
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft
File: BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft (raw, json)
Hash identifier: ZQrtGl5IL8cSgqJePwbt0QKCfMBS/edfmehQstsKvdA=
Subject key identifier: 64:D6:21:65:3D:35:7D:46:5B:93:ED:D9:DA:9F:B9:BB:B2:32:6C:71
Authority key identifier: BC:B1:5A:98:16:D9:6C:D6:D5:CD:78:E5:24:B0:75:E4:A9:1E:DC:58
Certificate issuer: /CN=BCB15A9816D96CD6D5CD78E524B075E4A91EDC58
Certificate serial: 1F47B629CAFA3DBC957B4B5677C9E2D41991BE7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 11:07:20 +0000
Manifest this update: Thu 17 Sep 2026 11:02:20 +0000
Manifest next update: Fri 18 Sep 2026 14:49:20 +0000
Files and hashes: 1: BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl (hash: nqYoOFzMqjzSfbIxALSh1ysN90ICBtr7qSmSRPjp8+8=)
2: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: +Kb0QkuG6f/u6BTqbTg841fMbaQ1r4RI338rMHPGvvc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl
rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:47:b6:29:ca:fa:3d:bc:95:7b:4b:56:77:c9:e2:d4:19:91:be:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCB15A9816D96CD6D5CD78E524B075E4A91EDC58
Validity
Not Before: Sep 17 11:02:20 2026 GMT
Not After : Sep 18 14:49:20 2026 GMT
Subject: CN=64D621653D357D465B93EDD9DA9FB9BBB2326C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:a8:5e:58:70:4c:ec:3d:b4:60:3f:d1:ff:
f5:e7:9d:21:3d:f2:3d:68:5d:eb:19:4e:c8:c5:18:
a2:22:24:a9:aa:96:a5:4b:bb:8b:eb:72:3c:91:1d:
5d:d1:00:cd:b2:b5:43:74:05:b8:e9:df:61:e1:ba:
d9:41:ba:aa:eb:37:7a:c2:00:b6:c5:1d:6e:33:45:
62:0b:c9:2b:93:c8:5c:e1:ae:01:8f:90:fc:5a:1b:
8a:cb:c1:1f:42:60:c1:0a:b6:8c:fe:ab:89:63:e9:
e7:97:92:a9:7e:93:ae:85:a0:2e:4b:3c:3a:9a:68:
11:18:6c:bf:79:b7:e1:c5:ed:f4:eb:4a:8c:a2:27:
88:e4:33:c7:cf:62:bf:ba:28:2b:fa:23:e7:66:cf:
56:14:25:66:e5:fa:b1:79:e8:ec:05:e2:26:9e:ea:
9b:2c:c4:8e:ae:67:f0:57:67:36:56:5d:0c:41:ef:
70:cd:ad:44:5c:1e:b3:84:b3:2c:f8:42:2f:7f:a4:
f0:6c:d7:de:e9:50:bc:41:e3:43:9c:65:e8:6a:6a:
fc:37:68:26:aa:3f:f1:4b:3d:c5:42:00:b0:73:a8:
d7:35:54:4d:98:35:d6:aa:6f:45:8e:d1:55:f9:d8:
ea:3d:2f:8f:13:41:f3:b1:fa:49:b0:1d:e1:7e:71:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D6:21:65:3D:35:7D:46:5B:93:ED:D9:DA:9F:B9:BB:B2:32:6C:71
X509v3 Authority Key Identifier:
keyid:BC:B1:5A:98:16:D9:6C:D6:D5:CD:78:E5:24:B0:75:E4:A9:1E:DC:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bd:d0:c8:39:ca:c5:ca:9f:3a:88:a5:51:2b:8a:aa:3d:76:
0a:61:37:c7:ae:a3:f7:84:dc:19:53:bc:d0:ec:b1:26:a0:52:
35:77:23:70:c4:ab:59:38:b0:24:8f:04:89:7e:5a:83:c8:34:
40:fd:d6:5a:1a:bd:24:59:77:bb:03:dc:a8:0d:ad:06:00:cc:
75:49:7d:04:7a:8d:40:7c:f7:7f:46:6d:78:7f:fe:de:1e:f0:
e9:e8:d0:42:d5:0f:d4:33:c9:0a:0d:0d:80:48:d7:5f:a9:88:
70:8b:75:0e:b5:69:95:64:78:1e:d9:3f:35:a7:07:91:dc:78:
af:0a:6a:df:d0:3d:8b:fe:d4:30:3c:bd:ea:0c:02:a8:5e:f8:
ee:20:8a:03:71:9d:5a:ab:34:51:47:9c:43:98:0d:4e:a1:08:
ed:2b:87:57:cf:6d:59:9b:2a:4c:b0:53:fe:8f:ec:3e:a9:96:
68:f7:38:8a:0d:cb:d9:bd:40:ce:ae:51:06:95:98:01:48:f6:
56:3d:45:65:99:47:fa:1e:5c:1f:8a:07:5e:b5:1d:d0:96:d8:
df:9c:71:7f:ad:4b:19:db:0d:27:37:e4:8d:2a:4c:6c:82:77:
85:4e:5f:02:84:8a:83:6c:42:e5:52:8f:64:b0:ad:ec:01:2d:
0a:0a:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:54:06 2026 by rpki-client