Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
File:                     BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft (raw, json)
Hash identifier:          12nTItpLEzN5Kd1L0TjxRrQrHzCqACSqpdLM8+CbXbs=
Subject key identifier:   C1:73:75:32:71:82:28:D6:0F:10:CC:05:DD:86:9C:8A:1B:FC:79:67
Authority key identifier: BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B
Certificate issuer:       /CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B
Certificate serial:       4688284FF5AACD17308D3E5F89EBA34F21D8A5C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 09:03:07 +0000
Manifest this update:     Thu 18 Jun 2026 08:58:07 +0000
Manifest next update:     Fri 19 Jun 2026 11:05:07 +0000
Files and hashes:         1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: gRxGW+klSIDqUWcFQBMXFqiWdggcgwp1v/UvYVaMWW4=)
                          2: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl (hash: aBQYbLOC3qKcaTJB0ZG68u5QV0tshXS4zWZsj3x23V4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl
                          rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 08:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:88:28:4f:f5:aa:cd:17:30:8d:3e:5f:89:eb:a3:4f:21:d8:a5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B
        Validity
            Not Before: Jun 18 08:58:07 2026 GMT
            Not After : Jun 19 11:05:07 2026 GMT
        Subject: CN=C1737532718228D60F10CC05DD869C8A1BFC7967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:c5:84:62:6a:d8:fa:a6:ce:f9:88:f8:97:
                    d8:ec:03:e6:9b:c7:e7:89:e4:8c:c9:30:72:fd:75:
                    88:c6:50:b3:bc:d2:9f:0e:1d:fd:5a:69:08:3d:74:
                    ea:67:5f:4e:35:d7:77:1d:70:c1:ab:a9:96:36:f6:
                    67:8f:2a:28:c6:24:b3:ef:e5:3a:df:32:0b:99:cf:
                    4c:d7:24:34:e0:98:95:65:82:5a:64:2d:e2:a2:65:
                    18:c1:eb:a1:d4:a9:8c:7d:ba:2e:7a:e1:fb:ae:98:
                    53:1d:10:64:a1:2b:01:87:2a:1d:75:9f:b1:4b:ff:
                    e1:ee:a6:29:a6:cf:0d:18:b8:ab:86:8b:01:8c:f7:
                    d1:64:c3:e9:26:0d:a9:cd:15:80:7d:f8:dd:53:2c:
                    e7:1c:a9:eb:9e:31:dc:56:27:42:8a:33:c8:19:bb:
                    4a:97:8e:15:42:e1:12:68:49:b8:29:bf:bc:ea:f4:
                    db:1d:b9:90:55:d4:65:d1:cf:94:68:1a:a6:51:a6:
                    56:7d:b4:09:9c:54:a8:9d:16:3e:a7:1d:ec:d1:95:
                    0f:4a:1f:b4:44:b9:08:28:d3:66:44:4b:e5:8c:9a:
                    d8:d9:7f:50:f8:53:b5:27:c7:29:ed:7e:2c:1e:d6:
                    c6:7d:fd:76:cb:92:a7:46:87:fd:1b:a4:f5:d2:ee:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:73:75:32:71:82:28:D6:0F:10:CC:05:DD:86:9C:8A:1B:FC:79:67
            X509v3 Authority Key Identifier:
                keyid:BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ae:39:57:3d:a1:61:de:5e:f0:33:54:0d:ab:ac:4d:cc:cb:
         cd:95:94:aa:7e:05:f5:2e:cc:62:d6:81:89:2e:ee:27:e6:7d:
         03:73:8c:c6:98:dd:74:58:a9:92:a0:3d:dc:69:a2:03:31:ba:
         fa:a5:9b:58:e7:2d:45:d2:d9:b7:19:bf:d5:e2:23:58:1d:95:
         5f:11:5b:e0:af:af:d3:3e:09:67:6d:f5:f6:81:a2:23:48:4e:
         71:9d:dd:b5:86:d3:a1:8c:43:c2:32:50:2a:2b:f5:6a:b8:f2:
         8b:af:ed:6b:57:e3:72:7d:43:ca:d2:2c:6d:56:72:bb:68:bd:
         d8:ff:e7:37:e7:d4:53:91:fc:a2:09:49:17:84:77:43:dd:f6:
         54:cf:f3:97:12:d2:40:fc:f9:7b:44:ca:91:73:f2:ba:10:1e:
         c6:d2:13:5b:fc:40:74:a0:b8:b9:ce:30:69:f6:57:9d:68:ca:
         5d:15:0f:be:e0:18:ef:e6:1b:f7:01:89:6e:1f:f5:ce:ef:91:
         ec:5c:d5:20:04:07:6c:9c:be:5a:10:cc:6f:a1:41:f2:df:d2:
         3a:63:7b:02:5f:72:17:e8:cf:99:c3:a8:ff:d6:ee:05:48:00:
         bc:9a:51:c1:da:43:5c:2a:08:5f:14:3f:14:8d:7a:48:9a:b4:
         4d:e2:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:13:37 2026 by rpki-client