
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
File: BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft (raw, json)
Hash identifier: /XayqCSNdJfWwa4WMW8dAhpJasZvCEkPNxxhKgvSbBo=
Subject key identifier: D8:12:1F:4B:E9:99:13:C0:3F:4C:CA:56:D9:B7:C7:0C:AD:34:D2:0B
Authority key identifier: BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
Certificate issuer: /CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Certificate serial: 1E17B51542F98D7141A627DBD233D76926EE11A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 15:46:20 +0000
Manifest this update: Sun 25 Oct 2026 15:41:20 +0000
Manifest next update: Mon 26 Oct 2026 18:18:20 +0000
Files and hashes: 1: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: F8rn8naCPvDCkUhjOQElNO8VO2STo0GIaHG7gs8zRHY=)
2: BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl (hash: r74mz9NWWeYg5RHFUaa2s2FZVVNrC45FViipBolx5Z8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:17:b5:15:42:f9:8d:71:41:a6:27:db:d2:33:d7:69:26:ee:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Validity
Not Before: Oct 25 15:41:20 2026 GMT
Not After : Oct 26 18:18:20 2026 GMT
Subject: CN=D8121F4BE99913C03F4CCA56D9B7C70CAD34D20B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:57:99:48:76:f1:36:f5:6f:94:f0:66:b4:
e7:59:de:be:61:99:1b:2e:af:f1:3a:26:c1:c8:09:
8b:cf:d3:34:2a:e7:5d:f8:f7:6a:5b:e5:30:47:c4:
bb:5c:90:da:10:81:c5:e9:4d:79:c1:d7:fb:89:00:
53:fe:7d:c2:62:3a:25:0a:cf:f1:0a:d6:b2:75:3d:
d5:0a:f8:0c:12:e2:99:05:3d:2e:6b:10:5b:7d:5b:
f7:52:06:2d:f8:ea:6f:20:db:6e:e6:03:d4:85:2a:
10:e0:ce:2a:19:f4:4e:da:6c:6c:5e:c2:25:e2:01:
16:c3:50:59:66:2a:55:0c:78:9b:89:76:4f:f3:91:
1c:fb:e5:44:f4:30:3e:fe:68:fb:4b:0d:08:fa:31:
75:32:02:60:6f:ba:a0:dc:bd:4a:67:7a:3a:2d:80:
31:28:36:83:c1:0c:dd:15:06:a4:f9:85:30:fc:e8:
13:b0:90:64:73:b4:af:4b:f7:43:5f:2a:8d:d1:c1:
3f:d8:94:ba:f6:1d:44:f8:c6:f2:01:59:cf:a1:dc:
be:1a:7c:27:79:ee:19:6c:ad:54:1c:d2:3d:e3:eb:
55:59:4a:13:af:91:40:5c:74:e7:67:72:6d:c3:f5:
8f:a4:4c:8b:b4:60:f0:28:50:3c:97:c4:37:b6:81:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:1F:4B:E9:99:13:C0:3F:4C:CA:56:D9:B7:C7:0C:AD:34:D2:0B
X509v3 Authority Key Identifier:
keyid:BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b5:d1:f1:6e:fd:76:d0:12:18:55:69:d2:c2:2c:6d:db:a9:
99:bd:20:e5:8d:6b:c4:26:17:3e:71:64:fa:28:11:a1:f7:d0:
fa:a3:f8:92:b0:55:f6:8f:c0:f1:ac:3e:8c:34:d7:e8:c9:0e:
d8:05:e6:0d:2c:56:5f:2f:50:13:16:f7:79:6d:85:33:5c:2a:
87:16:23:75:1b:ac:be:4c:f3:2a:21:0e:a9:96:0c:bc:43:89:
2e:8c:67:22:7b:b9:61:51:f0:9c:9f:69:23:1a:51:ac:b4:24:
67:1f:78:8a:d2:61:38:6b:5e:3f:80:ef:7d:f9:79:2c:d2:dd:
da:b7:a3:2d:31:7a:f2:3b:9b:95:ff:d6:e1:aa:69:19:f2:29:
9a:89:08:7f:7e:4f:1b:7f:ed:57:c4:5d:08:84:37:6f:1b:71:
64:14:93:60:04:7e:65:d4:15:2e:b5:f8:af:49:c7:be:91:54:
67:40:b7:55:50:66:15:98:b2:5c:2f:fd:2f:49:1f:b6:dc:da:
cb:a4:49:8d:0c:6c:6b:b1:3c:06:40:73:d5:26:7a:3d:a7:b7:
65:ee:6c:3b:29:c3:d9:04:c8:6d:ef:bb:8c:af:7a:2c:05:10:
92:16:00:da:42:39:25:1e:87:4a:d4:43:27:88:17:16:3a:9f:
f4:f3:84:7a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHhe1FUL5jXFBpifb0jPXaSbuEaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM2RTdBRkE3MTEzMTkwMjAwRjc3NUM0OTI4QTc1NjdE
RkJFMjJCQjAeFw0yNjEwMjUxNTQxMjBaFw0yNjEwMjYxODE4MjBaMDMxMTAvBgNV
BAMTKEQ4MTIxRjRCRTk5OTEzQzAzRjRDQ0E1NkQ5QjdDNzBDQUQzNEQyMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/1eZSHbxNvVvlPBmtOdZ3r5h
mRsur/E6JsHICYvP0zQq513492pb5TBHxLtckNoQgcXpTXnB1/uJAFP+fcJiOiUK
z/EK1rJ1PdUK+AwS4pkFPS5rEFt9W/dSBi346m8g227mA9SFKhDgzioZ9E7abGxe
wiXiARbDUFlmKlUMeJuJdk/zkRz75UT0MD7+aPtLDQj6MXUyAmBvuqDcvUpnejot
gDEoNoPBDN0VBqT5hTD86BOwkGRztK9L90NfKo3RwT/YlLr2HUT4xvIBWc+h3L4a
fCd57hlsrVQc0j3j61VZShOvkUBcdOdncm3D9Y+kTIu0YPAoUDyXxDe2gQd3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2BIfS+mZE8A/TMpW2bfHDK000gswHwYDVR0j
BBgwFoAUvG56+nETGQIA93XEkop1Z9++IrswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWFlNjM3OWUtYjg4Ni00MzZlLWIwZWQtM2FhZmY5YzA4NTAxLzAvQkM2RTdBRkE3
MTEzMTkwMjAwRjc3NUM0OTI4QTc1NjdERkJFMjJCQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQzZFN0FGQTcxMTMxOTAyMDBGNzc1QzQ5MjhBNzU2N0RGQkUy
MkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw
ZWQtM2FhZmY5YzA4NTAxLzAvQkM2RTdBRkE3MTEzMTkwMjAwRjc3NUM0OTI4QTc1
NjdERkJFMjJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALu10fFu/XbQEhhVadLCLG3bqZm9IOWNa8Qm
Fz5xZPooEaH30Pqj+JKwVfaPwPGsPow01+jJDtgF5g0sVl8vUBMW93lthTNcKocW
I3UbrL5M8yohDqmWDLxDiS6MZyJ7uWFR8JyfaSMaUay0JGcfeIrSYThrXj+A7335
eSzS3dq3oy0xevI7m5X/1uGqaRnyKZqJCH9+Txt/7VfEXQiEN28bcWQUk2AEfmXU
FS61+K9Jx76RVGdAt1VQZhWYslwv/S9JH7bc2sukSY0MbGuxPAZAc9Umej2nt2Xu
bDspw9kEyG3vu4yveiwFEJIWANpCOSUeh0rUQyeIFxY6n/TzhHo=
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:25:36 2026 by rpki-client