
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json)
Hash identifier: aU/Z0EDxXmgagNrcFhxHzw9P7KiD/3rpsU+ZU4G1Wf0=
Subject key identifier: 3B:55:6B:DA:B1:6D:37:07:C2:24:6E:82:A0:75:30:D8:BC:BB:18:25
Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32
Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732
Certificate serial: 5114E7CDE989216C5F2DC7738DE4D02F4848CC33
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 04:57:54 +0000
Manifest this update: Thu 18 Jun 2026 04:52:54 +0000
Manifest next update: Fri 19 Jun 2026 07:22:54 +0000
Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=)
2: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: aTSSpEmujWlENyloZ9yug56MXSodds1Y4HZGsf7wldU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl
rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 07:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:14:e7:cd:e9:89:21:6c:5f:2d:c7:73:8d:e4:d0:2f:48:48:cc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732
Validity
Not Before: Jun 18 04:52:54 2026 GMT
Not After : Jun 19 07:22:54 2026 GMT
Subject: CN=3B556BDAB16D3707C2246E82A07530D8BCBB1825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:e9:e2:b8:49:96:85:c8:dd:53:26:94:4f:
c9:f0:84:f2:64:66:bf:59:91:0f:1b:ce:64:bd:6a:
cb:5b:65:ca:aa:9e:7f:82:a4:bf:30:c6:9e:18:e6:
e4:26:45:61:8d:28:f4:cb:5f:0e:63:60:e9:56:20:
39:b0:d1:5c:ca:fb:2e:f7:27:51:fa:8f:8a:f7:90:
7a:e0:34:7c:eb:1d:56:ea:10:00:64:e5:09:49:d6:
9c:9a:cc:aa:46:3b:81:42:09:2a:71:e6:0c:b6:fb:
c9:dd:af:29:6f:8f:d6:fb:5a:f7:f8:b6:49:24:23:
b3:eb:53:5d:7d:8e:d6:01:c2:94:11:34:2f:a5:95:
a4:95:9a:ed:57:e8:c9:8f:cb:d6:f6:fc:b2:23:5a:
79:ef:ca:d2:50:2e:26:e0:68:f2:e3:b5:f2:70:e1:
51:7d:12:f3:30:a3:a6:07:64:ae:96:42:c2:8d:05:
df:30:15:4f:7e:dc:35:42:9d:33:e4:a3:fe:69:7d:
e8:8c:03:70:e9:57:6f:6b:39:cb:d8:91:f5:21:87:
28:7d:f0:52:ff:ed:01:71:0b:71:50:8f:2d:07:63:
60:82:eb:97:c2:70:fd:6c:33:c9:4b:ed:5a:3a:3b:
24:b0:6b:59:57:6f:b2:21:f5:bc:fe:bd:ba:b1:a9:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:55:6B:DA:B1:6D:37:07:C2:24:6E:82:A0:75:30:D8:BC:BB:18:25
X509v3 Authority Key Identifier:
keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c0:d4:09:c1:e2:7a:33:12:d9:d6:93:4e:32:5c:af:ae:4f:
cd:12:6f:84:76:51:9d:39:ad:1b:ec:53:75:d4:57:f4:2a:f9:
ef:5a:73:51:7b:1d:e3:f6:bf:e4:28:36:45:51:73:14:8b:14:
e2:d2:dc:9f:83:dd:2b:b2:22:65:39:4e:45:2a:80:34:ca:cf:
6c:de:2f:5c:12:b6:e4:a3:09:9d:0b:e3:a6:7c:d9:db:a4:35:
c4:03:66:fa:f0:90:f5:36:20:86:78:11:7f:eb:f3:b3:27:e4:
0b:2f:0e:6c:8d:2e:e8:ab:12:87:ae:59:c0:72:d6:24:62:8d:
ea:53:9f:cf:4c:66:0e:5a:c0:4c:72:f1:1a:13:08:e3:78:6f:
f7:4e:88:14:bd:e0:bc:41:08:1b:f4:3f:f3:7d:e6:f3:0c:c9:
8b:54:0e:96:5f:d5:c8:9f:a7:26:8e:be:a3:58:33:18:4d:d4:
59:27:0f:0a:c6:f0:6d:5a:a6:3f:e3:d1:40:2b:26:95:95:fb:
f7:1e:45:e4:a6:61:15:f4:2c:15:dc:83:5d:58:2a:78:62:fb:
c9:d2:56:bf:86:16:8f:bd:93:3f:7f:d6:de:37:e2:1c:75:97:
2f:6a:be:a3:6e:f8:b2:95:66:28:58:ca:2a:ee:e5:bf:0f:4a:
8c:d9:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:03 2026 by rpki-client