
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
File: 207EA811568CF1DB9A757936B650F6F68EBB08B5.mft (raw, json)
Hash identifier: jjhAPBKJwaeX/k0wzdnvb30EFEYpvAYM6Bd/OHknwag=
Subject key identifier: AA:08:81:F0:E2:12:58:5F:8D:B0:94:7A:38:30:77:36:82:59:FF:AC
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 7C1DBDF77F552F62B25FEC8B949ECE1B0FC53431
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 18:39:31 +0000
Manifest this update: Tue 22 Sep 2026 18:34:31 +0000
Manifest next update: Wed 23 Sep 2026 20:46:31 +0000
Files and hashes: 1: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=)
2: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=)
3: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: NON+2mKqUMP5nxNEYTSRYXBctaTyrQBZDGBl/+tv7Iw=)
4: 207EA811568CF1DB9A757936B650F6F68EBB08B5.crl (hash: YJVfEg4n54zpM5le1RLmJRJsaMFyzsK2ChcDKyXQ96U=)
5: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: YdojAte0DabKD9U31MLajmNX2Ade2ItCQ0uOXVTExGw=)
6: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: zZnfuS7x4B3IbMWwGHUKAscPUAhTdq47Ud12yvcyTws=)
7: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U=)
8: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: yp9LgKk0vpVLD1ssSi3ZMXSFOq3JC5q5meA5QQuObAo=)
9: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: kk/YLt9sOibq+Ehirb8Tv+ujtGYKVYXNjuOikBMvvf4=)
10: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98=)
11: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=)
12: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw=)
13: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: g+arXZ/+W18ln97mYgZBk8E2/DdTLNyMPheE+2x0Cuc=)
14: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yk4mIGPQKduAZWFcwjNTu/2gsTuXAS4f5Gm0DqPPeQM=)
15: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: pA4m3YcDohtyW2KH722N1KPWI/anmYo+9ayJjEcxchg=)
16: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: JAv/L1Ca/rOAR83XrzqT+QKIkZeHE06/YMr97eIGL/8=)
17: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: P/jDOIqhS8TYGh1HRra14jw9lZ/QNU3dPScct8NOxRA=)
18: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=)
19: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: mhO206C5MCEo68TF6ww7+81+IS3YTnFs3GIVpnP+S28=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 17:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:1d:bd:f7:7f:55:2f:62:b2:5f:ec:8b:94:9e:ce:1b:0f:c5:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: Sep 22 18:34:31 2026 GMT
Not After : Sep 23 20:46:31 2026 GMT
Subject: CN=AA0881F0E212585F8DB0947A383077368259FFAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:31:cd:36:d2:5f:d8:ed:88:9d:15:d6:35:
cd:2d:fd:0f:e8:25:75:b6:0f:b0:c5:47:38:ca:f4:
4c:4b:9d:4a:8a:53:c3:1d:26:d4:ef:92:af:01:69:
38:8c:76:8b:16:b4:59:ef:e4:49:9f:fe:76:df:14:
65:35:08:7d:1e:3b:49:15:79:25:8d:91:4b:e1:cb:
ff:c8:ef:4d:05:ca:98:88:2d:9b:aa:39:f9:dd:9e:
fe:9d:f3:64:d4:8a:3f:07:cc:d4:ac:d2:2c:24:f9:
b1:e4:c4:30:d2:27:f5:91:79:ea:fa:cb:7c:93:de:
5e:48:c1:50:60:d0:1d:83:b1:ec:2f:ea:63:ed:f8:
13:5f:d1:31:b0:ab:b0:59:cb:9f:9a:d0:f9:49:20:
a3:17:e9:99:b2:98:ec:3b:93:66:64:3e:ce:0a:a9:
c3:d3:11:ad:d1:78:3a:be:6b:46:a0:38:44:44:bd:
17:98:85:9a:2d:c4:02:02:14:fd:72:b5:b8:59:6a:
6a:69:d4:54:a4:15:d4:82:8d:6e:b0:56:ff:17:5b:
89:fb:b3:ad:72:f0:fc:af:59:ea:d0:26:9b:51:f9:
71:9d:f5:56:74:e0:2e:34:02:1d:71:ac:a7:6e:e0:
7e:77:b8:20:1c:aa:44:40:7f:fc:ce:f4:5c:b6:67:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:08:81:F0:E2:12:58:5F:8D:B0:94:7A:38:30:77:36:82:59:FF:AC
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d3:cf:52:35:e0:48:33:78:b8:f9:bc:e0:70:10:c8:3e:19:
1b:2b:86:9f:d6:2b:9c:a0:c2:35:50:ba:fe:ac:13:44:2b:10:
64:19:b3:61:35:bf:84:62:2d:80:02:19:ff:ca:45:5b:59:66:
3b:d5:3b:74:44:ef:7b:53:a1:a1:de:b0:ae:85:93:21:51:8c:
cc:56:e3:6d:7d:c9:ff:6c:68:c2:d9:82:f3:99:0a:f0:90:fd:
e7:96:ca:69:aa:9f:06:25:82:75:e5:46:56:b0:c9:8b:6b:88:
3e:9b:26:20:0e:c1:77:5b:2a:94:12:06:44:43:5f:62:9d:ae:
33:91:f3:4f:7a:00:cb:b0:47:43:80:64:bb:cf:d1:6b:31:5a:
80:23:c4:af:43:45:2d:34:e6:14:47:41:e4:73:c5:ac:48:37:
b8:db:9c:ad:f0:7e:e4:11:22:a3:f0:10:12:f5:c7:2e:2a:9f:
9c:14:84:d8:c6:2a:37:06:b0:6d:58:80:2c:16:24:2e:88:4f:
46:0c:60:49:02:07:f7:6b:e0:46:16:13:bd:fa:7d:40:1d:30:
97:5f:fb:41:cf:ca:a9:af:46:88:80:2f:10:42:66:27:e3:a6:
95:df:68:fa:17:ca:42:d7:1e:97:7f:7b:f8:5c:a7:76:70:a3:
fb:99:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:38:45 2026 by rpki-client