
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
File: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft (raw, json)
Hash identifier: apLYF19BVc03xnivDYNx83djZ8d2fXOBcY9PEbuYRGU=
Subject key identifier: 20:72:1D:B9:24:AD:DE:99:95:52:C8:1C:9B:7C:45:73:30:1B:AF:F6
Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Certificate serial: 59457A96FB2D400A76FC678A7B9B8A9A0C4E4F04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 15:23:44 +0000
Manifest this update: Thu 23 Jul 2026 15:18:44 +0000
Manifest next update: Fri 24 Jul 2026 17:45:44 +0000
Files and hashes: 1: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl (hash: v7+7gAB3ITsm1lhiYA02BybxMFfxqchpH2CqjjAHMGY=)
2: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: W7n2JDD5ivxhi/6nEhgqfo99pkm7Hn+CBH17uMHEOxU=)
3: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=)
4: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:45:7a:96:fb:2d:40:0a:76:fc:67:8a:7b:9b:8a:9a:0c:4e:4f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Validity
Not Before: Jul 23 15:18:44 2026 GMT
Not After : Jul 24 17:45:44 2026 GMT
Subject: CN=20721DB924ADDE999552C81C9B7C4573301BAFF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:7a:67:a0:1a:cc:2d:1f:c1:6e:52:cf:27:
11:be:12:a1:f7:31:0c:39:a1:f5:e3:c4:fe:44:ef:
b8:3e:c8:16:8e:da:b6:1c:61:59:b9:ff:15:2b:a3:
aa:de:97:ea:f5:f6:0d:10:43:d5:d6:4c:20:f8:7e:
2b:d5:c3:93:52:72:a5:4d:cf:ce:36:5f:cb:3b:81:
19:78:e2:9c:fd:45:87:c7:5d:cd:f8:8b:a7:61:d2:
e3:f6:28:ee:6a:54:3c:d8:d2:41:47:fb:12:4f:ab:
25:51:69:9a:26:cc:b1:92:e7:f7:f5:1b:fa:45:d5:
56:b3:ae:0f:d2:ab:a2:c6:69:d6:f2:0b:19:3c:81:
3a:d4:7e:3e:29:a7:7f:41:23:ec:76:68:2e:30:ef:
6e:5c:7c:7f:18:d4:53:a0:2f:a2:54:03:7b:c6:4b:
18:6b:ed:75:41:c0:76:4e:c2:17:7c:ff:d3:79:e8:
d8:80:cf:15:3d:8c:af:31:81:92:a2:a3:06:6e:94:
28:14:ae:fe:83:27:6d:9a:a7:2c:ed:0b:d0:9b:bd:
94:a4:ec:63:34:63:dc:1c:23:7d:65:b5:8e:07:0d:
e8:2b:94:62:6b:df:9f:0a:3d:6f:b9:b7:d1:5a:ce:
8e:bc:07:ef:48:ac:66:b8:37:98:e0:51:1f:9c:fa:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:72:1D:B9:24:AD:DE:99:95:52:C8:1C:9B:7C:45:73:30:1B:AF:F6
X509v3 Authority Key Identifier:
keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9e:5b:36:ef:51:7b:9e:58:94:35:70:96:46:eb:1b:25:36:
1b:e8:5b:02:5e:41:18:cb:12:89:54:9f:34:6c:de:05:c5:e2:
05:58:03:4d:49:7c:89:5e:16:21:6e:0d:72:0a:91:e3:9f:cf:
45:68:04:e1:7e:1a:fb:65:3c:a4:1d:ef:ec:19:7c:6d:4c:c6:
50:7f:03:57:2a:6c:ea:26:3c:c2:2e:e0:c7:15:4a:2d:c1:cd:
84:5d:35:dc:1f:b4:90:22:5c:bd:3d:20:14:dd:94:c4:0c:3a:
46:d5:49:06:5d:e3:00:e1:55:5b:2e:35:bd:ff:8a:60:d6:fe:
b2:f3:9e:13:d6:fa:ee:93:16:5f:f0:87:64:ad:40:e7:58:26:
f0:28:1b:6b:71:a1:f3:b9:43:85:a9:d9:32:ef:cc:25:88:fb:
c8:5c:a1:94:bf:e0:d4:54:64:02:c5:c0:9a:e0:25:0d:a1:15:
ba:ab:4c:40:b2:0d:fa:21:b1:ff:e4:a6:4b:4f:99:51:5f:f3:
c8:48:fc:ce:3e:d6:ea:2e:97:00:6e:92:28:93:79:e0:bb:40:
a1:7a:d7:97:60:c6:ab:61:e3:5f:7f:22:d7:0b:4f:04:a3:56:
84:a8:72:f6:00:26:9d:ab:06:81:9c:01:a4:a0:4a:cd:02:60:
5e:29:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:38:58 2026 by rpki-client