
$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
File: 207EA811568CF1DB9A757936B650F6F68EBB08B5.mft (raw, json)
Hash identifier: navX3S+ZHWGd8ehnFjkiaFMQUF03TWCAl8klszK7zTg=
Subject key identifier: B4:B8:E2:ED:AB:DA:89:16:C4:4E:36:A2:16:82:EE:FB:99:EC:09:E2
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 684790D9C1EA8A723CF90E11699DB3A1D9D72111
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 07:34:56 +0000
Manifest this update: Wed 29 Jul 2026 07:29:56 +0000
Manifest next update: Thu 30 Jul 2026 09:06:56 +0000
Files and hashes: 1: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: mhO206C5MCEo68TF6ww7+81+IS3YTnFs3GIVpnP+S28=)
2: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: JAv/L1Ca/rOAR83XrzqT+QKIkZeHE06/YMr97eIGL/8=)
3: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw=)
4: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: zZnfuS7x4B3IbMWwGHUKAscPUAhTdq47Ud12yvcyTws=)
5: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: YdojAte0DabKD9U31MLajmNX2Ade2ItCQ0uOXVTExGw=)
6: 207EA811568CF1DB9A757936B650F6F68EBB08B5.crl (hash: xlFw9fC3HtrYKIoFVDew1omCRvmFWe4TLCjxk8HIf6E=)
7: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: NON+2mKqUMP5nxNEYTSRYXBctaTyrQBZDGBl/+tv7Iw=)
8: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=)
9: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yk4mIGPQKduAZWFcwjNTu/2gsTuXAS4f5Gm0DqPPeQM=)
10: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U=)
11: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: pA4m3YcDohtyW2KH722N1KPWI/anmYo+9ayJjEcxchg=)
12: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=)
13: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98=)
14: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=)
15: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: yp9LgKk0vpVLD1ssSi3ZMXSFOq3JC5q5meA5QQuObAo=)
16: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: P/jDOIqhS8TYGh1HRra14jw9lZ/QNU3dPScct8NOxRA=)
17: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=)
18: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: kk/YLt9sOibq+Ehirb8Tv+ujtGYKVYXNjuOikBMvvf4=)
19: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: g+arXZ/+W18ln97mYgZBk8E2/DdTLNyMPheE+2x0Cuc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:47:90:d9:c1:ea:8a:72:3c:f9:0e:11:69:9d:b3:a1:d9:d7:21:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: Jul 29 07:29:56 2026 GMT
Not After : Jul 30 09:06:56 2026 GMT
Subject: CN=B4B8E2EDABDA8916C44E36A21682EEFB99EC09E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:d9:36:bc:78:e6:50:60:b8:ca:47:a6:46:
86:59:bb:ee:b4:86:a2:2a:37:b2:3b:49:43:c4:90:
36:94:7f:c3:5a:a7:be:ab:97:37:57:91:c6:9a:e1:
12:78:ad:d8:d8:21:ea:63:ee:21:e1:7c:94:e8:fb:
d6:11:40:15:0d:8c:28:6f:9e:89:fa:af:32:b7:27:
73:53:79:74:dd:ba:1c:40:23:e9:ad:cd:a9:f0:0b:
6c:1a:c1:50:5d:f9:ee:d8:bf:af:6f:5f:f3:a6:b2:
9e:07:9f:6d:22:05:a1:9d:e2:83:dd:4b:b6:3d:bb:
9d:fd:5b:f1:ab:5c:60:2a:18:77:27:2f:87:d2:95:
da:a0:fa:41:1c:71:c8:5d:82:c5:02:ca:cc:aa:16:
8b:8b:3e:a5:6d:6a:7a:e2:dd:56:fa:42:b9:69:cf:
92:cf:5b:1c:24:7d:c3:af:f0:9d:a6:2e:ce:b3:3d:
c7:20:e1:21:b8:3f:96:41:2f:4c:36:51:c5:2c:1a:
b8:7d:c0:60:8d:40:f9:93:ad:c6:06:59:1f:da:9d:
a9:90:ca:c9:a2:ce:44:f1:f4:b1:ca:33:d0:3b:f2:
eb:d8:b1:72:d3:d1:6e:33:7c:6c:bf:ee:9a:2f:06:
49:90:f1:17:f1:5b:30:7a:d8:94:61:9c:77:da:0c:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:E2:ED:AB:DA:89:16:C4:4E:36:A2:16:82:EE:FB:99:EC:09:E2
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b0:da:01:22:7c:6b:64:c1:22:36:be:64:b0:a2:05:4c:1e:
66:d9:d9:02:c7:9f:f7:47:0d:77:b6:ea:ab:fe:b5:d9:3d:a4:
81:32:4d:21:55:7e:a6:1f:1a:30:6e:c6:92:b4:a9:57:2c:85:
a7:9b:c1:3d:0b:8b:7b:f0:d9:7c:a6:6c:d2:cf:5e:9f:84:a2:
a5:52:ee:d6:e2:b3:f0:2d:7d:0f:b7:18:08:31:33:f7:82:67:
d4:f4:0c:9b:87:35:68:ce:1c:72:51:83:ab:cd:57:6f:7a:4f:
42:56:9d:0a:fe:da:4e:17:6a:f9:91:c9:8a:ff:96:9f:e5:60:
1f:ec:63:63:06:db:7d:af:d3:9b:b0:f6:ee:ff:bd:1f:96:22:
86:0d:03:fe:5a:f3:58:94:05:2f:9d:2b:73:4b:cb:62:a5:19:
0e:a9:c6:9c:cc:58:f8:cf:1e:73:cb:4f:a5:ac:00:67:4e:2f:
bc:08:25:1f:7b:c5:55:df:12:12:35:20:86:89:23:90:79:5c:
e2:40:94:ee:aa:43:bc:ee:e5:2d:51:47:57:48:0d:81:30:13:
95:a7:c2:ec:11:7a:d6:5f:f9:68:9c:d0:2d:76:90:60:43:ff:
1e:d9:5d:da:e8:36:1a:6d:27:7c:2c:bd:7a:9c:d7:3e:c3:28:
e2:f3:ac:43
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaEeQ2cHqinI8+Q4RaZ2zodnXIREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA3RUE4MTE1NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4
RUJCMDhCNTAeFw0yNjA3MjkwNzI5NTZaFw0yNjA3MzAwOTA2NTZaMDMxMTAvBgNV
BAMTKEI0QjhFMkVEQUJEQTg5MTZDNDRFMzZBMjE2ODJFRUZCOTlFQzA5RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVdk2vHjmUGC4ykemRoZZu+60
hqIqN7I7SUPEkDaUf8Nap76rlzdXkcaa4RJ4rdjYIepj7iHhfJTo+9YRQBUNjChv
non6rzK3J3NTeXTduhxAI+mtzanwC2wawVBd+e7Yv69vX/Omsp4Hn20iBaGd4oPd
S7Y9u539W/GrXGAqGHcnL4fSldqg+kEccchdgsUCysyqFouLPqVtanri3Vb6Qrlp
z5LPWxwkfcOv8J2mLs6zPccg4SG4P5ZBL0w2UcUsGrh9wGCNQPmTrcYGWR/anamQ
ysmizkTx9LHKM9A78uvYsXLT0W4zfGy/7povBkmQ8RfxWzB62JRhnHfaDGovAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtLji7avaiRbETjaiFoLu+5nsCeIwHwYDVR0j
BBgwFoAUIH6oEVaM8duadXk2tlD29o67CLUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTYxMjQzMjktZWMyMC00NDYwLWFjMzEtOWMzNmNmOTRmM2ZiLzAvMjA3RUE4MTE1
NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4RUJCMDhCNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMDdFQTgxMTU2OENGMURCOUE3NTc5MzZCNjUwRjZGNjhFQkIw
OEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj
MzEtOWMzNmNmOTRmM2ZiLzAvMjA3RUE4MTE1NjhDRjFEQjlBNzU3OTM2QjY1MEY2
RjY4RUJCMDhCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHqw2gEifGtkwSI2vmSwogVMHmbZ2QLHn/dH
DXe26qv+tdk9pIEyTSFVfqYfGjBuxpK0qVcshaebwT0Li3vw2XymbNLPXp+EoqVS
7tbis/AtfQ+3GAgxM/eCZ9T0DJuHNWjOHHJRg6vNV296T0JWnQr+2k4XavmRyYr/
lp/lYB/sY2MG232v05uw9u7/vR+WIoYNA/5a81iUBS+dK3NLy2KlGQ6pxpzMWPjP
HnPLT6WsAGdOL7wIJR97xVXfEhI1IIaJI5B5XOJAlO6qQ7zu5S1RR1dIDYEwE5Wn
wuwRetZf+Wic0C12kGBD/x7ZXdroNhptJ3wsvXqc1z7DKOLzrEM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:28 2026 by rpki-client