
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
File: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft (raw, json)
Hash identifier: YM52hbxJRvNxUOovtpdaqY7Styk2Q3I/sc3rxZnS/wY=
Subject key identifier: 5A:77:F3:85:2F:1F:EE:A2:C2:39:49:7A:35:7B:9B:82:44:79:DE:34
Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Certificate serial: 38647CE7336B48656D73FA01F4B726C18FDCEE67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 16:44:50 +0000
Manifest this update: Wed 16 Sep 2026 16:39:50 +0000
Manifest next update: Thu 17 Sep 2026 20:41:50 +0000
Files and hashes: 1: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: gfbcpg+SVHwH5IjoNRXSMVdGISaiGt5LV1khyRPoF44=)
2: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: R1kE9uKrZbeLkgzHC7e5BusLmDv674DkMdgzbBvwhAw=)
3: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: 0HDp+vfD+4sT/TKrDDPYxk4/65tF4UinBvnW6pYSahU=)
4: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: +c41dutgFT2ZE2lEvbuAaTazQUEb6UW8ui2Kg7nMrVo=)
5: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: RgFmlKKxmL5ut1KmXAx7XdZwngIvPGxFdbg1RlK2QKc=)
6: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: /GIxYy0vSq64HynAB2s2ChjySqHSwoYFUlMZoPK4jfs=)
7: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: UT1h2LMTjTQJ7ZJ7JztoMi17EHjsbtJIUvBVi8DlKSo=)
8: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: oQlQCcGSIyApZwe0zh02JHB8NgdLlqCqb+hc+WKLBAk=)
9: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: AzVrbmw1D35LXqWCeqtZ4xDM2Ov824Fl8I4Xi69Tl/A=)
10: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: FpuosyUSWMTfhk1yjPzRRle4FSUaLD0RRnI3/i081xk=)
11: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: 0dcMygO+Bc+TXcrUgmdBEdxgQ/GML+71SETcyrBroSo=)
12: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 5IqA+aFlD3C+qm5E4iE8TertLT23UTTXA9Svn7QpuMk=)
13: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: Xtekq0XfiyDF84CgG01kPnBfk5gv3roxTAHumf4Y5lY=)
14: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: LiXvBI/+0aSmpVLjojfaeEmHB07g7RdwE9fmn4IWLtc=)
15: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: QdXCuvjo6r6bGTPWedrJUM8DCfGtVmTE0qQwjHkmDQ4=)
16: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: cACJn3CN44BJInMN2D1DUzz5f/u9M8K8ZaV5c704i0c=)
17: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: sk3ZxSGwRUSHyuGSOaKTetRq+YknC9DBGmC5NH67SNI=)
18: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: b3pQDI/eP+0SwgVnsmQmkeZ1d2w8eSJ1YWWJnGvXDz8=)
19: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl (hash: 7dKJx+Hz5D1eUygL9oL+ZJhExTMdRlyoeXW9X0nPLgE=)
20: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: VEWKVQt8y/8GPWkN8tAdK8b4mgUdgFzyKGEQfkduN98=)
21: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: OzuliA2N8wNt6MGtPujtGB6U6rXsRoWhjjYaeaS0yAs=)
22: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: 1xZJhr0aQYYOOzMLyDygpRTMMvY7vsa9JEcRlTrt0Lw=)
23: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: zV398UgRTlptT97Qc1/wsPkzfK97ViGntlsJokWgHgg=)
24: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MuOtiRCK+tp6U+hzr1x3k/1BlmKfEwjNnXDtMTn3C54=)
25: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: RZNwhsdWPwHsJ1753q7l7RVtxdL0EUNu722JNRatZoc=)
26: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: bUiGB1W7Se2nx9Nc64eycOugCZo681BWG/duCoJZWeI=)
27: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: AMjnyAEfiOVxNwyzM8O6HXzZGTxkgyap27aKj3W6Skk=)
28: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: WVnSwWyfbHb1cF4zK3nfAh3+4mXKYVShqhzNFGYV1/4=)
29: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: Z17KOPUimeqYA1aZq3SNkRhgncaUQxfgpGD5Ws+TmaM=)
30: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: 9y9riMr8hw8IaD+ig1yYTfIKYToP3AFvgLBOvq0dUqA=)
31: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: 5JKbjJnU69SJlm4fg3FPZyCqBIfVS060Z1KnNVEVtkw=)
32: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: +wm/VK77fHrWVU/ZkF+Uqbjn7YBt3NYF+N/EiT1H9LU=)
33: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: rrbo9gFfKTg6spECSvy8Q2yWG7nEl4xu5sTVFZ6rz7o=)
34: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: OLNk+VWdGI1qmIPu8Drgqpmv6WGw5uCOToriZ5VHa9w=)
35: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: 8i1yDAIM/jiddL2Dyt3x+4fTdzbaN44q0VQUxOtuXgI=)
36: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: HLJY57d7qqR9FiGfUIjlFjjQrGocl/3YC5fSm+HtD9U=)
37: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: ysVciOe07++0v5Vr1hzLx8fA/0jTLiYdiUqf/6pXrkA=)
38: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: CqP8eUG+XNHe2ZRDBQbbiW1JHTmz7eUiEFlYMZh4rHY=)
39: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: 5SgJA7bdr6raZ7Mqjwc8wZqhlg7dpVjh8FGcFa+U5rk=)
40: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: O05Ps8hAd8rr0CaoB90NQsqUuO2fcg1LWgMOuLkP0To=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:64:7c:e7:33:6b:48:65:6d:73:fa:01:f4:b7:26:c1:8f:dc:ee:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Validity
Not Before: Sep 16 16:39:50 2026 GMT
Not After : Sep 17 20:41:50 2026 GMT
Subject: CN=5A77F3852F1FEEA2C239497A357B9B824479DE34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:aa:42:dd:46:64:00:ac:cf:6e:34:de:ec:
7b:e5:d3:59:3f:2f:50:f4:1c:84:fd:2f:04:5d:39:
90:fb:7c:e2:08:c1:30:b4:64:46:b0:d2:55:af:ca:
73:1c:45:68:cd:3d:a8:40:82:07:b6:cb:a3:5a:eb:
70:3b:38:b5:95:77:f1:22:09:11:17:9f:43:ba:be:
77:77:d2:61:84:2e:5e:27:13:fa:6f:44:e0:bb:77:
f0:17:8b:e6:76:1e:df:6f:f4:0c:98:2a:52:ed:6e:
b2:29:ec:10:57:2f:1c:e7:89:df:c0:33:2c:c3:a7:
3a:19:3c:73:c5:a8:84:52:5c:c2:c8:e8:43:36:dd:
b2:4b:ca:80:e4:92:23:35:41:20:24:7c:6b:fa:a6:
7d:46:46:01:2f:d9:b1:87:2c:77:71:c5:fa:a1:e8:
45:ef:19:93:fa:22:d5:34:e7:22:e0:24:78:15:00:
3f:0d:0d:6d:cd:82:db:9f:39:df:63:8e:b1:2a:29:
5f:c7:05:36:e6:c2:dd:c0:e4:47:44:1b:14:ec:3a:
df:d9:03:75:ee:19:78:66:bb:aa:74:4e:16:f9:48:
77:69:ee:e9:1f:c2:5b:18:fe:31:eb:30:5c:75:80:
b4:dc:09:66:4d:97:d4:9e:09:76:e0:23:53:f0:8d:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:F3:85:2F:1F:EE:A2:C2:39:49:7A:35:7B:9B:82:44:79:DE:34
X509v3 Authority Key Identifier:
keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:b1:d3:82:a0:40:7a:35:17:01:8b:4d:e0:dc:f4:db:1e:
bf:f7:0c:60:17:49:16:12:c5:85:4b:ef:69:73:e6:64:9c:09:
d5:7c:bd:60:91:15:53:08:39:43:00:fe:e2:e3:7c:b4:28:be:
29:2c:68:ce:25:eb:99:67:46:eb:10:8d:6b:d5:ba:db:36:18:
45:fc:d6:0b:a7:86:81:40:73:40:1e:a0:87:88:b5:6b:c5:32:
bd:b1:ef:4e:d4:e2:16:d6:4b:a2:ca:c8:1d:2c:01:df:94:34:
c5:34:0f:cf:8f:cc:89:4a:14:09:c5:d2:68:1b:f8:e7:0f:15:
9a:15:47:ef:86:cb:5c:8b:c8:b1:39:4a:59:6b:3d:0e:80:d5:
32:af:2d:ed:78:40:c9:b7:35:68:c5:d5:d4:77:bf:53:18:6d:
40:92:e2:e3:bf:a5:77:9d:64:23:4d:8a:1c:e1:9b:02:72:20:
9e:7f:c2:6d:3b:d8:ef:48:bf:c0:90:02:b5:e5:bc:1b:d9:2a:
5c:63:5f:f5:00:e8:e2:ee:a4:99:7c:e7:5f:57:06:88:63:42:
17:ba:8d:59:39:27:34:22:e9:66:27:fd:65:3e:b6:91:e7:30:
7b:21:2e:39:7b:a2:fa:a7:ef:52:38:28:7c:4c:b6:58:e6:54:
1e:fa:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:11:15 2026 by rpki-client