
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json)
Hash identifier: DId9TwHdE1DuCRddIf2ivbhnVTK3lDYSc9kDFRY2VcQ=
Subject key identifier: 16:55:59:62:78:AA:B0:B5:9F:FD:AE:41:07:9E:75:54:D1:58:DD:9E
Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32
Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732
Certificate serial: 5B068A6F193820B850025B16BBA1125CF6A68D32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 08:33:00 +0000
Manifest this update: Sun 02 Aug 2026 08:28:00 +0000
Manifest next update: Mon 03 Aug 2026 11:02:00 +0000
Files and hashes: 1: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: HSkRQlPo3sBrROS9iDhS/dfaTkEmYVq5cWTtBSwlEDE=)
2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl
rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:06:8a:6f:19:38:20:b8:50:02:5b:16:bb:a1:12:5c:f6:a6:8d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732
Validity
Not Before: Aug 2 08:28:00 2026 GMT
Not After : Aug 3 11:02:00 2026 GMT
Subject: CN=1655596278AAB0B59FFDAE41079E7554D158DD9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:4d:91:76:99:d2:98:44:bc:f9:2b:c8:d1:
96:0b:b7:b3:65:c1:99:a6:d3:d1:e8:62:75:ca:d6:
7a:9e:86:b6:af:db:12:5b:fb:aa:0e:41:24:26:a8:
22:fa:62:94:56:2e:dc:52:3d:98:78:5a:82:3d:56:
e2:7e:7d:4a:1e:14:53:78:bd:5c:8e:18:c6:e6:52:
9f:90:44:1a:73:96:e0:ad:0f:51:37:6c:8a:11:6b:
11:13:92:04:16:8e:e7:b6:90:e9:e8:fa:e4:7e:5f:
9a:ce:1f:55:e5:99:2c:7d:41:db:24:c7:ed:02:b2:
f2:4b:32:8a:f5:2c:56:91:9a:53:f4:91:74:ac:99:
b6:ef:ff:42:6e:d5:1e:ed:d4:4c:8f:92:2f:c2:9a:
35:61:bf:ff:03:df:68:32:d5:5d:20:d6:c4:fe:c3:
58:5b:eb:41:a7:aa:67:cf:4f:d8:46:0d:cf:5d:ad:
49:4f:d4:3e:ac:64:f1:1c:ff:2c:98:c5:da:61:67:
e2:45:b0:a2:47:7c:a8:8f:f8:bc:13:ab:99:41:e3:
b1:15:ff:fe:23:e7:b6:fe:19:35:65:86:75:68:c3:
89:5c:2d:80:e3:92:fb:15:2e:fb:70:dd:0c:2e:c9:
a8:91:0b:71:44:77:15:90:b3:1f:6a:eb:14:e7:7a:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:55:59:62:78:AA:B0:B5:9F:FD:AE:41:07:9E:75:54:D1:58:DD:9E
X509v3 Authority Key Identifier:
keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cb:29:98:c6:35:f8:6f:7c:17:85:91:ed:84:6f:ed:83:43:
ef:66:c8:ee:6b:31:de:9c:fb:68:bc:35:1e:77:c8:aa:13:55:
29:76:ca:b7:73:ec:33:1f:69:31:f9:b4:53:e1:34:9d:45:83:
5e:a7:29:f1:80:b0:6f:b8:12:6b:41:68:53:61:e9:00:9b:29:
75:4c:3d:ef:d9:59:ac:7d:b8:79:e8:6c:49:73:cc:cf:fa:d4:
14:0f:e5:d6:a6:a4:c8:e1:96:e2:99:70:79:f2:3d:f2:43:54:
32:c6:98:c6:8c:ed:ed:f7:f4:44:8e:59:88:61:f2:25:2b:11:
c4:fc:a8:f8:fd:e0:32:07:e7:34:8d:01:1c:c6:aa:38:d4:0d:
24:3b:32:04:72:ac:2c:09:19:b2:31:7d:7c:2d:01:88:3e:79:
63:75:8e:df:be:f9:6e:d3:48:82:8f:56:de:06:89:81:01:69:
07:21:fa:fa:4c:4a:eb:54:03:98:f6:ad:1b:95:f8:3f:ad:91:
24:8c:65:41:98:d6:6f:28:a7:93:36:b8:fb:69:22:19:e6:47:
3e:53:97:27:e0:a6:30:62:7e:fd:24:2a:0a:d1:9e:e1:ce:ea:
00:b6:2d:d9:4e:b0:3c:fc:6d:89:96:6b:d6:da:b7:69:78:13:
3d:3b:0c:8b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWwaKbxk4ILhQAlsWu6ESXPamjTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1
RUE2OTczMjAeFw0yNjA4MDIwODI4MDBaFw0yNjA4MDMxMTAyMDBaMDMxMTAvBgNV
BAMTKDE2NTU1OTYyNzhBQUIwQjU5RkZEQUU0MTA3OUU3NTU0RDE1OEREOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/y02RdpnSmES8+SvI0ZYLt7Nl
wZmm09HoYnXK1nqehrav2xJb+6oOQSQmqCL6YpRWLtxSPZh4WoI9VuJ+fUoeFFN4
vVyOGMbmUp+QRBpzluCtD1E3bIoRaxETkgQWjue2kOno+uR+X5rOH1XlmSx9Qdsk
x+0CsvJLMor1LFaRmlP0kXSsmbbv/0Ju1R7t1EyPki/CmjVhv/8D32gy1V0g1sT+
w1hb60GnqmfPT9hGDc9drUlP1D6sZPEc/yyYxdphZ+JFsKJHfKiP+LwTq5lB47EV
//4j57b+GTVlhnVow4lcLYDjkvsVLvtw3QwuyaiRC3FEdxWQsx9q6xTnejvFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFlVZYniqsLWf/a5BB551VNFY3Z4wHwYDVR0j
BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC
MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5
NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4
OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1
ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEDLKZjGNfhvfBeFke2Eb+2DQ+9myO5rMd6c
+2i8NR53yKoTVSl2yrdz7DMfaTH5tFPhNJ1Fg16nKfGAsG+4EmtBaFNh6QCbKXVM
Pe/ZWax9uHnobElzzM/61BQP5dampMjhluKZcHnyPfJDVDLGmMaM7e339ESOWYhh
8iUrEcT8qPj94DIH5zSNARzGqjjUDSQ7MgRyrCwJGbIxfXwtAYg+eWN1jt+++W7T
SIKPVt4GiYEBaQch+vpMSutUA5j2rRuV+D+tkSSMZUGY1m8op5M2uPtpIhnmRz5T
lyfgpjBifv0kKgrRnuHO6gC2LdlOsDz8bYmWa9bat2l4Ez07DIs=
-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:38 2026 by rpki-client