
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
File: BF81EC78CC8A61FCFF71A862321A5204E581203B.mft (raw, json)
Hash identifier: uh01ObeEMPqqgEeb03NRohDSj1K9DlKb0mfVNQde26g=
Subject key identifier: DB:34:2B:A3:65:1C:70:50:CC:B1:B6:73:65:CA:08:6B:D6:42:8C:F3
Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B
Certificate issuer: /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
Certificate serial: 589F3F4A43D698CFBF6218A56B5CEF7ABCA5EE03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 21:26:09 +0000
Manifest this update: Thu 23 Jul 2026 21:21:09 +0000
Manifest next update: Fri 24 Jul 2026 23:52:09 +0000
Files and hashes: 1: BF81EC78CC8A61FCFF71A862321A5204E581203B.crl (hash: caFyJw2zfax4GHxW6NlsM2ieXqHFREoYUwnNnO7GDNA=)
2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl
rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9f:3f:4a:43:d6:98:cf:bf:62:18:a5:6b:5c:ef:7a:bc:a5:ee:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
Validity
Not Before: Jul 23 21:21:09 2026 GMT
Not After : Jul 24 23:52:09 2026 GMT
Subject: CN=DB342BA3651C7050CCB1B67365CA086BD6428CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:1d:48:f0:0f:18:38:43:08:bd:22:d1:da:
8f:39:a3:b2:32:26:4c:18:ec:d3:9c:39:ca:15:85:
74:e4:9e:b5:3e:c2:59:32:a5:2b:7c:fa:30:ec:6f:
b8:be:13:7d:37:1c:b9:c0:57:ba:18:79:33:4e:53:
02:5a:6b:dd:6b:79:06:32:93:a7:a0:8d:86:a5:82:
aa:df:95:5e:0d:aa:f9:6f:0e:3c:11:f8:28:85:24:
30:0d:1b:8e:17:cf:33:18:66:02:09:60:d4:c3:87:
42:69:cb:7b:aa:28:59:8b:c9:66:58:39:a9:fd:a8:
8c:e8:84:a4:40:59:e6:7e:d4:f3:29:6e:52:f8:b1:
64:14:d1:c9:2d:e8:5a:b4:36:b8:22:e3:a6:7d:45:
c1:37:c4:e0:7c:2c:35:f7:0b:13:a9:9d:f8:03:7e:
42:62:d0:86:1b:7f:7a:6a:09:ef:72:5c:0c:87:8b:
9c:aa:39:a0:51:29:e6:69:4b:31:95:5a:a3:7d:f9:
de:8f:11:6a:9a:41:dd:77:19:8d:18:f9:0b:d3:6a:
57:e7:a3:ff:81:7c:dd:0f:20:e5:cf:11:0b:3c:a3:
bf:53:c8:74:92:c9:d3:82:c9:64:de:b3:72:d8:48:
ff:97:ee:5a:19:8b:98:39:c0:ca:9c:cd:c4:ed:93:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:34:2B:A3:65:1C:70:50:CC:B1:B6:73:65:CA:08:6B:D6:42:8C:F3
X509v3 Authority Key Identifier:
keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ac:96:36:e3:1e:a0:af:bd:4f:f4:4c:7b:5f:ee:63:9e:1c:
f5:14:5c:ae:5d:45:4b:d1:14:a4:9c:a9:e5:eb:c1:a2:31:78:
7d:8c:90:85:4d:46:1d:b0:b7:2c:9b:fb:a6:d9:27:d7:fc:bb:
c4:7f:cc:b1:43:1a:62:ec:f6:2e:9a:9c:99:56:f3:19:51:a6:
20:2d:7c:4e:b4:21:48:ce:b2:41:4d:fb:aa:01:24:1c:c2:91:
a5:bf:e7:f6:53:d9:eb:92:32:ea:6a:00:6e:2e:74:29:fc:ce:
05:20:19:05:33:64:a3:ce:b1:50:cd:97:68:c7:65:2a:57:30:
bb:41:5b:44:e6:20:68:80:9c:2f:36:bf:a9:bb:50:56:76:a5:
52:9b:58:41:d9:37:84:23:65:7a:83:26:47:af:3c:de:e6:46:
a2:8b:7a:f4:22:53:22:4b:9f:9c:1d:0e:9e:34:b4:d1:0a:b5:
25:f3:8f:eb:aa:82:ea:44:bc:28:84:e2:72:6f:e1:1e:3b:64:
0f:d3:4e:ee:1f:58:59:0d:4e:d5:f8:86:cc:25:b8:b5:98:95:
b5:4c:24:50:04:ee:7b:c6:7e:93:68:bd:3e:b0:71:63:98:45:
a2:fd:c1:ef:ce:1c:54:42:73:0a:f8:f0:e8:85:77:92:00:30:
f3:3b:99:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:36 2026 by rpki-client