
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
File: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft (raw, json)
Hash identifier: +EpKyhzRZvY+EKmt/msXNW3QF7x5jpN7/JhHq5HX5Bk=
Subject key identifier: FB:92:DF:85:E8:50:43:00:ED:75:CC:20:8E:90:22:79:6C:9B:31:E2
Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
Certificate issuer: /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Certificate serial: 3FB3D0FCF29BE4ED491812A8105BC1D98D3C3246
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 06:38:49 +0000
Manifest this update: Wed 29 Jul 2026 06:33:49 +0000
Manifest next update: Thu 30 Jul 2026 09:34:49 +0000
Files and hashes: 1: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: QGfwj5bqNP4jOjjdpeGZhiTRodQ0EdpPB4bLvU+Pufs=)
2: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl (hash: 5XhqECnUX6nxrO+s+O0ZF54ZrfVMG3ygedYBM5WlDoI=)
3: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b3:d0:fc:f2:9b:e4:ed:49:18:12:a8:10:5b:c1:d9:8d:3c:32:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Validity
Not Before: Jul 29 06:33:49 2026 GMT
Not After : Jul 30 09:34:49 2026 GMT
Subject: CN=FB92DF85E8504300ED75CC208E9022796C9B31E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:43:d4:90:16:e8:b9:46:7d:7d:96:d2:4a:
7a:46:f8:8a:7c:22:b8:aa:2a:a7:91:01:d8:6a:3e:
75:6e:eb:5a:03:4b:d3:70:19:99:9b:7b:35:a8:0e:
30:72:fe:de:73:3a:9b:18:9b:c7:ed:5c:96:0a:c9:
19:52:ec:63:97:33:44:62:da:d8:df:01:73:95:aa:
04:64:39:59:9b:9a:6a:2f:a1:f0:9b:4f:53:dc:1c:
5d:0c:8e:14:ee:01:54:8d:5a:86:1a:75:02:01:51:
11:4a:67:72:d5:48:0b:8f:3e:eb:f2:2f:6e:85:46:
8c:b3:65:0e:d8:a8:96:05:13:1b:73:40:0a:c2:5b:
b4:e9:f2:c0:6a:4c:21:81:89:8a:74:6c:bc:93:62:
f3:b1:37:09:af:9e:00:b0:2b:43:d3:36:78:3c:c3:
b9:2e:ad:c4:22:b1:23:ba:1f:33:41:98:26:7d:60:
40:cb:56:71:63:96:40:23:91:91:bc:99:d4:f5:05:
d6:a2:73:e8:f4:5c:eb:f9:83:8b:68:6b:5d:e0:1e:
b2:45:a9:e5:fd:50:43:05:c6:64:fa:e6:59:06:40:
99:a6:0b:eb:5c:44:08:81:b1:d2:56:08:40:a3:92:
bb:50:3b:68:0b:69:bd:84:05:62:2c:16:f0:7b:80:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:92:DF:85:E8:50:43:00:ED:75:CC:20:8E:90:22:79:6C:9B:31:E2
X509v3 Authority Key Identifier:
keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fa:2f:bc:ac:57:af:d4:40:83:f4:e3:5e:68:8c:0d:c7:89:
36:35:19:40:44:5f:ee:12:ae:de:60:f6:f8:29:5b:fb:5e:69:
e8:d2:de:ff:16:82:47:cd:6d:02:40:18:0b:08:ea:94:bf:cb:
a6:96:54:54:cb:d1:97:a6:48:3d:af:9b:1d:9a:8c:77:a4:80:
0b:cf:c6:50:dd:d9:11:bc:29:de:3a:9e:70:f6:22:73:92:3c:
f0:ed:0c:74:28:ab:a6:e5:e7:ec:76:ae:a3:2f:65:22:20:aa:
f5:f2:9b:f7:75:89:57:e6:a8:fd:ec:18:b4:78:64:e1:6a:0d:
3c:9f:3a:db:63:93:1d:66:ed:1e:31:0d:5d:07:ae:4f:96:19:
06:bb:30:9d:e4:9a:17:41:e6:db:c1:2c:a6:0a:fa:09:21:e7:
63:6e:70:04:e0:45:df:50:95:dc:a6:c9:81:1f:0a:f0:e0:d6:
a0:46:52:5d:6b:68:5a:1d:c9:e9:48:4a:04:05:5f:cc:e7:fe:
44:d0:50:23:40:bb:d4:25:0b:50:f4:a2:de:d7:82:e1:2d:3a:
6f:8d:da:68:eb:80:fa:99:f8:14:51:eb:a4:76:94:fb:f6:3d:
7f:e4:43:c5:a2:48:29:51:20:58:50:d2:12:44:01:ca:eb:1f:
87:c4:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:42:40 2026 by rpki-client