
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
File: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft (raw, json)
Hash identifier: 2DImeafNiFFtByIgLAgytUKVLwkwCzLlukeJLf9389U=
Subject key identifier: BF:42:65:79:D2:4A:9F:5E:20:54:FA:FD:00:80:6B:C2:E2:91:33:37
Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
Certificate issuer: /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Certificate serial: 19AC732A4FCAC8EA10D00787A235C1EC4D0A242A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:20:52 +0000
Manifest this update: Fri 24 Jul 2026 01:15:52 +0000
Manifest next update: Sat 25 Jul 2026 04:48:52 +0000
Files and hashes: 1: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: NpWQoJWkTFRWtu5IgmdpgROmr0Z1lBzNGKqs6X4eLkI=)
2: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: Lwb/Sd018a/wGqBSdGChZ8920giGhrUJnYfpSOUiZ7E=)
3: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: UGmub+zvmz38VUHBdFrEohUoj9JI2gk3RmJ2b1SMZ/E=)
4: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: U2ap+e12vTMaTWTUslebQCqX7KlurU+JCU+tN10AEBc=)
5: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: EYkI0p4+CgnYpKny2uHcSev4QPkQmeLLChTvoH2DvhI=)
6: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: ixvcysOVf6dGfQ7OL/zmp0yRPmCnK8SCHSDkoKzywSg=)
7: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: la/MT35l4XmEKRTivxkgUTpV+veAFTIlPEFkPiSAUT8=)
8: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: zUL5UQNXnc8QhEgTnOt/ZHUWtyhWWgBBUQzy5H70VK4=)
9: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: aMwliF8f+KJHeJLDBVlDQIRW+UpwyCDnVCmgvmDSPBs=)
10: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl (hash: z9ecMvo+sZEGatmZ1QKXlH6hncSGKLCQQVFfZte04mM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ac:73:2a:4f:ca:c8:ea:10:d0:07:87:a2:35:c1:ec:4d:0a:24:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Validity
Not Before: Jul 24 01:15:52 2026 GMT
Not After : Jul 25 04:48:52 2026 GMT
Subject: CN=BF426579D24A9F5E2054FAFD00806BC2E2913337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:fe:94:52:fa:de:d7:95:46:c2:ea:68:58:
5e:51:a4:0b:65:58:ce:5c:1a:b8:11:7a:d7:0d:03:
23:dc:95:4e:2b:70:39:fc:42:e8:dc:81:e2:bb:19:
f8:24:a9:2c:dc:86:93:ae:51:34:d4:ad:71:31:ee:
24:4e:90:9b:c6:96:48:95:3a:7a:2c:18:3c:0f:3e:
0b:ac:b5:90:23:7a:99:e6:dc:74:43:a2:07:08:69:
5b:6f:75:29:7c:0c:fa:a0:1a:15:1f:ea:b1:d9:a8:
2b:9c:25:cc:9a:5f:66:89:e4:d9:39:32:2e:9b:4d:
2e:eb:09:47:ff:91:d3:95:34:95:eb:9a:4b:77:72:
04:08:43:6a:26:71:e4:33:19:98:2a:7f:57:ae:5b:
f2:b1:97:47:50:d8:67:c8:5b:42:89:26:77:ae:7a:
b1:6b:be:a4:07:d2:f1:6a:ab:eb:ce:36:75:16:f0:
bb:40:5e:d0:85:68:3f:fa:3e:9f:72:f7:94:cc:21:
03:78:e6:d4:56:d8:c7:de:7c:33:95:22:ae:02:47:
b4:e4:7b:fb:c4:49:ad:9a:cf:14:2a:ae:f2:4b:5e:
58:a1:91:bf:f8:e0:fa:29:7a:1a:4b:57:f5:fc:0d:
21:8b:7b:3c:30:fb:89:9e:52:99:65:7a:ad:45:e7:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:65:79:D2:4A:9F:5E:20:54:FA:FD:00:80:6B:C2:E2:91:33:37
X509v3 Authority Key Identifier:
keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:eb:aa:59:c5:75:8d:ab:bc:2b:d9:b1:fd:f0:4d:0b:ad:
ac:06:5a:f4:4f:ec:a2:f2:d8:d5:d6:95:08:ad:1b:9b:fc:30:
b9:bd:e5:c6:01:40:89:0e:9f:c3:d7:e3:bb:38:5c:d8:b9:b4:
e3:8a:90:8a:32:63:d0:66:f0:75:1b:b5:63:ec:fd:2c:b7:dd:
9c:69:ef:4b:56:ab:c6:47:64:d9:7f:b8:10:98:cd:dd:9c:3e:
ca:19:a9:3d:61:8e:d8:87:fb:b7:6f:fc:f0:49:79:80:2f:a7:
b4:34:62:d4:45:7f:94:7c:e4:26:dc:de:92:ad:b2:e6:79:fb:
90:17:2b:53:0b:09:ee:94:68:6f:bd:e6:a9:88:29:14:4c:4e:
0f:61:d7:5e:82:2d:11:73:63:1d:a5:cd:f1:f7:39:22:b5:56:
d4:92:3c:58:f8:6e:c7:e2:fb:c5:b1:7d:d8:71:4e:62:3a:ca:
d9:71:b2:95:5f:ce:6a:18:a2:b3:90:1d:4b:62:bf:a4:81:b0:
23:7f:05:4c:f2:a2:b1:27:55:a1:65:42:8a:8d:e1:57:64:f9:
9e:ee:8c:4f:24:30:b9:bc:10:e7:b3:bc:62:9e:36:78:7d:90:
32:e1:20:a5:ba:4b:90:04:84:20:44:c7:f4:cc:10:46:66:da:
24:85:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:09 2026 by rpki-client