
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json)
Hash identifier: qA5BlUq117to2Kg+lqfV5n0HE2p+mWeBjMx1KpFsGjQ=
Subject key identifier: AB:5B:B4:E2:46:72:4C:CF:D2:BF:62:03:90:6B:2E:BE:9C:EC:56:FE
Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6
Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
Certificate serial: 39DB6F307180EE58AC45E76676B41CF8EA129341
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
Manifest number: F7
Signing time: Thu 16 Apr 2026 01:51:35 +0000
Manifest this update: Thu 16 Apr 2026 01:46:35 +0000
Manifest next update: Sun 19 Apr 2026 10:22:35 +0000
Files and hashes: 1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=)
2: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: 0JC5VLX9HtpwaVn183jcUs1jzDhrnZyqQ81nmyK15c0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl
rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 10:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:db:6f:30:71:80:ee:58:ac:45:e7:66:76:b4:1c:f8:ea:12:93:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
Validity
Not Before: Apr 16 01:46:35 2026 GMT
Not After : Apr 19 10:22:35 2026 GMT
Subject: CN=AB5BB4E246724CCFD2BF6203906B2EBE9CEC56FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:46:a7:63:b5:be:13:34:1c:d0:6a:19:63:
93:c5:b0:6e:19:c5:b5:26:b7:59:3b:e3:1e:85:70:
4a:c7:30:c3:c1:48:87:ba:b8:21:dc:25:75:1a:d2:
96:94:34:6d:7f:69:5f:c4:d9:4f:84:3a:c1:74:fe:
48:42:92:81:ff:04:59:6e:72:70:b0:ad:a2:1e:9a:
f5:eb:4b:69:27:6c:6e:20:04:67:c6:59:21:f2:40:
63:14:2f:bb:83:f4:59:6c:61:58:39:ad:8e:48:bb:
27:76:0c:a7:a2:1e:f9:95:2e:5d:90:09:5e:06:33:
d8:f5:03:ea:32:10:cb:66:dd:7c:fc:5a:13:3e:9d:
e6:81:db:37:fc:92:24:11:05:64:d7:73:86:8e:89:
47:3d:45:81:81:ab:63:2b:11:df:bb:6a:11:36:69:
b8:5f:81:f4:c3:b8:76:e3:d0:08:73:e8:63:00:5a:
29:f0:5d:ad:e3:b3:8e:c1:52:61:6d:27:87:41:cc:
4b:aa:68:2b:18:d5:5e:1d:86:ee:cf:8c:87:2b:ba:
d7:d5:c7:16:9a:f5:6d:5a:57:2a:57:18:86:e9:d9:
78:28:c6:35:93:45:5f:47:81:6e:3b:52:b1:78:ab:
1b:26:44:10:36:c8:db:7e:1d:95:41:ef:93:ef:4d:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5B:B4:E2:46:72:4C:CF:D2:BF:62:03:90:6B:2E:BE:9C:EC:56:FE
X509v3 Authority Key Identifier:
keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:34:d9:0e:ba:6b:f9:3f:af:3d:cf:59:ee:c2:e5:c4:71:d8:
29:0e:4b:4d:f1:23:37:c9:d1:1c:32:1f:91:39:16:ec:d8:15:
77:c2:37:8f:67:87:44:6b:9d:da:98:a4:68:f0:f5:e1:0e:e9:
82:87:d5:ea:81:c3:2b:62:44:f2:6b:99:69:0a:d2:e6:5d:d3:
b0:a0:78:78:f1:36:50:ca:c9:33:d1:d2:4b:58:66:08:78:53:
26:31:be:d1:5a:36:20:ce:ee:0a:50:c7:88:a5:c3:66:b6:d7:
7e:b6:37:26:6a:d6:1d:10:4f:22:1d:a6:35:a8:0d:b5:d5:ca:
55:0a:73:90:14:c7:37:c7:59:80:6c:94:5e:2a:3d:cb:12:f1:
ea:3c:e1:a7:89:2d:1e:4c:7d:6f:3f:6d:ee:07:5a:75:36:a6:
59:87:27:37:d1:51:ce:08:53:23:e1:66:99:bf:11:b9:bc:17:
99:9f:48:df:f2:5a:06:db:f3:53:c9:fe:be:ea:74:09:e0:d5:
44:1a:2a:d8:9d:21:e9:1c:f9:ed:65:03:36:6a:c4:59:70:19:
2a:0c:44:cf:de:35:cb:a7:b9:96:85:93:fb:79:b1:34:95:b3:
b8:0b:cd:22:1a:61:46:b5:e0:60:1e:e4:57:8c:45:56:20:87:
40:a0:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:59 2026 by rpki-client