
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
File: BD49AA627797B2AA85CD3D0B2176243D6B624462.mft (raw, json)
Hash identifier: oHrQusLpeIxIuZTNZEcthcKGUT9YQGATnfPnIOK14ik=
Subject key identifier: E3:A9:19:08:9C:EE:55:6D:B7:AA:AA:EF:B2:24:AE:ED:9C:67:12:32
Authority key identifier: BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62
Certificate issuer: /CN=BD49AA627797B2AA85CD3D0B2176243D6B624462
Certificate serial: 37E8989A52FB483DF2A9900024D6F4A2C5EDE085
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 13:26:34 +0000
Manifest this update: Tue 02 Jun 2026 13:21:34 +0000
Manifest next update: Wed 03 Jun 2026 13:43:34 +0000
Files and hashes: 1: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: KRxP1QVR72dMNAQENQZE70vpWpEv6vQ6dhAVnSqGThE=)
2: BD49AA627797B2AA85CD3D0B2176243D6B624462.crl (hash: S+l0MpEi7+p8YowQ9x0uSP57OUG8oo9Hh6p/CqSuW+c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl
rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 13:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e8:98:9a:52:fb:48:3d:f2:a9:90:00:24:d6:f4:a2:c5:ed:e0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD49AA627797B2AA85CD3D0B2176243D6B624462
Validity
Not Before: Jun 2 13:21:34 2026 GMT
Not After : Jun 3 13:43:34 2026 GMT
Subject: CN=E3A919089CEE556DB7AAAAEFB224AEED9C671232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:73:8a:88:9d:0b:c8:dd:8f:05:9e:fb:1b:
b8:5f:ed:1a:f5:ec:37:ca:c7:67:c6:56:0e:b9:fe:
b5:c7:fc:24:55:da:75:58:4c:e9:71:12:78:bf:4a:
92:89:81:3a:9e:52:b5:ee:0c:3a:73:42:b6:b7:a8:
24:de:02:aa:de:b4:17:9c:a4:c5:ba:22:07:75:34:
67:9c:7f:96:83:fe:e1:2c:b2:13:69:80:f4:ea:85:
9f:fd:5b:46:11:d6:1b:28:1c:53:67:65:ae:89:a1:
ab:3d:2f:85:09:1c:ff:c0:e0:7c:8b:9e:2d:a4:92:
24:0d:28:41:cb:e6:f5:27:0c:19:c2:2f:d3:56:02:
c8:cc:f2:bd:36:21:e9:eb:e7:6f:60:fd:0f:fc:ea:
30:56:f6:1c:ed:bc:8c:67:11:ad:1a:0c:10:2c:0d:
b0:8e:14:13:5c:3a:b6:c7:78:c3:be:26:fe:ef:bd:
b7:75:a5:7c:fb:f4:6f:39:44:cd:53:12:c9:51:1a:
af:ad:5f:af:c7:a6:3b:f9:d2:ae:30:29:4e:01:1c:
0a:2d:b3:98:d8:bf:9f:ae:84:d0:29:20:d9:a0:84:
ec:82:f6:60:a7:1a:3f:cc:0b:32:a9:d0:22:96:77:
52:fa:2e:96:d4:41:fb:ee:74:ce:b5:83:a0:8b:bf:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:19:08:9C:EE:55:6D:B7:AA:AA:EF:B2:24:AE:ED:9C:67:12:32
X509v3 Authority Key Identifier:
keyid:BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5a:b3:78:4a:ab:0a:72:4f:d5:7c:73:6a:f3:e6:a9:74:02:
e2:8a:f1:1e:d0:e7:53:58:57:a6:d6:f8:b5:a5:73:38:06:64:
5e:43:46:ea:3d:ae:92:ef:59:2d:12:51:9a:f6:49:fa:bf:55:
ac:c9:86:a9:ea:64:90:2f:95:c3:0c:18:b5:ec:53:96:80:b3:
27:97:29:59:e9:e8:00:d6:29:ca:7f:5f:b7:eb:28:25:84:c4:
8d:23:0c:c3:43:f3:44:1b:e3:0b:6d:50:28:c9:f5:38:df:c2:
a4:d7:65:ef:73:26:7c:72:10:78:0f:f7:e5:98:6f:d7:5a:ae:
6e:33:9c:e0:62:6f:45:a1:66:65:df:21:ae:16:f6:c3:76:91:
3f:b3:23:75:a3:5b:9b:9f:e8:f4:2e:76:ad:a4:0d:b0:41:d9:
c7:0a:d0:9c:42:09:8b:fd:0d:d1:b5:2f:da:2a:29:27:53:55:
80:4e:c1:e5:cf:d5:2d:4c:c3:f0:d2:d3:b2:67:b1:aa:18:74:
2c:cc:e3:be:5a:e8:f3:91:74:fc:ea:30:03:de:43:23:8d:58:
76:92:99:d7:1d:31:bd:e4:a5:17:ff:36:58:2e:8a:37:53:cf:
b9:13:77:b2:31:11:e5:ac:e3:d5:90:dc:97:26:9f:39:60:61:
55:2b:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:30:06 2026 by rpki-client