
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
File: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft (raw, json)
Hash identifier: ELFPiPaBcERGnDE//tHlYDLtnYxslSp34OfZoxX0kXE=
Subject key identifier: EF:CC:4F:F4:87:90:55:17:22:E9:4D:7E:F9:F1:C9:00:09:C2:7C:34
Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Certificate serial: 2457C40F8E72765520503BEE30687075F53DEA44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 05:29:33 +0000
Manifest this update: Wed 17 Jun 2026 05:24:33 +0000
Manifest next update: Thu 18 Jun 2026 06:40:33 +0000
Files and hashes: 1: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: 5JKbjJnU69SJlm4fg3FPZyCqBIfVS060Z1KnNVEVtkw=)
2: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: zV398UgRTlptT97Qc1/wsPkzfK97ViGntlsJokWgHgg=)
3: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: /GIxYy0vSq64HynAB2s2ChjySqHSwoYFUlMZoPK4jfs=)
4: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: +c41dutgFT2ZE2lEvbuAaTazQUEb6UW8ui2Kg7nMrVo=)
5: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: 5SgJA7bdr6raZ7Mqjwc8wZqhlg7dpVjh8FGcFa+U5rk=)
6: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: WVnSwWyfbHb1cF4zK3nfAh3+4mXKYVShqhzNFGYV1/4=)
7: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: O05Ps8hAd8rr0CaoB90NQsqUuO2fcg1LWgMOuLkP0To=)
8: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: +wm/VK77fHrWVU/ZkF+Uqbjn7YBt3NYF+N/EiT1H9LU=)
9: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: CqP8eUG+XNHe2ZRDBQbbiW1JHTmz7eUiEFlYMZh4rHY=)
10: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: 0HDp+vfD+4sT/TKrDDPYxk4/65tF4UinBvnW6pYSahU=)
11: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: Xtekq0XfiyDF84CgG01kPnBfk5gv3roxTAHumf4Y5lY=)
12: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: sk3ZxSGwRUSHyuGSOaKTetRq+YknC9DBGmC5NH67SNI=)
13: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: ysVciOe07++0v5Vr1hzLx8fA/0jTLiYdiUqf/6pXrkA=)
14: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: Z17KOPUimeqYA1aZq3SNkRhgncaUQxfgpGD5Ws+TmaM=)
15: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: 9y9riMr8hw8IaD+ig1yYTfIKYToP3AFvgLBOvq0dUqA=)
16: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: UT1h2LMTjTQJ7ZJ7JztoMi17EHjsbtJIUvBVi8DlKSo=)
17: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: RZNwhsdWPwHsJ1753q7l7RVtxdL0EUNu722JNRatZoc=)
18: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: VEWKVQt8y/8GPWkN8tAdK8b4mgUdgFzyKGEQfkduN98=)
19: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: b3pQDI/eP+0SwgVnsmQmkeZ1d2w8eSJ1YWWJnGvXDz8=)
20: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: gfbcpg+SVHwH5IjoNRXSMVdGISaiGt5LV1khyRPoF44=)
21: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: FpuosyUSWMTfhk1yjPzRRle4FSUaLD0RRnI3/i081xk=)
22: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: AMjnyAEfiOVxNwyzM8O6HXzZGTxkgyap27aKj3W6Skk=)
23: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: RgFmlKKxmL5ut1KmXAx7XdZwngIvPGxFdbg1RlK2QKc=)
24: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: R1kE9uKrZbeLkgzHC7e5BusLmDv674DkMdgzbBvwhAw=)
25: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: 8i1yDAIM/jiddL2Dyt3x+4fTdzbaN44q0VQUxOtuXgI=)
26: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: OzuliA2N8wNt6MGtPujtGB6U6rXsRoWhjjYaeaS0yAs=)
27: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: AzVrbmw1D35LXqWCeqtZ4xDM2Ov824Fl8I4Xi69Tl/A=)
28: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: oQlQCcGSIyApZwe0zh02JHB8NgdLlqCqb+hc+WKLBAk=)
29: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: 0dcMygO+Bc+TXcrUgmdBEdxgQ/GML+71SETcyrBroSo=)
30: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: QdXCuvjo6r6bGTPWedrJUM8DCfGtVmTE0qQwjHkmDQ4=)
31: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: bUiGB1W7Se2nx9Nc64eycOugCZo681BWG/duCoJZWeI=)
32: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: rrbo9gFfKTg6spECSvy8Q2yWG7nEl4xu5sTVFZ6rz7o=)
33: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl (hash: BIub+S782mvHbXsRjIIr/iXgqnoPKzq5dE1Lt41BNek=)
34: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: 1xZJhr0aQYYOOzMLyDygpRTMMvY7vsa9JEcRlTrt0Lw=)
35: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: cACJn3CN44BJInMN2D1DUzz5f/u9M8K8ZaV5c704i0c=)
36: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: OLNk+VWdGI1qmIPu8Drgqpmv6WGw5uCOToriZ5VHa9w=)
37: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 5IqA+aFlD3C+qm5E4iE8TertLT23UTTXA9Svn7QpuMk=)
38: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MuOtiRCK+tp6U+hzr1x3k/1BlmKfEwjNnXDtMTn3C54=)
39: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: LiXvBI/+0aSmpVLjojfaeEmHB07g7RdwE9fmn4IWLtc=)
40: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: HLJY57d7qqR9FiGfUIjlFjjQrGocl/3YC5fSm+HtD9U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:57:c4:0f:8e:72:76:55:20:50:3b:ee:30:68:70:75:f5:3d:ea:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Validity
Not Before: Jun 17 05:24:33 2026 GMT
Not After : Jun 18 06:40:33 2026 GMT
Subject: CN=EFCC4FF48790551722E94D7EF9F1C90009C27C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:14:6d:0f:ce:68:79:5d:0d:70:5f:91:b8:
66:82:12:cc:8b:9e:f2:25:08:68:09:6e:16:f8:2f:
17:c7:ad:e2:09:af:d7:98:f3:d2:ca:41:7e:b4:e6:
56:7b:44:d2:5a:2a:3a:b6:ee:47:4d:86:62:06:89:
44:ae:7a:eb:ba:8c:31:0b:95:63:ec:7f:ce:98:2e:
e3:da:f2:1e:73:39:b9:8f:3b:0f:95:9d:ea:bc:af:
58:b2:df:ab:8c:cc:3f:6f:5e:bf:b2:ce:89:9e:b3:
81:46:e8:5a:5a:82:e4:21:23:d2:72:90:28:c0:e5:
c2:36:a0:9a:eb:74:56:aa:ff:97:2f:8b:57:1d:28:
65:20:a4:c1:3f:92:8b:3b:f1:ca:a6:0a:3d:18:53:
cf:53:5b:2a:51:13:60:47:6f:de:a3:28:48:df:87:
cd:8c:f6:66:e5:c9:b7:ba:de:9c:28:70:26:f7:53:
c1:ae:10:8f:86:ed:41:19:bd:a8:05:e6:c9:56:52:
79:91:5c:88:0f:b9:ad:87:f6:7e:1d:d1:14:be:1c:
ac:ec:6f:f4:13:9d:2d:83:e4:44:17:f3:e8:8b:83:
16:cf:b3:39:a7:52:74:4d:07:ce:3e:f3:53:17:4d:
2b:ea:43:1e:f0:1d:e6:95:38:f8:5f:66:6f:06:51:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CC:4F:F4:87:90:55:17:22:E9:4D:7E:F9:F1:C9:00:09:C2:7C:34
X509v3 Authority Key Identifier:
keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6f:76:2f:32:b5:4d:3a:dd:f8:d4:85:48:04:95:55:7b:2c:
cf:62:92:97:8b:20:ec:d7:f6:d8:ae:c9:c4:57:e8:60:41:ee:
a8:0e:a2:22:ec:10:cb:49:88:b8:2c:3d:03:3d:e7:21:36:bd:
82:32:6c:62:3c:4f:c4:d9:ca:07:fd:27:88:22:68:b9:91:1c:
48:31:7e:65:f2:3c:27:6a:e7:f4:47:30:de:25:41:4d:28:fa:
a0:9c:92:29:e1:94:52:cc:00:e0:23:bc:e4:dc:c4:c3:52:6b:
f2:99:30:46:77:20:3c:c2:52:43:14:16:90:bf:14:21:92:b8:
d7:58:e6:98:e5:e9:cc:97:91:f9:8f:31:86:7a:03:5d:24:4a:
8e:ca:86:22:31:74:8d:85:1b:4f:6e:4f:dc:9e:24:2c:3a:1d:
f3:f0:0d:ca:52:60:9b:f7:ad:e7:a7:0b:39:33:ca:24:69:5a:
5b:64:5d:e1:a4:c1:f7:98:c1:9f:11:ce:72:17:f7:19:86:a8:
85:c2:97:f7:1a:2e:5e:02:c8:ba:80:ff:65:6a:10:a3:4e:b5:
2b:cd:16:05:05:4e:29:85:17:35:03:72:93:24:67:45:85:32:
0f:04:26:c2:7f:c1:75:83:ef:9e:60:36:ef:6f:ac:ca:ed:7b:
09:56:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:41 2026 by rpki-client