
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
File: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft (raw, json)
Hash identifier: 7CP2jP8NIFErsra9Njx0WEaCxg4MMI1l5DjovjKWmdk=
Subject key identifier: CA:07:01:43:D7:6E:80:3B:01:27:9D:C7:46:48:F2:1B:52:D1:9B:7A
Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Certificate serial: 6732377D56BD8A8FA578AC65EE2128063A15A8A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 20:44:12 +0000
Manifest this update: Tue 16 Jun 2026 20:39:12 +0000
Manifest next update: Wed 17 Jun 2026 21:18:12 +0000
Files and hashes: 1: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: W7n2JDD5ivxhi/6nEhgqfo99pkm7Hn+CBH17uMHEOxU=)
2: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl (hash: qS3dNCUN1AjNzC6SVXw4Ix4yYtRJzLkLvVMz5D9Fod4=)
3: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=)
4: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:32:37:7d:56:bd:8a:8f:a5:78:ac:65:ee:21:28:06:3a:15:a8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Validity
Not Before: Jun 16 20:39:12 2026 GMT
Not After : Jun 17 21:18:12 2026 GMT
Subject: CN=CA070143D76E803B01279DC74648F21B52D19B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:ca:59:7b:98:2b:46:8f:98:b0:a2:61:b2:
d1:5c:d5:bc:2c:63:62:66:0a:4c:ef:48:5b:29:0a:
af:b6:21:f3:6f:b4:fb:99:5b:4f:81:f7:12:fc:1c:
a6:34:1a:15:bb:bc:07:02:79:14:e3:d2:41:6f:f2:
9b:0a:6e:0a:aa:08:e2:49:7a:31:0d:83:e4:cf:ee:
55:f1:85:06:09:85:2a:cf:ec:98:37:cb:1f:df:29:
b4:c1:16:e6:cd:fd:85:85:30:e2:65:85:41:2e:48:
3d:4b:c5:01:5d:df:1e:4a:7d:3d:8f:77:9b:22:b4:
64:88:9f:da:eb:75:75:28:20:59:0e:b7:6a:51:91:
79:9c:9c:4f:e4:61:56:9d:c9:02:7e:32:2c:ca:fb:
07:0d:a1:91:49:7b:40:08:b4:45:dd:4b:2b:d2:30:
dc:d4:55:f4:94:2c:97:ef:3e:c1:ab:68:37:e7:96:
70:91:42:e9:02:64:c1:4a:cd:a0:06:33:17:8f:9a:
81:48:c4:27:ce:4d:de:50:c2:18:0e:b7:2a:d0:92:
2b:24:16:0f:40:54:be:f0:a9:16:9f:4b:29:5d:7a:
02:ea:15:52:a9:a6:a6:f2:c0:d1:a9:80:19:e6:42:
7b:ba:9e:ff:15:27:1a:8a:d6:7a:c9:1a:2a:86:fa:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:01:43:D7:6E:80:3B:01:27:9D:C7:46:48:F2:1B:52:D1:9B:7A
X509v3 Authority Key Identifier:
keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9b:b8:1c:22:47:d3:95:a2:b9:53:9b:16:60:4a:d7:92:74:
bd:72:04:83:94:98:9e:08:1c:48:0d:f0:b8:1d:65:e7:20:9e:
bd:dd:f5:13:bd:e4:b3:f5:7f:59:d0:c1:89:c0:22:85:47:13:
e1:03:ac:bb:e4:34:5b:86:c9:a1:81:2f:c3:96:82:d9:d9:a2:
2c:3a:50:e1:55:6d:c9:f2:2b:92:68:18:10:93:41:19:45:47:
4f:21:0a:7f:7c:57:68:d0:78:5b:08:ff:d3:b7:93:06:2b:5d:
88:ee:40:22:4d:00:74:61:b9:55:c8:49:17:b8:69:13:18:ac:
91:c0:6d:c9:17:e8:f8:8c:81:d4:8d:14:81:51:82:1b:c3:c1:
de:96:8b:e7:fe:36:cf:81:ad:e3:cb:b9:b1:1c:fa:97:5b:bc:
ec:f1:ce:8c:6f:b3:ce:32:07:45:5b:53:fa:26:58:15:5f:9c:
e4:fb:c0:b2:f9:9a:46:9d:e2:38:d1:b8:4c:2e:90:38:f5:1e:
d9:de:55:ae:66:1d:86:f0:1a:1c:7f:9e:30:43:2a:89:17:b8:
68:1d:1c:62:f0:56:f9:0a:0f:f0:58:3c:dd:2f:c7:b1:ac:be:
70:dc:d6:8a:99:57:06:38:de:2c:c0:be:bb:c4:54:4c:90:ef:
a6:ac:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:39 2026 by rpki-client