
$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft
File: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft (raw, json)
Hash identifier: fwOL2skPIQcnbYperNWHWptislrO3mxtyAyh6pVrMZ0=
Subject key identifier: 01:E6:83:03:8E:5D:52:FD:86:87:1A:8E:0D:D1:5F:70:DE:D4:35:DD
Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8
Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8
Certificate serial: D0305CA24CB36293B7A9FDC6E06FFC61FDE01C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 20:11:11 +0000
Manifest this update: Mon 20 Jul 2026 20:06:11 +0000
Manifest next update: Tue 21 Jul 2026 23:55:11 +0000
Files and hashes: 1: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: D+h8jX3eqkGKLtVhz2jT7gpvFEWVMRt52UNBLxkGJhs=)
2: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: wYag/KpQxcRCIm84mayvN/ce4e/42pmE6/MAHa5Gds8=)
3: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: /B7YofX/HHM+G+hIOgqx/c64KwEJiJwq2rpXtyQZ30I=)
4: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: RWX46rojpF6BQSm8l4yUodE90WBaf+wB8Y4OTAFQ4ME=)
5: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: 6v3qgdUIZjmuHWouV9dOsfbIOPcGM+FuLf4il05N+Ek=)
6: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: NhSbtQsCSZOcv410mYA+T/YK4xT0UEtgj3gs2YcEa4w=)
7: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl (hash: ceKHk4KpfeAyTNjQVPV/l972XQZajOSRXIjzXzLJBmg=)
8: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: hC0faeWGVogeaEgDmuTq2f3+pymLHliitj4mm9RD6Qs=)
9: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: iBvTknbLTgdzBBg6hpQI6nAp2/Y+ZQ/SghaasUfpG04=)
10: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: 7VINGDMY1TUq927w0s5kPc4NrKgys1/WpgtYsMIyWe4=)
11: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: oX8mmJjYFncLywEKonSF0YgdnGFD+ctQ155eJaCMAUg=)
12: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: GVZGNEwcVR+6b1iz+Mf+WaWQxD3aIC0LXDFgR27cdp0=)
13: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: hVmreBSejl8Ng95zD8+VjoKGoyOFeerqH52Ryd6nA/g=)
14: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: VeUuIEzR0KXaVdDKuIt8qmP7aqg4VDEFHLGvR21XwG0=)
15: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: lq8n0YPrI0ej0qKCbfOlpW4tTPmD0iFL3XzQMezYPDc=)
16: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: kX944U5wcZ4ljeI4U/N/cddY4+l6BlmIxGXHq+0AWLc=)
17: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: gQ+0Ncm6ouGfqCj99PO+6ljzB+BVgCECd3yhaahocOE=)
18: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: RJ17Dz/IGt6G1WroLkK6wHoimyT4sJSrPhTKtpoVzzk=)
19: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: qErBEzbgejKCSlR97tYuadzXafCvSPlaXArCcdt+yEg=)
20: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: 34GLqmPa0NzJ8OUNPh/1B0CyHBlCIeGKpKQ2WBBDdVw=)
21: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: cEoIyEjinxE4GnYC0CNRuXvF+WOLWNhACz4dP/4/xaU=)
22: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: ROBi78wuuDs1YynQRORSD7fsHhMgIofWSrauPO5cQ7U=)
23: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: GH9tET4mTW+/Gjc8WplZ0ASidCPn/60O8oLirXNQIgM=)
24: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: oABovF7KdDdlY6+CHjePOcttfLrt7gjFGQnN04lySCo=)
25: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: kC/BQJWqF3hfjk7jxki1g+71uLyOIxW8KkPPgVLxjeg=)
26: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: g/IwKgkLM3lX7TTfydNsuy1vblZAv0bCcFnenKOiWnI=)
27: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: 1173I/3m7XkzbM38lD89z6ZiTiudGSDgnrOXK0sI2OM=)
28: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: pXHANQSmeMdKKdoCjZbWQt7xD53ERPYITVt1C9zayGI=)
29: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: p9IaRw5dZMu/RqndUf94zxAMZ/T8mQiwgEQa5hTpOao=)
30: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: cPlZWqFm5MVvHANk5QwuMsGCvqASptrnxXG+efFGx5c=)
31: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: E4L4DC+KlZnlYuimMn7ht+nOkbQIJbr5xJR5o/xYX8Q=)
32: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: RC9a6LW/+eoJDdWzw8/UK2UNfYC2bIi6jAgj1aXZwfs=)
33: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: nUJ2UcMYUMgp2Ivw4oUIOzI0b/8YqU8NMhh0tUJGG8w=)
34: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: 7/h2zwvZrAQS0wAHrJy9NqwWiyEipm8MyD1COAfe2nQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl
rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 23:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d0:30:5c:a2:4c:b3:62:93:b7:a9:fd:c6:e0:6f:fc:61:fd:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8
Validity
Not Before: Jul 20 20:06:11 2026 GMT
Not After : Jul 21 23:55:11 2026 GMT
Subject: CN=01E683038E5D52FD86871A8E0DD15F70DED435DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:19:ed:11:20:42:ba:03:07:3c:4e:6a:18:
60:c5:c8:10:ae:41:43:a9:78:10:a0:90:cb:88:f1:
98:65:8c:64:7f:6a:5f:26:00:e8:fc:97:92:01:1c:
7b:b7:88:43:16:b3:f0:ef:aa:a8:07:29:28:13:70:
f1:9c:63:12:72:8d:d5:98:5a:dd:95:5a:fe:ad:b4:
73:38:79:8d:f5:5d:d8:9b:bf:37:7f:db:d1:f4:63:
72:09:0d:26:a7:f2:50:85:67:9f:a0:60:77:78:d8:
ff:a4:2d:21:ba:4a:a3:c8:74:f5:67:ba:10:00:47:
64:ef:16:58:b9:5c:f5:aa:2e:0f:0a:2c:74:83:1e:
0d:3b:1e:23:d7:c8:30:c3:80:3e:71:7c:19:a8:e1:
17:90:12:fe:44:24:4e:a2:17:3d:cc:e4:5b:8f:5e:
c3:82:a6:e3:af:10:62:b5:c3:46:8c:db:8b:ed:1d:
6f:1e:15:79:9e:30:0e:36:48:f6:0a:cf:ea:c7:5f:
90:f0:4a:55:f0:39:82:ed:91:61:f8:e5:b0:5a:e5:
e7:f5:6b:7a:37:00:24:02:ba:08:41:c4:66:01:c3:
dd:55:79:c8:c7:f4:1b:d6:2c:89:80:c9:5b:a1:a7:
be:e0:6e:e8:94:47:1e:e2:97:dc:1d:e0:c3:6b:30:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:83:03:8E:5D:52:FD:86:87:1A:8E:0D:D1:5F:70:DE:D4:35:DD
X509v3 Authority Key Identifier:
keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3f:d2:37:8b:91:34:06:9d:cf:60:67:6d:36:17:eb:54:9b:
2a:a9:e3:09:5b:e7:36:c2:db:3e:9a:1a:41:19:81:d3:73:0a:
9e:4d:d8:08:57:81:b8:2a:c5:3d:e4:af:22:14:8d:be:da:21:
a7:67:98:46:a1:5c:26:c1:21:1d:bf:92:49:f8:9a:ac:c3:29:
c9:f3:16:e3:62:8e:16:53:21:ce:75:c2:3c:5f:a3:09:4c:22:
67:38:c6:22:91:be:a9:d5:32:54:87:fd:27:7a:5a:04:1f:ed:
66:9d:e3:bc:df:67:30:b6:65:07:ae:63:7a:c7:a0:90:b1:c8:
6e:fb:3e:b0:98:61:4d:3e:8e:e2:92:0f:d0:5e:fa:58:2e:0f:
1e:e0:e5:60:fa:99:b9:88:f5:36:48:79:d2:d5:f8:4a:fa:8a:
da:31:89:f7:86:7a:96:ba:7e:45:c6:bd:48:70:1d:b0:af:65:
59:8a:e6:de:56:b8:a6:45:42:d3:d0:d0:5d:ed:d0:51:05:3c:
f5:2e:ef:d8:ab:be:39:4a:49:4c:20:5c:bf:54:b9:c6:96:fe:
4b:91:56:d4:ab:c5:d4:8e:5b:90:95:41:8f:f1:57:1d:f1:50:
7d:5f:c9:82:a3:69:46:45:5c:79:a0:31:7d:3e:b5:f8:6b:18:
ad:b2:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:17:33 2026 by rpki-client