
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
File: BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft (raw, json)
Hash identifier: EI4mzEoNWAwH+/5inwJlafCtTFrp9erIF/Ym42LV1i0=
Subject key identifier: 0A:DA:CC:52:7F:09:D8:99:30:B0:D3:2B:37:95:81:6B:BC:DE:30:5B
Authority key identifier: BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
Certificate issuer: /CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Certificate serial: 6A5E6A78D6D1D29D5C6706EC87D20C88C6B96EE6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:42:48 +0000
Manifest this update: Tue 12 May 2026 20:37:48 +0000
Manifest next update: Wed 13 May 2026 23:43:48 +0000
Files and hashes: 1: BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl (hash: qpwl7A/BkHx983abZqwG15+1cYDxu7VS4Iw9PX68x4s=)
2: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: F8rn8naCPvDCkUhjOQElNO8VO2STo0GIaHG7gs8zRHY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:5e:6a:78:d6:d1:d2:9d:5c:67:06:ec:87:d2:0c:88:c6:b9:6e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Validity
Not Before: May 12 20:37:48 2026 GMT
Not After : May 13 23:43:48 2026 GMT
Subject: CN=0ADACC527F09D89930B0D32B3795816BBCDE305B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:09:4e:8d:59:a8:c1:8a:67:5a:6a:f6:d8:
c1:ed:3c:b8:2c:08:42:99:76:c5:c5:0a:dc:3b:a9:
b1:1d:e4:07:0c:e9:62:f8:e9:8d:6b:bd:11:fc:d0:
db:d5:8e:52:41:0f:46:df:40:06:f0:c0:24:a1:35:
0c:f2:80:d6:b8:23:73:0d:4b:76:d7:34:dd:e3:01:
e5:4d:1b:2f:7f:e7:65:52:9d:33:26:e8:3f:5a:a4:
97:90:9f:ce:be:c6:30:57:f6:e9:96:5f:c1:a7:34:
a2:7a:0a:5a:21:85:80:c3:98:a9:88:1f:88:1f:66:
7d:f8:a7:7b:39:b5:a9:d0:e5:41:8d:b3:74:d7:e8:
fc:4e:1e:c2:f6:27:3e:6b:ce:bb:6b:76:24:b4:f3:
67:b2:52:fb:de:4c:9c:77:ec:16:25:98:1f:42:24:
34:a7:41:1e:32:d3:d4:16:68:76:7f:b2:0e:94:fb:
a1:72:93:9b:65:85:4b:8d:75:0c:bb:a2:38:e0:85:
73:e9:f9:d4:04:bb:49:f2:76:0b:a1:42:cf:61:af:
bb:21:60:d6:3f:0e:d9:2c:31:39:a9:38:9a:d9:18:
49:96:c2:f1:f5:0a:a7:6a:31:38:2b:ad:39:d3:1c:
10:ac:e9:4d:5b:32:a3:dd:0a:80:21:29:89:ee:b8:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DA:CC:52:7F:09:D8:99:30:B0:D3:2B:37:95:81:6B:BC:DE:30:5B
X509v3 Authority Key Identifier:
keyid:BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:67:20:67:c6:5d:7a:e1:1c:fb:5d:87:66:d8:82:31:ad:50:
51:52:d8:cc:48:f8:21:20:a9:22:61:37:b7:ed:2a:33:b2:47:
c7:33:e8:0c:c0:79:ac:4a:7e:bd:9c:27:72:84:b7:ff:a8:13:
27:9b:b1:ae:23:b9:20:bb:4b:b3:a1:02:5f:41:97:e0:61:7d:
53:c5:1d:a9:9b:47:a1:24:44:0d:b1:8e:2c:43:49:d7:b2:66:
d8:89:68:26:50:ee:48:34:21:ce:42:49:15:24:59:d7:8c:76:
77:51:ff:11:a0:de:bc:49:b9:fd:f3:a9:19:e2:77:97:ac:be:
90:78:7e:03:e6:16:34:49:52:e1:cc:59:1d:68:0a:c5:e9:c4:
12:d9:7e:c3:8f:21:14:ed:a7:d2:5f:eb:25:56:32:e3:dc:d9:
e8:94:cb:3e:a1:35:87:64:01:d1:51:92:04:12:0b:cc:f7:2a:
db:60:eb:53:0a:44:2e:4a:21:fd:68:80:de:1b:de:6f:a5:db:
1d:a4:e1:ee:4f:d1:21:07:50:8a:76:eb:50:9a:c4:16:1d:54:
ee:f5:90:71:ef:53:08:4d:e8:1e:ae:25:11:67:41:7e:8a:6e:
8c:8f:13:71:69:bc:9f:16:a7:33:11:28:45:02:5b:f2:0a:5c:
77:e4:3f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:05 2026 by rpki-client