
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
File: BC56CE0B357E1A9036243CAE454739729AD6633C.mft (raw, json)
Hash identifier: kMkptbyCls6/kmtRDHxX/CaHNEikGMYp34aTKM+nNX8=
Subject key identifier: 0F:94:D5:C0:A2:35:37:53:44:AA:8F:36:77:08:19:E3:B9:4F:0A:13
Authority key identifier: BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C
Certificate issuer: /CN=BC56CE0B357E1A9036243CAE454739729AD6633C
Certificate serial: 6F0538C38FD94FB5C752267445642872A151D9B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
Manifest number: 3E
Signing time: Thu 18 Jun 2026 00:57:58 +0000
Manifest this update: Thu 18 Jun 2026 00:52:58 +0000
Manifest next update: Fri 19 Jun 2026 04:42:58 +0000
Files and hashes: 1: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: gRWK/0YFVmnxzlTGh51A5dqs3NFdvCJxXgz/joszlok=)
2: BC56CE0B357E1A9036243CAE454739729AD6633C.crl (hash: IvhOpzz7jy0cqgciWyUy07ymsh8YN2GRhBQfKVq7WEo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl
rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 04:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:05:38:c3:8f:d9:4f:b5:c7:52:26:74:45:64:28:72:a1:51:d9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC56CE0B357E1A9036243CAE454739729AD6633C
Validity
Not Before: Jun 18 00:52:58 2026 GMT
Not After : Jun 19 04:42:58 2026 GMT
Subject: CN=0F94D5C0A235375344AA8F36770819E3B94F0A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:31:25:06:f5:37:68:da:02:de:e4:eb:bf:
32:c9:8f:9e:25:d4:4a:a3:28:79:92:9f:40:2d:96:
8a:bd:ed:83:cd:5b:ef:37:42:54:65:5f:fe:c1:17:
11:e3:e3:45:2f:4b:9f:ec:3f:cd:55:cf:0e:29:82:
b0:ff:a4:38:7e:ca:1a:43:04:83:22:bc:31:be:ee:
b4:99:91:44:cd:24:84:64:80:f7:3a:17:33:d7:11:
df:8d:93:b2:ad:1d:86:a2:b1:07:3b:de:a2:1f:fb:
fc:c7:a3:16:a0:36:c0:b9:f5:c1:ee:93:bd:4f:3c:
f8:78:1b:62:e0:ad:fe:32:72:8b:84:46:6c:bb:8c:
01:9b:f1:fa:6f:ba:e6:70:72:06:a8:3c:c9:16:3d:
34:16:19:c5:3b:62:0c:0f:21:51:a5:a7:93:f3:df:
01:93:af:a2:a3:e9:3f:f1:41:9e:da:6e:2c:ca:f5:
1f:a9:0f:5a:50:ec:61:fd:53:b2:0a:79:57:46:5e:
29:8a:ba:f9:d0:a5:b8:7b:d4:29:35:1f:3c:ef:56:
e8:d4:74:f3:8f:82:9b:29:7c:3a:4e:6d:5b:2a:ef:
84:1f:0e:4f:a8:11:40:57:a9:12:66:ae:76:ee:56:
6f:6f:d5:09:74:27:45:c7:0e:53:db:b3:46:71:7b:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:D5:C0:A2:35:37:53:44:AA:8F:36:77:08:19:E3:B9:4F:0A:13
X509v3 Authority Key Identifier:
keyid:BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:15:90:b7:09:2d:d3:f5:8f:2c:60:2e:d0:6d:ad:92:f0:25:
1b:7b:6a:10:ed:3c:9d:b9:6c:b7:a9:1d:8d:57:44:7c:a4:73:
ab:c3:59:dd:fc:cf:e1:81:24:e5:83:21:82:a2:47:64:f2:c2:
88:9a:87:91:0a:77:2e:77:fc:75:6d:37:c9:57:b0:dd:90:96:
68:69:85:f8:77:c0:48:96:94:60:5c:8f:80:ee:60:e6:bc:42:
6f:a1:43:36:d3:77:15:40:45:f8:2a:7b:38:fb:87:86:75:ac:
25:92:7e:b4:14:d0:b3:44:9d:3b:ff:90:7e:91:d7:74:a5:4b:
1c:3c:95:71:69:fa:40:23:5b:b3:94:9a:dd:7f:58:b7:2a:2c:
35:75:d4:0d:44:18:2d:da:35:2e:b2:11:33:63:dd:ba:36:d3:
20:02:57:62:b8:86:17:df:a2:1f:f7:53:ed:2a:e4:b0:b5:8a:
09:c3:e5:5f:de:c4:2b:57:e2:92:56:23:9d:cb:6f:c4:65:0b:
df:d5:51:91:ce:19:4c:77:f7:f3:21:54:08:1c:f3:3a:38:4b:
47:3f:c6:45:cf:fe:d8:71:ab:8b:d2:ca:83:0d:f9:82:79:af:
b9:9b:8a:f4:6e:c6:00:1a:a9:ef:b3:20:e6:3b:e2:8b:eb:45:
5e:aa:64:67
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbwU4w4/ZT7XHUiZ0RWQocqFR2bQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM1NkNFMEIzNTdFMUE5MDM2MjQzQ0FFNDU0NzM5NzI5
QUQ2NjMzQzAeFw0yNjA2MTgwMDUyNThaFw0yNjA2MTkwNDQyNThaMDMxMTAvBgNV
BAMTKDBGOTRENUMwQTIzNTM3NTM0NEFBOEYzNjc3MDgxOUUzQjk0RjBBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9TElBvU3aNoC3uTrvzLJj54l
1EqjKHmSn0Atloq97YPNW+83QlRlX/7BFxHj40UvS5/sP81Vzw4pgrD/pDh+yhpD
BIMivDG+7rSZkUTNJIRkgPc6FzPXEd+Nk7KtHYaisQc73qIf+/zHoxagNsC59cHu
k71PPPh4G2Lgrf4ycouERmy7jAGb8fpvuuZwcgaoPMkWPTQWGcU7YgwPIVGlp5Pz
3wGTr6Kj6T/xQZ7abizK9R+pD1pQ7GH9U7IKeVdGXimKuvnQpbh71Ck1HzzvVujU
dPOPgpspfDpObVsq74QfDk+oEUBXqRJmrnbuVm9v1Ql0J0XHDlPbs0Zxe0sfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUD5TVwKI1N1NEqo82dwgZ47lPChMwHwYDVR0j
BBgwFoAUvFbOCzV+GpA2JDyuRUc5cprWYzwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjIzOWZkY2ItYzQxNy00ZjNmLWIxYzktN2UzNjljZGUyMWZkLzAvQkM1NkNFMEIz
NTdFMUE5MDM2MjQzQ0FFNDU0NzM5NzI5QUQ2NjMzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQzU2Q0UwQjM1N0UxQTkwMzYyNDNDQUU0NTQ3Mzk3MjlBRDY2
MzNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx
YzktN2UzNjljZGUyMWZkLzAvQkM1NkNFMEIzNTdFMUE5MDM2MjQzQ0FFNDU0NzM5
NzI5QUQ2NjMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACcVkLcJLdP1jyxgLtBtrZLwJRt7ahDtPJ25
bLepHY1XRHykc6vDWd38z+GBJOWDIYKiR2Tywoiah5EKdy53/HVtN8lXsN2Qlmhp
hfh3wEiWlGBcj4DuYOa8Qm+hQzbTdxVARfgqezj7h4Z1rCWSfrQU0LNEnTv/kH6R
13SlSxw8lXFp+kAjW7OUmt1/WLcqLDV11A1EGC3aNS6yETNj3bo20yACV2K4hhff
oh/3U+0q5LC1ignD5V/exCtX4pJWI53Lb8RlC9/VUZHOGUx39/MhVAgc8zo4S0c/
xkXP/thxq4vSyoMN+YJ5r7mbivRuxgAaqe+zIOY74ovrRV6qZGc=
-----END CERTIFICATE-----
Generated at Thu Jun 18 19:09:31 2026 by rpki-client