
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
File: BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft (raw, json)
Hash identifier: s6hGoyixgniCluoUaRtDaFFMRCA+Igen3UbzQK3D12Y=
Subject key identifier: CC:91:37:55:CF:E6:93:E1:D4:17:A7:90:E7:A5:39:51:5A:5A:E7:CC
Authority key identifier: BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
Certificate issuer: /CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Certificate serial: 2A9F9FC061E824DB0DAB093974E7D3B0717C4698
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
Manifest number: A7
Signing time: Fri 04 Sep 2026 00:22:18 +0000
Manifest this update: Fri 04 Sep 2026 00:17:18 +0000
Manifest next update: Sat 05 Sep 2026 02:45:18 +0000
Files and hashes: 1: BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl (hash: hbRRY3pO9zDgw55WV24IafZihPSHcSg6X3HLpzExO0o=)
2: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: F8rn8naCPvDCkUhjOQElNO8VO2STo0GIaHG7gs8zRHY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 02:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9f:9f:c0:61:e8:24:db:0d:ab:09:39:74:e7:d3:b0:71:7c:46:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Validity
Not Before: Sep 4 00:17:18 2026 GMT
Not After : Sep 5 02:45:18 2026 GMT
Subject: CN=CC913755CFE693E1D417A790E7A539515A5AE7CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:d6:a3:9b:0d:f4:f6:03:5a:b7:92:99:bf:
07:28:35:4d:49:42:61:b6:b4:38:15:84:c7:78:fd:
16:a3:47:c9:27:d9:f7:5d:c7:1e:f9:42:95:e9:b9:
66:1f:9e:6a:f8:26:5e:a6:1c:61:4b:00:46:e3:04:
89:1e:e9:60:a2:46:39:f7:09:78:58:e7:f3:8d:ca:
93:3a:6a:2e:2d:cf:ac:f5:3e:76:e9:bd:f0:57:12:
03:39:28:91:db:d2:2c:7e:92:62:46:60:7c:cc:c0:
87:da:77:4e:3d:5f:00:dd:26:53:0a:6d:df:2c:0d:
c8:75:05:8d:22:7c:0b:eb:b6:eb:3b:c6:46:23:d0:
98:4e:4e:72:a5:37:fa:0a:5a:4b:44:67:4a:c9:0a:
c6:55:18:63:36:39:08:8f:aa:7d:5e:d5:53:7d:66:
59:0d:3f:69:56:65:e6:55:36:40:0a:33:5c:2a:78:
75:70:c5:2d:4d:8d:92:b1:59:e9:20:1c:e8:dc:a6:
f5:06:59:f7:e5:b7:6b:b7:7a:cf:b1:d8:fd:ec:95:
d7:40:65:bc:01:9c:85:12:91:5a:58:a0:7f:8e:c7:
b9:99:9a:97:4e:10:dd:5a:b6:e1:92:52:4c:f7:57:
30:ae:61:e7:bd:dd:c3:94:e7:49:6d:a5:f9:94:fc:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:91:37:55:CF:E6:93:E1:D4:17:A7:90:E7:A5:39:51:5A:5A:E7:CC
X509v3 Authority Key Identifier:
keyid:BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b7:47:02:dc:40:8d:81:a9:84:22:51:98:f2:64:93:32:88:
4b:7d:de:18:45:86:8b:cd:cb:cf:74:b6:2b:2c:f0:76:7e:d1:
14:a8:a6:51:5e:82:8a:79:06:f0:f5:7d:d5:3a:54:88:21:a3:
92:85:26:8c:56:9c:fc:f7:f1:3a:c8:1d:e0:02:1c:b9:9b:de:
77:1e:59:98:2b:bf:c2:fc:dc:fb:76:8d:a9:a1:fa:dd:89:5f:
41:14:96:17:2a:f0:e0:d2:bc:aa:88:a5:85:72:87:42:b1:df:
30:75:58:d6:fb:1a:ab:b1:07:67:61:2a:59:27:85:9b:fb:4e:
c0:dd:d4:fc:21:65:60:c4:c5:39:c4:1a:80:5b:12:56:ff:55:
f3:29:f6:b5:94:5b:1c:ae:73:f2:02:6b:ed:81:b9:5b:3f:0f:
99:75:a8:25:b5:ca:40:36:7d:14:7c:e6:59:eb:84:1f:85:b2:
ab:8f:67:94:2d:90:68:af:c5:ba:b3:b0:fe:00:71:d0:e5:91:
08:59:14:b8:ba:4f:24:0a:96:3b:4d:9c:19:e2:4c:e6:86:0a:
45:6f:1d:ff:2b:0f:dd:b5:e7:a8:a4:7b:9a:3a:9b:12:00:b0:
6c:47:2b:58:5f:08:b2:b0:20:b9:3d:c7:0a:ae:3b:f1:fd:9b:
2b:c5:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:17:35 2026 by rpki-client