
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
File: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft (raw, json)
Hash identifier: z1eU9yrdc0XfnkxtIRjl12JGDlJ+Bxpu3XQK8YNg7CE=
Subject key identifier: 42:6D:A7:5B:45:A7:B0:22:F4:4B:A6:07:B3:E3:13:13:4F:0F:A3:8D
Authority key identifier: B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B
Certificate issuer: /CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B
Certificate serial: 7C724C4619F094363EDEC74A4016B2AE04EB3E7B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 18:24:19 +0000
Manifest this update: Mon 21 Sep 2026 18:19:19 +0000
Manifest next update: Tue 22 Sep 2026 18:47:19 +0000
Files and hashes: 1: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl (hash: NrUzDePi4FupsCb9QTOqm3j8v2Wdep/4lIohH2yFiv4=)
2: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: 5fm1VV66aIhuu/oPeZZw27kiviKlDXlW5aL6SC7t08E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl
rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 18:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:72:4c:46:19:f0:94:36:3e:de:c7:4a:40:16:b2:ae:04:eb:3e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B
Validity
Not Before: Sep 21 18:19:19 2026 GMT
Not After : Sep 22 18:47:19 2026 GMT
Subject: CN=426DA75B45A7B022F44BA607B3E313134F0FA38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:f3:08:72:fb:23:2c:5a:62:8b:85:f4:7a:
be:cc:eb:39:27:c1:49:0f:3b:79:32:74:02:4c:94:
2b:d7:5d:da:c5:24:f4:d1:86:99:30:bf:2e:73:8b:
7b:d0:e9:9a:69:2e:7c:2c:57:5b:67:e9:ca:b1:a9:
ca:7c:a7:e2:97:21:f7:55:64:cb:fb:0d:a4:d6:df:
66:4f:09:5f:a5:77:44:d2:49:9a:14:98:90:59:29:
c9:da:c6:7c:ef:1b:7f:99:96:a5:0f:c0:a3:89:62:
60:87:28:a6:1b:3b:df:47:88:dc:c1:5d:4d:fa:23:
6c:7a:f7:1f:6b:85:b8:9c:c4:93:ad:53:57:2b:42:
25:21:1f:33:18:fb:27:2b:7a:fc:2e:28:9f:19:79:
f1:a8:06:9b:5f:4a:d4:fc:60:fc:ce:e1:00:f7:3e:
e7:5c:b2:ef:3b:15:51:0c:90:98:23:ff:09:8c:db:
e4:1f:7f:88:92:4a:5a:76:53:99:39:58:76:a9:a1:
64:9b:7a:f7:8e:1c:58:37:6e:6a:50:0c:4c:af:38:
8e:eb:ec:61:5c:1b:f1:45:47:bd:9a:04:0c:e7:53:
44:b2:aa:a8:8d:d4:81:74:ef:2e:59:e0:94:e7:bc:
4f:19:b9:a1:60:9e:ba:23:a0:de:ce:2f:8c:97:88:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:A7:5B:45:A7:B0:22:F4:4B:A6:07:B3:E3:13:13:4F:0F:A3:8D
X509v3 Authority Key Identifier:
keyid:B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4d:46:7f:9a:ce:95:2e:3f:6f:e1:86:8a:cb:bf:39:ee:05:
cb:68:e1:15:2c:dd:38:ca:3a:a0:04:bc:49:32:97:ba:af:63:
65:65:73:c3:50:71:8a:19:28:83:b1:0e:79:b2:44:f2:a1:41:
a2:15:26:22:b4:e5:52:c4:ad:ba:92:64:13:be:4b:fc:98:1c:
c3:24:62:0b:ad:96:0e:5a:1d:6a:e3:b2:83:eb:c5:e2:d8:5f:
f6:0e:1c:ed:2f:a0:b4:49:1d:51:9f:27:b9:b3:41:5e:80:00:
d4:58:a2:82:5f:33:02:19:21:ba:24:8a:88:97:cb:62:20:b2:
84:f7:57:a6:af:3e:da:c0:b7:a2:b8:4e:5e:ab:70:4e:86:c1:
2e:c8:f6:86:5e:6a:de:e5:b4:86:7e:6f:24:9e:dc:de:b9:8b:
47:eb:8e:6d:8b:25:4a:64:13:79:20:0b:dd:38:bf:d2:d9:68:
7c:2f:29:88:a0:db:1d:8d:05:5a:53:7a:af:44:91:69:3a:69:
45:60:97:4e:22:71:43:2a:51:df:33:f7:71:41:0b:00:ba:2e:
44:ae:c3:b6:5f:49:43:57:68:e7:fa:b3:b7:cb:e0:84:b2:b7:
93:63:6d:ef:3a:b2:7d:14:a0:b5:7f:cc:73:32:cd:30:32:26:
7d:b3:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:59:19 2026 by rpki-client