
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
File: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft (raw, json)
Hash identifier: +BXkJESmdtkkw3UUMqr/BPIqKo2GlxmWGeofJNyVNaA=
Subject key identifier: 9C:62:3A:3B:D9:85:F4:FC:98:2B:D9:52:8D:9D:21:7A:FC:E5:06:9D
Authority key identifier: B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B
Certificate issuer: /CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B
Certificate serial: 234781B8C7A22E61F94C7D9106D2C53FA4A76B65
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 21:37:54 +0000
Manifest this update: Mon 20 Jul 2026 21:32:54 +0000
Manifest next update: Wed 22 Jul 2026 00:24:54 +0000
Files and hashes: 1: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl (hash: TzYIo1IvAgUy9o0+JnaT5p/MIpCpVhmpyIj0ROV/PsA=)
2: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: 5fm1VV66aIhuu/oPeZZw27kiviKlDXlW5aL6SC7t08E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl
rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 00:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:47:81:b8:c7:a2:2e:61:f9:4c:7d:91:06:d2:c5:3f:a4:a7:6b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B
Validity
Not Before: Jul 20 21:32:54 2026 GMT
Not After : Jul 22 00:24:54 2026 GMT
Subject: CN=9C623A3BD985F4FC982BD9528D9D217AFCE5069D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:65:ac:cb:bc:a1:04:29:00:92:08:2e:3c:
ec:b9:ec:49:99:41:8a:72:d7:5b:9a:c7:6e:12:3e:
13:bc:49:51:9f:ad:e1:5a:a7:c6:71:81:38:17:0d:
d7:78:c1:c1:f1:f9:11:2c:d7:35:e3:90:91:0f:92:
04:ca:b0:70:45:0e:0d:4e:6f:91:b9:89:64:4b:90:
3a:71:e5:e9:28:14:d3:e4:68:fd:f5:e2:61:45:9e:
c3:0e:b6:07:bf:07:8e:c1:69:f8:6c:74:94:50:03:
3c:52:c0:37:87:66:1d:d7:49:58:2d:09:f3:9f:ee:
cf:74:a6:7c:dc:2c:bc:24:9c:8c:67:bd:97:3c:9d:
50:39:c7:24:31:49:a8:c7:b9:11:03:2c:ef:77:35:
8b:86:d3:d2:d1:a7:99:9a:0a:4b:02:20:38:78:1a:
d7:b5:48:a5:cf:05:b1:5c:1e:44:a9:d3:3c:3f:8d:
d9:fc:e8:e9:a0:dc:8c:09:c4:67:e2:b0:b6:27:76:
5d:c6:cf:bc:af:7f:45:02:c9:bc:db:2f:dd:70:08:
fa:a5:3f:f8:84:4f:bc:04:29:43:27:28:d0:ba:ca:
9f:70:a0:3f:db:7b:d8:fc:8c:d3:6c:ae:e7:dc:70:
bf:32:23:4c:33:9b:1a:26:ed:82:16:fc:6b:ae:74:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:62:3A:3B:D9:85:F4:FC:98:2B:D9:52:8D:9D:21:7A:FC:E5:06:9D
X509v3 Authority Key Identifier:
keyid:B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:ff:2b:e8:bb:f4:24:d4:ea:da:c6:c7:b0:7e:f6:d2:aa:
0b:95:c4:a1:14:68:d2:9e:04:10:fa:3e:e3:3e:cc:9a:43:bb:
f7:d4:d1:f3:38:f6:85:b5:da:86:11:4d:ca:96:fc:0f:1e:e8:
6b:02:30:12:b3:3a:1e:8d:5f:86:a7:cb:d9:50:c2:27:bb:79:
de:52:ba:b6:0b:3d:eb:62:d6:18:21:66:49:26:f1:5f:1f:72:
4a:c6:df:16:62:dc:a8:f7:d2:1b:61:c9:c5:18:cd:51:dd:b3:
15:a6:2f:f3:8b:a6:46:be:7a:30:0a:89:2d:96:e8:d5:77:db:
f7:59:84:fb:ba:55:69:ed:d1:e9:32:7b:84:4a:69:25:de:ab:
8e:95:60:35:f4:35:ab:07:38:7a:e1:e1:2f:e3:58:62:ad:73:
e6:f8:01:44:fa:6c:51:c0:4f:5a:54:a7:38:92:a1:7c:53:c3:
3d:7c:b5:e9:3e:e0:ec:7f:a9:75:38:7a:7f:69:a6:89:90:56:
72:b1:88:aa:4f:e5:93:38:31:23:18:3f:52:5d:2c:c4:5f:7a:
01:63:1e:86:95:6d:2e:c2:c1:4c:c6:b2:bb:b1:81:a6:6c:a1:
25:e4:2a:73:f2:0d:ba:96:47:81:fc:11:7e:08:85:1f:68:ab:
e6:5e:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:48:16 2026 by rpki-client