
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft
File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json)
Hash identifier: rYK+W70XQAx6Qy+2S+f9yYJJfRuz5eyyXZRRLKuEFuI=
Subject key identifier: E8:41:5B:72:51:CC:29:6A:5C:22:5C:DD:15:70:EB:E7:99:D3:6B:DE
Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B
Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B
Certificate serial: 73D3A536A5B86F2903E284B0740BF208C4185864
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft
Manifest number: 02F0
Signing time: Wed 15 Apr 2026 12:32:42 +0000
Manifest this update: Wed 15 Apr 2026 12:27:42 +0000
Manifest next update: Sat 18 Apr 2026 21:36:42 +0000
Files and hashes: 1: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=)
2: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=)
3: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: XsAec4SOEx7qpC5WVPbnA9nSuS1rJNtOhcZNqJpjn6s=)
4: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: DPG8sfkMvod68KPbF1WWeABYPsFLah31yyX2BoWywwI=)
5: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: tiH3jyKea53ULyN4cpaYnhNFjIvE7nLuWtNYJJHqMW8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl
rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 21:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d3:a5:36:a5:b8:6f:29:03:e2:84:b0:74:0b:f2:08:c4:18:58:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B
Validity
Not Before: Apr 15 12:27:42 2026 GMT
Not After : Apr 18 21:36:42 2026 GMT
Subject: CN=E8415B7251CC296A5C225CDD1570EBE799D36BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:1a:10:54:d9:ef:ef:17:ce:5f:38:40:b8:
9c:f3:ce:b7:78:9c:76:e3:d0:d5:55:24:89:c0:43:
4e:3d:8a:7b:23:ec:75:fa:6d:4c:4a:53:05:bb:8d:
17:05:aa:5e:2b:2a:2c:63:37:d3:e9:b8:65:e8:26:
44:a0:5e:ce:aa:49:64:30:51:ef:ff:72:8c:73:72:
0f:37:8e:8e:fe:e1:87:c1:ef:32:50:90:fd:6d:44:
6d:9b:f6:fc:98:e6:1e:c6:3b:65:29:6a:6f:e9:e1:
40:56:b2:3e:51:27:d8:d6:c1:60:da:4c:2c:8b:aa:
20:73:63:07:f8:d6:4e:13:3f:d6:7d:d6:12:1c:ba:
2c:1d:c6:1c:f2:07:63:be:52:44:db:22:56:fb:a5:
32:50:f1:b4:64:7a:73:a0:15:6e:3e:ff:1b:c2:8c:
8d:90:aa:b8:fc:68:3b:4c:8a:18:b9:ca:de:89:3d:
d6:1b:d0:8f:7d:37:b7:79:52:9a:b9:d1:fd:d4:8a:
7a:94:bf:a9:4b:82:62:09:60:05:c9:a8:b3:d7:44:
3d:69:7b:ef:43:40:ac:3f:07:ba:9d:91:46:4d:06:
21:79:b1:a4:69:89:26:a7:06:60:b1:1b:f7:b0:30:
fd:37:c2:4d:1c:b5:bd:7e:6b:74:69:27:42:7f:4a:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:5B:72:51:CC:29:6A:5C:22:5C:DD:15:70:EB:E7:99:D3:6B:DE
X509v3 Authority Key Identifier:
keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:48:66:0c:ae:73:8b:fd:89:7e:49:ed:1f:3b:08:f6:c7:9e:
62:f7:1d:d1:98:81:83:3c:83:ae:9e:8c:4d:0b:2e:b7:9a:24:
3f:23:19:30:30:2e:60:9b:80:f5:da:35:56:ad:ae:bf:bf:fa:
47:96:a1:bd:06:67:04:11:f0:3d:15:bf:a2:4f:bd:f8:71:8f:
a1:29:a0:3e:aa:f9:e3:3e:a7:10:4f:cc:a4:20:e1:5a:85:7b:
f3:3f:01:23:a5:db:3a:7a:40:f1:ae:75:99:d0:98:dc:db:fb:
e4:1b:05:31:6a:1f:79:eb:aa:47:96:fc:bf:a8:6e:ab:ca:4b:
4c:7b:43:7e:5b:79:27:d7:6d:3d:83:8a:65:43:50:74:41:b2:
49:20:02:45:b0:f1:60:09:e3:55:45:81:7e:38:cf:67:53:72:
d8:a5:ad:87:ad:75:5b:be:b7:53:2e:0b:ab:9c:81:5e:f3:d7:
af:17:c4:04:6d:02:26:a3:f8:7b:94:a5:da:80:9d:91:c9:cc:
b1:18:9e:ce:c2:cd:ef:a9:d4:ba:78:f5:e2:81:c5:fa:c7:36:
e8:80:a6:32:59:d8:1e:bc:2d:ad:6d:32:c1:b5:ed:a5:c2:a7:
61:0d:76:a7:2b:b8:5d:77:bd:ba:0d:3b:7e:6a:be:63:45:58:
43:69:a4:63
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc9OlNqW4bykD4oSwdAvyCMQYWGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF
MkZCMzk4QjAeFw0yNjA0MTUxMjI3NDJaFw0yNjA0MTgyMTM2NDJaMDMxMTAvBgNV
BAMTKEU4NDE1QjcyNTFDQzI5NkE1QzIyNUNERDE1NzBFQkU3OTlEMzZCREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5BoQVNnv7xfOXzhAuJzzzrd4
nHbj0NVVJInAQ049insj7HX6bUxKUwW7jRcFql4rKixjN9PpuGXoJkSgXs6qSWQw
Ue//coxzcg83jo7+4YfB7zJQkP1tRG2b9vyY5h7GO2Upam/p4UBWsj5RJ9jWwWDa
TCyLqiBzYwf41k4TP9Z91hIcuiwdxhzyB2O+UkTbIlb7pTJQ8bRkenOgFW4+/xvC
jI2Qqrj8aDtMihi5yt6JPdYb0I99N7d5Upq50f3UinqUv6lLgmIJYAXJqLPXRD1p
e+9DQKw/B7qdkUZNBiF5saRpiSanBmCxG/ewMP03wk0ctb1+a3RpJ0J/SoUVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6EFbclHMKWpcIlzdFXDr55nTa94wHwYDVR0j
BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3
RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC
Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3
MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2
OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABlIZgyuc4v9iX5J7R87CPbHnmL3HdGYgYM8
g66ejE0LLreaJD8jGTAwLmCbgPXaNVatrr+/+keWob0GZwQR8D0Vv6JPvfhxj6Ep
oD6q+eM+pxBPzKQg4VqFe/M/ASOl2zp6QPGudZnQmNzb++QbBTFqH3nrqkeW/L+o
bqvKS0x7Q35beSfXbT2DimVDUHRBskkgAkWw8WAJ41VFgX44z2dTctilrYetdVu+
t1MuC6ucgV7z168XxARtAiaj+HuUpdqAnZHJzLEYns7Cze+p1Lp49eKBxfrHNuiA
pjJZ2B68La1tMsG17aXCp2ENdqcruF13vboNO35qvmNFWENppGM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:04 2026 by rpki-client