
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft
File: BBD0CD6436CA793BFF433922A8C38085169809BA.mft (raw, json)
Hash identifier: F0XDmbwdhhRrjnD9kLpFIo8xwMtOH0K8jEqlxLgfsaY=
Subject key identifier: 55:95:33:CE:FB:F1:4B:DC:0A:23:6F:81:0D:C8:64:A7:06:6E:42:B4
Authority key identifier: BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA
Certificate issuer: /CN=BBD0CD6436CA793BFF433922A8C38085169809BA
Certificate serial: 78B017C816AFF09E1D439905B662039201E61C03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft
Manifest number: B6
Signing time: Thu 17 Sep 2026 00:29:10 +0000
Manifest this update: Thu 17 Sep 2026 00:24:10 +0000
Manifest next update: Fri 18 Sep 2026 03:47:10 +0000
Files and hashes: 1: BBD0CD6436CA793BFF433922A8C38085169809BA.crl (hash: wfsl/ZS85KL54wNRYT1Wbm99E2zyN2M7393LcQhisoA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl
rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b0:17:c8:16:af:f0:9e:1d:43:99:05:b6:62:03:92:01:e6:1c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBD0CD6436CA793BFF433922A8C38085169809BA
Validity
Not Before: Sep 17 00:24:10 2026 GMT
Not After : Sep 18 03:47:10 2026 GMT
Subject: CN=559533CEFBF14BDC0A236F810DC864A7066E42B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:50:e7:f6:37:8d:87:53:f1:63:98:8f:55:
fe:c2:17:15:f1:cb:ed:18:14:d4:1c:73:c9:f9:60:
fa:19:74:fd:ba:dd:4a:ea:7d:13:3b:ae:01:28:7c:
e5:1a:64:54:c3:5e:c7:52:dc:73:47:c4:91:62:65:
9b:06:80:fc:08:b2:1a:fd:e9:43:e9:0a:c5:20:f5:
86:dd:14:ce:04:51:00:4b:08:9f:26:e0:87:4d:d5:
fc:db:4d:78:b6:30:ef:1d:9e:f0:0a:97:90:56:a5:
e6:14:6d:76:75:f3:b8:2f:a0:d7:9a:5e:85:1c:55:
0c:59:c8:82:af:35:33:25:e6:fc:bd:45:45:ed:e8:
cc:66:14:d7:ff:e8:0c:ec:50:c9:2a:c2:b6:30:b9:
8c:0f:7e:e6:a2:b7:f1:1f:35:58:b2:17:29:bf:f3:
4a:22:fd:f5:57:e3:59:95:31:ec:c2:de:27:06:ff:
fa:3c:a8:f4:88:85:f4:ab:f0:b7:32:67:89:94:ac:
22:f0:f7:2d:44:14:5b:00:7c:9b:60:c9:1e:0c:10:
81:fa:bd:8d:40:f0:06:e5:5b:61:ac:93:97:94:fe:
81:b3:2f:3f:b6:97:15:af:52:d8:cc:c2:0c:a3:00:
00:67:8f:ec:14:80:08:52:66:04:db:da:4b:5a:5b:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:95:33:CE:FB:F1:4B:DC:0A:23:6F:81:0D:C8:64:A7:06:6E:42:B4
X509v3 Authority Key Identifier:
keyid:BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2e:f9:10:38:71:26:5d:29:f5:50:67:f7:dc:51:21:2b:db:
41:35:79:b1:4b:ba:a8:3a:e3:5e:81:84:e7:9f:a7:ea:97:f0:
65:03:4c:6d:69:50:ac:84:cb:88:26:ee:e9:62:96:1f:97:eb:
9e:4e:1b:20:cc:7a:30:97:41:a0:e3:be:e0:93:66:dc:97:d1:
c6:e8:a1:00:84:55:e9:64:3e:0c:57:ec:f4:10:0d:0d:04:42:
49:d9:e4:97:05:a1:e8:ca:58:c1:29:60:e8:ff:99:49:01:f3:
5e:df:41:a0:8b:77:6b:2f:12:5a:cf:56:50:8e:f4:41:fd:74:
33:15:26:8d:ad:86:7a:e3:55:12:88:7e:32:c7:b6:b8:3a:3d:
b9:e3:57:bd:19:f1:c3:d1:3a:b9:f6:92:48:d4:9f:0d:a7:88:
95:f9:86:be:28:92:19:40:2e:cd:9c:c2:52:83:e8:d7:39:7c:
37:01:9f:72:6a:33:2c:70:39:67:3b:ee:7d:e3:6d:d7:69:5b:
bd:eb:85:15:37:11:73:91:03:46:bc:dc:52:2a:48:1c:e5:86:
f3:1a:23:34:5a:bc:b4:3e:22:54:27:69:5f:98:8f:01:42:de:
2a:c5:f2:8a:6d:a3:ad:a3:3e:42:5c:6a:be:5d:fc:36:c3:e5:
e4:20:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:04:34 2026 by rpki-client