
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
File: BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json)
Hash identifier: 9AMs0w7Z2464uE5IgzYQcKYmEUh6rYyTos7oO15Yd/Y=
Subject key identifier: D1:C4:DA:79:2C:3B:AF:DA:42:DE:9A:97:78:62:21:55:65:24:3B:19
Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20
Certificate issuer: /CN=BE674235014841C34B81D477A887E851CCB5DE20
Certificate serial: 017953BA3746AFBA19B8DD4BB01ABA9BA189ED4C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
Manifest number: C7
Signing time: Sun 27 Sep 2026 06:53:03 +0000
Manifest this update: Sun 27 Sep 2026 06:48:03 +0000
Manifest next update: Mon 28 Sep 2026 09:52:03 +0000
Files and hashes: 1: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=)
2: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: ryFC+j2RaqdyKWAZ8NfsfS2HAXwvo1VdQZejP4l/JNw=)
3: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl
rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:79:53:ba:37:46:af:ba:19:b8:dd:4b:b0:1a:ba:9b:a1:89:ed:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20
Validity
Not Before: Sep 27 06:48:03 2026 GMT
Not After : Sep 28 09:52:03 2026 GMT
Subject: CN=D1C4DA792C3BAFDA42DE9A977862215565243B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:2b:1a:6b:2f:45:cd:3f:a5:ba:e4:a4:e3:
70:d1:99:24:c9:03:de:9c:29:e1:49:20:84:9e:be:
ab:08:8f:43:c9:b9:ca:a4:73:10:5a:1d:5b:20:85:
9e:4b:8a:38:bd:40:4e:3f:c1:93:8f:c4:ae:79:96:
fa:ae:c1:44:dd:56:63:12:89:55:c4:42:36:51:63:
de:dd:65:fd:58:0d:ca:51:56:4a:2f:df:d5:42:a4:
3f:3f:e1:16:e1:53:bb:34:70:87:65:93:2c:51:87:
e6:a3:00:68:ec:e2:ab:ab:d4:ab:5e:44:33:35:e2:
81:b2:68:d8:9a:31:87:ca:fd:c8:c2:27:39:31:38:
b4:bc:c1:7a:02:72:96:cb:72:df:82:88:76:d6:a4:
dd:de:85:cb:fb:b5:66:56:c9:63:21:4c:d4:b6:52:
d9:f1:f9:8f:24:ef:7a:e1:0f:fe:14:e5:f3:f7:e6:
63:1e:72:13:ea:bb:c0:09:e8:d4:32:04:8c:96:16:
b9:2b:36:2a:4f:7a:ce:73:ce:13:a4:82:db:67:e2:
c2:09:ea:7d:bc:f8:92:01:e6:5b:99:c1:84:5b:56:
0c:f1:d6:4a:80:2e:1b:3e:8c:35:10:61:02:a7:9c:
64:f4:1a:f4:a7:d2:76:45:74:e0:5d:da:3d:a3:4d:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C4:DA:79:2C:3B:AF:DA:42:DE:9A:97:78:62:21:55:65:24:3B:19
X509v3 Authority Key Identifier:
keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:eb:93:a9:18:ed:c6:b6:2a:80:74:bf:5e:8e:74:01:34:01:
d1:90:f4:19:9c:11:06:9e:3f:90:a5:41:b7:a1:22:db:30:88:
74:55:f6:83:2b:48:e3:20:12:94:1d:4b:9f:c7:bc:76:7a:b1:
e4:70:9c:02:d7:4c:75:a2:63:2d:6c:65:6b:b8:0b:1d:a3:c8:
31:ef:e0:b9:27:cf:8d:3a:56:74:9a:26:14:16:55:1b:93:46:
32:e9:c4:a2:7d:6d:39:cf:d3:ee:fc:c1:c0:63:38:32:0b:49:
e6:98:9e:67:8f:9e:26:2b:f6:4d:0e:8c:df:10:e8:69:d4:81:
7f:1b:c4:c4:79:72:9d:b9:cf:13:ed:c8:ea:f9:6f:47:2a:28:
54:95:b0:a9:b5:56:01:44:5a:d3:c2:cd:b5:fd:f1:44:83:c8:
6c:ce:2d:fd:21:e6:ac:23:c8:60:12:b9:be:6d:fa:bc:e9:cc:
74:73:8e:5f:ff:08:dc:b6:a8:cf:7f:ee:cc:41:96:bf:02:55:
d3:d7:f3:6b:f9:6f:43:83:ab:da:08:80:3c:d0:ed:15:2f:1c:
e1:2f:0c:26:8a:55:6e:30:32:d4:55:c6:da:ac:4d:21:03:8e:
2c:b4:c4:77:a8:8a:66:4d:3f:89:2b:53:85:f6:08:47:68:f2:
06:46:f8:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAXlTujdGr7oZuN1LsBq6m6GJ7UwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4NTFD
Q0I1REUyMDAeFw0yNjA5MjcwNjQ4MDNaFw0yNjA5MjgwOTUyMDNaMDMxMTAvBgNV
BAMTKEQxQzREQTc5MkMzQkFGREE0MkRFOUE5Nzc4NjIyMTU1NjUyNDNCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVisaay9FzT+luuSk43DRmSTJ
A96cKeFJIISevqsIj0PJucqkcxBaHVsghZ5Liji9QE4/wZOPxK55lvquwUTdVmMS
iVXEQjZRY97dZf1YDcpRVkov39VCpD8/4RbhU7s0cIdlkyxRh+ajAGjs4qur1Kte
RDM14oGyaNiaMYfK/cjCJzkxOLS8wXoCcpbLct+CiHbWpN3ehcv7tWZWyWMhTNS2
Utnx+Y8k73rhD/4U5fP35mMechPqu8AJ6NQyBIyWFrkrNipPes5zzhOkgttn4sIJ
6n28+JIB5luZwYRbVgzx1kqALhs+jDUQYQKnnGT0GvSn0nZFdOBd2j2jTYPjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0cTaeSw7r9pC3pqXeGIhVWUkOxkwHwYDVR0j
BBgwFoAUvmdCNQFIQcNLgdR3qIfoUcy13iAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTcwYzFiYWItMTNmNC00Y2U2LTg1ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUw
MTQ4NDFDMzRCODFENDc3QTg4N0U4NTFDQ0I1REUyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CRTY3NDIzNTAxNDg0MUMzNEI4MUQ0NzdBODg3RTg1MUNDQjVE
RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1
ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4
NTFDQ0I1REUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAArrk6kY7ca2KoB0v16OdAE0AdGQ9BmcEQae
P5ClQbehItswiHRV9oMrSOMgEpQdS5/HvHZ6seRwnALXTHWiYy1sZWu4Cx2jyDHv
4Lknz406VnSaJhQWVRuTRjLpxKJ9bTnP0+78wcBjODILSeaYnmePniYr9k0OjN8Q
6GnUgX8bxMR5cp25zxPtyOr5b0cqKFSVsKm1VgFEWtPCzbX98USDyGzOLf0h5qwj
yGASub5t+rzpzHRzjl//CNy2qM9/7sxBlr8CVdPX82v5b0ODq9oIgDzQ7RUvHOEv
DCaKVW4wMtRVxtqsTSEDjiy0xHeoimZNP4krU4X2CEdo8gZG+Ls=
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:08:17 2026 by rpki-client