
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
File: BC56CE0B357E1A9036243CAE454739729AD6633C.mft (raw, json)
Hash identifier: 8+ER4munTLlJtpS6u2a9UjcdNmjx6tCUZFaXhUdO98Y=
Subject key identifier: 85:C0:15:20:B4:01:F4:1A:A9:BE:3D:F8:F7:C8:AA:66:35:06:42:51
Authority key identifier: BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C
Certificate issuer: /CN=BC56CE0B357E1A9036243CAE454739729AD6633C
Certificate serial: 05A861B175EF2488652027FC0BCEB4694B99E10E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 06:35:52 +0000
Manifest this update: Wed 17 Jun 2026 06:30:52 +0000
Manifest next update: Thu 18 Jun 2026 08:54:52 +0000
Files and hashes: 1: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: gRWK/0YFVmnxzlTGh51A5dqs3NFdvCJxXgz/joszlok=)
2: BC56CE0B357E1A9036243CAE454739729AD6633C.crl (hash: rVWTsotDbMmfizSr1cqKK0z5oOkJErAA7Vr/6K7fx7A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl
rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a8:61:b1:75:ef:24:88:65:20:27:fc:0b:ce:b4:69:4b:99:e1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC56CE0B357E1A9036243CAE454739729AD6633C
Validity
Not Before: Jun 17 06:30:52 2026 GMT
Not After : Jun 18 08:54:52 2026 GMT
Subject: CN=85C01520B401F41AA9BE3DF8F7C8AA6635064251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:55:f9:84:c0:8a:3e:d4:a4:3f:77:d6:de:
c8:dd:86:f5:7b:1e:6f:22:a7:d7:3e:96:54:7a:5e:
75:0b:eb:2e:20:1e:91:5b:a1:22:88:18:be:26:6e:
04:04:b8:2a:1d:82:76:2d:5c:36:4d:9c:c4:28:f7:
f2:a4:5f:b2:20:69:5c:8c:a8:81:b1:e1:5a:1f:30:
5e:ac:76:a8:af:2f:d5:e7:3a:c0:1e:ae:ea:88:26:
df:89:43:5e:19:63:99:d9:79:c2:60:e5:ea:4c:8d:
9d:10:d0:e7:9d:18:45:50:7b:18:f6:97:f6:7c:88:
f6:44:e9:c3:7c:11:73:87:7b:24:c7:b0:29:30:54:
fa:af:08:b7:7c:73:74:27:7b:b5:39:db:73:13:65:
91:ff:ea:c7:91:9c:32:f0:22:06:e1:62:e2:10:16:
4f:db:51:51:00:f5:58:d9:44:15:9e:13:47:08:e9:
4b:29:3d:18:93:e4:83:68:96:c4:62:54:fa:d6:6b:
fb:13:f9:0f:26:1c:ba:16:f7:4b:f8:2a:bb:f2:55:
24:b7:e5:ba:83:a2:96:db:c8:16:c9:50:31:e8:dd:
eb:9b:12:dc:11:c7:43:8d:9a:f7:53:19:29:cf:fb:
4f:0b:bc:fd:4a:7b:8d:53:64:af:18:3a:fa:e9:2a:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C0:15:20:B4:01:F4:1A:A9:BE:3D:F8:F7:C8:AA:66:35:06:42:51
X509v3 Authority Key Identifier:
keyid:BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:06:e7:0f:16:37:a7:8c:5a:56:30:12:0f:48:2d:e4:f1:52:
3b:5a:c0:a1:ff:99:12:77:f2:3d:c9:0e:3f:57:fd:38:1e:01:
6c:43:72:3c:e9:3a:8f:c8:70:55:0d:6c:10:1d:13:21:68:81:
bd:5d:72:0a:ac:26:35:33:1f:15:ec:00:8f:e8:14:73:95:d0:
06:9d:89:dc:71:10:00:ad:94:45:58:6a:b1:4c:f6:2a:d7:77:
b1:a9:bd:2a:3a:8a:31:63:a2:8b:16:74:02:67:5a:6e:20:21:
c1:f0:db:cb:ec:c6:b6:1c:25:db:de:0a:c7:22:f0:1b:51:06:
00:26:4c:38:62:33:c1:68:19:54:9c:43:67:02:33:28:0d:7f:
64:be:0c:cd:cc:85:84:84:7c:9a:c3:a7:aa:de:6a:71:cd:eb:
9f:a1:8b:bd:79:24:9c:39:96:f5:89:bc:0f:e5:52:07:d1:39:
7c:ff:08:e8:02:0c:18:92:aa:61:74:2f:55:4d:1a:00:6d:35:
63:d5:75:36:3a:b2:91:c0:1d:5d:c3:87:1b:d8:49:f7:d4:66:
6b:4a:bf:44:d2:3c:8e:41:1c:a9:c1:a5:ca:2b:6d:e7:77:37:
af:c7:d9:ad:0c:e6:31:f9:fe:e2:f3:b4:3a:13:94:4f:25:36:
42:6c:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:09 2026 by rpki-client