
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
File: 207EA811568CF1DB9A757936B650F6F68EBB08B5.mft (raw, json)
Hash identifier: ac7r+hkbcVMpeVnqfSz4uSJ2V3ulSidRlOsMgSoY5qY=
Subject key identifier: 08:74:25:E2:62:38:EB:A2:25:2A:4C:EB:66:F2:CF:76:4E:8C:EE:EE
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 46CAD72680090136D6A0537E264379EFC16D0AEA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
Manifest number: 9A
Signing time: Tue 25 Aug 2026 14:40:09 +0000
Manifest this update: Tue 25 Aug 2026 14:35:09 +0000
Manifest next update: Wed 26 Aug 2026 15:58:09 +0000
Files and hashes: 1: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: NON+2mKqUMP5nxNEYTSRYXBctaTyrQBZDGBl/+tv7Iw=)
2: 207EA811568CF1DB9A757936B650F6F68EBB08B5.crl (hash: L/n5YM7r0kHiCBHQWbxKUnxwn0CyjwJnkN3NHMusQ94=)
3: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: P/jDOIqhS8TYGh1HRra14jw9lZ/QNU3dPScct8NOxRA=)
4: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: mhO206C5MCEo68TF6ww7+81+IS3YTnFs3GIVpnP+S28=)
5: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yk4mIGPQKduAZWFcwjNTu/2gsTuXAS4f5Gm0DqPPeQM=)
6: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: zZnfuS7x4B3IbMWwGHUKAscPUAhTdq47Ud12yvcyTws=)
7: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=)
8: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98=)
9: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw=)
10: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: kk/YLt9sOibq+Ehirb8Tv+ujtGYKVYXNjuOikBMvvf4=)
11: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=)
12: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: pA4m3YcDohtyW2KH722N1KPWI/anmYo+9ayJjEcxchg=)
13: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: yp9LgKk0vpVLD1ssSi3ZMXSFOq3JC5q5meA5QQuObAo=)
14: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=)
15: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U=)
16: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: JAv/L1Ca/rOAR83XrzqT+QKIkZeHE06/YMr97eIGL/8=)
17: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=)
18: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: YdojAte0DabKD9U31MLajmNX2Ade2ItCQ0uOXVTExGw=)
19: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: g+arXZ/+W18ln97mYgZBk8E2/DdTLNyMPheE+2x0Cuc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 15:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ca:d7:26:80:09:01:36:d6:a0:53:7e:26:43:79:ef:c1:6d:0a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: Aug 25 14:35:09 2026 GMT
Not After : Aug 26 15:58:09 2026 GMT
Subject: CN=087425E26238EBA2252A4CEB66F2CF764E8CEEEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:af:b0:f1:c4:ee:80:47:0c:62:40:cb:92:
76:9f:be:5a:64:20:48:9f:13:0c:3e:c7:63:0c:50:
b5:8d:bb:ca:2b:d8:c6:0a:0f:61:20:b3:73:88:74:
7a:d1:67:68:df:e1:07:ce:3e:a6:98:a4:78:a6:a7:
8f:81:be:36:b9:a8:ea:4b:cb:1a:f8:df:c5:cc:e6:
1c:82:54:0d:54:12:b3:5e:9a:2b:ea:34:16:bd:30:
4a:b9:aa:51:10:3d:f5:fe:a6:e0:78:a1:92:bb:fb:
fb:9d:23:2e:6f:18:63:f8:a3:68:58:62:8d:83:58:
7d:bb:2b:1d:86:51:bf:a9:c8:de:9d:28:c7:06:8b:
8f:20:fa:09:f5:39:69:0c:9d:44:77:59:a5:e8:1f:
8c:24:ce:72:1f:65:bd:4e:13:77:73:57:da:9b:7d:
7b:37:5c:12:44:82:c1:d5:53:44:97:37:a4:f0:38:
7e:53:fe:03:8a:9d:ea:47:06:e6:7e:3f:16:b8:08:
cd:8f:4d:47:31:33:97:a7:6f:c4:81:aa:c5:58:fa:
28:60:d5:d9:99:ff:c7:f1:15:82:0e:b7:b3:d8:df:
8d:ae:47:c9:26:d9:ac:ee:1f:94:a9:c1:d1:d3:f8:
40:9c:1d:c7:79:78:a6:00:28:1b:31:d0:e7:27:ae:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:74:25:E2:62:38:EB:A2:25:2A:4C:EB:66:F2:CF:76:4E:8C:EE:EE
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6e:93:ec:ba:d4:ea:ae:2d:bc:39:be:65:37:03:09:b7:3a:
33:3e:a0:d0:0d:77:05:47:59:f5:d0:65:bc:c8:84:0d:2d:94:
99:75:df:0a:18:09:86:aa:ce:b9:70:95:37:e2:d3:c2:75:af:
cd:d3:e6:f8:86:ee:ea:55:91:d8:c2:eb:f8:a5:dd:38:7d:51:
ea:7f:ed:9b:d7:a1:71:8a:0f:74:90:5e:31:a7:08:4b:27:b1:
70:cb:cc:5a:2e:b5:db:53:ef:55:cc:0e:9f:57:0f:1b:de:85:
a6:04:1c:cc:fa:32:06:b0:86:ac:33:bd:a0:66:d8:f2:92:00:
b1:a0:01:f2:01:d0:8a:e5:ec:77:e9:bc:be:ad:38:10:3a:e0:
49:a4:3e:34:66:22:c7:4f:9d:58:6d:b8:73:72:b8:20:f1:a0:
29:e5:c1:2b:4a:88:7c:62:13:01:fa:c2:27:83:3a:60:ed:8e:
37:58:7a:3b:43:f4:81:4a:9d:f0:55:80:d6:43:a1:e8:17:cf:
b7:6f:80:f4:d4:08:57:04:ce:80:39:0a:84:4d:a3:3d:96:b3:
d2:5b:64:7a:b1:70:d1:72:82:a7:08:d6:74:63:67:40:5e:4e:
46:1f:30:2c:4c:e3:12:c1:b9:96:09:9b:6d:8a:1e:ac:96:51:
26:9d:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:08:06 2026 by rpki-client