
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft
File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft (raw, json)
Hash identifier: MjEUUKi+TH+/02cjlkg6Ya+SpXGswM+M6Y/ZKUTDuZQ=
Subject key identifier: CA:F1:E0:88:ED:8D:27:52:F3:F3:4F:01:0D:1F:95:76:98:7C:90:34
Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6
Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6
Certificate serial: 68816BE75BB16FD51DE6361DF43AD6D3AA807DA1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 05:35:42 +0000
Manifest this update: Sat 13 Jun 2026 05:30:42 +0000
Manifest next update: Sun 14 Jun 2026 08:03:42 +0000
Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4=)
2: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl (hash: mgFEEx4DkWBfIPdI0gEIRuSyAg+4NGYxXBr8Q6Zcjc0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl
rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:81:6b:e7:5b:b1:6f:d5:1d:e6:36:1d:f4:3a:d6:d3:aa:80:7d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6
Validity
Not Before: Jun 13 05:30:42 2026 GMT
Not After : Jun 14 08:03:42 2026 GMT
Subject: CN=CAF1E088ED8D2752F3F34F010D1F9576987C9034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:2d:5e:e4:9e:d9:9e:fe:82:c0:fc:c5:9b:
a3:d1:9d:60:3d:ff:fd:44:8c:b4:0e:52:11:5c:28:
64:3c:bc:39:03:28:f9:a3:40:d3:3d:5b:79:b1:7b:
33:7f:88:4a:4a:f1:c5:15:45:bc:09:e0:c1:67:a2:
3e:51:66:07:f4:54:2c:d4:04:8f:0f:29:fe:19:59:
31:1d:63:a8:98:29:23:b5:2a:d2:16:86:d0:88:82:
1c:9b:e9:8e:a8:87:29:42:79:45:12:d1:8b:8f:6c:
32:74:6c:05:64:2f:2c:69:ab:16:5c:18:5b:c8:be:
af:f3:7b:fd:ab:de:7d:00:24:91:72:55:fe:f8:6a:
8a:35:df:c2:93:90:37:61:8d:61:88:24:77:68:3a:
6e:f9:b2:0a:34:6d:6d:5f:10:43:65:c5:95:d8:da:
76:78:10:60:23:18:59:2d:92:68:ed:b3:8c:6a:47:
45:fa:a7:af:8a:38:38:4a:a1:8a:ef:08:39:e1:73:
62:fa:32:9e:92:54:77:d4:b4:8c:ff:4e:e6:94:50:
24:11:96:5a:be:76:33:c4:13:5b:28:2f:54:0e:cd:
2d:6a:76:fa:c7:97:c2:5f:3b:e8:58:5e:0c:cc:4d:
da:61:65:1c:92:a1:77:fa:6d:e6:a6:71:f4:56:5e:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F1:E0:88:ED:8D:27:52:F3:F3:4F:01:0D:1F:95:76:98:7C:90:34
X509v3 Authority Key Identifier:
keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:24:e5:f9:fa:9c:9e:eb:51:04:ef:31:e9:0e:13:3a:a9:a2:
6c:5d:3f:b3:c7:b6:f1:1a:4a:77:4a:91:09:bf:9a:7b:fb:db:
0b:98:62:e9:f2:b3:2b:4c:cc:e9:c8:32:ad:9b:c5:ac:c2:f4:
71:3f:ed:f6:08:8a:00:9b:a7:6d:9f:3b:eb:b0:d0:83:5f:91:
27:9f:71:ce:39:f0:bf:da:18:c8:08:c0:20:05:50:ff:e0:54:
b9:c8:2d:af:76:f3:3c:7c:12:a8:c4:72:95:a4:d2:2f:80:24:
5d:66:b8:95:f4:f7:70:33:d5:db:59:57:a3:34:b9:35:1e:27:
a6:48:a4:03:e1:89:84:1a:0c:39:05:56:07:9d:07:43:12:5c:
ce:6c:b9:72:1b:53:00:3c:62:45:b9:f7:33:f6:f7:05:91:fc:
49:e2:6e:bb:76:ff:73:49:6c:fd:8a:97:59:10:78:27:1a:6b:
e9:35:4c:ea:80:ff:e8:88:a2:e8:cd:86:e9:8f:41:82:70:61:
32:57:bb:48:39:0b:6a:81:e9:b6:b9:df:93:1d:2e:22:c9:1b:
a5:01:e8:d7:2d:8e:a4:d0:4c:0c:35:6c:fe:27:1f:fe:fd:2b:
db:64:50:1d:0c:b8:ba:9a:89:0a:a2:29:f5:ba:31:5e:e2:98:
14:3e:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:22 2026 by rpki-client