
$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
File: 207EA811568CF1DB9A757936B650F6F68EBB08B5.mft (raw, json)
Hash identifier: BgZ6/brS6idiD6cXg4/CFksup1K5+k8YwqEP4yJ+BLc=
Subject key identifier: 3C:23:37:31:07:5D:B0:B9:7E:13:FC:55:44:07:10:BD:98:1C:6E:0A
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 486173F9EA3CF6BD5916AD0A6CE61793D2E657E9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 01:31:03 +0000
Manifest this update: Fri 24 Jul 2026 01:26:03 +0000
Manifest next update: Sat 25 Jul 2026 02:57:03 +0000
Files and hashes: 1: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: YdojAte0DabKD9U31MLajmNX2Ade2ItCQ0uOXVTExGw=)
2: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: mhO206C5MCEo68TF6ww7+81+IS3YTnFs3GIVpnP+S28=)
3: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: kk/YLt9sOibq+Ehirb8Tv+ujtGYKVYXNjuOikBMvvf4=)
4: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=)
5: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=)
6: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98=)
7: 207EA811568CF1DB9A757936B650F6F68EBB08B5.crl (hash: FosRmBx2H4ncGwPxNft+nR9rceYoTW/DJUIwA41sqak=)
8: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw=)
9: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: zZnfuS7x4B3IbMWwGHUKAscPUAhTdq47Ud12yvcyTws=)
10: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=)
11: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=)
12: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: pA4m3YcDohtyW2KH722N1KPWI/anmYo+9ayJjEcxchg=)
13: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: yp9LgKk0vpVLD1ssSi3ZMXSFOq3JC5q5meA5QQuObAo=)
14: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U=)
15: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: JAv/L1Ca/rOAR83XrzqT+QKIkZeHE06/YMr97eIGL/8=)
16: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yk4mIGPQKduAZWFcwjNTu/2gsTuXAS4f5Gm0DqPPeQM=)
17: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: g+arXZ/+W18ln97mYgZBk8E2/DdTLNyMPheE+2x0Cuc=)
18: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: NON+2mKqUMP5nxNEYTSRYXBctaTyrQBZDGBl/+tv7Iw=)
19: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: P/jDOIqhS8TYGh1HRra14jw9lZ/QNU3dPScct8NOxRA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:61:73:f9:ea:3c:f6:bd:59:16:ad:0a:6c:e6:17:93:d2:e6:57:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: Jul 24 01:26:03 2026 GMT
Not After : Jul 25 02:57:03 2026 GMT
Subject: CN=3C233731075DB0B97E13FC55440710BD981C6E0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:90:4f:82:cd:f2:4b:d7:e4:86:ce:a6:33:7c:
6b:58:23:f7:d8:be:9e:b2:c2:57:ac:84:f1:32:2d:
90:6c:6e:dc:19:c4:f4:09:83:21:9a:9f:e9:91:56:
f9:a1:b1:50:1d:05:35:4b:e3:37:a6:04:8c:60:94:
63:ce:b4:3b:a7:e1:d0:6e:70:2f:4e:da:c0:4b:70:
b5:70:f7:87:ba:d7:b6:7f:38:06:fd:1b:32:86:bc:
24:3d:50:5a:6a:6e:d6:b2:bc:9f:b2:79:d3:4e:ab:
8f:5f:54:03:b6:ee:f4:7e:9d:63:e4:09:f5:e3:d4:
16:5c:72:c6:6b:87:12:fc:9b:83:60:ea:39:6b:3d:
54:1d:01:18:b1:f7:64:88:45:29:5a:95:99:2b:12:
5d:a4:31:2b:7e:2e:37:43:56:5d:04:01:a4:55:f3:
74:a0:b9:21:06:f4:5e:18:18:4b:4b:58:81:34:69:
5f:ba:48:41:e6:89:98:05:fd:42:17:eb:b5:98:cf:
fd:09:e0:67:5e:97:12:68:9e:cc:91:c8:18:d3:e1:
d9:14:30:41:57:23:c4:32:af:32:15:75:45:8f:eb:
84:41:0f:35:c4:c2:f7:97:81:8f:d5:24:2b:05:06:
76:dc:7f:00:15:9d:f7:5a:20:d1:39:93:83:eb:c7:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:37:31:07:5D:B0:B9:7E:13:FC:55:44:07:10:BD:98:1C:6E:0A
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5a:4b:7f:12:d0:74:e3:10:c9:0c:5a:eb:24:90:66:70:77:
cb:85:bb:1f:77:99:e0:f6:0c:31:82:bf:14:25:98:9b:c6:b4:
4d:28:3f:65:6e:0b:f4:fb:11:fd:3a:66:a2:f3:a5:77:d0:eb:
ec:f4:a9:42:09:f4:db:15:58:e2:b9:c9:22:9c:74:1c:06:2c:
38:82:f6:6d:91:97:52:dd:12:fa:db:c8:9f:41:80:41:5e:a8:
ba:ad:56:7f:fb:88:40:5c:cc:c5:52:32:15:6c:41:43:d6:df:
91:3f:4b:94:43:64:d1:6f:ef:63:e2:5a:e6:6b:73:91:0b:a8:
51:19:d4:c1:69:59:79:e0:d8:41:26:3b:b3:71:9c:59:3a:8c:
60:40:e3:bd:15:be:ad:c0:7b:35:db:a1:34:2c:70:82:ec:a8:
40:5b:24:65:d6:05:d1:c0:f9:d8:42:07:d2:9e:71:13:4c:05:
98:7c:27:03:a9:f5:5b:57:11:04:40:5a:65:b5:35:d4:8a:22:
26:f2:7a:38:2c:df:e1:93:a7:71:2c:4e:77:c2:1a:f3:e9:60:
4d:0d:ab:be:9c:3c:c1:09:bf:06:25:fd:9f:50:f4:15:c4:a2:
3c:96:3c:d2:ca:13:b6:45:17:91:8a:e9:23:a7:95:93:81:0f:
54:fb:23:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:18 2026 by rpki-client