
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
File: 31F5B417659DF6EE03991B6AB5E72A24009BC769.mft (raw, json)
Hash identifier: DESkitHD/G69E2/4dPrJaivpmkJ7UVz5K++IhOYXz28=
Subject key identifier: 62:FD:CC:02:BE:6B:02:05:96:D2:52:BC:EC:1A:DA:66:8E:D1:97:87
Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
Certificate issuer: /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Certificate serial: 5FB097605DF9F520A28E36FDA382E14CC913E3B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 10:20:09 +0000
Manifest this update: Sun 02 Aug 2026 10:15:09 +0000
Manifest next update: Mon 03 Aug 2026 12:35:09 +0000
Files and hashes: 1: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: 1VC6tx62RM0RJKUyjy72jMG/vbqwvlA0dq4MTvGeKAY=)
2: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: Lfd/5aGjxi/H/YoBH9y977x//WvhH9K9uLh2uUePXYE=)
3: 31F5B417659DF6EE03991B6AB5E72A24009BC769.crl (hash: DmHo2MG5GpUtMh4Bo0XPatXY0aLdifD+n8TukXbCrWg=)
4: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: c3R7uIRer6io0faYFiEl0ylntsRw2uXwfzoif+sXbkM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 12:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b0:97:60:5d:f9:f5:20:a2:8e:36:fd:a3:82:e1:4c:c9:13:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Validity
Not Before: Aug 2 10:15:09 2026 GMT
Not After : Aug 3 12:35:09 2026 GMT
Subject: CN=62FDCC02BE6B020596D252BCEC1ADA668ED19787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:78:c5:16:88:f3:f7:19:a8:e6:aa:1c:71:
e9:86:6c:2b:db:37:72:be:d2:0b:e3:df:21:6a:8d:
a9:3d:00:bd:09:e2:be:58:2e:9a:25:fc:23:29:b5:
4a:e8:c3:0e:61:60:26:d2:d5:27:57:df:2b:fd:07:
d0:a8:96:60:4d:8c:aa:ac:17:2e:8a:6e:6d:36:dd:
f9:50:0f:60:9c:42:c0:f4:52:e7:2c:0e:f3:37:3e:
4d:20:24:c5:16:95:30:9c:3e:d8:44:78:d3:2f:b9:
3a:b6:fe:6e:a3:4a:37:0f:da:f8:b0:7b:e7:b5:29:
a4:f8:e8:12:08:11:5d:1e:d9:20:2d:47:31:8e:cf:
9f:4e:f7:e9:c9:39:68:e4:ef:9d:db:bd:49:ee:54:
9a:ec:87:76:9d:3e:78:ad:14:64:1b:44:b9:b0:22:
d7:ba:76:58:18:0e:fc:53:f3:44:35:36:f1:87:34:
dd:2d:0a:92:32:cf:f3:2b:41:5b:10:cf:36:1a:df:
29:93:e9:cd:47:13:7c:95:43:6b:bf:a0:71:8a:59:
69:d9:87:4b:69:8a:78:00:9c:fc:06:ae:4d:81:16:
09:c7:43:1f:9e:8f:26:ad:d8:b3:26:be:55:1c:47:
9a:79:23:c9:e7:55:7b:7a:88:a7:cb:af:2e:2c:76:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FD:CC:02:BE:6B:02:05:96:D2:52:BC:EC:1A:DA:66:8E:D1:97:87
X509v3 Authority Key Identifier:
keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:79:40:84:a1:5c:d6:dc:17:a9:2e:9f:35:75:4d:39:65:4e:
ea:71:b5:08:ee:eb:d0:b0:b3:36:b4:17:9b:0d:98:e8:bd:62:
bf:f7:b2:6f:46:cc:e1:6b:b9:de:5e:a9:39:da:0c:07:3e:a7:
3b:5d:a3:98:ea:48:32:4f:0a:89:e5:80:74:c7:a1:54:1e:a8:
1c:84:a9:79:34:c1:1b:fe:0f:d1:e2:6d:4e:80:d1:7a:b1:ac:
f6:33:69:72:aa:ac:1a:98:36:28:94:e0:1c:45:96:59:f9:8a:
fc:17:ce:62:a4:83:c9:67:46:b5:9a:ee:69:56:0f:79:93:66:
92:a7:f9:93:5e:d3:cc:d4:0f:d8:61:88:81:ab:4e:b7:22:ac:
db:8c:44:cc:7b:fc:99:a1:33:ba:08:26:99:ae:dc:a2:a9:d0:
c2:6f:0c:21:c1:fc:64:ac:92:5e:12:b7:8e:2d:cf:b6:7b:a7:
28:f6:30:2a:61:07:16:27:bf:f8:d2:6a:1c:96:49:5b:ba:29:
85:04:82:fb:f3:13:07:3b:68:9b:df:14:8d:e5:b6:42:6b:b9:
99:76:c0:a9:d1:23:d1:6f:c1:b3:99:1e:9e:f6:b0:63:91:89:
58:c8:da:55:05:79:41:e6:35:37:c8:9d:f9:5e:db:09:dd:a0:
1e:29:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:41 2026 by rpki-client