NDJaFw0yNjAzMjMxODUxNDJaMDMxMTAvBgNV
BAMTKDlCREIxRTM5NUIxQTFCQjdDMzdBQjZFRUMzNDA1MUE0MEJGNjg1NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnYo9J86oQ9mo9ntVWhqjGrjd
lcWFzMALL8rWP7gm3rR2f6qo99oB5G3Avwjj3bIJRRFca9FaTia0dHVmINPlztYj
F+vNFqSyZnFRmlbFIZjlftuhv4Q2zUxI+/y/cm8BayVYXOa6Z3Z7U7mZyG6WY/8g
LCWPXRBiiulR8MH7cvvNGJSXnh+EkSQJdkY5yy63/2M3rertRggnqF+r2cXRx3O1
M06QHfO8gdFJp7xqXAIbr0rb4xRRB+zIQS0PZ4f6UkE8WHSoRBQJ1pHHRa32WQgs
Qz9ipdsvG8dFpyelMv6tqTFquP6a3tMqGGn8Hd9iWqXRsPvOEwQFXYWYzCQvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUm9seOVsaG7fDerbuw0BRpAv2hVowHwYDVR0j
BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF
MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD
Qjg3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTlhMDAzNjktNjg0MC00YTk1LTg5
YjEtYTQ4NTE4Zjk4ZGM3LzAvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUz
ODczNTJDQjg3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC0XeqD5zV++BK4crrUOWTuESyYS6JlagqNw
0GIU3//6dAC0w1gaHD6fSzCoD+ChAPnJYQXVGdlth6c4vBqOFxBt5C7FnUvN4oqA
MxbhYpaipoZd/ckY8BWQLPvyN/iIjbuMJCRTFTTVkEmX1iT5EKLuzZuPTk3xn9ca
b1Me/JkN1Ymho59LOU3L4bGVVlXGMKtjzHsCa0qQb56DgCHw066tERheXYTfAKPW
Rwba5+BfX8m2AwKk1gZiYYc3grPQei83lsLDXbrnElUfoKCtVArOnVXwDp3/Mu19
66vJRKm0wrGofmz0H3K4dhsRwJnKXYrg50oWqaMk6VBva5aOEQM=
-----END CERTIFICATE-----
Generated at Sun Mar 22 03:57:13 2026 by rpki-client