
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
File: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft (raw, json)
Hash identifier: obzrjWGGSo7lhBH9sLKHyQiLJGRKJLdB9W/FGvzaLzM=
Subject key identifier: F6:7B:19:F9:AB:49:9D:B4:79:51:27:24:36:14:2A:7A:97:FC:21:8E
Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
Certificate issuer: /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Certificate serial: 43B1A900D8F52189EF29C4BE373E98FAF5E74715
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
Manifest number: 13
Signing time: Fri 15 May 2026 17:31:23 +0000
Manifest this update: Fri 15 May 2026 17:26:23 +0000
Manifest next update: Sat 16 May 2026 20:51:23 +0000
Files and hashes: 1: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: EYkI0p4+CgnYpKny2uHcSev4QPkQmeLLChTvoH2DvhI=)
2: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl (hash: oX8BT77jg0L9q/LErs74E3/Y8rHMpVK0IC68iD/y/+E=)
3: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: U2ap+e12vTMaTWTUslebQCqX7KlurU+JCU+tN10AEBc=)
4: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: aMwliF8f+KJHeJLDBVlDQIRW+UpwyCDnVCmgvmDSPBs=)
5: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: zUL5UQNXnc8QhEgTnOt/ZHUWtyhWWgBBUQzy5H70VK4=)
6: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: ixvcysOVf6dGfQ7OL/zmp0yRPmCnK8SCHSDkoKzywSg=)
7: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: NpWQoJWkTFRWtu5IgmdpgROmr0Z1lBzNGKqs6X4eLkI=)
8: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: Lwb/Sd018a/wGqBSdGChZ8920giGhrUJnYfpSOUiZ7E=)
9: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: UGmub+zvmz38VUHBdFrEohUoj9JI2gk3RmJ2b1SMZ/E=)
10: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: la/MT35l4XmEKRTivxkgUTpV+veAFTIlPEFkPiSAUT8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 20:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b1:a9:00:d8:f5:21:89:ef:29:c4:be:37:3e:98:fa:f5:e7:47:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Validity
Not Before: May 15 17:26:23 2026 GMT
Not After : May 16 20:51:23 2026 GMT
Subject: CN=F67B19F9AB499DB47951272436142A7A97FC218E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:07:2c:4f:1e:85:bb:b7:40:84:c6:b3:17:
38:2f:35:31:fa:d1:9e:10:7e:6b:30:9f:bb:b7:ee:
e0:10:da:70:77:42:c6:e1:c7:a7:90:c5:11:26:be:
6d:08:6c:a0:f0:5a:70:d9:a9:3f:42:41:5e:a4:70:
10:da:9d:05:11:c5:58:86:3b:ee:05:ee:3f:4f:f8:
14:92:e0:0a:7f:94:67:49:73:94:88:33:c3:d1:88:
07:69:da:0f:fb:98:87:19:76:57:a4:c9:74:16:0d:
77:83:08:cc:41:61:71:34:93:9a:ae:6d:3f:44:bc:
87:e7:5e:d5:73:aa:c2:59:b3:37:a8:24:de:4c:2c:
ed:0c:74:a2:73:03:db:d8:e2:83:02:fd:e3:4f:51:
7d:a3:2c:6c:f6:77:81:3b:cb:39:27:06:f7:7d:54:
26:c0:9e:bd:b2:49:9d:93:09:8f:63:2f:27:c5:88:
4f:a7:f4:5f:cb:49:86:a3:04:31:a1:f7:6f:e5:ec:
91:6e:30:28:9f:d9:6d:e8:ab:7e:8f:6a:30:08:f1:
35:2f:01:5b:22:ac:2a:38:37:7b:70:69:7f:c5:69:
bf:c4:c3:02:80:50:4f:db:9b:00:d5:2d:83:2c:36:
f6:14:58:6a:3c:ed:fd:c0:99:03:66:13:38:29:8a:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7B:19:F9:AB:49:9D:B4:79:51:27:24:36:14:2A:7A:97:FC:21:8E
X509v3 Authority Key Identifier:
keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a6:9a:f9:0e:3e:0a:df:57:97:ac:d1:58:aa:99:c2:2b:7f:
f4:69:e1:d8:2a:a3:20:05:ff:e1:4a:56:d3:f2:33:67:ff:8a:
97:cb:8d:5e:19:ca:44:c1:1b:4b:b3:ef:94:44:2d:0a:03:96:
53:33:9d:41:2b:39:36:97:c9:d6:d0:f6:7a:40:b1:36:a2:2e:
07:eb:8f:9e:e4:4d:67:3a:c6:e0:d3:75:a9:d6:be:bb:fc:e6:
04:0a:29:72:a6:5a:3f:4a:64:27:05:b0:d1:02:60:e0:f4:53:
e0:e1:17:6c:e9:d3:76:7c:c1:13:a5:94:4b:ad:2e:c8:95:55:
26:df:9b:0d:25:e3:b8:f5:02:ab:05:e5:e7:32:dd:48:be:94:
59:ca:02:a8:8b:97:b8:c9:7e:4b:29:1c:e3:a0:27:1e:da:d0:
f8:79:54:23:43:b1:86:92:d9:7e:93:dd:24:43:dd:2b:4c:8b:
1b:e1:e7:7f:2f:e3:2a:12:66:1d:c1:65:6b:db:63:30:1f:72:
aa:0a:11:6c:b2:c5:2b:53:12:2b:7b:09:ce:22:fc:4e:bd:a2:
02:93:d2:9d:74:41:a2:95:11:c8:36:c4:11:81:9c:e1:3e:ce:
fb:a5:50:ba:fc:66:27:09:01:ea:fe:22:14:e0:df:10:44:f9:
23:77:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 09:31:31 2026 by rpki-client