
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
File: BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft (raw, json)
Hash identifier: SF5GMtnUqAtIik0tlpBiSrjUT6OMAEiJoyPKSfUEKNI=
Subject key identifier: BD:13:DF:65:28:A7:A5:91:29:99:90:21:A4:CF:A2:C1:28:7B:B3:72
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial: 669B92128BE0AD032D261A2D0715D6D951810169
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 20:37:03 +0000
Manifest this update: Mon 21 Sep 2026 20:32:03 +0000
Manifest next update: Tue 22 Sep 2026 23:30:03 +0000
Files and hashes: 1: 3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa (hash: u6hQoPKoHiVtYDbwuT9Uz8f5A+6L4NtjJ2yTHSMpD0s=)
2: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (hash: atskKnHk5T0oqegQKA+HINuV5pfMQiIduF8R7Q4ZG+c=)
3: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (hash: fBsZSMatjucO+T7+pnQaQszpCsK34WTaNL1x8+auaVA=)
4: 3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (hash: GF5sw5TIyMg/HEZpyvFvO1rBAEJgs3CpQYQY8RN9uRY=)
5: 34352e3132362e35362e302f32332d3234203d3e20313332363437.roa (hash: BC4anIQ+a9WUEuTcYN68YGrrV6yunSX3tOj+gke3HOM=)
6: 3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (hash: H4QyDpAYJgb2cSZHnPV/4PL7jlc0wOLp4dMIreHw0fQ=)
7: 3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (hash: AWDTDU1uK2yBZAsT7txzvxIXXk3Q8Vz2Xvi0KaFLsOk=)
8: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (hash: /o29HECkwJutgVmG0I5lSxBVN20fSE9q8Dt9mr1Ct3U=)
9: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (hash: elFR1hwQeXN8BTtaNU77MnFeZSQYNz4QlrPnRy3FSWk=)
10: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (hash: Q3RsZBk5q9tyrBDMlbDRl2T3DfnBOVkpF/7xiffBucI=)
11: 323430323a656538303a643a3a2f34382d3438203d3e20313332363437.roa (hash: Sm4mr8PZqNPV9oAJvZYba4Nbo01h5qyGSwF7hDwYhaE=)
12: 3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (hash: Tm/UNBU0RZeScJfXS8SuxK9KL1FxgoN/n8Ti+/I4iaM=)
13: 3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (hash: SrggenrhOddxkHmFx2q+pbw4/0dGiORptPNzRQuuHtg=)
14: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (hash: qArl8RBpNQGv7NW/pHMi5u7s8FPFuQtE+K0tYbKrjHU=)
15: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (hash: 8tz20JsrCmWJ12URHbvfs5cYxrQj1byexdS6hWPseS4=)
16: BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl (hash: Z94akUNGHVYZN8c0B8+qD0z/oEgK4NsrVOitg+swIiw=)
17: 34352e3132362e35382e302f32342d3234203d3e20313332363437.roa (hash: 22qOI7kA6d3/l7AQiyRyGMcKna9TfZu2inXLqY/VILw=)
18: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (hash: 3tV7ePWEh+EaJKm0cDZuNy9PmGNGDZkDyBgahcmdLds=)
19: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (hash: W4Y/Jl2Uo2TA6PRaW+Lr7qZLcsDrqBIfU1uczmpPuG4=)
20: 323430323a656538303a35383a3a2f34382d3438203d3e20313332363437.roa (hash: e+Gw3YTY2+X+FfuH6e/RIS9HElWcKHLwAE2PQqgXfvw=)
21: 34352e3132362e35362e302f32342d3234203d3e20313332363437.roa (hash: 51eavTWPFrNxa8bjSHcdJ8vtzC1mzLQPZlm9M3COLDU=)
22: 323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (hash: d2p1pz6iSVKmhRvc7KcXU5ZyLMfCL4gLganI40S2YnI=)
23: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (hash: c/+B9i/CScu7h8jGuv1JRMe6ArsSJVjID5tIfBJTEZE=)
24: 323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (hash: PfU7mv6IN/K07oNWG+0wCm4fLi1KFnoKFqJbJk9QcX4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 23:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:9b:92:12:8b:e0:ad:03:2d:26:1a:2d:07:15:d6:d9:51:81:01:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Validity
Not Before: Sep 21 20:32:03 2026 GMT
Not After : Sep 22 23:30:03 2026 GMT
Subject: CN=BD13DF6528A7A59129999021A4CFA2C1287BB372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:1c:65:8d:d3:12:34:d5:71:06:5e:a4:84:
af:48:2f:fa:0a:31:e1:5d:b5:fa:37:54:93:d1:b0:
30:94:11:24:03:17:23:71:f0:88:75:35:6c:4e:e9:
9e:3b:5d:24:78:75:ab:5e:c8:68:0d:35:f7:e5:2f:
84:63:90:f2:69:9b:28:f6:12:02:f3:b6:5d:27:63:
ac:ac:de:22:90:c0:93:4c:fe:9c:04:89:99:9c:c1:
f7:a5:37:ff:4d:50:57:25:ac:e1:78:3b:0f:08:fa:
54:67:3f:09:71:e7:94:49:3f:b7:2b:c1:0e:8f:01:
1b:42:d2:55:71:42:1e:b1:f0:0a:e4:46:cc:20:f0:
41:18:2d:2c:d4:ee:37:42:bd:71:21:81:76:a2:06:
68:f1:7c:8a:01:e8:5a:c4:e3:21:ff:2c:05:6c:e6:
2d:46:e5:e0:85:10:e1:40:3b:6c:86:32:45:80:6e:
55:92:48:60:fe:7e:02:84:db:03:40:8a:40:d2:b7:
60:d4:14:cc:4a:e1:5c:4a:16:76:08:43:ff:7b:b4:
f5:be:20:5d:94:59:06:24:e8:7e:02:79:92:0f:66:
e2:24:c3:18:89:81:1a:5f:d1:4a:51:48:52:cd:48:
47:8e:50:47:63:91:ef:e5:09:ea:44:7e:ff:ab:7d:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:DF:65:28:A7:A5:91:29:99:90:21:A4:CF:A2:C1:28:7B:B3:72
X509v3 Authority Key Identifier:
keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3a:55:89:d1:44:cc:6a:bd:a0:30:e3:cf:4e:a7:ea:3a:23:
ae:4a:b5:d8:c7:25:99:b3:7b:7f:22:ad:c7:b5:30:d7:d1:7b:
2a:f1:8e:ba:a8:33:67:31:c4:96:2f:07:60:d2:fa:05:8e:7d:
5d:8d:12:ee:ec:dd:10:22:6f:2c:9e:24:19:15:11:d8:2d:7a:
a6:4d:07:a0:7f:dc:25:50:07:5e:c7:a6:02:af:db:d6:6e:38:
b2:1f:82:94:f9:a8:b6:bd:40:95:3d:a6:37:68:b9:3d:82:64:
26:56:22:7e:ef:9e:69:13:d8:29:a2:4e:29:89:bc:11:67:b3:
b7:58:5a:a2:bc:13:2d:f8:db:b9:2d:3f:8b:ea:7e:de:1e:c6:
b2:5f:8d:fb:06:27:b9:06:07:db:92:a7:e3:db:66:bc:67:95:
06:1f:42:f9:03:96:dc:af:5e:97:94:da:1b:23:41:f4:59:43:
57:68:bf:58:a8:20:f8:f6:d7:0a:67:0d:56:4f:82:e6:21:d9:
73:c7:36:5f:33:2b:e6:94:dd:3d:ef:e1:7b:7b:99:94:7b:d7:
65:18:32:aa:d5:31:ef:62:3c:72:90:e2:68:44:47:4f:74:fe:
f0:e6:d8:17:70:9a:d3:88:08:3f:79:ea:d0:e5:47:76:45:57:
4b:8a:50:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:20:58 2026 by rpki-client