
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
File: BE64AB23612B159BE54939807CB20423D340D326.mft (raw, json)
Hash identifier: XQKCRokAXhFftYKMLEeJpsShc5ssJpCzqU8J8ISnaGA=
Subject key identifier: D0:EB:36:EF:72:DA:74:D8:12:1B:C3:FF:A3:44:3E:54:88:20:F8:2C
Authority key identifier: BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26
Certificate issuer: /CN=BE64AB23612B159BE54939807CB20423D340D326
Certificate serial: 72CC2C76C05161FAF0D336C7C61EFEE9C02C3ADC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 14:53:06 +0000
Manifest this update: Thu 23 Jul 2026 14:48:06 +0000
Manifest next update: Fri 24 Jul 2026 18:39:06 +0000
Files and hashes: 1: BE64AB23612B159BE54939807CB20423D340D326.crl (hash: AHdEKL36v1g7gN0NEzSW9BrSFDbZa5vDyrYHNIS/oQE=)
2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: gqKKZqiveBSyuWNd8uxps6/yl/at9bVMTgVKSVDM6XY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl
rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cc:2c:76:c0:51:61:fa:f0:d3:36:c7:c6:1e:fe:e9:c0:2c:3a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE64AB23612B159BE54939807CB20423D340D326
Validity
Not Before: Jul 23 14:48:06 2026 GMT
Not After : Jul 24 18:39:06 2026 GMT
Subject: CN=D0EB36EF72DA74D8121BC3FFA3443E548820F82C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fc:c5:a7:b9:cf:96:5c:2a:17:23:59:a6:00:
c6:e1:47:a3:c8:9f:24:d1:26:35:25:f9:3c:ed:f6:
ea:75:d9:b5:ea:58:6b:72:94:d3:3e:89:53:36:c7:
a8:f5:9d:e4:20:22:df:b0:96:b7:84:ea:69:a7:a9:
a3:60:94:50:76:63:0f:60:ee:b5:de:41:9e:8c:79:
88:2c:9e:4d:fe:ae:0f:55:4a:18:0c:0a:6f:a2:17:
fb:83:5a:cf:e9:4b:6f:06:73:7f:56:32:60:35:2c:
f0:55:d0:67:f7:f6:eb:23:a8:2e:d1:8a:35:8b:7b:
88:9f:9c:af:72:61:5e:97:a0:e5:34:30:31:3e:81:
77:9c:23:99:c3:a3:03:ae:6e:6e:0b:47:81:9b:88:
d5:1f:be:0e:6d:34:25:88:f9:74:7a:87:4c:5c:f2:
bf:c0:88:84:b5:e4:29:8e:3b:3a:14:8d:c7:69:f7:
e3:38:94:47:dd:a9:c6:27:77:a1:56:62:3e:3a:2c:
9d:92:c4:e7:d4:d7:4b:c8:34:8c:52:be:10:05:84:
a7:25:f4:de:a7:85:22:9b:93:09:b3:cc:be:0a:1e:
0a:ec:11:ed:05:1c:dd:f5:dc:44:db:34:9a:0d:56:
70:19:15:28:54:41:b5:1a:a1:91:53:b4:38:17:cd:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EB:36:EF:72:DA:74:D8:12:1B:C3:FF:A3:44:3E:54:88:20:F8:2C
X509v3 Authority Key Identifier:
keyid:BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:af:57:86:72:cd:bd:0a:1e:e4:4b:24:37:18:77:f4:f0:95:
f8:f3:fc:9a:d3:8c:0d:e8:eb:56:00:87:20:2e:27:2a:04:c3:
c2:99:72:0b:91:20:d1:e0:e6:54:21:81:7e:14:28:48:1e:e4:
a6:29:23:81:bc:94:0b:7f:eb:59:bb:a1:f1:d0:11:21:2b:f7:
91:76:57:2e:98:cb:95:ee:94:74:bb:a7:77:84:e5:cf:3b:7e:
b9:21:ba:8d:3c:85:a7:84:85:d7:70:5e:04:a3:9b:b7:77:20:
81:e9:83:da:2d:5b:e9:95:93:10:7f:05:1e:58:d7:d1:30:8e:
36:57:34:da:6c:7c:9a:57:70:60:62:fa:95:81:1f:3f:e5:9d:
7e:40:87:40:87:b4:eb:43:08:1e:fc:5f:34:fd:80:9d:4d:34:
2b:74:e1:d0:e4:84:46:f6:4c:80:f1:48:72:50:81:19:94:b9:
fc:bb:68:67:aa:78:d6:8c:21:ee:be:ac:84:57:1c:27:0a:4c:
89:8f:94:0a:08:5a:67:67:06:57:e1:18:d5:93:61:52:0d:c5:
05:ee:f7:50:e0:f5:6d:07:ff:44:ad:7c:13:88:96:db:42:69:
20:8d:ee:b0:c9:25:b5:39:31:6a:e6:ff:6a:ab:6f:d0:0e:f2:
b0:c4:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:14 2026 by rpki-client