
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
File: 0DED71031394AA16715F3D03F26571528F1A6B78.mft (raw, json)
Hash identifier: xWDcpi1KmPaisHZiSSr3Qb8Aljh95ruK1G8H19VgefA=
Subject key identifier: 79:C7:0C:2B:38:AF:5E:72:68:2B:A7:84:1C:35:0B:70:D4:63:A0:AE
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Certificate issuer: /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial: 50094AF71A47C1E9A4A59A52C0053AF87DECF023
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
Manifest number: C0
Signing time: Mon 21 Sep 2026 23:10:27 +0000
Manifest this update: Mon 21 Sep 2026 23:05:27 +0000
Manifest next update: Tue 22 Sep 2026 23:41:27 +0000
Files and hashes: 1: 3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (hash: AsGbw0cbRJMt+AHYBFh8GsmxUOZcTvqzv4dYjEpLqWI=)
2: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (hash: +ZnAeFJoXHPh+xq3xuSvRbcR94NVVsIzNuYlIiCcSpQ=)
3: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (hash: GK7JrFFTMtRaVSiXERiAUwR8S0jPiNQeuHLwltAd/4o=)
4: 323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (hash: pL+bPlRYYQGeiYZEexp0fc0F/PP7A+oMtImtipkVLIE=)
5: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (hash: dbjeUfofaAZBLKBCceZ22YQLnJ60T/u4G98K58+vimo=)
6: 3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (hash: 8WhM2jfK6A9eXDQHoiLc7iWdsFkOi6rmzW7WT+47mh8=)
7: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (hash: VsyONkSurv+9TahILF/1bYqHX84Y5bFx2pjIHaiSJGI=)
8: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (hash: OfeOZDKtwz07hp7cEfgVVGzrjch6eyioJUOXZr6UY1A=)
9: 3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (hash: +P/AMngDtPsWOGxlH3Mr6PlyfaGk41zvE2zQOV1G0jQ=)
10: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (hash: fW/MYh09AaNNODsolkt0n1TRKWiUESamqS4145FgwBo=)
11: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (hash: WknzV8Nu8IMTlOIi8o8zGv3PuOd24Q9LnQo6SQwKlsg=)
12: 0DED71031394AA16715F3D03F26571528F1A6B78.crl (hash: QLmnCqJbiaOQ7vuFPIxJtGNWXET/2qV+JAou3cov8yM=)
13: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (hash: T2d/1dANpMVbfsrDZMQgMJnfjqw3B5RFvLZjQM+Maic=)
14: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (hash: YUzbLQ5j/NrlJLr3BA5MdjrGyteXCKBcOA9XM5EndXY=)
15: 323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (hash: 6MK3BTfSdOqMu7uDUlMlrcofKxmm7ND7Ppxbk9itFD8=)
16: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (hash: 7SOOVpEkvhM8jKS5ml9tavuy6fhlwX85TRg6uRnySPg=)
17: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (hash: 6P/gtrzHwkH3kENiz3/is/cjoDAJlGYuJTJreGDj0WI=)
18: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (hash: skBT3RdnJ+CBUwElmxoesrXpDa/Pn3QhE5o4dAxByQo=)
19: 323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (hash: AVqen3U0gUyXJ0Gc/rcGvSgOXqlzI++3CxMMEOAo30Q=)
20: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (hash: OcytzAOerPcWTuVnLCz3It1QvJ1fzJzeOWmkkXqipNY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 23:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:09:4a:f7:1a:47:c1:e9:a4:a5:9a:52:c0:05:3a:f8:7d:ec:f0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
Validity
Not Before: Sep 21 23:05:27 2026 GMT
Not After : Sep 22 23:41:27 2026 GMT
Subject: CN=79C70C2B38AF5E72682BA7841C350B70D463A0AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:26:32:cb:ac:0c:98:54:96:de:ae:ac:7c:
6d:05:b3:26:45:33:15:a2:cb:b3:6c:21:da:67:30:
ca:b9:1a:3c:24:89:07:e8:1d:ee:43:4e:c0:1c:d2:
77:68:93:4d:70:79:a5:50:ff:11:5b:ad:74:4b:a6:
20:46:5d:8c:7f:d0:47:03:3d:2c:11:fa:28:67:3f:
1a:3f:35:ae:19:48:5f:4e:70:2e:80:80:9a:49:ee:
0a:84:5d:77:84:ee:38:d5:17:5c:e2:57:fa:ef:65:
d3:3f:7c:8f:42:73:d4:0a:47:c7:97:43:ef:e3:cb:
12:fb:1e:a5:e5:0b:fd:4b:1d:1e:2f:0e:8b:9a:81:
a5:43:91:89:03:59:23:33:0c:0f:a9:25:14:5c:64:
62:fc:4a:a2:c1:fd:dc:4d:ca:c5:df:3c:54:3f:1b:
b5:87:69:35:c9:91:7b:51:cd:2e:f2:02:a5:fa:0b:
f4:88:5c:04:96:7d:48:ac:e7:50:9c:d1:8b:31:4b:
1f:6f:49:72:67:15:81:4f:fe:9c:9e:c3:b8:13:45:
43:76:e0:09:a4:30:c4:34:c7:df:c0:ef:40:42:44:
90:92:ce:47:1e:a0:5e:86:0f:04:90:62:47:0b:cd:
15:e2:7f:06:61:a5:d6:99:b5:2a:75:c4:8e:84:8f:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C7:0C:2B:38:AF:5E:72:68:2B:A7:84:1C:35:0B:70:D4:63:A0:AE
X509v3 Authority Key Identifier:
keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2e:29:dd:55:3b:49:e8:d9:c4:99:0f:4f:c0:c1:00:15:74:
f4:f9:53:25:62:ee:24:59:cb:f9:77:2d:97:a1:a3:a8:76:e2:
b7:b0:db:51:00:8e:63:da:e3:33:70:71:56:df:e8:39:28:5c:
8e:a7:39:aa:0d:c3:19:ea:d2:90:b7:39:59:d9:d8:6e:77:fa:
b8:78:0b:98:18:6f:4b:e1:33:ab:8f:4d:42:1a:52:30:fd:b4:
dc:7b:14:8c:7b:bf:af:8a:5a:1a:c9:2c:c0:7d:97:ea:b8:e5:
47:22:59:30:94:a4:54:a3:35:0f:77:07:9e:80:a5:9f:51:05:
a8:d2:f6:96:69:93:30:bb:f3:6b:11:e8:5f:26:4e:d7:c8:b2:
b9:2f:52:ee:49:c2:24:24:cb:91:83:5f:96:61:7e:ab:88:44:
d6:ba:48:d0:e7:c2:d4:0d:74:b2:08:02:ab:01:2b:10:da:f3:
b6:07:f8:63:0c:29:83:ba:78:51:5b:01:de:70:53:8e:21:b8:
95:e1:3a:98:8f:54:3e:68:ea:04:44:10:ef:36:dc:c7:e2:c9:
ac:35:6c:44:18:d5:fd:fb:c8:32:0e:51:25:48:60:6d:42:76:
e3:9c:db:29:18:19:b7:19:2e:5d:49:98:b8:36:14:fa:a1:98:
d0:ed:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:11:18 2026 by rpki-client