Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
File:                     BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft (raw, json)
Hash identifier:          L/TA5IfDSuVIUA+Dxn1oVoSBcG1dKuZ2sf4Zsn3MdUg=
Subject key identifier:   BD:68:EC:17:D8:6D:3C:B7:8F:20:9B:F9:7C:E7:13:DF:0B:9B:0C:60
Authority key identifier: BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
Certificate issuer:       /CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Certificate serial:       20AD056F63848F57FE894E59E3F13AB73469915B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 23:36:02 +0000
Manifest this update:     Mon 21 Sep 2026 23:31:02 +0000
Manifest next update:     Wed 23 Sep 2026 02:04:02 +0000
Files and hashes:         1: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: F8rn8naCPvDCkUhjOQElNO8VO2STo0GIaHG7gs8zRHY=)
                          2: BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl (hash: 2/N8LYugcuXu59Om+xBMiMaA93RB8A96H3YuQK53Dfs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
                          rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 02:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ad:05:6f:63:84:8f:57:fe:89:4e:59:e3:f1:3a:b7:34:69:91:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
        Validity
            Not Before: Sep 21 23:31:02 2026 GMT
            Not After : Sep 23 02:04:02 2026 GMT
        Subject: CN=BD68EC17D86D3CB78F209BF97CE713DF0B9B0C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:bf:a1:44:b1:f7:f5:22:af:dd:4c:cd:08:
                    19:ed:20:d7:6e:3b:61:46:79:a2:15:37:72:3b:36:
                    d3:54:95:07:bc:77:f5:55:78:4b:5c:5b:e1:bf:c9:
                    c4:c0:e6:de:91:ee:44:25:d8:f2:29:f1:d2:87:32:
                    81:9c:31:1c:c0:bc:58:25:f6:6c:7b:4f:73:bb:7d:
                    c8:43:42:31:15:1c:49:26:45:d5:3a:a4:c0:56:06:
                    9b:de:d7:12:f2:b0:78:bd:24:c5:af:0e:6e:0c:ab:
                    f6:a2:6c:92:ca:43:31:06:ed:38:93:87:66:98:a6:
                    39:6f:a5:a0:65:0c:ae:af:de:83:e7:6d:e1:10:dd:
                    db:be:ce:a3:61:be:2a:8b:bf:61:e1:16:90:da:13:
                    08:c4:e6:4d:09:2a:f9:5a:be:1b:0a:a9:14:45:7e:
                    ab:09:24:dc:5d:5e:d8:f3:04:1a:cb:3f:03:00:a3:
                    7f:9c:33:cc:59:ee:99:2c:b0:ca:06:19:a8:17:8f:
                    6c:05:12:eb:50:92:24:88:a2:d0:10:f7:28:c8:0b:
                    64:09:45:2d:8d:1c:4f:99:cb:cf:10:c9:93:e7:26:
                    2f:bb:34:6f:ae:a8:aa:53:3d:18:24:5b:60:4d:62:
                    83:4c:47:cb:26:71:98:d4:2e:35:48:03:11:1f:d6:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:68:EC:17:D8:6D:3C:B7:8F:20:9B:F9:7C:E7:13:DF:0B:9B:0C:60
            X509v3 Authority Key Identifier:
                keyid:BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:b2:fa:91:52:9d:98:17:8d:21:f7:7d:00:5f:1e:8a:ef:63:
         b1:06:30:d1:e0:a6:85:79:f8:e7:16:5f:0e:dc:39:7b:fe:e9:
         4f:52:f8:01:27:b2:c2:f3:65:00:73:12:15:7e:70:aa:af:1a:
         38:bc:75:ba:0b:86:96:e8:21:ff:0a:32:21:04:8e:05:80:ff:
         12:d8:42:3e:6e:b6:3f:74:eb:56:0b:56:ee:17:3b:d6:35:9f:
         b3:12:43:58:4f:8d:76:2d:17:76:b0:57:f2:1c:c9:3f:44:a7:
         15:be:68:11:70:0a:7c:d5:90:48:0e:d6:24:33:9a:15:f4:2c:
         7c:23:97:76:cc:01:0e:a6:38:5f:de:94:8c:35:3f:01:7d:90:
         9f:64:8c:09:18:d1:65:59:9e:9a:e6:e1:52:c9:50:b9:4d:e6:
         98:6e:af:dc:e7:03:d6:fa:e6:b1:61:ee:9e:09:c3:a8:b1:85:
         a1:79:e0:e2:18:6b:84:7e:9a:c3:03:19:cd:75:ac:93:1c:b0:
         1b:1e:cf:83:b8:da:ff:3a:71:3f:26:cc:45:46:be:42:1a:e9:
         9e:07:2d:70:6b:b6:60:42:b2:57:8b:fc:dd:83:8e:ce:42:ac:
         de:bc:61:7c:a8:af:a1:a6:ec:fe:ba:3f:c6:70:5f:38:d6:2f:
         8b:cd:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:21:03 2026 by rpki-client