
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
File: CB0A606FD0642E68B5212AE751953E0B9A92959F.mft (raw, json)
Hash identifier: Vj7+CMfXlncmpnfvDsF4yn+J25uqTWnc4utAgpDVUJk=
Subject key identifier: DC:C3:EF:95:CF:69:0D:FC:94:FD:29:A1:DD:CC:63:7D:05:82:4E:CE
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial: 23DF916E1F4AF741E5AA4703EFF09ADC324652DE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
Manifest number: 69
Signing time: Sun 19 Jul 2026 06:30:16 +0000
Manifest this update: Sun 19 Jul 2026 06:25:16 +0000
Manifest next update: Mon 20 Jul 2026 09:18:16 +0000
Files and hashes: 1: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: oXW42mmGQUgoWkxhSR0n+zgivDmIH7l+dG/1UKZo3a4=)
2: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: 2cmHQI8Ii2ZFNygrFMRrShrlpj0r3MxaKMXRFrpSYWY=)
3: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: ywl7AR88MYiWygarcTKtVBDK6lhCOvMO3Qakyf62g7s=)
4: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: c+MUV7F3nnYwWrux4q4qrlxJQ1ToGP6qwbUAs1FDJW0=)
5: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: W5LcKD4qmyridtk0HHxoc6aUkig5ncs0tdqV8KTXwMk=)
6: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: 38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=)
7: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: J+BYXWntjVPciAkV8uAI34vToZOhTHZAVg1OfJSHksA=)
8: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: Z9BOHD/0KrdQ2ipOJFVWwYLdiKLHdOuinxG+lCgyfSU=)
9: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fRTHSzlS/kkerP4SjyexReRSZRyzRj6VQ2sAHATlKhQ=)
10: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: pwtW5wr69XSa+qZr3l0EvDhYLbCZs1lpWX5AfsziilE=)
11: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: SV66tcdcW0NqPU/aqR6DolEDFMy8zRwKuiBnvzj6cUg=)
12: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: pmR02dkQafQv6lkZHXLfGyWNIfCNGG5yyCQI8aG1kiY=)
13: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=)
14: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: /7ofNppVXJF7mFM2WeV7e0wu+6LZLrIveqoSX8uAT6s=)
15: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: 2M+FnZ1ZBmMQrnhoHJr000wngHRS8OoEKdb0quE5URw=)
16: CB0A606FD0642E68B5212AE751953E0B9A92959F.crl (hash: XBwWTdraclqswr3aIJgJGklaBC1RtCe7JpLfCjTk0W4=)
17: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: NngQ0IQfUPOCY/8TWuIA/cVIqSFiTXs2casQNFQDWbs=)
18: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: YBmRyy3cm/KALp/wtAif41lJP/42XGDuyciPr2frXjE=)
19: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: zvyBHXFbCbQNnOHxvObPOxxpHvAaypqH5xRId3rVWNo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:df:91:6e:1f:4a:f7:41:e5:aa:47:03:ef:f0:9a:dc:32:46:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Validity
Not Before: Jul 19 06:25:16 2026 GMT
Not After : Jul 20 09:18:16 2026 GMT
Subject: CN=DCC3EF95CF690DFC94FD29A1DDCC637D05824ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:a9:a1:ad:bf:b3:eb:d7:33:4c:4c:93:cd:
9c:ac:95:90:66:61:f4:be:60:ad:d5:be:7a:af:41:
54:bb:ed:b9:02:6d:fb:f1:0e:fc:1c:e2:a8:d9:ca:
1f:5f:c8:91:93:6b:19:e8:29:90:c7:b5:be:dc:68:
ac:31:8f:95:f5:0c:50:e7:81:94:3d:78:e3:21:63:
dd:80:b7:c1:8a:b2:dd:95:d2:d8:e6:0c:55:b0:fd:
65:fb:8e:79:cf:64:fb:5b:72:e8:08:60:a0:06:32:
07:94:3e:0e:b9:79:4b:b5:85:6a:69:ca:fe:c7:eb:
80:af:f6:43:15:08:99:83:37:a5:8e:60:d7:b9:51:
65:a0:ac:81:4c:d8:78:7c:91:78:24:d2:b0:8d:16:
c1:43:21:f9:e7:21:f8:3e:bd:81:cf:76:9b:70:aa:
eb:a4:57:7f:44:c3:f6:e5:99:ae:40:01:b3:ec:ee:
71:d4:e3:2f:3c:34:7d:18:7a:1d:5c:c8:41:bc:04:
dd:86:59:78:48:7d:bf:ef:db:00:3d:88:b1:3f:81:
22:59:f1:e3:a0:70:fc:41:5e:ae:5a:6b:b3:b8:84:
c8:b6:54:2d:4f:0a:a9:32:31:37:85:d8:49:7b:c1:
39:c2:fd:62:8a:1b:dd:d8:51:bb:bd:6d:0d:c0:93:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:EF:95:CF:69:0D:FC:94:FD:29:A1:DD:CC:63:7D:05:82:4E:CE
X509v3 Authority Key Identifier:
keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:df:f8:16:92:a1:2f:97:ea:f5:be:aa:b8:39:24:c4:2c:bb:
e3:43:14:7b:b8:d4:74:1c:c1:2a:6e:92:d9:9b:5a:7e:2b:9d:
0c:d2:5d:2d:8a:01:78:27:00:73:37:b5:a1:6f:17:7f:4a:ee:
f7:f1:0d:ab:8f:6e:d8:c5:5a:42:ac:52:ea:8a:f5:34:22:b2:
03:9e:5f:e3:c4:6c:22:a0:1e:15:02:c4:c2:dd:cc:45:38:e2:
f6:a4:23:69:4f:da:64:a0:6d:fe:ae:3f:e2:af:4a:3d:6a:6f:
1f:56:9a:84:4a:7d:01:65:25:f4:5d:70:04:7a:97:4b:60:97:
8c:83:98:15:96:3c:64:c8:cc:a3:5a:f8:11:40:77:31:65:c8:
25:b9:94:77:9b:7c:62:c8:e7:a1:88:8a:93:d3:92:11:08:0d:
27:55:e8:75:e1:71:be:0a:aa:ef:c8:99:fa:fd:91:27:dd:5a:
27:77:9d:8d:23:5c:4c:6e:32:4c:18:ab:57:12:0b:a3:4f:1f:
a0:a4:bf:cf:a7:fe:c7:22:31:73:cc:fd:28:ef:a5:a3:11:47:
c7:a3:b7:64:a1:3d:eb:ca:b0:b9:8d:bf:89:94:98:e1:d0:e6:
5a:43:52:75:4e:a7:43:e2:65:ce:ed:94:bf:66:f5:d1:0c:e9:
06:78:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:51:41 2026 by rpki-client