
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft
File: BF072074B801AFE1292270FB7A3E090A276EB893.mft (raw, json)
Hash identifier: jIJUgKu8uvz9ejgLTxvUsDOp56OO26RfsLqvqVnx3mY=
Subject key identifier: AF:35:7E:C3:9B:57:E8:D9:23:55:BB:BC:73:32:CC:92:68:B2:00:35
Authority key identifier: BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93
Certificate issuer: /CN=BF072074B801AFE1292270FB7A3E090A276EB893
Certificate serial: 7734763544D123EE16F43A4FD541EA9AC54952DA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 04:08:33 +0000
Manifest this update: Thu 17 Sep 2026 04:03:33 +0000
Manifest next update: Fri 18 Sep 2026 07:17:33 +0000
Files and hashes: 1: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: BKt7x+HSwXt0hFZm36Nu9CrkQ0Drly/dgK6bERbk3xk=)
2: BF072074B801AFE1292270FB7A3E090A276EB893.crl (hash: /cOUPsJpOkO2R4s56IJuWJO6G7uHzvfM5GmVYEDmfv8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl
rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:34:76:35:44:d1:23:ee:16:f4:3a:4f:d5:41:ea:9a:c5:49:52:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF072074B801AFE1292270FB7A3E090A276EB893
Validity
Not Before: Sep 17 04:03:33 2026 GMT
Not After : Sep 18 07:17:33 2026 GMT
Subject: CN=AF357EC39B57E8D92355BBBC7332CC9268B20035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:d7:4e:1a:e6:16:e7:46:ba:9a:dc:a8:87:
d8:7e:4a:06:ae:cd:85:e8:4e:40:fb:9f:58:6e:fc:
c5:a3:3c:81:e4:8e:19:91:d6:c7:cf:bf:1e:4c:cd:
03:2b:a2:3d:76:24:24:17:20:ab:ee:a0:4b:4d:80:
0b:02:52:74:0c:4c:f3:67:d6:b2:c8:4c:a1:f4:b3:
79:14:ea:10:48:f6:3d:0d:ce:20:1b:a3:6e:b3:ba:
b3:f8:65:3c:9f:30:6d:88:74:99:83:e7:92:1c:a6:
a7:3f:65:65:d6:e4:f4:9a:aa:cb:12:9b:3b:a3:ce:
30:0c:84:24:fa:12:32:48:a5:fb:92:d9:e6:e2:fd:
5f:4f:db:4a:d1:07:19:db:8b:bf:aa:ef:b8:c2:6c:
91:4d:76:68:3e:8b:1d:38:a2:09:e4:df:dc:d9:58:
90:53:6b:2f:38:c0:f1:0a:08:d1:29:fe:4b:5b:30:
8d:b7:7d:c7:2a:42:76:70:3c:fb:82:0e:f0:24:67:
4f:16:9a:66:a9:9b:83:f1:ff:fe:30:2b:6f:46:17:
c5:b5:b3:fe:1e:16:11:2b:8e:58:bc:fc:f0:2d:ef:
b2:ee:9c:f1:d2:27:bd:bc:f4:e8:fb:48:13:ef:8f:
cd:8d:74:fb:61:c8:2a:20:b0:72:d0:f8:c1:b1:db:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:7E:C3:9B:57:E8:D9:23:55:BB:BC:73:32:CC:92:68:B2:00:35
X509v3 Authority Key Identifier:
keyid:BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:4f:80:89:ac:d9:e4:23:9e:c5:b6:57:0c:3c:f2:de:3d:
2a:c8:8c:1c:83:3a:84:0c:ad:bb:68:30:27:89:e3:6a:ba:17:
43:80:d2:c1:45:72:b8:7b:00:cf:0f:a8:41:8a:18:6b:74:66:
0d:4d:8a:46:60:7e:33:b9:b6:a1:ad:67:18:a2:b3:72:4b:7d:
76:2f:5f:0c:9d:60:eb:8c:f5:ca:62:7e:72:bb:ab:e0:28:da:
68:27:be:79:70:52:b9:75:3f:a1:90:09:e0:3c:c1:86:58:0e:
49:a0:58:75:cb:16:6f:5b:eb:f6:c1:cb:45:3e:6a:e8:eb:f3:
69:f7:74:88:ac:4f:64:7a:9e:48:0e:30:8a:af:22:62:48:4d:
3f:61:09:92:2a:a6:0d:09:ea:c5:3e:e2:9e:6c:a5:08:c2:d4:
74:db:45:a1:dd:2d:8b:16:1a:4c:30:bd:9e:13:29:e0:97:aa:
f9:25:eb:3c:af:90:4f:84:74:e3:f0:8c:4b:a3:f2:55:5c:a1:
77:40:9d:e4:47:e6:36:04:9e:81:75:3e:5e:0d:06:2c:ac:ec:
ad:b5:1a:9a:32:19:57:8f:15:bd:d7:e4:07:1e:43:0a:7f:94:
b6:6f:97:c6:60:6d:64:f3:51:72:88:a1:ca:2e:c6:6a:ae:fd:
8c:67:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:51:24 2026 by rpki-client