
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
File: BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft (raw, json)
Hash identifier: ui1LUstZvAaItfTcPp6ArzRVMK2g9mruPmsU1vSH/ws=
Subject key identifier: CB:61:16:EF:AA:30:07:2D:C6:E1:67:DD:1C:21:02:B9:CB:90:7D:49
Authority key identifier: BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
Certificate issuer: /CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Certificate serial: 1874BE55C08F2A6B33412013A0610564AD447BE6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:38:42 +0000
Manifest this update: Thu 23 Jul 2026 23:33:42 +0000
Manifest next update: Sat 25 Jul 2026 03:21:42 +0000
Files and hashes: 1: BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl (hash: DCENJYarq7UD/4d9DVlxrbH8qCPUSZHyVvEY2c0Gn1M=)
2: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: F8rn8naCPvDCkUhjOQElNO8VO2STo0GIaHG7gs8zRHY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:74:be:55:c0:8f:2a:6b:33:41:20:13:a0:61:05:64:ad:44:7b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Validity
Not Before: Jul 23 23:33:42 2026 GMT
Not After : Jul 25 03:21:42 2026 GMT
Subject: CN=CB6116EFAA30072DC6E167DD1C2102B9CB907D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:f1:d9:bf:46:36:cc:84:8c:19:d2:f4:10:
83:06:39:42:46:35:66:1c:5f:23:67:6e:41:b8:90:
10:2a:2c:74:69:2a:10:cb:0d:f3:d2:47:f1:49:94:
06:2f:12:c4:91:86:b6:61:71:66:44:e0:2f:77:f5:
15:cb:28:d7:d9:24:19:d4:42:36:b9:5d:8c:50:bf:
d7:64:5c:c0:08:56:03:06:ce:d3:84:f6:fb:63:15:
2b:f0:cf:60:54:db:56:f7:7e:27:60:7d:1d:1e:c6:
5c:ef:d9:c0:40:ad:48:11:52:77:26:68:5d:8e:fc:
f9:51:01:27:76:04:dc:e5:17:07:78:4f:20:36:2c:
49:9b:9e:92:ed:29:8e:a1:1f:47:25:69:50:b2:5f:
8d:b4:8d:78:90:8a:81:41:5d:ef:5f:8d:62:37:31:
73:82:70:7b:c6:9c:aa:87:7f:a1:65:83:65:21:85:
3a:0f:e7:cb:23:70:4b:65:e2:d3:40:e5:76:7e:26:
ce:ba:28:2a:df:c9:0e:6f:29:c0:96:8e:b1:53:0e:
86:09:e5:96:de:5f:7c:d2:80:2e:78:9e:ea:fa:1d:
e9:5c:36:be:8a:39:b2:be:64:22:5a:31:59:41:e5:
3c:a3:2c:60:5f:43:e5:c1:fd:6b:49:9d:53:8c:39:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:16:EF:AA:30:07:2D:C6:E1:67:DD:1C:21:02:B9:CB:90:7D:49
X509v3 Authority Key Identifier:
keyid:BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:67:92:a6:85:ff:10:36:f7:6b:a2:f9:de:27:d1:0f:7e:32:
86:1e:26:09:e0:94:7b:07:3f:7d:1c:96:a8:10:0d:b1:ca:ad:
c7:9a:f8:d4:dd:1d:5d:3b:06:0e:19:44:5c:5a:f5:c3:5c:82:
34:f2:02:8d:68:2c:16:8e:89:62:9e:16:02:08:79:71:e7:19:
2a:2b:fa:c2:d6:1f:fa:98:0d:87:c2:89:b3:d9:eb:59:0c:59:
65:86:b3:f2:72:01:af:cc:c3:08:11:c3:25:59:ec:0f:5c:72:
13:e1:5f:d9:11:9a:ed:4b:d4:d8:d1:5b:18:27:5f:64:0e:48:
40:be:19:85:fe:7a:ad:ad:84:70:d0:07:e9:43:ea:3c:c8:fc:
ce:37:9b:33:4c:b3:2e:7f:71:9d:6e:78:d2:e8:b1:d8:b8:7e:
78:25:49:08:09:31:a9:09:19:09:c6:47:f4:b8:b0:8e:b8:b4:
45:ea:cc:8b:99:b6:39:2d:ee:3c:18:69:d2:71:59:d9:e1:55:
95:df:97:a2:7e:0d:6f:38:06:3e:e6:2a:3f:fe:05:f4:b4:81:
8e:30:ef:80:dd:c3:d9:ea:6e:99:26:37:d3:64:ce:07:b8:af:
c4:f2:22:9c:79:59:06:e1:9a:ab:47:96:87:38:e4:47:f2:67:
16:25:33:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:11 2026 by rpki-client