
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
File: 31F5B417659DF6EE03991B6AB5E72A24009BC769.mft (raw, json)
Hash identifier: tf6WGgvERPuEArnizZsuh5Rcqw2ZkKnFTKrm9vDdMPM=
Subject key identifier: 7B:4B:55:93:F2:9B:62:7B:46:A9:0B:FB:37:4B:DE:71:EE:A1:A6:C3
Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
Certificate issuer: /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Certificate serial: 40C7BAC9CC258D845A6E172467642AFA024EAD8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 09:28:46 +0000
Manifest this update: Thu 18 Jun 2026 09:23:46 +0000
Manifest next update: Fri 19 Jun 2026 11:57:46 +0000
Files and hashes: 1: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: Lfd/5aGjxi/H/YoBH9y977x//WvhH9K9uLh2uUePXYE=)
2: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: c3R7uIRer6io0faYFiEl0ylntsRw2uXwfzoif+sXbkM=)
3: 31F5B417659DF6EE03991B6AB5E72A24009BC769.crl (hash: rvdSnSYLe9SznOp9lw6mvZrkcP7DH5aKbEKqMqEmlxE=)
4: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: 1VC6tx62RM0RJKUyjy72jMG/vbqwvlA0dq4MTvGeKAY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c7:ba:c9:cc:25:8d:84:5a:6e:17:24:67:64:2a:fa:02:4e:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Validity
Not Before: Jun 18 09:23:46 2026 GMT
Not After : Jun 19 11:57:46 2026 GMT
Subject: CN=7B4B5593F29B627B46A90BFB374BDE71EEA1A6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:0d:74:30:0d:0a:4c:21:52:d2:f6:c2:10:
12:1d:3a:fd:e4:78:95:f7:46:0c:43:20:67:c4:71:
e5:ff:92:83:76:0f:cb:e3:d1:18:ff:f3:a0:f3:08:
03:ff:b2:fe:75:bc:a3:0e:fe:98:65:fd:10:69:42:
7b:60:d2:30:10:cc:0c:8d:1e:0e:4b:36:a9:29:29:
05:97:d0:4e:87:83:84:45:4b:09:de:31:03:9a:b0:
76:48:9e:7d:c0:c1:05:54:e4:28:73:a8:c1:53:20:
da:f3:af:64:74:15:24:16:45:6e:79:c6:8f:a2:55:
17:0a:c6:c6:f0:f9:3c:5a:91:e4:dc:ca:19:f3:67:
ed:30:c7:07:76:79:85:f3:29:77:e4:33:ef:a5:ad:
32:02:37:54:58:42:1c:12:9e:92:90:78:2c:73:9b:
76:2e:6c:24:7d:fc:36:18:05:87:af:4c:c5:1b:de:
b7:47:35:7f:d3:4a:4d:be:60:85:12:ff:37:9a:64:
65:44:02:03:c4:61:f4:c5:e8:c0:02:ae:5b:2f:bc:
c5:22:a2:fc:ba:38:db:97:a5:0b:02:22:18:cf:da:
46:6c:3e:13:97:50:8c:0f:13:4b:c3:ea:fd:80:9e:
bd:7c:45:b8:96:16:6a:57:e9:2b:60:52:fa:03:89:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4B:55:93:F2:9B:62:7B:46:A9:0B:FB:37:4B:DE:71:EE:A1:A6:C3
X509v3 Authority Key Identifier:
keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:53:69:d0:7c:d8:35:ae:d2:73:91:22:68:04:cd:a6:c9:b1:
8f:ce:aa:3d:5b:f4:6c:05:b3:8c:c8:de:30:27:a4:3f:11:ed:
19:3c:19:ed:d6:d4:08:f6:12:f8:18:67:d8:1e:a5:37:7d:14:
e2:d7:27:4d:c1:3f:06:5f:29:02:68:c6:fc:a1:cc:6d:60:77:
5c:29:85:56:c7:eb:bd:31:10:e0:3e:84:01:0c:74:6f:f7:82:
03:ce:88:e5:60:80:69:d6:96:cf:a3:ca:0c:e3:6c:07:1c:61:
57:af:76:8b:fb:fc:10:3c:c1:37:93:01:91:05:0c:a7:a8:f2:
d7:6f:63:d9:48:9b:d4:2e:22:88:7b:fb:39:36:11:b5:12:98:
ea:cd:e3:24:da:a9:cf:de:bc:05:1d:ac:c4:d7:0d:66:f0:4c:
73:37:b0:b0:1f:ba:fe:6b:29:18:47:8e:33:06:f2:c2:fa:68:
06:f7:c9:07:8b:e4:e3:b7:bf:b5:2f:c1:34:79:1c:11:74:86:
f0:82:dd:5d:a4:31:b3:6d:42:8f:77:09:0a:83:43:0f:f9:e2:
34:d6:a0:a7:6e:2f:e6:08:ef:19:ae:6f:dd:81:a7:11:f6:83:
b5:71:0b:97:4b:b1:3c:e1:0f:a8:73:85:a1:d3:a4:f5:f8:65:
84:d2:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:38 2026 by rpki-client