
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
File: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft (raw, json)
Hash identifier: RZ1E1BF70umjjclz3gkIckFH/CmP20Afmcysjur/i2I=
Subject key identifier: A1:AB:CC:D3:15:5A:A7:69:D3:28:E2:1A:E3:2F:24:CD:CC:42:4F:5D
Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
Certificate issuer: /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Certificate serial: 46840B35FA3DDF855C904FEFB1C7406797869CD7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 00:05:18 +0000
Manifest this update: Fri 25 Sep 2026 00:00:18 +0000
Manifest next update: Sat 26 Sep 2026 02:23:18 +0000
Files and hashes: 1: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: NpWQoJWkTFRWtu5IgmdpgROmr0Z1lBzNGKqs6X4eLkI=)
2: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: EYkI0p4+CgnYpKny2uHcSev4QPkQmeLLChTvoH2DvhI=)
3: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: la/MT35l4XmEKRTivxkgUTpV+veAFTIlPEFkPiSAUT8=)
4: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: Lwb/Sd018a/wGqBSdGChZ8920giGhrUJnYfpSOUiZ7E=)
5: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: U2ap+e12vTMaTWTUslebQCqX7KlurU+JCU+tN10AEBc=)
6: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl (hash: j+OrV/ejeMJXXn1zsEXDa8KtkXEppMRiWC3CO1rOqyc=)
7: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: UGmub+zvmz38VUHBdFrEohUoj9JI2gk3RmJ2b1SMZ/E=)
8: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: aMwliF8f+KJHeJLDBVlDQIRW+UpwyCDnVCmgvmDSPBs=)
9: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: zUL5UQNXnc8QhEgTnOt/ZHUWtyhWWgBBUQzy5H70VK4=)
10: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: ixvcysOVf6dGfQ7OL/zmp0yRPmCnK8SCHSDkoKzywSg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 02:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:84:0b:35:fa:3d:df:85:5c:90:4f:ef:b1:c7:40:67:97:86:9c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Validity
Not Before: Sep 25 00:00:18 2026 GMT
Not After : Sep 26 02:23:18 2026 GMT
Subject: CN=A1ABCCD3155AA769D328E21AE32F24CDCC424F5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:f1:36:b4:21:f1:c2:32:28:4d:61:d6:f9:
ea:79:3e:2e:40:11:54:cf:10:d7:f6:4b:18:4a:ab:
98:a0:2f:c1:f9:eb:84:d3:bd:41:2a:e1:0b:16:83:
a3:65:f9:51:25:f6:37:df:b6:12:61:95:83:17:6f:
09:d4:3d:01:a3:7d:e9:25:d8:96:8d:a2:04:e5:82:
51:30:a8:f7:af:4b:b2:49:84:7c:24:00:2a:ae:5e:
6b:03:76:f4:ac:c7:2a:7b:e9:72:36:5c:91:ad:b4:
1b:4a:2d:b2:f9:2f:09:2e:03:f6:35:4e:e5:47:88:
23:dc:60:50:f8:bc:6c:e9:c4:62:b1:87:35:ad:1b:
ed:ff:c2:04:fb:e0:5b:1e:14:ab:8d:c5:e8:90:08:
e2:0f:79:f4:b8:36:a1:05:30:d9:50:94:3d:1f:93:
43:54:71:52:cd:41:1d:83:81:be:9e:80:64:79:0a:
43:07:af:df:1b:b9:95:ee:24:f2:3c:e8:8e:0d:1a:
64:b5:d1:7a:fb:5d:fe:4d:6c:14:bc:aa:31:63:ea:
2c:a8:ec:2c:99:ea:df:76:14:43:e8:a8:c5:c6:f2:
68:f1:bf:38:1f:63:4d:25:d9:3f:9c:8f:f3:e5:1a:
09:5f:44:4f:de:d9:42:31:f1:dc:cc:1a:7b:a2:27:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AB:CC:D3:15:5A:A7:69:D3:28:E2:1A:E3:2F:24:CD:CC:42:4F:5D
X509v3 Authority Key Identifier:
keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ae:23:b5:48:76:c0:de:d5:89:2c:5f:21:0f:e0:e3:1a:df:
c6:58:0b:f2:b2:34:d3:bd:9e:88:24:09:c9:f8:af:db:e5:d0:
4e:d3:d8:3b:ef:66:f6:4b:e4:d9:34:be:71:fa:a5:9a:61:25:
ad:a1:4d:93:23:58:09:44:09:37:7e:1f:8b:59:bd:d5:d4:04:
4d:e4:b8:f0:46:ef:78:fe:41:2b:0d:74:50:e4:43:71:d6:89:
48:84:74:e9:af:89:5e:66:80:c7:11:c3:a7:cb:16:a4:6f:41:
35:d6:1e:1a:85:98:ce:36:a5:a2:4e:69:18:66:f5:5c:90:d4:
df:1c:00:27:da:7b:14:81:f5:1c:16:d0:c6:63:72:ec:38:04:
78:2a:23:e1:3b:15:ff:b4:8d:8b:89:3b:0d:63:0a:29:fa:4f:
e1:34:c3:0d:e7:98:b2:63:9b:00:50:8a:64:3b:bf:c1:42:81:
31:ea:15:42:ac:33:c9:90:f5:aa:2d:d8:2a:0e:e8:1b:6e:98:
b9:0a:8a:a6:1a:94:ba:1d:94:4e:51:bc:b9:89:42:9e:f2:5e:
e2:d5:31:f3:d1:be:ce:06:a2:29:4f:af:ac:3a:3b:c9:e6:6d:
25:70:3a:ae:ec:41:29:f6:c8:98:29:8f:c8:5e:6d:5e:68:d4:
ed:d1:f9:0b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURoQLNfo934VckE/vscdAZ5eGnNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNENUUwNUU1NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3
REY1NTZEODAeFw0yNjA5MjUwMDAwMThaFw0yNjA5MjYwMjIzMThaMDMxMTAvBgNV
BAMTKEExQUJDQ0QzMTU1QUE3NjlEMzI4RTIxQUUzMkYyNENEQ0M0MjRGNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2evE2tCHxwjIoTWHW+ep5Pi5A
EVTPENf2SxhKq5igL8H564TTvUEq4QsWg6Nl+VEl9jffthJhlYMXbwnUPQGjfekl
2JaNogTlglEwqPevS7JJhHwkACquXmsDdvSsxyp76XI2XJGttBtKLbL5LwkuA/Y1
TuVHiCPcYFD4vGzpxGKxhzWtG+3/wgT74FseFKuNxeiQCOIPefS4NqEFMNlQlD0f
k0NUcVLNQR2Dgb6egGR5CkMHr98buZXuJPI86I4NGmS10Xr7Xf5NbBS8qjFj6iyo
7CyZ6t92FEPoqMXG8mjxvzgfY00l2T+cj/PlGglfRE/e2UIx8dzMGnuiJ+BjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUoavM0xVap2nTKOIa4y8kzcxCT10wHwYDVR0j
BBgwFoAUvNXgXlcPIoDs7zMXHretyH31VtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTUwZGE0NDctYTEzOC00NjI1LWE0MjAtYTcxMWFjMjQzNTE5LzAvQkNENUUwNUU1
NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3REY1NTZEOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQ0Q1RTA1RTU3MEYyMjgwRUNFRjMzMTcxRUI3QURDODdERjU1
NkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUwZGE0NDctYTEzOC00NjI1LWE0
MjAtYTcxMWFjMjQzNTE5LzAvQkNENUUwNUU1NzBGMjI4MEVDRUYzMzE3MUVCN0FE
Qzg3REY1NTZEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF+uI7VIdsDe1YksXyEP4OMa38ZYC/KyNNO9
nogkCcn4r9vl0E7T2DvvZvZL5Nk0vnH6pZphJa2hTZMjWAlECTd+H4tZvdXUBE3k
uPBG73j+QSsNdFDkQ3HWiUiEdOmviV5mgMcRw6fLFqRvQTXWHhqFmM42paJOaRhm
9VyQ1N8cACfaexSB9RwW0MZjcuw4BHgqI+E7Ff+0jYuJOw1jCin6T+E0ww3nmLJj
mwBQimQ7v8FCgTHqFUKsM8mQ9aot2CoO6BtumLkKiqYalLodlE5RvLmJQp7yXuLV
MfPRvs4GoilPr6w6O8nmbSVwOq7sQSn2yJgpj8hebV5o1O3R+Qs=
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:10:46 2026 by rpki-client