
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
File: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft (raw, json)
Hash identifier: pI2/GT7Gwof0bkjFzA0e0PbVZukBYJYgLQjGuhIpAiM=
Subject key identifier: 2F:DB:95:90:87:13:FB:4C:9D:E6:39:66:AC:85:24:BF:EC:41:E1:4C
Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
Certificate issuer: /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Certificate serial: 24738234C6A86B31669E1BD1668146A783A1C137
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 11:08:02 +0000
Manifest this update: Sat 13 Jun 2026 11:03:02 +0000
Manifest next update: Sun 14 Jun 2026 12:22:02 +0000
Files and hashes: 1: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl (hash: c3LGnLnx6Ispqk8LONeAoGhpg+wvaTwz7Q3XRPlzRTk=)
2: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=)
3: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: QGfwj5bqNP4jOjjdpeGZhiTRodQ0EdpPB4bLvU+Pufs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:73:82:34:c6:a8:6b:31:66:9e:1b:d1:66:81:46:a7:83:a1:c1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Validity
Not Before: Jun 13 11:03:02 2026 GMT
Not After : Jun 14 12:22:02 2026 GMT
Subject: CN=2FDB95908713FB4C9DE63966AC8524BFEC41E14C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:5a:e9:99:e4:25:0a:e3:5f:10:4b:4c:ba:
77:b3:f6:f5:64:2a:c6:0a:19:2c:15:d0:af:41:47:
df:13:90:c5:47:98:b8:91:27:05:b3:df:3b:56:94:
9e:6d:a5:f9:0f:e5:7e:cc:98:5d:61:71:d2:6a:d4:
18:ef:e0:0e:bd:b6:eb:b2:2e:a3:b8:20:cc:8c:29:
b1:64:4a:2a:1a:ff:12:a7:21:dc:89:2a:3d:72:d2:
15:ae:ca:3e:3c:97:1d:14:53:12:86:bb:06:eb:62:
2e:bd:67:6c:70:e8:51:4a:cd:3c:a7:57:17:d7:11:
11:83:35:1b:d2:a8:04:10:27:19:fb:87:dd:33:55:
00:cc:05:18:35:c8:2b:42:8a:69:0c:ab:da:36:c8:
0d:78:66:a7:aa:fd:96:08:03:85:8f:3c:90:26:51:
c2:7b:83:b6:09:c1:e3:5a:2b:f6:be:e1:bf:13:fe:
53:8b:15:78:07:4b:5d:7b:26:3c:5d:7d:14:8f:57:
5d:09:15:19:67:fa:0a:5b:dc:93:3d:d7:c0:37:37:
a0:d0:96:83:8f:bc:51:70:ef:ae:ee:a5:31:cb:a2:
21:4c:e1:59:59:e9:d7:f0:43:bd:4c:57:63:43:1c:
12:97:22:65:a3:1f:3d:53:02:ca:af:25:aa:c9:d6:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:95:90:87:13:FB:4C:9D:E6:39:66:AC:85:24:BF:EC:41:E1:4C
X509v3 Authority Key Identifier:
keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ae:0c:69:f4:8b:af:36:02:20:e2:9c:fb:fb:15:3d:ab:69:
0c:d1:01:0c:5e:b4:7b:36:8e:e9:96:53:3f:24:38:8e:ee:30:
da:99:37:f7:1e:b1:bc:1c:b8:ed:9e:b3:12:5e:8c:fa:43:27:
b9:be:d9:73:ab:d2:d2:25:d7:cf:d3:87:cc:38:64:78:35:00:
c3:50:6f:7e:cf:db:3f:7c:9b:ff:46:87:71:cd:33:e3:fd:fe:
09:40:2e:ae:aa:8d:6f:6a:82:d9:0d:b2:51:32:3b:32:59:18:
ec:25:17:c2:4d:28:c1:04:c2:d5:5d:e7:15:ff:24:31:75:04:
14:7a:cc:4e:ae:7b:98:ee:eb:03:ff:99:e9:c7:4e:9b:23:76:
7a:55:b7:d8:f1:83:ab:a9:00:c2:cb:6f:17:5f:26:ca:eb:36:
4b:99:4f:8e:ca:0d:13:0a:4f:ca:e1:17:83:f4:87:27:bd:44:
06:39:38:72:1e:54:36:e5:bd:99:7f:27:73:78:1a:0c:13:f8:
c3:b0:6f:d0:5a:be:f3:d6:27:1d:44:0f:d7:c7:d3:ed:4e:b4:
12:ad:4c:5f:89:fa:af:97:09:6a:c5:7a:58:1e:0b:86:93:04:
39:09:cb:63:d8:6f:f5:e5:3e:1c:b8:76:dc:da:33:c7:3e:ab:
62:30:64:53
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJHOCNMaoazFmnhvRZoFGp4OhwTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1
MDdGNTVENjAeFw0yNjA2MTMxMTAzMDJaFw0yNjA2MTQxMjIyMDJaMDMxMTAvBgNV
BAMTKDJGREI5NTkwODcxM0ZCNEM5REU2Mzk2NkFDODUyNEJGRUM0MUUxNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSEVrpmeQlCuNfEEtMunez9vVk
KsYKGSwV0K9BR98TkMVHmLiRJwWz3ztWlJ5tpfkP5X7MmF1hcdJq1Bjv4A69tuuy
LqO4IMyMKbFkSioa/xKnIdyJKj1y0hWuyj48lx0UUxKGuwbrYi69Z2xw6FFKzTyn
VxfXERGDNRvSqAQQJxn7h90zVQDMBRg1yCtCimkMq9o2yA14Zqeq/ZYIA4WPPJAm
UcJ7g7YJweNaK/a+4b8T/lOLFXgHS117JjxdfRSPV10JFRln+gpb3JM918A3N6DQ
loOPvFFw767upTHLoiFM4VlZ6dfwQ71MV2NDHBKXImWjHz1TAsqvJarJ1j5RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUL9uVkIcT+0yd5jlmrIUkv+xB4UwwHwYDVR0j
BBgwFoAUvI8Pn3EFkHPt4jucrZfZr1B/VdYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTQ2NGNiZWUtYzUxMy00NmM2LWExZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3
MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1MDdGNTVENi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQzhGMEY5RjcxMDU5MDczRURFMjNCOUNBRDk3RDlBRjUwN0Y1
NUQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx
ZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5
QUY1MDdGNTVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKmuDGn0i682AiDinPv7FT2raQzRAQxetHs2
jumWUz8kOI7uMNqZN/cesbwcuO2esxJejPpDJ7m+2XOr0tIl18/Th8w4ZHg1AMNQ
b37P2z98m/9Gh3HNM+P9/glALq6qjW9qgtkNslEyOzJZGOwlF8JNKMEEwtVd5xX/
JDF1BBR6zE6ue5ju6wP/menHTpsjdnpVt9jxg6upAMLLbxdfJsrrNkuZT47KDRMK
T8rhF4P0hye9RAY5OHIeVDblvZl/J3N4GgwT+MOwb9BavvPWJx1ED9fH0+1OtBKt
TF+J+q+XCWrFelgeC4aTBDkJy2PYb/XlPhy4dtzaM8c+q2IwZFM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:30 2026 by rpki-client