
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft
File: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft (raw, json)
Hash identifier: zS6NdNBo7ac0J57wVMEa5UkiBwaFbLF4U6X3gMTVz58=
Subject key identifier: 0C:90:55:40:52:4E:E9:B4:6F:16:0A:20:8E:76:74:57:24:D6:EE:2D
Authority key identifier: BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4
Certificate issuer: /CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4
Certificate serial: 461D6EAE65913DF4DAA4EED5153491CFA8E8C205
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:37:49 +0000
Manifest this update: Thu 23 Jul 2026 18:32:49 +0000
Manifest next update: Fri 24 Jul 2026 20:37:49 +0000
Files and hashes: 1: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl (hash: pvTyq1n0IsrzB7KfTohFBHZUib3wwhwlowMTxZLBzRA=)
2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: UuRUSNqdjIpRgWCi5F5RSbdgKiXL1eLlsoyTQx4fcqY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl
rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:1d:6e:ae:65:91:3d:f4:da:a4:ee:d5:15:34:91:cf:a8:e8:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4
Validity
Not Before: Jul 23 18:32:49 2026 GMT
Not After : Jul 24 20:37:49 2026 GMT
Subject: CN=0C905540524EE9B46F160A208E76745724D6EE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:c9:b6:11:76:2c:1a:c2:77:4e:32:04:3b:
59:bb:bf:a4:d2:28:f4:7e:21:b8:85:99:b6:b5:a3:
05:19:07:60:22:9f:81:df:62:97:8a:6f:78:8c:90:
e5:0a:ea:5f:2c:74:71:5c:09:2a:f2:d6:1d:65:29:
97:ae:ea:dd:66:0d:86:52:41:6b:bd:6c:91:d0:78:
3e:00:1e:40:7f:6a:bc:10:34:eb:b2:8e:fc:b2:c5:
f4:d6:04:a3:39:09:6e:44:24:37:0d:b3:6b:cb:c7:
23:b7:ff:9c:56:54:33:ce:2b:c3:1a:c4:68:00:7b:
0c:b7:28:3d:85:b3:92:f7:6a:8c:7e:25:fb:e9:27:
e2:93:23:da:ec:6f:1a:76:06:ae:51:e3:46:39:1f:
f8:f2:83:10:66:c0:06:ed:99:b1:7e:02:a5:1a:c3:
35:10:ea:41:4b:b6:7a:3f:62:f0:19:e4:e5:28:bd:
b7:96:03:bc:1f:2c:1a:a1:a0:10:a0:49:b7:7f:bb:
0f:50:72:7b:e0:70:e4:1a:0a:04:cd:0b:d0:e8:59:
58:e2:97:f0:69:db:96:29:19:68:f0:e6:56:f2:31:
29:e2:77:a4:3f:ae:5d:28:cc:bd:29:e9:83:52:4d:
43:21:9a:80:ae:ad:a2:a2:42:3e:a6:7f:e8:e6:f1:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:55:40:52:4E:E9:B4:6F:16:0A:20:8E:76:74:57:24:D6:EE:2D
X509v3 Authority Key Identifier:
keyid:BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a5:f2:f4:53:64:bb:8e:66:0f:dd:be:14:f9:e4:17:ad:f5:
de:78:c9:d4:e8:37:0b:13:56:63:a5:aa:db:56:29:65:f4:97:
3d:36:0f:b0:7e:e8:89:73:7a:38:64:1d:05:bb:8c:a7:a6:f3:
ec:99:5d:07:3f:4e:76:ab:32:a9:75:48:99:a7:f1:a4:df:48:
31:a7:31:b3:5c:f1:13:55:2d:e3:7b:03:0b:6c:dc:2a:37:a8:
28:43:a8:12:fb:f3:f5:5a:7e:06:f3:74:ab:40:b4:18:2a:f6:
88:31:4a:c3:26:43:94:29:25:7f:aa:a1:ae:6a:71:a6:a9:9c:
e3:99:74:a3:13:83:9c:f9:f7:11:78:fc:fd:b3:bb:d4:9f:f2:
ef:7c:a6:54:b6:54:3b:54:92:69:e8:cc:09:3d:eb:dc:32:6c:
d3:ab:66:67:54:47:c3:a4:e6:53:5d:68:0c:c1:17:85:2a:67:
3a:5b:87:8d:2f:a9:99:a4:5d:8f:f2:03:ab:e1:d6:5b:06:bc:
09:94:a8:b3:98:b1:10:41:7e:c2:c5:02:af:43:a5:ef:ab:42:
45:9d:17:a0:a7:2e:bd:0a:be:9f:12:88:ae:60:bc:8f:25:c9:
12:3f:f5:21:cd:29:c2:fc:b9:75:0d:2e:73:e8:6e:98:bd:eb:
80:7b:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:42 2026 by rpki-client