
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json)
Hash identifier: W+FAYqKfamsRvSPrMz3WL5utjTjza0wapnoaI3rSfLE=
Subject key identifier: 48:92:07:68:28:C1:9B:9F:F0:54:1B:8A:1E:12:31:7F:5D:A4:CF:12
Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Certificate serial: 46DA3786D5C930F62BA296CD117D574E5E8AEAD1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 00:34:50 +0000
Manifest this update: Fri 24 Jul 2026 00:29:50 +0000
Manifest next update: Sat 25 Jul 2026 03:05:50 +0000
Files and hashes: 1: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=)
2: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=)
3: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: uJZkZ7ABUoiH4cQJiL2p1rg3PZ7ndPOiYAtG2KaF+to=)
4: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=)
5: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:da:37:86:d5:c9:30:f6:2b:a2:96:cd:11:7d:57:4e:5e:8a:ea:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Validity
Not Before: Jul 24 00:29:50 2026 GMT
Not After : Jul 25 03:05:50 2026 GMT
Subject: CN=4892076828C19B9FF0541B8A1E12317F5DA4CF12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:c8:45:00:c2:3c:5f:be:dd:ab:6a:d6:82:
fc:c0:34:cc:9f:69:74:a8:9b:0d:43:bc:5c:9b:d4:
15:4a:d8:6c:36:e6:ec:98:ab:e1:2d:9b:9f:be:0a:
e7:2b:20:ee:c1:42:fd:97:85:b9:e3:28:e0:91:91:
b6:50:5e:a9:69:b1:af:3a:90:bc:86:f5:7f:2e:a8:
96:e9:ef:00:aa:8d:b1:22:e3:4a:6a:5e:b6:5b:23:
f7:3a:e7:ee:8b:8a:b7:c1:74:73:18:ea:ee:cb:d3:
3f:29:5e:43:31:a5:1d:5a:fd:2f:0f:ba:f7:77:33:
71:7c:19:c0:0e:a9:90:8e:e2:cd:1e:e9:2d:10:a6:
06:8b:09:8b:03:fb:5e:b1:fe:d4:53:fe:5e:5d:df:
34:fa:25:8b:02:34:0f:a1:10:c5:f5:2c:7e:b8:9a:
8b:54:14:eb:43:88:98:f2:01:64:82:07:65:1f:1d:
2a:9d:9f:30:e7:55:10:a4:4c:de:68:dd:92:08:32:
80:df:73:d8:e7:c2:10:f6:4c:3f:56:00:be:41:c3:
aa:0d:2c:70:ad:7b:bf:6e:63:f4:aa:dc:93:9a:9d:
b9:5f:7c:36:ed:42:a8:d1:fb:36:75:7b:64:06:41:
2f:cd:eb:5e:bf:57:62:52:f0:a2:e4:8b:33:c7:c7:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:92:07:68:28:C1:9B:9F:F0:54:1B:8A:1E:12:31:7F:5D:A4:CF:12
X509v3 Authority Key Identifier:
keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:76:af:28:3a:80:45:2c:95:41:cc:e9:e7:2b:84:c6:c6:b8:
8a:02:cc:19:03:07:6c:a4:cc:55:8b:8c:6b:36:f7:32:09:10:
d5:ed:cd:a7:f5:e9:28:91:4b:94:02:4b:75:2c:75:72:cf:48:
40:f7:2e:e8:44:e9:d2:c4:98:e1:2d:c8:ca:47:d9:09:13:1a:
4d:e9:a4:c4:5e:51:f7:69:2b:da:e6:c5:46:46:b8:1e:ca:ea:
b8:07:c1:b0:8a:fa:e5:d7:df:75:80:0d:1c:e5:d0:c9:53:9b:
c4:b5:5b:60:77:11:6a:d2:ff:fe:90:10:0e:89:fd:d9:8d:53:
65:05:a5:02:8c:ca:36:35:20:fd:f9:6e:24:8c:88:2b:32:ac:
2f:d8:db:ef:da:48:ac:12:17:51:96:34:25:a2:69:1d:43:f3:
d0:b2:ac:a3:79:a4:f3:17:9a:66:c4:20:81:e8:e2:8a:13:89:
cb:89:65:68:16:2f:37:19:cb:d0:e6:bf:a2:4a:27:b1:6f:d4:
a2:b4:b1:ad:2d:06:1d:6b:93:be:f4:3e:5b:0e:2b:01:80:13:
d3:ac:9c:06:cb:04:6d:36:96:11:3f:2d:69:1b:77:a9:ec:5e:
36:c5:37:df:f9:c4:b0:33:78:5a:5a:88:37:14:a1:95:cb:aa:
05:70:df:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:59 2026 by rpki-client