
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
File: 0DED71031394AA16715F3D03F26571528F1A6B78.mft (raw, json)
Hash identifier: guomlY96iTcN0wvsuaGfOONy2l5zUGDN3hMkkqXgzyA=
Subject key identifier: 68:EA:D0:D7:64:5A:EA:BC:E6:39:F8:34:49:B0:1B:F1:2A:97:32:87
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Certificate issuer: /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial: 258E24C552B1F2355E92ECF1D5CCA8AB669A5268
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 02:49:17 +0000
Manifest this update: Tue 21 Jul 2026 02:44:17 +0000
Manifest next update: Wed 22 Jul 2026 06:43:17 +0000
Files and hashes: 1: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (hash: VsyONkSurv+9TahILF/1bYqHX84Y5bFx2pjIHaiSJGI=)
2: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (hash: 6P/gtrzHwkH3kENiz3/is/cjoDAJlGYuJTJreGDj0WI=)
3: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (hash: dbjeUfofaAZBLKBCceZ22YQLnJ60T/u4G98K58+vimo=)
4: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (hash: fW/MYh09AaNNODsolkt0n1TRKWiUESamqS4145FgwBo=)
5: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (hash: YUzbLQ5j/NrlJLr3BA5MdjrGyteXCKBcOA9XM5EndXY=)
6: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (hash: 7SOOVpEkvhM8jKS5ml9tavuy6fhlwX85TRg6uRnySPg=)
7: 323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (hash: 6MK3BTfSdOqMu7uDUlMlrcofKxmm7ND7Ppxbk9itFD8=)
8: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (hash: +ZnAeFJoXHPh+xq3xuSvRbcR94NVVsIzNuYlIiCcSpQ=)
9: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (hash: GK7JrFFTMtRaVSiXERiAUwR8S0jPiNQeuHLwltAd/4o=)
10: 3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (hash: AsGbw0cbRJMt+AHYBFh8GsmxUOZcTvqzv4dYjEpLqWI=)
11: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (hash: T2d/1dANpMVbfsrDZMQgMJnfjqw3B5RFvLZjQM+Maic=)
12: 3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (hash: 8WhM2jfK6A9eXDQHoiLc7iWdsFkOi6rmzW7WT+47mh8=)
13: 323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (hash: AVqen3U0gUyXJ0Gc/rcGvSgOXqlzI++3CxMMEOAo30Q=)
14: 0DED71031394AA16715F3D03F26571528F1A6B78.crl (hash: sdIiPWNM43p6kfuOjWElB8bkp0oDfUfFYHXzYbMJSMg=)
15: 323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (hash: pL+bPlRYYQGeiYZEexp0fc0F/PP7A+oMtImtipkVLIE=)
16: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (hash: WknzV8Nu8IMTlOIi8o8zGv3PuOd24Q9LnQo6SQwKlsg=)
17: 3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (hash: +P/AMngDtPsWOGxlH3Mr6PlyfaGk41zvE2zQOV1G0jQ=)
18: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (hash: OfeOZDKtwz07hp7cEfgVVGzrjch6eyioJUOXZr6UY1A=)
19: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (hash: skBT3RdnJ+CBUwElmxoesrXpDa/Pn3QhE5o4dAxByQo=)
20: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (hash: OcytzAOerPcWTuVnLCz3It1QvJ1fzJzeOWmkkXqipNY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8e:24:c5:52:b1:f2:35:5e:92:ec:f1:d5:cc:a8:ab:66:9a:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
Validity
Not Before: Jul 21 02:44:17 2026 GMT
Not After : Jul 22 06:43:17 2026 GMT
Subject: CN=68EAD0D7645AEABCE639F83449B01BF12A973287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:6a:b2:41:94:23:0e:89:d2:52:26:4f:09:
6c:aa:38:19:fa:e3:b4:8e:3e:e0:bf:0f:90:8e:79:
c5:3d:66:03:c7:ac:69:a5:01:7f:b8:2f:91:1a:2b:
3d:2a:1f:67:c4:a1:ac:c7:7a:20:62:ae:1a:be:78:
d4:06:9d:96:23:d3:c8:5f:6f:31:b9:2f:d9:ca:e1:
7c:ae:01:32:93:bf:cb:ca:ec:d3:4f:04:26:35:50:
76:f2:75:84:71:e2:1f:58:74:ac:37:f4:bb:05:87:
ca:f2:87:49:55:b4:38:59:b8:5c:07:21:2a:f1:7f:
d8:5d:29:97:9e:e6:0a:82:f4:dc:02:fb:78:f7:1b:
bb:0b:d1:62:17:fd:78:f1:b0:40:57:04:8f:fa:d3:
c4:7b:e0:37:cb:3d:7e:1e:7f:11:52:51:9a:46:cd:
17:f4:ce:f0:59:98:75:0b:85:12:7c:ad:a0:0f:4d:
4e:34:ee:5c:11:8c:f3:19:87:af:53:b6:a4:e7:04:
c0:05:4c:1a:26:f0:56:b2:4c:ce:81:03:4c:66:92:
48:67:47:2a:0e:c9:38:d2:13:ea:31:fd:75:0c:03:
f6:3f:29:6f:e0:a6:6e:62:ae:0c:73:4a:b3:dd:5e:
47:21:4e:78:31:e7:d5:ca:7c:7c:d8:61:98:f8:fe:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:D0:D7:64:5A:EA:BC:E6:39:F8:34:49:B0:1B:F1:2A:97:32:87
X509v3 Authority Key Identifier:
keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:f8:f4:34:82:46:ba:fe:ba:a0:7d:35:4d:35:6b:dd:5e:
77:2c:06:82:bb:d6:6d:bf:7f:64:08:cb:26:06:f9:ae:74:c6:
9c:8f:e5:81:d3:fe:51:44:9a:f4:85:25:51:92:66:d0:3c:b8:
52:e4:30:d1:de:27:55:1a:98:5f:24:57:20:e1:b6:09:d7:0e:
4f:e5:a4:4d:1e:88:d9:3d:ff:f4:d8:10:b4:49:bb:ec:e6:91:
80:9f:75:59:5d:c0:88:43:66:d1:22:7e:dd:29:99:a2:9d:1c:
0a:5c:72:e4:f2:bf:a6:05:a0:8e:6a:60:1f:e7:3a:13:d6:50:
6d:85:72:94:97:1c:83:b0:23:bc:a4:da:0d:33:e3:b0:32:ce:
29:94:a1:6f:c0:ca:20:58:fb:b8:3d:01:cb:d7:21:37:b1:12:
b9:b7:08:02:46:96:41:aa:3b:e1:db:ac:3e:b8:e3:a4:4e:9f:
2a:cb:84:61:29:27:73:cf:a0:f2:fe:1d:9f:bc:d8:38:18:86:
f0:13:d5:df:11:1d:10:2d:6c:2a:e4:10:78:6d:4e:50:52:4b:
53:bc:5e:a4:91:8d:8b:d3:de:9a:04:79:d2:2b:a9:d3:80:c4:
61:7f:6b:f3:19:a5:12:cc:50:86:69:67:66:23:f2:d6:a1:d7:
28:35:a9:72
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJY4kxVKx8jVekuzx1cyoq2aaUmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFRDcxMDMxMzk0QUExNjcxNUYzRDAzRjI2NTcxNTI4
RjFBNkI3ODAeFw0yNjA3MjEwMjQ0MTdaFw0yNjA3MjIwNjQzMTdaMDMxMTAvBgNV
BAMTKDY4RUFEMEQ3NjQ1QUVBQkNFNjM5RjgzNDQ5QjAxQkYxMkE5NzMyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmWqyQZQjDonSUiZPCWyqOBn6
47SOPuC/D5COecU9ZgPHrGmlAX+4L5EaKz0qH2fEoazHeiBirhq+eNQGnZYj08hf
bzG5L9nK4XyuATKTv8vK7NNPBCY1UHbydYRx4h9YdKw39LsFh8ryh0lVtDhZuFwH
ISrxf9hdKZee5gqC9NwC+3j3G7sL0WIX/XjxsEBXBI/608R74DfLPX4efxFSUZpG
zRf0zvBZmHULhRJ8raAPTU407lwRjPMZh69TtqTnBMAFTBom8FayTM6BA0xmkkhn
RyoOyTjSE+ox/XUMA/Y/KW/gpm5irgxzSrPdXkchTngx59XKfHzYYZj4/jGfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaOrQ12Ra6rzmOfg0SbAb8SqXMocwHwYDVR0j
BBgwFoAUDe1xAxOUqhZxXz0D8mVxUo8aa3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjZkN2VkZTEtM2ZkMC00NjI0LWJlZjgtMGU3M2U4NDk5NGJjLzAvMERFRDcxMDMx
Mzk0QUExNjcxNUYzRDAzRjI2NTcxNTI4RjFBNkI3OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wREVENzEwMzEzOTRBQTE2NzE1RjNEMDNGMjY1NzE1MjhGMUE2
Qjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZkN2VkZTEtM2ZkMC00NjI0LWJl
ZjgtMGU3M2U4NDk5NGJjLzAvMERFRDcxMDMxMzk0QUExNjcxNUYzRDAzRjI2NTcx
NTI4RjFBNkI3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIk3+PQ0gka6/rqgfTVNNWvdXncsBoK71m2/
f2QIyyYG+a50xpyP5YHT/lFEmvSFJVGSZtA8uFLkMNHeJ1UamF8kVyDhtgnXDk/l
pE0eiNk9//TYELRJu+zmkYCfdVldwIhDZtEift0pmaKdHApccuTyv6YFoI5qYB/n
OhPWUG2FcpSXHIOwI7yk2g0z47AyzimUoW/AyiBY+7g9AcvXITexErm3CAJGlkGq
O+HbrD6446ROnyrLhGEpJ3PPoPL+HZ+82DgYhvAT1d8RHRAtbCrkEHhtTlBSS1O8
XqSRjYvT3poEedIrqdOAxGF/a/MZpRLMUIZpZ2Yj8tah1yg1qXI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:31 2026 by rpki-client