
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft
File: BBD0CD6436CA793BFF433922A8C38085169809BA.mft (raw, json)
Hash identifier: MXFGryfN5Zn1R7b0/034OUHobZS1iBR3otcSE44rZ/A=
Subject key identifier: 54:8F:F5:EC:F8:0A:C8:5C:0C:EC:B5:4E:EC:E5:6E:1D:B0:F7:13:94
Authority key identifier: BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA
Certificate issuer: /CN=BBD0CD6436CA793BFF433922A8C38085169809BA
Certificate serial: 71A64375140841F91755F42F56404AA87B37293A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft
Manifest number: 0E
Signing time: Wed 13 May 2026 03:22:17 +0000
Manifest this update: Wed 13 May 2026 03:17:17 +0000
Manifest next update: Thu 14 May 2026 06:25:17 +0000
Files and hashes: 1: BBD0CD6436CA793BFF433922A8C38085169809BA.crl (hash: 31pNnNQzsylCVtofYd9dwDoQTFPQZTHOoOuhfdjlDK0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl
rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a6:43:75:14:08:41:f9:17:55:f4:2f:56:40:4a:a8:7b:37:29:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBD0CD6436CA793BFF433922A8C38085169809BA
Validity
Not Before: May 13 03:17:17 2026 GMT
Not After : May 14 06:25:17 2026 GMT
Subject: CN=548FF5ECF80AC85C0CECB54EECE56E1DB0F71394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:f7:35:ea:1a:c4:f6:7a:2f:06:09:0d:d4:
9e:01:f6:26:f6:ed:1f:fd:26:5e:08:ca:cd:55:c2:
21:70:64:c1:85:bf:81:a5:5c:d2:a7:6e:04:ce:9c:
5f:f2:22:74:89:68:c8:1a:0c:14:e8:d9:9a:24:4f:
c1:46:85:00:63:52:63:2a:f7:c1:9e:8a:9c:bd:4a:
36:75:56:68:f9:48:7d:6e:2f:6d:a8:31:6a:04:be:
56:6c:50:13:f0:e9:77:43:3c:f3:40:c6:6a:b7:6c:
a0:a2:3f:8f:65:4b:9f:fd:23:47:50:e8:94:6e:90:
8b:a9:4e:f7:74:3e:3a:99:7c:7b:83:09:cb:5c:e2:
67:9c:8a:3f:2e:5c:14:c1:9a:0d:11:5d:3b:23:dd:
28:7c:77:70:0f:ab:70:0a:10:be:9e:a4:7c:bb:9f:
ec:da:83:ae:58:4f:72:5e:c2:b4:43:ef:04:70:b7:
c6:d5:34:ae:ff:04:70:7a:ac:7b:9d:30:23:b7:85:
10:a6:40:9e:40:2c:a9:66:29:44:c6:d0:e2:b8:b0:
cd:b4:15:95:69:88:6f:8b:ad:d4:bf:2d:67:fe:16:
a8:4b:01:14:29:5f:1c:86:6b:ec:0c:5c:3f:25:43:
1b:8d:0c:35:1d:76:d2:57:1f:d3:84:5b:5e:12:5f:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:F5:EC:F8:0A:C8:5C:0C:EC:B5:4E:EC:E5:6E:1D:B0:F7:13:94
X509v3 Authority Key Identifier:
keyid:BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:be:7f:c6:f4:ad:17:3e:06:67:0e:a0:c5:2e:19:ce:01:3b:
1c:40:ec:e6:81:97:94:c9:2a:6f:47:7b:ba:10:08:3c:91:25:
5b:1d:d8:4f:1d:6a:be:bc:d2:95:9e:6a:a5:36:41:ed:68:ff:
5b:55:87:04:01:e3:22:23:da:d5:8e:3c:23:40:18:54:4a:e2:
b4:7c:9e:ed:e1:bd:61:3a:1c:9c:79:5e:49:b2:25:2b:61:04:
b7:1f:ae:35:9d:65:e8:cc:2c:b1:cd:92:48:b5:ea:5c:3e:3d:
af:ec:35:26:13:53:f5:9a:da:b2:16:fe:c0:24:c3:01:a5:36:
24:19:b6:a5:db:70:95:b4:27:34:92:fc:d3:9a:2c:89:a6:ca:
ae:b5:dd:0d:1e:d0:9b:51:f1:31:35:85:3e:03:4d:53:50:0e:
6c:01:12:5d:a3:99:32:68:35:72:bb:24:1a:0a:b9:61:3f:32:
76:cd:c8:d8:db:a4:48:b3:99:83:df:3b:d1:3e:f9:4b:5c:bb:
c0:dd:ec:27:63:aa:de:a4:ba:3c:f4:6f:32:a8:1f:6e:50:30:
fe:e4:d3:e8:f4:93:fc:75:1a:33:3b:90:58:d8:de:cc:75:bb:
96:8f:87:45:38:bf:99:00:f3:d6:74:92:0c:74:c1:50:e2:a8:
b6:8b:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:57:56 2026 by rpki-client