
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
File: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft (raw, json)
Hash identifier: 3/aLY4dBMHRiOyE1GrnNZ1MuROOuv8I4cpNTEwWGmys=
Subject key identifier: A0:7D:9D:59:42:92:7D:DC:13:74:18:EA:A9:EE:8C:E5:21:9B:24:48
Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Certificate serial: 714501F240AEA1D19CB7BF37D2E6D0CE6B571A46
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 00:16:08 +0000
Manifest this update: Tue 21 Jul 2026 00:11:08 +0000
Manifest next update: Wed 22 Jul 2026 01:34:08 +0000
Files and hashes: 1: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: 9y9riMr8hw8IaD+ig1yYTfIKYToP3AFvgLBOvq0dUqA=)
2: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: Xtekq0XfiyDF84CgG01kPnBfk5gv3roxTAHumf4Y5lY=)
3: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: sk3ZxSGwRUSHyuGSOaKTetRq+YknC9DBGmC5NH67SNI=)
4: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: R1kE9uKrZbeLkgzHC7e5BusLmDv674DkMdgzbBvwhAw=)
5: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 5IqA+aFlD3C+qm5E4iE8TertLT23UTTXA9Svn7QpuMk=)
6: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: 0HDp+vfD+4sT/TKrDDPYxk4/65tF4UinBvnW6pYSahU=)
7: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: +c41dutgFT2ZE2lEvbuAaTazQUEb6UW8ui2Kg7nMrVo=)
8: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl (hash: 5aMeCylK1u8h+coZGEIoWkekCX+tWB0DdVNger4ytno=)
9: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: AzVrbmw1D35LXqWCeqtZ4xDM2Ov824Fl8I4Xi69Tl/A=)
10: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: WVnSwWyfbHb1cF4zK3nfAh3+4mXKYVShqhzNFGYV1/4=)
11: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: +wm/VK77fHrWVU/ZkF+Uqbjn7YBt3NYF+N/EiT1H9LU=)
12: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: /GIxYy0vSq64HynAB2s2ChjySqHSwoYFUlMZoPK4jfs=)
13: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MuOtiRCK+tp6U+hzr1x3k/1BlmKfEwjNnXDtMTn3C54=)
14: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: oQlQCcGSIyApZwe0zh02JHB8NgdLlqCqb+hc+WKLBAk=)
15: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: 5JKbjJnU69SJlm4fg3FPZyCqBIfVS060Z1KnNVEVtkw=)
16: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: ysVciOe07++0v5Vr1hzLx8fA/0jTLiYdiUqf/6pXrkA=)
17: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: HLJY57d7qqR9FiGfUIjlFjjQrGocl/3YC5fSm+HtD9U=)
18: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: VEWKVQt8y/8GPWkN8tAdK8b4mgUdgFzyKGEQfkduN98=)
19: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: AMjnyAEfiOVxNwyzM8O6HXzZGTxkgyap27aKj3W6Skk=)
20: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: FpuosyUSWMTfhk1yjPzRRle4FSUaLD0RRnI3/i081xk=)
21: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: CqP8eUG+XNHe2ZRDBQbbiW1JHTmz7eUiEFlYMZh4rHY=)
22: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: 1xZJhr0aQYYOOzMLyDygpRTMMvY7vsa9JEcRlTrt0Lw=)
23: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: cACJn3CN44BJInMN2D1DUzz5f/u9M8K8ZaV5c704i0c=)
24: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: zV398UgRTlptT97Qc1/wsPkzfK97ViGntlsJokWgHgg=)
25: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: RZNwhsdWPwHsJ1753q7l7RVtxdL0EUNu722JNRatZoc=)
26: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: bUiGB1W7Se2nx9Nc64eycOugCZo681BWG/duCoJZWeI=)
27: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: b3pQDI/eP+0SwgVnsmQmkeZ1d2w8eSJ1YWWJnGvXDz8=)
28: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: 8i1yDAIM/jiddL2Dyt3x+4fTdzbaN44q0VQUxOtuXgI=)
29: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: LiXvBI/+0aSmpVLjojfaeEmHB07g7RdwE9fmn4IWLtc=)
30: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: gfbcpg+SVHwH5IjoNRXSMVdGISaiGt5LV1khyRPoF44=)
31: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: OLNk+VWdGI1qmIPu8Drgqpmv6WGw5uCOToriZ5VHa9w=)
32: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: UT1h2LMTjTQJ7ZJ7JztoMi17EHjsbtJIUvBVi8DlKSo=)
33: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: Z17KOPUimeqYA1aZq3SNkRhgncaUQxfgpGD5Ws+TmaM=)
34: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: O05Ps8hAd8rr0CaoB90NQsqUuO2fcg1LWgMOuLkP0To=)
35: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: rrbo9gFfKTg6spECSvy8Q2yWG7nEl4xu5sTVFZ6rz7o=)
36: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: RgFmlKKxmL5ut1KmXAx7XdZwngIvPGxFdbg1RlK2QKc=)
37: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: 5SgJA7bdr6raZ7Mqjwc8wZqhlg7dpVjh8FGcFa+U5rk=)
38: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: QdXCuvjo6r6bGTPWedrJUM8DCfGtVmTE0qQwjHkmDQ4=)
39: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: OzuliA2N8wNt6MGtPujtGB6U6rXsRoWhjjYaeaS0yAs=)
40: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: 0dcMygO+Bc+TXcrUgmdBEdxgQ/GML+71SETcyrBroSo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 01:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:45:01:f2:40:ae:a1:d1:9c:b7:bf:37:d2:e6:d0:ce:6b:57:1a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Validity
Not Before: Jul 21 00:11:08 2026 GMT
Not After : Jul 22 01:34:08 2026 GMT
Subject: CN=A07D9D5942927DDC137418EAA9EE8CE5219B2448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:e9:76:1b:a4:d0:ae:eb:73:eb:a6:e9:19:
0c:73:ca:01:d5:3f:aa:97:9a:69:ce:80:9d:62:53:
43:ad:11:a3:14:3a:29:a7:a3:72:21:28:cd:20:29:
4e:ad:94:30:8e:ad:d8:32:49:f4:f9:b7:50:f9:1d:
24:57:c7:a9:26:ba:a5:55:fc:ea:76:44:56:e5:41:
3e:4b:d5:5d:67:24:92:aa:59:e5:95:ae:1d:5e:61:
a0:ff:e2:f4:ec:95:47:00:e2:2b:00:f8:ec:da:85:
99:ae:d9:62:59:b5:a2:9d:4d:47:3c:46:8c:f8:1c:
f5:70:57:8e:00:47:44:75:97:05:a8:a0:0e:ee:a4:
09:d2:9b:f5:3d:4d:df:6b:2a:bd:04:0d:0e:87:fe:
06:3f:33:93:d2:6e:e3:28:4f:da:d8:d5:2a:29:a0:
3f:76:d8:43:df:31:a9:34:52:06:ee:c3:f4:01:74:
a6:8b:fb:96:24:e2:10:ce:fc:07:d4:0f:3f:0e:64:
6d:35:f0:ec:d4:4d:9b:1a:a8:cf:95:ad:5c:85:17:
83:f9:2f:9e:0c:c6:cb:5c:35:21:e8:47:1a:52:d4:
a8:60:f5:b6:77:fa:bc:c9:b3:e5:b7:6b:41:a9:47:
19:23:24:c3:44:d4:cf:ba:a3:c9:aa:44:87:12:76:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7D:9D:59:42:92:7D:DC:13:74:18:EA:A9:EE:8C:E5:21:9B:24:48
X509v3 Authority Key Identifier:
keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c3:09:db:78:51:f6:a0:f0:6a:7c:5c:1f:3f:8d:4c:68:a1:
24:07:32:81:df:fe:21:48:ca:7e:1d:81:42:99:a7:e8:d2:c0:
46:92:32:6c:86:93:34:de:6e:2a:a7:5c:65:64:fb:c7:18:1c:
c5:42:b2:54:01:e8:4d:cc:22:4e:4d:7f:45:7b:95:35:db:bf:
e0:12:41:7b:f1:01:63:c8:a7:89:bf:6e:f1:41:1d:51:f7:90:
33:e3:d1:0c:5c:35:40:16:c0:0c:33:18:6c:5a:fb:0c:94:4e:
f0:af:2a:13:d6:d1:3e:71:5b:c9:be:bb:6f:4e:51:fc:77:53:
8e:05:1e:f3:75:ae:c8:c6:51:8f:20:c5:65:1e:db:ca:03:b9:
d9:5e:77:97:ae:5e:52:1e:77:81:7c:82:e8:74:39:3a:3c:d2:
79:2d:ad:ee:b5:8b:a5:21:e0:0d:e0:47:c9:b5:6c:24:b0:d8:
0a:8d:98:a5:56:1a:bf:ad:d6:8f:b1:b6:7d:f7:b5:e4:97:41:
a9:42:09:3e:81:44:66:30:ee:9c:fc:52:77:a0:5d:da:66:b2:
1c:0c:ab:ee:c0:9b:9f:96:f2:25:95:af:2c:0b:4d:90:ee:be:
3f:73:40:5b:31:dd:be:c2:95:28:9b:4f:52:7c:cf:9a:0e:08:
53:22:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:46:13 2026 by rpki-client