
$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
File: 207EA811568CF1DB9A757936B650F6F68EBB08B5.mft (raw, json)
Hash identifier: UVHoE2XX1SRhWksf24ozOJzsM/yA0iaiSlEXTBOatjI=
Subject key identifier: 44:5C:FB:73:F7:44:39:A7:14:39:26:45:6A:EA:AC:9D:A0:81:4F:8E
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 33AF07069D40B9718BA1D8A089AFE16F3068BE9D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
Manifest number: 10
Signing time: Wed 13 May 2026 08:15:29 +0000
Manifest this update: Wed 13 May 2026 08:10:29 +0000
Manifest next update: Thu 14 May 2026 10:37:29 +0000
Files and hashes: 1: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: yp9LgKk0vpVLD1ssSi3ZMXSFOq3JC5q5meA5QQuObAo=)
2: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: P/jDOIqhS8TYGh1HRra14jw9lZ/QNU3dPScct8NOxRA=)
3: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: zZnfuS7x4B3IbMWwGHUKAscPUAhTdq47Ud12yvcyTws=)
4: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw=)
5: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=)
6: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: JAv/L1Ca/rOAR83XrzqT+QKIkZeHE06/YMr97eIGL/8=)
7: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=)
8: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=)
9: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98=)
10: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: pA4m3YcDohtyW2KH722N1KPWI/anmYo+9ayJjEcxchg=)
11: 207EA811568CF1DB9A757936B650F6F68EBB08B5.crl (hash: Wd66kTMIZ6hQFgfoBT1MkqSUFFSbjET8O/xHu8raNsU=)
12: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: g+arXZ/+W18ln97mYgZBk8E2/DdTLNyMPheE+2x0Cuc=)
13: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=)
14: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: YdojAte0DabKD9U31MLajmNX2Ade2ItCQ0uOXVTExGw=)
15: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: kk/YLt9sOibq+Ehirb8Tv+ujtGYKVYXNjuOikBMvvf4=)
16: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: mhO206C5MCEo68TF6ww7+81+IS3YTnFs3GIVpnP+S28=)
17: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: NON+2mKqUMP5nxNEYTSRYXBctaTyrQBZDGBl/+tv7Iw=)
18: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U=)
19: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yk4mIGPQKduAZWFcwjNTu/2gsTuXAS4f5Gm0DqPPeQM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:af:07:06:9d:40:b9:71:8b:a1:d8:a0:89:af:e1:6f:30:68:be:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: May 13 08:10:29 2026 GMT
Not After : May 14 10:37:29 2026 GMT
Subject: CN=445CFB73F74439A7143926456AEAAC9DA0814F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:34:4f:fd:91:fe:21:4b:a0:8b:0f:60:1d:
d9:de:f2:34:93:63:58:f0:ee:d7:66:cc:b3:a5:52:
d2:e3:f2:e3:d5:4e:83:97:65:49:e7:03:83:d5:dd:
0f:79:5d:83:b3:55:5d:e2:39:d0:3a:18:86:7e:aa:
12:af:4b:ea:b5:6c:f4:a3:33:19:b9:19:33:37:2f:
d0:ef:04:88:54:c8:6b:1b:b0:8b:b7:b3:62:0d:b0:
b7:ee:e7:be:6f:f4:0e:56:c8:4f:d2:f5:f0:cd:9c:
bf:6e:0f:9f:4b:2e:80:c9:22:4b:cf:27:80:a3:3e:
1b:c2:1a:13:62:b3:d5:b5:54:b0:22:a0:d9:a2:ab:
55:0e:83:ff:16:19:6a:bb:b1:82:a7:12:5e:a5:d4:
2f:7b:15:f1:45:c6:78:f1:86:2c:e1:00:39:d9:a4:
15:3a:9b:c4:0d:26:87:ce:42:26:83:2b:25:71:7c:
bc:e9:44:75:ed:12:b1:86:7d:73:19:5a:08:03:77:
42:30:7c:90:6b:94:39:5d:3e:08:07:8b:1e:87:4c:
80:92:e3:51:11:2b:26:af:c3:2e:4a:8a:02:3f:e7:
86:3d:ee:cb:e6:ae:4f:e6:aa:56:77:7e:26:62:21:
c3:78:88:41:66:60:df:48:06:72:03:7c:50:08:fa:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5C:FB:73:F7:44:39:A7:14:39:26:45:6A:EA:AC:9D:A0:81:4F:8E
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e5:f1:47:ef:09:cd:4e:38:38:db:8b:46:8e:1a:5c:76:4d:
58:69:65:90:39:a0:10:5d:b1:a4:fd:d5:b6:33:b9:56:f7:f2:
ca:92:7d:1f:42:47:90:dc:e9:4e:b5:8f:9f:37:2c:e6:1e:70:
56:18:bf:83:fa:cf:2f:44:d6:38:a1:64:82:17:99:ac:2f:c0:
94:31:de:cf:c9:91:cf:ee:f7:7b:a2:d0:a9:2a:e4:40:83:72:
45:86:4d:cd:0c:56:4d:8d:2e:97:27:d5:2f:ae:ba:59:6a:33:
24:d2:02:b6:f3:82:e6:68:a4:ff:b0:f4:c7:49:9f:61:45:a0:
94:dd:81:8f:ca:2d:4e:c3:b7:6c:41:07:c3:02:4e:58:f9:fd:
1b:8c:a4:1c:4d:f4:ac:da:bb:6c:31:f8:fe:45:c4:b6:07:f1:
32:2d:47:75:f5:db:2d:e5:91:c1:62:c9:10:66:da:58:c2:c9:
f7:8e:28:20:ff:82:6d:de:dd:fc:39:4e:ab:01:a3:71:b9:7a:
2e:3d:d6:84:03:41:99:14:f0:9d:0e:43:aa:b2:42:e2:36:b7:
58:8e:0d:71:83:26:68:90:da:4d:38:44:1e:ff:79:7a:9a:c5:
c5:ec:e0:45:64:9b:3e:e6:7e:7b:fa:38:27:ed:a6:3a:80:d2:
27:c9:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 02:48:40 2026 by rpki-client