
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
File: 31F5B417659DF6EE03991B6AB5E72A24009BC769.mft (raw, json)
Hash identifier: SJEzvMYskNVpJ6Wospb1aSxPBg07qEDoGMkXChu1Zc0=
Subject key identifier: E5:E9:96:EA:00:6C:33:A3:CC:7C:AF:16:C4:FB:9D:73:43:93:3D:2E
Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
Certificate issuer: /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Certificate serial: 7FF82802B6FDD9A7E2F7EF3FDD2BF26285780F6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:35:22 +0000
Manifest this update: Tue 16 Jun 2026 21:30:22 +0000
Manifest next update: Wed 17 Jun 2026 23:14:22 +0000
Files and hashes: 1: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: 1VC6tx62RM0RJKUyjy72jMG/vbqwvlA0dq4MTvGeKAY=)
2: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: Lfd/5aGjxi/H/YoBH9y977x//WvhH9K9uLh2uUePXYE=)
3: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: c3R7uIRer6io0faYFiEl0ylntsRw2uXwfzoif+sXbkM=)
4: 31F5B417659DF6EE03991B6AB5E72A24009BC769.crl (hash: C3NI3YL19E7HMq7xudM30b75ObcjUPnQjId6rcaPDBY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f8:28:02:b6:fd:d9:a7:e2:f7:ef:3f:dd:2b:f2:62:85:78:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Validity
Not Before: Jun 16 21:30:22 2026 GMT
Not After : Jun 17 23:14:22 2026 GMT
Subject: CN=E5E996EA006C33A3CC7CAF16C4FB9D7343933D2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:1e:39:ac:a6:2b:32:ce:0b:c7:c8:54:36:
4f:a8:13:4a:46:c9:6f:e5:7a:5a:2b:dc:6a:c7:fa:
5d:af:08:11:fd:c3:aa:95:0a:23:00:a2:ba:5b:e6:
d7:fb:a3:0b:c4:da:1b:e6:f9:13:b5:d1:02:ee:bd:
83:a0:da:be:4e:be:d7:ae:23:b5:71:fc:d2:3f:08:
d7:e6:85:93:88:bd:5b:d7:39:9f:3e:99:71:e7:e9:
d4:70:51:e2:c4:3a:a4:b2:2b:cd:a0:37:af:ca:9c:
77:21:4a:94:0d:89:57:b4:88:40:c1:05:fc:5f:fb:
d1:d2:d4:6a:93:ae:0d:1f:6d:7e:70:98:1f:3a:f2:
78:8a:52:6c:57:bf:76:78:10:61:3e:cf:d2:f5:c5:
1a:7b:44:4a:02:34:0d:7a:b0:fc:80:7c:61:83:f2:
e4:af:8c:ac:3c:91:0a:1f:e0:2e:0d:b5:06:99:95:
51:c0:9c:91:e5:9d:83:49:7d:57:ca:65:e0:74:c9:
83:05:8f:98:97:08:c1:e4:4f:64:8a:aa:dc:16:ea:
54:64:18:b4:bb:7b:28:92:3a:e8:15:36:cd:b9:46:
8c:f7:1b:1b:ad:e0:d7:e5:ff:f5:62:69:a6:30:bd:
29:b5:a2:63:05:10:69:23:40:39:3e:46:7e:63:d3:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E9:96:EA:00:6C:33:A3:CC:7C:AF:16:C4:FB:9D:73:43:93:3D:2E
X509v3 Authority Key Identifier:
keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:40:2f:69:17:95:3d:28:65:70:5e:2b:45:b4:e3:96:e9:9a:
f2:ed:08:41:81:bb:61:02:af:4b:77:d9:c4:31:e5:1e:7d:98:
28:53:5b:fc:dd:43:46:21:bd:81:4f:07:05:ef:58:c9:e0:a8:
47:87:bd:0b:ba:8a:b2:93:49:1c:2e:65:90:dd:e2:2f:9f:ec:
22:7c:9b:04:ea:88:15:31:2e:aa:dd:20:94:ff:78:d3:27:4b:
16:46:cf:d8:2e:2d:03:a3:24:25:81:d4:25:90:02:a9:65:db:
ee:74:d3:54:e1:b5:71:9c:27:06:70:ad:f6:a3:35:e4:85:77:
4b:76:fc:72:e0:af:0a:da:e1:e2:b1:73:b2:f8:bc:d7:c2:08:
65:86:c7:74:07:62:32:93:30:4b:c6:d9:2d:13:42:b3:99:ce:
4a:2f:eb:08:a4:ce:c4:2d:ba:2e:b8:ed:57:9d:8b:bc:c6:4f:
46:f5:9d:d3:49:47:49:07:ed:bb:f0:1d:7a:8d:b4:01:67:ad:
64:75:f0:14:c9:62:a5:f7:c3:29:19:f4:38:81:ea:df:56:04:
fd:09:c1:5a:10:eb:6b:d7:76:98:e1:88:52:54:92:0c:fa:d5:
20:ef:6c:c6:d5:8e:ce:50:14:1e:e0:67:0f:0d:0a:c5:20:7f:
c1:37:99:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:29 2026 by rpki-client