
$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json)
Hash identifier: hpOm+g3Ui94kO1QoKt7EkRyfF1Ww7x4mNHCtv1NG9q8=
Subject key identifier: 8E:A9:87:0F:12:D5:3C:6D:FF:39:E2:59:C6:CB:5D:F3:EC:9C:C7:87
Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C
Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
Certificate serial: 4AA5DFBC80C779039ACEB769631B6AC41039EEDE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
Manifest number: 0522
Signing time: Fri 17 Apr 2026 22:51:23 +0000
Manifest this update: Fri 17 Apr 2026 22:46:23 +0000
Manifest next update: Tue 21 Apr 2026 10:20:23 +0000
Files and hashes: 1: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: VrCL/Q7Wp1hi4bPUptZU6xJrkaqGvCNal8yf6IU+GJw=)
2: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=)
3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl
rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 10:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a5:df:bc:80:c7:79:03:9a:ce:b7:69:63:1b:6a:c4:10:39:ee:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
Validity
Not Before: Apr 17 22:46:23 2026 GMT
Not After : Apr 21 10:20:23 2026 GMT
Subject: CN=8EA9870F12D53C6DFF39E259C6CB5DF3EC9CC787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:52:12:a7:63:c0:d9:04:76:d4:6f:1d:95:
17:00:11:f0:67:6a:9c:2c:01:ed:a2:a5:b2:7b:d8:
3b:88:85:d1:9a:d6:14:bb:df:d0:50:4f:c5:1d:e3:
3c:70:eb:6f:49:91:b1:a1:14:d4:88:3d:7f:c6:5f:
cf:fb:c4:eb:0f:76:69:af:01:ec:0b:6c:a7:c6:f3:
94:cd:70:62:50:7d:e0:5d:b7:74:7b:86:02:ed:5f:
8d:f0:38:81:c1:e3:6c:87:17:a3:4f:e2:5e:ee:fd:
5a:1e:d5:84:4f:5e:9d:2f:ee:7d:f8:9e:dd:10:94:
be:68:88:5f:16:bb:21:0c:00:4d:ba:1f:35:de:9f:
84:7b:8c:03:e1:22:58:fb:51:f7:a0:3f:17:c7:c1:
0c:08:78:35:57:a6:bb:71:66:7f:87:64:95:fc:13:
db:8c:c1:12:60:17:b9:32:d9:6c:34:63:26:76:9e:
fb:09:ff:ba:1a:fd:27:51:06:5d:06:c7:84:67:73:
49:ad:09:60:bc:63:06:96:51:43:db:c3:38:ae:8f:
13:b0:5a:ff:c3:18:69:f8:d2:0f:b4:95:e5:93:f1:
ee:4d:3e:ef:d7:a2:fd:b2:d6:c9:fa:dd:f8:1c:8d:
fe:92:3c:0c:b7:a0:a2:8c:ad:18:16:c1:ba:5f:07:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A9:87:0F:12:D5:3C:6D:FF:39:E2:59:C6:CB:5D:F3:EC:9C:C7:87
X509v3 Authority Key Identifier:
keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:58:37:3a:ac:d1:20:39:02:49:2e:bc:71:32:83:3f:76:0d:
37:79:23:0c:b6:99:bc:01:ec:9d:e2:4b:87:d5:51:27:1b:f3:
4a:df:53:85:3b:17:98:1b:a6:b5:b6:4c:d5:d2:7b:ea:86:65:
1c:08:73:fc:3d:f2:e1:39:b8:0b:9e:7f:9d:4c:c8:fc:88:cc:
30:6c:2d:03:d7:68:4d:0e:a8:fd:cd:b9:49:be:19:53:67:64:
71:1d:92:53:5d:53:50:af:c4:42:94:fd:68:12:a6:87:11:ee:
79:0d:b3:8e:d3:cf:a5:a2:b2:48:8d:e5:c4:99:17:d3:b1:14:
50:cf:68:5c:d4:fc:d9:b6:57:d4:d2:da:02:f7:2b:80:25:42:
03:74:a6:28:4c:cf:79:0a:f8:5d:df:41:b3:93:d6:66:42:a3:
6a:7f:58:e3:00:56:ad:48:02:01:6c:a2:a1:76:a8:39:63:c1:
3d:7d:37:d3:3b:0d:3c:1f:66:87:a3:aa:6d:9c:aa:ac:cd:97:
b1:4a:e1:b1:f2:5e:17:de:8c:32:45:bc:29:2b:ab:6d:74:6d:
b6:e1:e4:7b:68:ff:bd:83:60:5a:fd:a7:2d:0f:95:3a:b6:1d:
14:9a:de:64:33:1a:5c:13:c2:7c:51:67:bb:9e:23:7a:63:78:
66:c1:f3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:01 2026 by rpki-client