
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
File: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft (raw, json)
Hash identifier: grmsozuhHeoUlnBlPIhXQFSdDoLEGwmQu73e7IuViXg=
Subject key identifier: D2:56:38:BE:AC:76:73:D4:74:1F:3E:E0:56:E3:B3:0C:07:C8:39:DA
Authority key identifier: B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B
Certificate issuer: /CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B
Certificate serial: 43F82102C54C3A54C58F4ED2E66D75B93E881671
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 04:12:55 +0000
Manifest this update: Wed 17 Jun 2026 04:07:55 +0000
Manifest next update: Thu 18 Jun 2026 06:05:55 +0000
Files and hashes: 1: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl (hash: c6KrnKAOj7VbIeSLHB0w1QR7/KVGQ42486JBQ4+PDAw=)
2: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: 5fm1VV66aIhuu/oPeZZw27kiviKlDXlW5aL6SC7t08E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl
rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f8:21:02:c5:4c:3a:54:c5:8f:4e:d2:e6:6d:75:b9:3e:88:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B
Validity
Not Before: Jun 17 04:07:55 2026 GMT
Not After : Jun 18 06:05:55 2026 GMT
Subject: CN=D25638BEAC7673D4741F3EE056E3B30C07C839DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:29:5e:08:55:f2:36:7d:8b:0d:90:d5:33:
24:bc:1c:3c:d2:4e:9d:99:d0:de:6c:e3:f5:9a:e2:
61:2b:f6:e0:05:8f:2a:33:a6:cb:30:c1:ce:50:4f:
1f:e8:30:4a:e2:21:b8:3a:49:f7:23:1b:ee:de:81:
6f:ac:53:79:09:3b:82:f4:65:d0:f4:b3:bc:4a:3c:
fc:a5:de:4f:d9:cf:fd:79:72:de:42:98:e8:db:c4:
96:c2:4f:10:47:82:09:0b:20:c5:11:c5:b7:c9:58:
d2:48:8b:11:80:af:65:55:15:31:9e:50:05:9b:52:
8d:a7:52:da:3d:d1:9c:81:e8:70:cc:67:3e:50:76:
ef:7a:e8:8b:4c:c6:36:2c:39:c5:b6:48:49:3a:00:
42:10:14:40:14:44:44:e9:0c:8d:a6:9c:cc:43:b6:
16:08:78:f6:7e:fa:9e:3c:d6:6d:30:f4:f0:2d:4a:
a9:1c:68:c2:fd:e0:f7:21:97:e3:6a:3c:2b:c8:dc:
cf:8f:ee:b2:52:84:d2:61:c4:3e:e9:35:49:a7:02:
54:ac:7a:b8:ee:a5:fb:c2:6d:95:ed:51:f7:67:0e:
f2:da:cf:e8:a4:34:6f:03:95:45:c2:b2:11:17:26:
43:10:56:f3:17:b8:b8:7f:94:70:06:aa:5e:d8:16:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:38:BE:AC:76:73:D4:74:1F:3E:E0:56:E3:B3:0C:07:C8:39:DA
X509v3 Authority Key Identifier:
keyid:B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1b:ac:33:8c:17:4d:bb:79:99:5f:bb:2d:52:ad:17:bb:0c:
94:c2:6e:ef:80:19:47:59:1d:9d:51:27:41:ac:9c:f3:76:d6:
49:b4:2c:c7:df:f8:2d:44:a8:b3:6c:92:ef:03:5a:07:f0:b3:
ad:22:af:34:10:dd:6f:89:8a:03:48:f4:f2:7f:68:89:ef:23:
08:e6:f0:1c:ce:ba:6d:51:1d:7a:72:49:51:ed:c1:07:06:1b:
18:fc:82:72:5d:c7:03:1d:8c:37:d9:ad:20:72:68:23:3f:ba:
c3:e0:c5:e6:bc:7c:f2:99:ae:cb:35:bd:1f:bc:78:09:e0:cc:
11:99:78:93:9f:c4:ea:78:3a:e6:8b:e1:8f:4d:72:f7:7a:df:
31:ae:b9:a9:cb:d6:bb:30:60:48:41:79:14:5a:ec:51:2b:19:
1b:af:ec:4a:ff:3f:f4:9e:f9:4b:97:24:93:3c:2b:10:e4:44:
1c:5a:aa:d8:4a:6e:cc:43:28:54:ac:35:58:dd:8c:06:b2:d8:
5d:c8:c4:f2:29:87:2f:62:7e:c8:60:f9:13:70:85:a6:4c:d7:
6f:fe:0f:53:3a:99:96:18:f5:36:19:ae:cb:ea:e6:43:2c:b6:
ba:73:d1:bb:6c:71:f6:06:8b:f8:ea:48:e6:d0:28:25:a5:9c:
dd:99:2f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:33 2026 by rpki-client