
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
File: BD49AA627797B2AA85CD3D0B2176243D6B624462.mft (raw, json)
Hash identifier: jyslkvp8gpY8lNRsjqKTjyl2QGzaRUhDUmvOY6X+IfQ=
Subject key identifier: 9D:95:AD:DF:31:69:18:E0:AC:A1:31:50:53:9C:A0:99:64:60:3E:8A
Authority key identifier: BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62
Certificate issuer: /CN=BD49AA627797B2AA85CD3D0B2176243D6B624462
Certificate serial: 743C226CA0453464DCE125F23C10B99A52AAED56
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 01:00:19 +0000
Manifest this update: Fri 24 Jul 2026 00:55:19 +0000
Manifest next update: Sat 25 Jul 2026 02:14:19 +0000
Files and hashes: 1: BD49AA627797B2AA85CD3D0B2176243D6B624462.crl (hash: Fn/Xnn+LUjtDaMAU9x0JbfmfzqRuWhI2u+9KES0ttbM=)
2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: KRxP1QVR72dMNAQENQZE70vpWpEv6vQ6dhAVnSqGThE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl
rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3c:22:6c:a0:45:34:64:dc:e1:25:f2:3c:10:b9:9a:52:aa:ed:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD49AA627797B2AA85CD3D0B2176243D6B624462
Validity
Not Before: Jul 24 00:55:19 2026 GMT
Not After : Jul 25 02:14:19 2026 GMT
Subject: CN=9D95ADDF316918E0ACA13150539CA09964603E8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:ae:7c:2b:4d:fb:04:65:0a:93:e3:40:31:
30:0b:6f:71:61:c4:fd:20:53:36:b1:d1:d1:93:4b:
71:5d:bc:18:95:c7:85:80:15:e2:d0:27:e1:b4:a3:
ea:49:68:86:fc:94:10:4b:31:31:31:e1:74:61:bf:
6c:0b:d0:93:8a:e0:8a:0a:07:c4:88:75:55:03:73:
6b:84:96:22:02:f8:16:e9:75:5d:03:be:76:37:65:
1d:73:0b:9e:25:77:8e:72:e8:b6:46:a3:91:5d:f4:
8e:36:00:97:53:f7:40:ba:60:2d:eb:d4:8d:a4:ad:
8d:8c:ec:f2:fa:79:27:35:f2:17:c2:34:17:41:25:
8f:03:60:24:f5:7f:4e:b0:25:22:6b:b3:06:6b:dd:
2c:98:8f:aa:6a:19:8c:f5:04:48:b7:5f:ce:99:46:
88:5f:11:a8:3d:41:3d:e9:4c:f3:d5:f9:a0:be:99:
de:70:dc:ca:70:89:b3:5a:88:63:55:ce:63:4f:8f:
44:e4:bd:14:2e:e5:9d:f7:91:d2:68:e1:30:75:cb:
5c:e7:8e:ce:55:53:73:19:93:ed:68:08:ae:c5:2a:
55:b0:c4:1e:34:c2:f8:08:4d:7a:81:2b:58:b7:30:
54:f9:3b:c2:06:93:e9:03:04:cf:7d:30:33:15:ed:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:95:AD:DF:31:69:18:E0:AC:A1:31:50:53:9C:A0:99:64:60:3E:8A
X509v3 Authority Key Identifier:
keyid:BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3d:d9:bc:1e:89:9b:e0:03:96:f1:a6:84:fe:a5:80:3d:df:
dc:c1:c0:1e:dc:09:1b:fa:8d:26:9b:8f:a5:99:04:e7:d6:f5:
09:64:2d:91:98:07:ae:09:b1:8b:1f:4e:4b:0a:f6:3a:ec:b9:
f5:d8:07:f1:6c:d3:1c:72:05:14:e1:32:27:57:12:e9:a0:28:
3d:3c:95:63:78:05:c1:90:4a:a3:98:93:a0:72:3a:30:79:1f:
41:64:db:be:6d:2f:bc:7d:6d:80:58:bd:81:d1:66:97:12:8f:
bd:12:39:6f:cf:37:18:13:c1:4f:1f:66:9d:bd:14:2d:a0:cc:
75:0d:ea:40:8e:1e:54:11:8a:c1:f8:69:60:8a:72:93:e5:af:
48:f5:c6:92:9f:d5:2b:32:ef:24:2b:9c:c7:4f:d7:85:5c:52:
14:2f:f1:75:62:d0:7c:b8:7b:c7:cb:b4:c1:10:91:f6:95:57:
db:38:8b:c9:29:85:a0:9d:2d:d1:17:99:dd:2e:1c:bd:28:dd:
6c:20:67:4b:aa:df:d5:19:6a:a7:47:18:a6:f1:3a:fe:dc:96:
f0:1a:fa:3e:be:e1:9e:2e:76:c0:1a:df:ee:d7:6e:30:6e:bd:
9e:ed:5d:ea:ab:c2:13:6a:48:1e:18:6b:3d:69:34:c7:ee:b5:
a9:1d:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:39 2026 by rpki-client