
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
File: 207EA811568CF1DB9A757936B650F6F68EBB08B5.mft (raw, json)
Hash identifier: ew04lnveKj/yP27DA7TqjaLrH+vDloTn/S9+IHubvUA=
Subject key identifier: A5:B6:50:B0:B8:60:CF:02:02:41:56:F7:E4:AA:F7:69:43:9F:9F:EE
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 33744E8699C8D524B1DD9B26D2C0C1AF69E13FFD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
Manifest number: 9B
Signing time: Wed 26 Aug 2026 08:01:07 +0000
Manifest this update: Wed 26 Aug 2026 07:56:07 +0000
Manifest next update: Thu 27 Aug 2026 09:50:07 +0000
Files and hashes: 1: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=)
2: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: JAv/L1Ca/rOAR83XrzqT+QKIkZeHE06/YMr97eIGL/8=)
3: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: kk/YLt9sOibq+Ehirb8Tv+ujtGYKVYXNjuOikBMvvf4=)
4: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=)
5: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98=)
6: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: P/jDOIqhS8TYGh1HRra14jw9lZ/QNU3dPScct8NOxRA=)
7: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw=)
8: 207EA811568CF1DB9A757936B650F6F68EBB08B5.crl (hash: SRnjxankUQE2HunzsetOQhsAKqZajNHKpOemOoWvZ0k=)
9: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: NON+2mKqUMP5nxNEYTSRYXBctaTyrQBZDGBl/+tv7Iw=)
10: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yk4mIGPQKduAZWFcwjNTu/2gsTuXAS4f5Gm0DqPPeQM=)
11: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: yp9LgKk0vpVLD1ssSi3ZMXSFOq3JC5q5meA5QQuObAo=)
12: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U=)
13: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: g+arXZ/+W18ln97mYgZBk8E2/DdTLNyMPheE+2x0Cuc=)
14: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: mhO206C5MCEo68TF6ww7+81+IS3YTnFs3GIVpnP+S28=)
15: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: zZnfuS7x4B3IbMWwGHUKAscPUAhTdq47Ud12yvcyTws=)
16: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=)
17: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: YdojAte0DabKD9U31MLajmNX2Ade2ItCQ0uOXVTExGw=)
18: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=)
19: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: pA4m3YcDohtyW2KH722N1KPWI/anmYo+9ayJjEcxchg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:74:4e:86:99:c8:d5:24:b1:dd:9b:26:d2:c0:c1:af:69:e1:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: Aug 26 07:56:07 2026 GMT
Not After : Aug 27 09:50:07 2026 GMT
Subject: CN=A5B650B0B860CF02024156F7E4AAF769439F9FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:59:c8:aa:c6:32:bb:2a:fb:a1:56:8f:6e:
c8:d8:c2:8f:30:79:f6:e4:9c:0c:c3:72:74:0c:57:
f1:62:4b:b0:14:7f:6d:af:cc:cd:1a:59:9e:ba:07:
29:fb:ee:00:b1:1f:f7:25:06:e1:76:27:8c:9e:d9:
30:22:4a:26:cd:af:92:f5:7f:db:ea:f8:96:93:2e:
0b:0c:38:6f:49:cf:1c:de:d4:13:1d:ca:40:28:45:
ee:16:fb:fa:17:03:40:b2:c5:92:63:c7:a5:7a:41:
23:08:d9:3f:e3:9a:e2:7a:6b:26:e2:0f:e2:25:0f:
63:34:eb:82:4a:f2:cc:7b:7e:42:3b:7f:49:08:8b:
34:25:5d:09:78:b4:40:ab:fa:fa:10:c3:48:f7:99:
a9:eb:42:bc:93:37:34:01:5a:76:00:0d:c0:6c:55:
b3:02:d5:6d:47:fd:1f:3c:ca:6e:94:79:2b:11:ec:
c2:17:bf:55:8b:14:07:32:86:b8:26:32:64:19:27:
04:34:94:44:bf:7e:60:ac:cb:2a:57:c7:ac:09:8a:
0d:35:1b:71:83:c7:06:30:c1:9a:bf:7f:55:6f:b1:
77:eb:a3:de:00:82:64:3c:7d:b0:ff:ce:67:fa:48:
33:53:ea:e3:a6:68:c6:b8:9a:23:f5:76:4a:f1:7e:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:50:B0:B8:60:CF:02:02:41:56:F7:E4:AA:F7:69:43:9F:9F:EE
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:34:47:4f:dc:2d:4a:56:e5:4a:de:5e:d6:1d:fa:cc:0c:ce:
74:58:47:cb:2e:2b:59:b4:6f:0d:a2:e6:a2:80:a4:b5:27:c9:
8a:c4:f1:e8:8c:9b:f3:42:d1:0d:34:61:8d:f0:e4:42:02:e7:
f6:75:a9:b7:74:28:48:9a:e4:d7:4b:a4:9c:22:78:39:ac:9f:
c0:75:56:f3:9f:99:8c:ae:b9:7c:30:55:a9:33:5c:d1:7a:f6:
9c:e2:9c:fd:36:a2:98:f4:41:ec:c1:a6:03:ba:42:9e:57:fb:
d7:be:d7:7f:86:88:44:04:3b:92:19:d3:04:6b:78:f5:f8:f3:
ed:7b:e1:3f:17:1b:88:35:5e:9a:05:20:78:ee:b3:18:0e:de:
9a:6e:3a:9f:a4:ad:d1:40:89:20:82:2a:f3:dc:ec:ad:f4:de:
ce:d0:12:49:18:40:84:b4:3c:6f:3c:a9:4f:cf:b9:39:91:5d:
e2:01:75:02:ba:0d:8e:64:6d:92:46:4b:8d:e0:e4:6d:42:7a:
ef:2b:f5:6b:f1:ed:ae:b9:25:78:dd:a5:ed:0a:3a:26:89:18:
17:12:8e:22:df:60:55:41:c5:6d:98:c6:a2:ba:74:e7:8a:39:
7a:41:7e:99:9d:36:7a:83:76:30:ee:0f:0f:f9:5c:cd:7e:97:
3b:c1:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:12:20 2026 by rpki-client