
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
File: BF81EC78CC8A61FCFF71A862321A5204E581203B.mft (raw, json)
Hash identifier: R9GSEGNhPQ5+95rWt4EuetdTczLYv5Bs7PZz5xAKvOE=
Subject key identifier: 33:09:CB:34:9E:1F:44:81:20:88:A3:6D:D8:17:F6:DA:C6:A0:EA:76
Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B
Certificate issuer: /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
Certificate serial: 4DD71D1010CB343C1539DE8DA18079E5438EBDDF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 22:35:42 +0000
Manifest this update: Wed 02 Sep 2026 22:30:42 +0000
Manifest next update: Thu 03 Sep 2026 22:50:42 +0000
Files and hashes: 1: BF81EC78CC8A61FCFF71A862321A5204E581203B.crl (hash: 20nYxtPc2sPZt2nQC5MosEB9DnLnRY2ljE/ioWnpnAw=)
2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl
rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d7:1d:10:10:cb:34:3c:15:39:de:8d:a1:80:79:e5:43:8e:bd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
Validity
Not Before: Sep 2 22:30:42 2026 GMT
Not After : Sep 3 22:50:42 2026 GMT
Subject: CN=3309CB349E1F44812088A36DD817F6DAC6A0EA76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:72:03:36:0b:4c:21:6e:80:85:6d:bd:70:
63:bf:78:7e:64:06:97:8a:bd:b0:7e:2e:34:e9:2a:
86:f9:4a:bb:39:1b:76:b8:86:13:19:c6:24:45:75:
fc:57:8d:6a:b3:4b:1d:bb:8a:40:33:2a:c0:b4:86:
ba:26:16:80:2a:af:c8:c2:4c:4e:28:bd:a5:7f:33:
9b:3c:63:40:e8:ca:77:83:59:66:95:9e:58:a6:74:
14:eb:10:e2:90:00:01:ab:56:ca:89:96:fb:8d:3e:
ae:98:50:e8:db:a5:85:4a:a9:54:20:8f:25:97:cb:
cb:35:14:f6:05:ff:48:80:75:11:19:ad:36:f8:59:
67:7f:be:95:b8:de:cc:6e:78:72:85:29:8d:a5:da:
19:27:f8:f9:6f:0e:10:26:28:0a:a0:f1:08:fc:d8:
9b:e6:e7:ba:f1:ff:84:c6:65:1f:aa:f2:96:2e:d5:
f8:c9:10:8c:14:8d:7a:89:a4:d8:fb:73:df:a1:5d:
95:96:cd:ff:34:a9:ea:ea:35:98:31:7e:3f:93:13:
1c:f1:52:ad:f2:b2:cd:f9:9c:d1:ae:e0:09:5c:e9:
59:12:ea:85:35:18:0c:72:1a:2e:16:39:91:28:30:
e2:a3:5c:ff:c9:c4:0b:76:32:e9:5b:cd:46:b2:ad:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:09:CB:34:9E:1F:44:81:20:88:A3:6D:D8:17:F6:DA:C6:A0:EA:76
X509v3 Authority Key Identifier:
keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fe:36:16:4e:89:5b:a4:17:c9:c7:0b:32:1c:38:bb:f2:40:
3d:8a:9c:71:fb:a1:dc:97:e1:c6:76:5c:83:db:7a:61:ae:b2:
97:13:66:36:ec:60:14:76:4b:d5:d5:40:6b:05:19:fb:2b:ad:
6d:d7:c7:eb:df:ee:7a:b0:cf:0a:56:5d:06:ce:7d:6f:ed:c1:
c9:3a:08:97:bb:e9:43:e7:32:29:24:9c:50:12:dc:2d:50:8d:
24:15:6a:72:eb:76:91:9a:64:43:34:e5:8b:0e:22:d0:85:fa:
c2:53:ff:4e:c3:95:88:12:c7:e0:a0:bd:fa:97:fa:0e:d6:89:
43:b3:84:87:a4:d2:5d:76:fc:71:5a:4e:29:79:a5:e7:33:ae:
e8:8d:02:f5:b7:98:f8:58:6c:f3:46:19:e5:08:6e:65:98:0e:
62:11:ff:b3:b0:19:be:23:59:0c:19:e2:83:17:a4:d3:b9:a1:
61:1b:da:8b:c3:74:d7:3e:01:07:a7:a2:6d:e8:8f:95:f1:16:
63:e9:43:2f:ac:07:82:c9:80:91:74:a7:84:67:05:47:d6:b0:
5c:75:e9:63:1c:01:f0:2c:6d:d5:74:42:db:71:c0:18:34:8b:
88:2c:0b:79:d0:43:0c:fd:ac:0b:a5:e6:92:48:f3:9f:03:db:
5f:ee:2a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:57:17 2026 by rpki-client