
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
File: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft (raw, json)
Hash identifier: IoCx0CN0yfPQsGjVQ9/U0wXW+pG/ddn1oVOLChQDUDQ=
Subject key identifier: 98:FF:A8:AB:E4:CB:BE:7E:F7:69:7D:35:E1:8C:B0:20:36:39:56:13
Authority key identifier: BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B
Certificate issuer: /CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B
Certificate serial: 4442A13A952FBE54F019481908631984CE6F02F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 18:24:38 +0000
Manifest this update: Sun 02 Aug 2026 18:19:38 +0000
Manifest next update: Mon 03 Aug 2026 19:48:38 +0000
Files and hashes: 1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: gRxGW+klSIDqUWcFQBMXFqiWdggcgwp1v/UvYVaMWW4=)
2: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl (hash: dOgXn9pCixFnKIQHk2/AigIkX48t+4mDE1238gR+0CE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl
rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 17:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:42:a1:3a:95:2f:be:54:f0:19:48:19:08:63:19:84:ce:6f:02:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B
Validity
Not Before: Aug 2 18:19:38 2026 GMT
Not After : Aug 3 19:48:38 2026 GMT
Subject: CN=98FFA8ABE4CBBE7EF7697D35E18CB02036395613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:f8:1d:33:c5:bc:37:07:4e:3b:fa:5e:f8:
bd:61:4a:99:b3:13:bb:98:47:fa:a4:0e:6f:2b:7d:
cf:9a:b2:2e:5d:3e:07:84:55:41:be:d6:39:64:5c:
73:b2:6c:14:d8:7b:7a:c6:14:bb:66:c3:36:8e:71:
de:92:71:9c:d8:ee:53:c5:26:f1:1e:3d:b2:ee:ff:
7d:2d:97:63:2c:e3:b5:a0:6e:17:60:0d:86:45:b5:
f7:7c:30:b0:90:12:c5:d4:58:d9:61:41:51:a1:0b:
be:ca:5b:4f:d0:d4:5a:d0:11:db:ec:22:e7:2f:08:
05:ba:87:43:05:38:f4:1e:75:1b:38:56:5b:2b:03:
d2:93:0a:2c:17:11:35:59:5e:28:a4:5e:50:d3:e8:
ff:83:80:51:b5:c2:d8:7c:08:91:91:f2:17:af:91:
93:10:ee:5c:b5:06:0b:14:fd:10:c8:95:db:a1:ba:
a8:1d:04:27:89:ea:ca:d0:6a:4c:43:16:bc:37:f1:
4f:0c:5b:75:16:f0:85:91:ba:46:31:f5:46:63:3c:
2d:03:0e:d2:a1:23:66:87:83:92:ff:cc:33:e3:8d:
06:45:d1:a4:06:4b:0c:76:03:b8:58:c9:14:e4:15:
e4:ca:98:af:71:5d:33:0a:e3:db:08:7d:1f:64:b1:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:A8:AB:E4:CB:BE:7E:F7:69:7D:35:E1:8C:B0:20:36:39:56:13
X509v3 Authority Key Identifier:
keyid:BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ea:c3:de:0f:60:1b:83:2e:ba:23:3e:a2:3b:59:0c:4e:00:
10:83:b2:12:0c:2f:94:fb:74:a5:59:14:fb:2d:a3:a7:07:59:
79:51:c1:4b:ad:8e:3b:30:78:f8:55:d4:68:17:90:c5:3f:f9:
25:b1:a2:03:9b:dd:f6:01:2b:de:2a:f0:ad:9d:33:83:54:e6:
a7:ef:d6:5b:05:2d:b0:1f:3b:d0:ec:15:ee:38:e3:44:39:4b:
d1:24:fb:b9:7a:d2:a1:d2:fc:de:d2:03:d0:83:34:f5:8b:a5:
8e:b7:e6:e4:be:46:f1:c8:5b:67:8a:de:89:4e:1e:48:43:0a:
a6:34:d1:74:fa:cc:c7:b4:ac:19:d0:e8:ff:51:2b:f1:b2:a4:
98:dd:27:1b:05:49:29:58:19:53:8c:0d:ef:f2:79:fb:3c:5d:
69:ab:d4:a9:86:66:9a:12:29:71:a6:ef:74:80:5d:4c:61:19:
19:44:d1:c6:45:f6:1c:00:d8:ed:24:0a:b8:ef:21:61:e3:fc:
3f:81:74:15:7c:60:d5:e5:10:01:b8:3b:85:31:29:56:23:30:
4d:5d:22:57:b2:9d:e8:58:52:8f:0a:93:36:de:79:97:bf:ab:
32:f8:2f:06:f7:a6:a4:06:30:19:a6:45:07:69:df:26:9d:d0:
38:4d:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:33:42 2026 by rpki-client