
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
File: BD49AA627797B2AA85CD3D0B2176243D6B624462.mft (raw, json)
Hash identifier: x7TLy3hFVo953i1SSNUXQJXQQRVQngobbYkpPmezd4I=
Subject key identifier: AD:FB:53:92:60:9F:7F:95:8F:34:D1:2E:33:44:BC:36:35:58:1F:37
Authority key identifier: BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62
Certificate issuer: /CN=BD49AA627797B2AA85CD3D0B2176243D6B624462
Certificate serial: 15D2D80A96DC9D0032BABF812098DBCEE7C030C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 11:12:01 +0000
Manifest this update: Tue 12 May 2026 11:07:01 +0000
Manifest next update: Wed 13 May 2026 11:28:01 +0000
Files and hashes: 1: BD49AA627797B2AA85CD3D0B2176243D6B624462.crl (hash: za1UCgiGNHvlxPEvYnobiTmTh7LSjPltYus9OJBdayM=)
2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: KRxP1QVR72dMNAQENQZE70vpWpEv6vQ6dhAVnSqGThE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl
rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d2:d8:0a:96:dc:9d:00:32:ba:bf:81:20:98:db:ce:e7:c0:30:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD49AA627797B2AA85CD3D0B2176243D6B624462
Validity
Not Before: May 12 11:07:01 2026 GMT
Not After : May 13 11:28:01 2026 GMT
Subject: CN=ADFB5392609F7F958F34D12E3344BC3635581F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:8f:e6:36:c7:47:ac:aa:c0:67:cf:82:ba:
12:87:47:9a:81:62:cb:dc:5b:a1:3c:0f:f4:7f:e1:
84:7e:eb:60:15:68:ad:b2:05:09:1a:60:39:55:c9:
91:19:e1:cc:52:49:91:e1:10:b3:4e:15:89:7d:33:
d8:21:86:bc:60:cb:85:37:52:74:ba:02:80:e1:d1:
2a:59:ce:67:ba:9f:b5:29:14:09:e7:3a:29:39:4e:
cb:89:e3:f0:54:25:d0:60:a0:32:cc:d5:e3:b5:e5:
c6:44:4a:ab:2f:20:31:62:9d:d2:b9:8c:67:d5:2d:
bf:9d:66:bb:7a:a2:44:aa:47:6d:3d:85:40:cf:b0:
7d:48:68:3a:63:4a:8c:e1:86:ae:e7:02:79:d6:84:
c0:2e:16:1e:32:4f:cc:2d:51:a7:a5:f1:c2:66:d6:
c4:aa:ae:27:00:d4:d0:e3:d3:8f:d5:56:f6:8b:12:
96:6a:90:88:c2:8e:ed:e1:15:23:f3:4b:85:5a:ed:
15:fa:9d:02:09:23:52:01:84:8f:07:13:9b:1c:e6:
a9:11:a8:4f:08:32:ae:32:78:f1:23:26:84:12:f5:
17:df:10:7d:02:4a:c4:86:87:41:b7:fd:c0:09:a1:
85:a0:50:81:91:e4:81:5a:9c:0f:0f:ad:67:73:86:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FB:53:92:60:9F:7F:95:8F:34:D1:2E:33:44:BC:36:35:58:1F:37
X509v3 Authority Key Identifier:
keyid:BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:db:44:40:2b:04:57:c8:97:bc:e8:b7:c2:55:24:f4:4a:bd:
c9:3d:a4:ed:d6:1f:1e:cf:5a:4d:c8:5f:77:4a:a4:0d:de:b2:
1f:5c:d7:4c:5b:fa:65:5d:88:f2:53:ef:7f:17:3d:93:9c:31:
e3:2d:0e:70:cf:c0:2e:68:e4:75:62:19:cd:96:2b:c1:38:e5:
bc:ea:87:b0:7e:df:f9:2e:a5:98:8b:25:3a:c0:d8:8d:fc:9c:
87:03:d2:65:dd:b6:e6:7f:0a:30:c5:9c:fd:49:f5:1c:7e:52:
33:af:d3:a8:4d:23:ee:d3:d5:55:b2:45:f0:bd:4f:e1:7c:71:
0d:c6:bd:3b:3d:a6:8e:44:3f:2e:cd:3b:d8:6b:33:62:40:dd:
16:00:91:8a:2e:fb:cd:ac:36:08:a1:d1:5f:3d:18:8e:ca:08:
47:f1:26:f5:9f:c7:7f:36:3b:dd:26:b8:a3:73:40:0c:9f:c5:
08:f8:eb:a2:f1:5c:40:3f:ea:29:ec:39:f7:18:a5:af:bc:64:
dd:50:aa:b5:4a:26:a3:0d:79:23:e0:47:d8:fa:ab:b5:09:ff:
7e:01:96:02:66:d9:c3:6a:7f:d9:0b:7e:3e:35:a3:ef:cf:28:
bc:94:14:e1:a4:e8:97:ae:04:99:47:14:14:a7:9a:2e:8f:cd:
4d:3d:71:5d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFdLYCpbcnQAyur+BIJjbzufAMMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ0OUFBNjI3Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0M0Q2
QjYyNDQ2MjAeFw0yNjA1MTIxMTA3MDFaFw0yNjA1MTMxMTI4MDFaMDMxMTAvBgNV
BAMTKEFERkI1MzkyNjA5RjdGOTU4RjM0RDEyRTMzNDRCQzM2MzU1ODFGMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjr4/mNsdHrKrAZ8+CuhKHR5qB
YsvcW6E8D/R/4YR+62AVaK2yBQkaYDlVyZEZ4cxSSZHhELNOFYl9M9ghhrxgy4U3
UnS6AoDh0SpZzme6n7UpFAnnOik5TsuJ4/BUJdBgoDLM1eO15cZESqsvIDFindK5
jGfVLb+dZrt6okSqR209hUDPsH1IaDpjSozhhq7nAnnWhMAuFh4yT8wtUael8cJm
1sSqricA1NDj04/VVvaLEpZqkIjCju3hFSPzS4Va7RX6nQIJI1IBhI8HE5sc5qkR
qE8IMq4yePEjJoQS9RffEH0CSsSGh0G3/cAJoYWgUIGR5IFanA8PrWdzhtz1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrftTkmCff5WPNNEuM0S8NjVYHzcwHwYDVR0j
BBgwFoAUvUmqYneXsqqFzT0LIXYkPWtiRGIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzYzMTYxNjUtZGE1MC00NzNiLWJmN2MtYzc3ZWJhYmM2ZDBiLzAvQkQ0OUFBNjI3
Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0M0Q2QjYyNDQ2Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CRDQ5QUE2Mjc3OTdCMkFBODVDRDNEMEIyMTc2MjQzRDZCNjI0
NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm
N2MtYzc3ZWJhYmM2ZDBiLzAvQkQ0OUFBNjI3Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0
M0Q2QjYyNDQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGXbREArBFfIl7zot8JVJPRKvck9pO3WHx7P
Wk3IX3dKpA3esh9c10xb+mVdiPJT738XPZOcMeMtDnDPwC5o5HViGc2WK8E45bzq
h7B+3/kupZiLJTrA2I38nIcD0mXdtuZ/CjDFnP1J9Rx+UjOv06hNI+7T1VWyRfC9
T+F8cQ3GvTs9po5EPy7NO9hrM2JA3RYAkYou+82sNgih0V89GI7KCEfxJvWfx382
O90muKNzQAyfxQj466LxXEA/6insOfcYpa+8ZN1QqrVKJqMNeSPgR9j6q7UJ/34B
lgJm2cNqf9kLfj41o+/PKLyUFOGk6JeuBJlHFBSnmi6PzU09cV0=
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:35 2026 by rpki-client