
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
File: 207EA811568CF1DB9A757936B650F6F68EBB08B5.mft (raw, json)
Hash identifier: K2YFdPo9FePK+3IbUFt/vmHIE9p6O+kSKQp9/v3JKVA=
Subject key identifier: 22:7B:18:08:ED:D3:7A:0F:2C:94:40:08:4B:4D:E0:05:F3:62:D2:86
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 4E1D26BE1A02C5034087B6A82D2C1CA902C53F20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 01:11:26 +0000
Manifest this update: Fri 25 Sep 2026 01:06:26 +0000
Manifest next update: Sat 26 Sep 2026 04:13:26 +0000
Files and hashes: 1: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98=)
2: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: mhO206C5MCEo68TF6ww7+81+IS3YTnFs3GIVpnP+S28=)
3: 207EA811568CF1DB9A757936B650F6F68EBB08B5.crl (hash: g8QU3XxAOgRzT0wR7NLFw8SJHPi2+qrwNhDY7DMJuvs=)
4: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw=)
5: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=)
6: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: g+arXZ/+W18ln97mYgZBk8E2/DdTLNyMPheE+2x0Cuc=)
7: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: kk/YLt9sOibq+Ehirb8Tv+ujtGYKVYXNjuOikBMvvf4=)
8: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: YdojAte0DabKD9U31MLajmNX2Ade2ItCQ0uOXVTExGw=)
9: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: zZnfuS7x4B3IbMWwGHUKAscPUAhTdq47Ud12yvcyTws=)
10: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=)
11: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yk4mIGPQKduAZWFcwjNTu/2gsTuXAS4f5Gm0DqPPeQM=)
12: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: pA4m3YcDohtyW2KH722N1KPWI/anmYo+9ayJjEcxchg=)
13: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=)
14: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: yp9LgKk0vpVLD1ssSi3ZMXSFOq3JC5q5meA5QQuObAo=)
15: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: JAv/L1Ca/rOAR83XrzqT+QKIkZeHE06/YMr97eIGL/8=)
16: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: NON+2mKqUMP5nxNEYTSRYXBctaTyrQBZDGBl/+tv7Iw=)
17: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=)
18: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U=)
19: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: P/jDOIqhS8TYGh1HRra14jw9lZ/QNU3dPScct8NOxRA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1d:26:be:1a:02:c5:03:40:87:b6:a8:2d:2c:1c:a9:02:c5:3f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: Sep 25 01:06:26 2026 GMT
Not After : Sep 26 04:13:26 2026 GMT
Subject: CN=227B1808EDD37A0F2C9440084B4DE005F362D286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:99:c2:95:2f:36:b9:0c:e7:99:aa:c3:6e:
8f:b9:fc:75:08:41:b1:b4:3f:73:b8:ea:1d:ed:2f:
c3:9b:51:d2:f7:99:77:0d:60:69:af:42:75:c6:53:
78:bb:3e:f6:c4:ea:2c:ea:fe:2c:29:82:e2:8a:9a:
a3:19:5c:b2:1a:7b:db:19:a6:bf:fc:8c:d2:13:aa:
5c:7c:23:73:5b:56:b5:52:59:e1:30:51:15:f3:7c:
e3:5e:a4:7f:63:25:36:fe:9d:98:5b:91:47:ea:f3:
7c:2a:aa:49:84:ec:54:38:07:86:de:bc:0b:89:a1:
fc:03:3f:fa:36:70:f7:4f:4b:63:90:1a:b4:dc:36:
65:ff:7c:09:58:a8:a5:72:c5:1b:5b:cf:7a:4f:f9:
9a:c5:5a:98:d4:46:11:33:98:60:45:46:6c:3c:0a:
32:52:f8:5d:6a:ec:31:e2:c4:33:80:a6:fe:09:7e:
da:02:6e:33:56:cf:71:de:89:40:60:1f:37:65:84:
e6:15:e7:65:56:6d:17:2e:58:e5:07:78:aa:b5:f4:
df:da:80:5e:f0:b1:be:75:20:01:1c:3a:3a:f8:74:
c9:af:3e:1e:79:37:b3:28:79:27:ad:f8:4d:0e:72:
25:80:8a:57:94:20:51:82:a9:5e:a1:5f:37:d4:3d:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7B:18:08:ED:D3:7A:0F:2C:94:40:08:4B:4D:E0:05:F3:62:D2:86
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:03:7d:86:37:82:ab:2b:72:31:37:32:ca:91:e7:84:c7:1d:
6f:55:1d:a8:70:ec:2a:a9:5e:06:b9:8c:7d:e3:9f:bb:95:4e:
91:21:8f:49:09:8d:dd:37:e1:b8:a0:57:84:f9:11:b5:90:66:
37:96:e0:88:20:57:13:d0:3f:a3:df:63:53:e3:b7:6f:b8:42:
8d:39:f2:e8:70:6c:19:9f:9f:70:82:29:4a:f7:3e:fb:00:31:
53:86:8f:f4:e2:aa:59:f2:5c:78:85:0f:0e:30:b1:34:79:97:
be:c2:85:a4:65:f9:7b:f1:aa:f0:ab:28:94:a9:d0:6f:28:cd:
f1:06:a8:8a:ea:de:61:5d:b4:7c:cc:a1:f9:14:26:70:93:94:
6a:cb:0d:fb:a6:77:51:3d:c9:14:39:f8:0b:cc:80:f2:7d:a9:
b7:5f:02:dd:6c:3c:84:63:04:8f:e9:35:2b:41:44:4d:88:73:
50:eb:4f:e0:b2:31:ec:30:f7:d3:46:20:cd:2c:1f:46:25:da:
5f:67:93:c7:cd:c7:f0:4c:b2:2c:37:13:95:fd:52:24:0b:c6:
9b:a1:31:c2:2b:91:d6:40:de:17:5b:ce:fb:1d:6c:62:20:74:
cf:b4:13:60:44:27:6c:33:4a:f3:f4:a4:5f:69:7b:9b:d1:dd:
c6:9a:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:49:21 2026 by rpki-client