
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
File: 31F5B417659DF6EE03991B6AB5E72A24009BC769.mft (raw, json)
Hash identifier: nPbOMcp1nkvervO8JKA56Yyrm3vIITukUilUEfhbmwE=
Subject key identifier: D7:9C:3E:52:F6:4C:58:C2:27:9E:72:91:58:84:19:4E:52:05:BA:32
Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
Certificate issuer: /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Certificate serial: 7328F35816C4EC8C38667AB758E90A470FB46E6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 22:21:33 +0000
Manifest this update: Wed 16 Sep 2026 22:16:33 +0000
Manifest next update: Thu 17 Sep 2026 23:23:33 +0000
Files and hashes: 1: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: 1VC6tx62RM0RJKUyjy72jMG/vbqwvlA0dq4MTvGeKAY=)
2: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: Lfd/5aGjxi/H/YoBH9y977x//WvhH9K9uLh2uUePXYE=)
3: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: c3R7uIRer6io0faYFiEl0ylntsRw2uXwfzoif+sXbkM=)
4: 31F5B417659DF6EE03991B6AB5E72A24009BC769.crl (hash: MdeDq5vTf5AKK+81579uKqjHTDsSDw2So1Ey/VWoZcc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:28:f3:58:16:c4:ec:8c:38:66:7a:b7:58:e9:0a:47:0f:b4:6e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Validity
Not Before: Sep 16 22:16:33 2026 GMT
Not After : Sep 17 23:23:33 2026 GMT
Subject: CN=D79C3E52F64C58C2279E72915884194E5205BA32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:76:1a:7e:3f:1c:14:82:51:7c:9a:cf:54:
8d:a5:eb:56:c6:93:3f:35:67:34:13:e9:96:89:bf:
d8:1c:77:e4:f2:24:0b:8d:98:be:45:d6:5b:01:2a:
c1:7b:fe:1b:4b:bd:c9:95:5d:f0:59:82:3a:06:ec:
e3:56:34:f7:27:52:83:86:b7:00:6c:c9:64:bd:95:
bd:65:b2:94:6d:7e:d4:41:46:52:e7:50:c6:2d:89:
1d:90:53:34:74:61:3a:c8:04:3a:16:06:53:f8:cb:
fe:7d:64:bc:d3:85:74:55:f2:a2:dc:20:bf:fe:e9:
a9:5b:06:a7:d7:3d:c2:4f:a2:9d:2e:66:ba:ff:2b:
a0:6d:c8:51:1f:46:23:95:71:26:cc:bb:3d:ab:bc:
aa:aa:39:5c:e1:1f:3d:3c:d5:53:02:fe:a3:9e:26:
36:41:70:81:91:43:d2:d7:51:75:32:a2:e9:73:b5:
ad:f7:3a:c4:3a:d1:62:6f:7b:dd:27:45:15:d1:13:
e2:5a:d8:d9:c4:1e:d3:41:ac:5d:b6:79:29:db:86:
3e:4b:64:e3:dc:75:be:44:fd:3f:4a:94:cc:71:80:
c9:7b:24:92:ab:31:e1:23:2d:61:90:5c:89:85:23:
1e:31:0f:2e:f4:1f:bc:b0:fa:e9:9a:a4:06:57:9b:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9C:3E:52:F6:4C:58:C2:27:9E:72:91:58:84:19:4E:52:05:BA:32
X509v3 Authority Key Identifier:
keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a0:4d:93:e5:58:e4:4f:ca:9a:d9:8f:bc:a8:c3:cc:c4:ed:
eb:05:f4:aa:ee:31:6f:bc:f5:c2:65:17:c0:74:94:53:20:e6:
7d:3d:9b:74:79:e2:27:bf:a6:f7:a8:ac:49:2c:2a:49:6f:81:
41:eb:e4:56:c0:ac:1d:f7:e1:85:48:5b:1c:5c:2c:4c:44:e6:
f3:50:ca:db:58:5b:21:ec:87:9b:f6:53:64:70:2f:5e:25:97:
f8:79:8a:30:1d:88:10:18:75:80:b2:e0:e3:ef:cc:90:cb:c8:
e9:eb:c9:dd:15:33:5d:df:27:ad:96:37:90:84:64:b5:ca:5f:
4b:5c:40:b6:05:9b:73:1f:d8:36:5f:63:f2:e8:33:76:54:cc:
30:3e:cd:ba:81:2a:64:58:fc:13:9d:c9:10:21:ab:8c:31:ef:
3a:a1:25:93:b8:56:6e:55:a9:48:da:5e:52:3e:a8:a0:b1:a3:
31:c2:39:cd:f3:fd:bc:54:e2:31:9e:8f:52:07:7a:80:bd:54:
84:ab:0e:d2:02:35:47:3b:e2:f2:f3:70:db:8b:0c:a0:51:64:
85:93:0f:3c:d5:d1:f4:09:4f:08:99:87:5e:b5:75:55:a1:70:
76:fc:0e:51:a3:7e:3a:fd:fa:46:7b:ef:8b:67:75:ed:41:ef:
dd:c8:02:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:55:17 2026 by rpki-client