
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
File: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft (raw, json)
Hash identifier: vg26wo/sjgRFU+U1FnYl2cV6taw1luqFCbHQQsaq6jU=
Subject key identifier: 8C:1E:FB:CB:8D:41:75:4B:52:DF:D1:B2:D6:8B:7F:E9:C2:BF:FE:F4
Authority key identifier: BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B
Certificate issuer: /CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B
Certificate serial: 5311EC0A985558FF2BAFFEBD5594EF6F31CA4094
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:57:54 +0000
Manifest this update: Fri 24 Jul 2026 02:52:54 +0000
Manifest next update: Sat 25 Jul 2026 03:05:54 +0000
Files and hashes: 1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: gRxGW+klSIDqUWcFQBMXFqiWdggcgwp1v/UvYVaMWW4=)
2: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl (hash: e3Vo3ezg9LkR6PJxYPi/4KIlTf1z3m2Y613+JSvjH24=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl
rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:11:ec:0a:98:55:58:ff:2b:af:fe:bd:55:94:ef:6f:31:ca:40:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B
Validity
Not Before: Jul 24 02:52:54 2026 GMT
Not After : Jul 25 03:05:54 2026 GMT
Subject: CN=8C1EFBCB8D41754B52DFD1B2D68B7FE9C2BFFEF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:37:b5:83:6d:22:91:cd:b3:51:99:b1:e1:
8c:d8:e6:f7:95:37:f3:0f:32:4b:e1:5f:48:ea:36:
20:5c:84:45:90:25:8f:f6:ec:a0:0e:c5:4c:15:89:
77:61:d6:4e:10:0e:b3:52:21:08:4a:a9:c1:f4:4d:
1d:fc:cc:3d:f1:99:47:ee:d9:ab:e8:c0:86:90:e2:
aa:3a:42:33:0a:03:ed:f1:63:7f:76:bf:df:d2:7a:
b0:c4:e7:28:fe:fe:e6:52:d0:1b:84:84:c7:e3:a9:
58:42:c4:0d:f7:f5:fe:14:da:8a:93:58:91:d1:70:
e7:22:1b:3a:52:95:43:c3:f6:94:bc:2c:aa:74:bb:
cf:93:5c:2e:5d:99:c3:b8:ea:fd:45:87:9c:63:4a:
04:34:93:f1:8b:0a:7b:67:9f:68:24:ba:73:86:24:
8e:db:c6:12:f3:ba:fe:f7:95:47:8b:fa:1d:a7:bf:
45:af:5a:68:7e:39:a3:25:dd:6f:9c:75:68:52:4c:
49:7e:12:f7:da:6d:97:de:1b:67:10:c0:fb:9d:b2:
fd:54:b4:6d:ab:dd:1b:ca:67:18:08:f4:6b:bf:68:
5f:53:11:50:ea:7c:b7:ee:e8:78:c7:b3:25:3e:d7:
c7:03:d0:59:3a:77:80:e8:38:4c:86:4e:a4:14:06:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1E:FB:CB:8D:41:75:4B:52:DF:D1:B2:D6:8B:7F:E9:C2:BF:FE:F4
X509v3 Authority Key Identifier:
keyid:BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f7:e8:01:38:24:5a:0b:b1:4f:9c:6b:82:b0:49:4f:a0:3c:
14:e1:33:c5:40:82:e2:7c:a3:37:cd:f2:4a:95:78:53:20:ef:
e2:60:8b:fd:26:b9:9c:95:8c:21:38:83:88:9d:0a:00:84:fa:
81:1d:5b:df:6b:e7:53:94:eb:76:47:60:0f:3b:57:81:a6:bb:
1d:4c:8e:bc:f8:28:99:9e:37:65:bc:f0:e3:6d:72:fc:33:cd:
b2:ca:58:38:e3:7f:2d:bd:d6:38:85:d6:e8:7c:2d:d0:4a:4e:
c8:11:7b:a1:50:23:ee:fd:eb:bc:4a:41:3d:c5:66:5d:70:f8:
e1:56:39:1a:0a:f4:07:66:cf:e2:3d:ed:f7:6b:01:c9:7c:d4:
e3:76:9d:de:a6:f0:a9:51:12:ff:3f:3f:90:47:10:91:ef:88:
9f:da:5d:f7:51:c2:24:de:3d:dc:b5:f7:83:d0:4d:98:30:43:
bb:dd:a0:1b:86:6a:8d:a6:84:64:1c:f8:24:95:15:bc:2a:0f:
20:21:4c:a7:17:31:92:14:d6:63:44:f7:80:c5:06:bc:f6:12:
95:1b:c9:a8:91:f5:d0:59:18:62:b3:0d:38:b0:a3:0e:f3:eb:
cf:b7:a1:aa:4e:3f:b9:48:99:39:db:45:61:9d:b3:f6:17:4a:
f0:31:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:19 2026 by rpki-client