
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
File: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft (raw, json)
Hash identifier: A2Zn0teyShXVOpen0O9zXcENwq5REn19VljrfW8UOSw=
Subject key identifier: 82:A9:4A:8F:DD:19:83:23:B2:87:7E:6F:62:31:2C:73:86:51:87:12
Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
Certificate issuer: /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Certificate serial: 5FDB3B3878E8E94CD951ECDE5F4E052840A9CA11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 08:14:43 +0000
Manifest this update: Tue 12 May 2026 08:09:43 +0000
Manifest next update: Wed 13 May 2026 09:17:43 +0000
Files and hashes: 1: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: QGfwj5bqNP4jOjjdpeGZhiTRodQ0EdpPB4bLvU+Pufs=)
2: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl (hash: lxbVOvlrf4PpGxyydAsdVoykC15ydjza5U9O9mvBklk=)
3: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:db:3b:38:78:e8:e9:4c:d9:51:ec:de:5f:4e:05:28:40:a9:ca:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Validity
Not Before: May 12 08:09:43 2026 GMT
Not After : May 13 09:17:43 2026 GMT
Subject: CN=82A94A8FDD198323B2877E6F62312C7386518712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:64:a9:e5:fa:c3:4c:7d:30:0d:1c:20:42:
2d:95:9a:87:05:84:cd:5b:dd:fe:f2:61:82:09:fc:
10:e8:2a:07:a4:18:7e:aa:96:f0:fe:0e:e9:07:ac:
db:42:4b:7f:03:e0:a5:cd:76:21:31:fb:90:c3:62:
c8:c5:55:91:36:40:f0:ea:95:ff:66:6c:8d:22:02:
77:5d:4f:ee:10:f6:38:df:25:6f:0f:da:27:2b:84:
f4:67:6a:a7:97:eb:2b:4c:17:e9:13:1c:b6:8e:86:
ca:1b:d2:7b:46:e1:33:08:3d:9f:5a:1b:37:5e:24:
ad:9d:86:1a:21:9a:7c:3a:f9:d8:9f:73:67:19:51:
97:04:54:f8:84:13:e2:5e:06:34:e3:e3:1e:12:b3:
59:3b:98:07:5c:9b:30:09:a2:7c:92:5d:ad:cf:d1:
ff:d7:37:79:54:ae:e4:24:34:08:93:a4:05:16:ef:
05:0e:fa:a3:a3:33:1b:f6:1e:ae:7f:5f:3c:c8:69:
c8:1e:36:17:15:a7:ac:59:1f:21:93:02:8a:04:21:
4a:e6:e9:fa:61:af:ea:28:07:64:2e:19:a0:d7:e0:
42:ee:8f:e0:67:e3:dc:0b:60:b1:74:99:ea:5f:09:
47:7e:0c:22:ef:47:b1:b9:54:6c:08:d5:7a:aa:ef:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:4A:8F:DD:19:83:23:B2:87:7E:6F:62:31:2C:73:86:51:87:12
X509v3 Authority Key Identifier:
keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5f:05:ff:67:6b:36:1c:97:e9:97:ac:1d:03:18:61:39:e3:
0d:9c:f1:c0:33:41:43:de:22:26:0b:a4:f8:a6:9c:de:be:94:
57:65:64:7c:b3:b5:de:44:7f:ba:6a:f4:b3:b5:1a:e8:03:d7:
c4:5c:f4:a4:b7:70:82:77:26:17:e2:d8:d0:c9:54:6f:cc:7a:
43:e4:06:25:de:14:de:62:df:3a:1f:bf:65:4f:3b:f0:2a:0a:
cd:25:a7:f2:02:33:ee:49:84:66:fb:ef:4b:32:78:1d:3d:63:
f0:1b:b1:db:ba:97:b7:ec:30:cb:a4:51:83:86:e0:13:86:3e:
93:c9:52:32:33:47:23:37:ae:9f:b5:b0:50:6f:d5:08:d3:36:
f3:b8:8e:46:ba:f4:b1:c2:b4:e1:d9:5f:a9:d2:2f:ed:1c:2c:
21:00:99:a4:75:53:c8:30:62:25:57:f4:80:2b:41:58:23:da:
a1:61:b6:62:69:5d:be:75:53:be:ed:30:c2:da:b6:2f:e6:9d:
49:c0:c8:1b:fe:af:6e:97:a0:22:30:90:71:92:1c:27:eb:5b:
7c:7d:2d:e8:ef:8c:7f:26:92:9c:18:ab:6e:99:b7:3a:7b:ea:
e1:b2:6e:8a:0c:09:e6:72:ce:4e:af:b9:35:ce:d4:19:f3:9b:
43:6b:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:52 2026 by rpki-client