
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
File: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft (raw, json)
Hash identifier: mOr5xlV7iCNVthSy2AlypiA/161b8K7pa5qNuGaJg9s=
Subject key identifier: 16:33:07:97:7C:D1:15:2A:DA:88:08:9A:07:DD:CE:38:57:EE:57:DB
Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Certificate serial: 64A7ACD5C9E9DED6FDE185EE5FB6869074908F28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 07:05:22 +0000
Manifest this update: Mon 21 Sep 2026 07:00:22 +0000
Manifest next update: Tue 22 Sep 2026 10:15:22 +0000
Files and hashes: 1: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: HLJY57d7qqR9FiGfUIjlFjjQrGocl/3YC5fSm+HtD9U=)
2: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: Xtekq0XfiyDF84CgG01kPnBfk5gv3roxTAHumf4Y5lY=)
3: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: AzVrbmw1D35LXqWCeqtZ4xDM2Ov824Fl8I4Xi69Tl/A=)
4: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: +wm/VK77fHrWVU/ZkF+Uqbjn7YBt3NYF+N/EiT1H9LU=)
5: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: LiXvBI/+0aSmpVLjojfaeEmHB07g7RdwE9fmn4IWLtc=)
6: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl (hash: 4dSBbI+0MGgmMuXaoRB1C3PF04epMYNLYORABKJCDNA=)
7: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: OLNk+VWdGI1qmIPu8Drgqpmv6WGw5uCOToriZ5VHa9w=)
8: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: 0HDp+vfD+4sT/TKrDDPYxk4/65tF4UinBvnW6pYSahU=)
9: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: AMjnyAEfiOVxNwyzM8O6HXzZGTxkgyap27aKj3W6Skk=)
10: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: rrbo9gFfKTg6spECSvy8Q2yWG7nEl4xu5sTVFZ6rz7o=)
11: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MuOtiRCK+tp6U+hzr1x3k/1BlmKfEwjNnXDtMTn3C54=)
12: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: 8i1yDAIM/jiddL2Dyt3x+4fTdzbaN44q0VQUxOtuXgI=)
13: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: CqP8eUG+XNHe2ZRDBQbbiW1JHTmz7eUiEFlYMZh4rHY=)
14: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: /GIxYy0vSq64HynAB2s2ChjySqHSwoYFUlMZoPK4jfs=)
15: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: bUiGB1W7Se2nx9Nc64eycOugCZo681BWG/duCoJZWeI=)
16: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: O05Ps8hAd8rr0CaoB90NQsqUuO2fcg1LWgMOuLkP0To=)
17: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: gfbcpg+SVHwH5IjoNRXSMVdGISaiGt5LV1khyRPoF44=)
18: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: WVnSwWyfbHb1cF4zK3nfAh3+4mXKYVShqhzNFGYV1/4=)
19: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: sk3ZxSGwRUSHyuGSOaKTetRq+YknC9DBGmC5NH67SNI=)
20: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: QdXCuvjo6r6bGTPWedrJUM8DCfGtVmTE0qQwjHkmDQ4=)
21: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: Z17KOPUimeqYA1aZq3SNkRhgncaUQxfgpGD5Ws+TmaM=)
22: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: 0dcMygO+Bc+TXcrUgmdBEdxgQ/GML+71SETcyrBroSo=)
23: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: UT1h2LMTjTQJ7ZJ7JztoMi17EHjsbtJIUvBVi8DlKSo=)
24: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: 1xZJhr0aQYYOOzMLyDygpRTMMvY7vsa9JEcRlTrt0Lw=)
25: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: 5JKbjJnU69SJlm4fg3FPZyCqBIfVS060Z1KnNVEVtkw=)
26: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: FpuosyUSWMTfhk1yjPzRRle4FSUaLD0RRnI3/i081xk=)
27: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: RZNwhsdWPwHsJ1753q7l7RVtxdL0EUNu722JNRatZoc=)
28: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: R1kE9uKrZbeLkgzHC7e5BusLmDv674DkMdgzbBvwhAw=)
29: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 5IqA+aFlD3C+qm5E4iE8TertLT23UTTXA9Svn7QpuMk=)
30: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: OzuliA2N8wNt6MGtPujtGB6U6rXsRoWhjjYaeaS0yAs=)
31: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: RgFmlKKxmL5ut1KmXAx7XdZwngIvPGxFdbg1RlK2QKc=)
32: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: VEWKVQt8y/8GPWkN8tAdK8b4mgUdgFzyKGEQfkduN98=)
33: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: ysVciOe07++0v5Vr1hzLx8fA/0jTLiYdiUqf/6pXrkA=)
34: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: +c41dutgFT2ZE2lEvbuAaTazQUEb6UW8ui2Kg7nMrVo=)
35: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: zV398UgRTlptT97Qc1/wsPkzfK97ViGntlsJokWgHgg=)
36: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: b3pQDI/eP+0SwgVnsmQmkeZ1d2w8eSJ1YWWJnGvXDz8=)
37: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: 9y9riMr8hw8IaD+ig1yYTfIKYToP3AFvgLBOvq0dUqA=)
38: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: cACJn3CN44BJInMN2D1DUzz5f/u9M8K8ZaV5c704i0c=)
39: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: 5SgJA7bdr6raZ7Mqjwc8wZqhlg7dpVjh8FGcFa+U5rk=)
40: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: oQlQCcGSIyApZwe0zh02JHB8NgdLlqCqb+hc+WKLBAk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a7:ac:d5:c9:e9:de:d6:fd:e1:85:ee:5f:b6:86:90:74:90:8f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Validity
Not Before: Sep 21 07:00:22 2026 GMT
Not After : Sep 22 10:15:22 2026 GMT
Subject: CN=163307977CD1152ADA88089A07DDCE3857EE57DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:6f:92:a9:3d:37:4f:85:d4:ca:1f:e9:8a:
d0:bd:60:39:21:ed:9c:97:b6:88:55:8c:09:de:9c:
ef:bf:3b:67:1e:f8:7f:0b:4b:e4:dd:70:df:d4:13:
fd:25:dd:e9:2a:ca:3c:38:1f:73:8a:58:d2:b2:0c:
f5:cb:69:0f:38:19:81:3a:2e:0a:fb:b3:6a:c1:91:
a7:43:a7:78:9c:76:70:ac:b7:77:af:be:0c:7d:0b:
b1:c0:f2:17:e6:7c:90:e5:a7:e7:62:e3:bf:26:3a:
82:64:0f:91:c5:08:d7:bc:54:af:3a:86:50:2e:23:
a5:2d:a6:01:d0:50:e0:89:8a:c2:04:e1:96:d0:2b:
56:4e:90:14:d7:2b:f7:22:d8:60:d8:4a:ae:4c:1c:
cc:89:00:f5:47:2d:d9:79:02:de:46:95:fd:96:36:
d4:00:72:7b:e1:17:b8:0c:97:00:f3:2c:a5:21:77:
a6:34:7f:d8:26:6c:aa:7b:c0:ab:6e:cf:53:27:b6:
9d:83:5b:ed:ca:f1:24:6a:05:b4:f6:37:65:a9:9c:
ce:bb:e3:2a:b8:ed:81:a6:62:5b:db:21:f7:b0:c0:
f7:b8:ea:39:cd:87:47:1c:08:57:5b:e4:db:30:34:
0c:f5:f0:49:c4:3e:7b:c6:0e:f9:50:6e:f0:58:3d:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:33:07:97:7C:D1:15:2A:DA:88:08:9A:07:DD:CE:38:57:EE:57:DB
X509v3 Authority Key Identifier:
keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9c:25:bb:be:c6:03:4a:bb:bc:57:09:dc:0f:12:1a:10:87:
b8:5a:4f:b3:52:1f:9b:55:46:52:74:e7:35:e8:72:72:3f:3a:
4e:a1:46:96:f2:4c:7f:f6:1c:6f:ec:60:83:d2:15:03:c8:fe:
d4:2e:da:43:26:ea:b9:0e:8b:ec:2b:dd:7b:be:ac:0e:0c:c7:
fb:6f:14:4a:b1:8f:cc:07:bf:e9:cd:b0:9d:77:d7:97:1e:77:
d5:4f:71:99:02:5b:1a:18:73:a4:f6:06:86:a5:ce:18:8e:17:
95:2a:cd:f7:34:6d:28:96:fd:0c:a6:59:92:39:d1:3d:9b:2b:
78:02:ee:06:32:11:bf:d6:f4:07:10:12:6b:a7:4d:69:70:3e:
46:1f:cf:93:2d:59:f2:b2:47:6b:68:30:a4:06:14:fa:87:bf:
e1:f3:37:f0:f3:c2:97:b9:7f:a5:6d:bc:8d:15:2b:e6:f0:df:
19:55:d0:ab:8d:fa:c6:ab:8f:92:22:98:33:72:99:c4:f4:0b:
62:4e:13:03:b4:5b:df:9c:fe:25:77:da:2d:f7:37:d9:83:24:
f4:9c:3a:18:b3:5e:9b:e2:87:c0:4c:19:bb:82:7d:21:98:ec:
e6:77:76:7b:01:5d:0c:56:75:81:2a:31:cc:83:47:14:d6:4c:
10:76:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:59:08 2026 by rpki-client