
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
File: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft (raw, json)
Hash identifier: gOMin3z3MBWyKs6mXyzzq72B/rajHZKS0A6GonnnuvA=
Subject key identifier: 3B:F5:33:2C:7E:A9:2A:DA:B9:90:CA:3E:29:72:D6:87:69:01:64:BC
Authority key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3
Certificate issuer: /CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3
Certificate serial: 6275048AA47B739B5663628F950E05BC84F4D47D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 17:46:54 +0000
Manifest this update: Thu 23 Jul 2026 17:41:54 +0000
Manifest next update: Fri 24 Jul 2026 21:20:54 +0000
Files and hashes: 1: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl (hash: 6P/3gWCPVqfTlNVPcKOY7T+OuAtFBEnZzFmcbJSOjTw=)
2: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: u+9c9rKVTMexnUms/phLxZrmwAGKCx7eW2MRZawsvKg=)
3: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: Od8V+mQHuU8EzMntRRnJoN07uXL+m/YOXljtK8BGjHw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl
rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:75:04:8a:a4:7b:73:9b:56:63:62:8f:95:0e:05:bc:84:f4:d4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3
Validity
Not Before: Jul 23 17:41:54 2026 GMT
Not After : Jul 24 21:20:54 2026 GMT
Subject: CN=3BF5332C7EA92ADAB990CA3E2972D687690164BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:e5:e1:8f:99:36:d8:94:9f:d9:2e:23:fc:
ae:75:22:ff:2d:cb:f9:66:c0:d7:e6:c0:f7:2d:48:
6c:9a:ae:98:81:e7:f5:39:b1:d3:d0:0c:e6:2d:ec:
e0:66:ac:10:9b:02:20:a8:db:f4:39:9f:12:d3:51:
21:81:6c:f5:dc:b2:07:c0:37:42:20:f2:cc:82:e0:
41:fc:7d:77:57:54:25:d2:78:34:7b:83:ad:5b:60:
f7:55:f5:0d:55:73:30:7b:0a:2f:36:9f:e5:ea:43:
66:60:e2:c3:d8:79:31:f7:7e:9f:67:5a:6d:dd:e1:
c7:66:51:d6:45:84:c8:d4:46:d7:cc:1e:31:bd:62:
f5:35:ef:28:1e:cb:f4:62:a0:1d:5f:ec:0b:eb:da:
02:69:f5:6e:04:11:41:43:3c:93:7f:8c:af:3e:60:
a8:6e:e4:43:f9:9a:58:06:78:f1:a0:6e:7b:43:db:
2d:2b:60:30:90:8f:cf:88:08:7d:4e:b4:38:18:b4:
a7:c0:31:45:ee:b0:25:2d:a0:ff:6b:ec:0a:8f:91:
e4:01:9c:26:02:9b:67:c4:bc:f2:54:62:7d:88:0b:
eb:98:34:d1:e3:c1:9f:55:19:81:77:b3:33:07:7f:
12:23:ad:c7:d4:c3:64:d9:f8:ff:ce:7b:d1:23:c3:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F5:33:2C:7E:A9:2A:DA:B9:90:CA:3E:29:72:D6:87:69:01:64:BC
X509v3 Authority Key Identifier:
keyid:BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:af:cd:9c:63:61:3d:f1:09:0f:02:a1:cc:b4:2e:fb:f6:e3:
4a:dd:cf:e1:a7:33:b5:48:8e:b9:05:16:3a:a5:44:dd:1b:10:
b4:75:a8:fa:a3:19:b8:09:36:3d:dc:95:f5:0b:0b:3d:39:38:
e4:ca:58:4f:ef:8e:60:c6:cf:82:d0:12:68:d9:45:64:fc:e8:
83:b2:2d:ef:b0:3c:3b:33:5c:79:63:72:5d:8b:d4:d0:fe:82:
94:68:06:97:34:d5:39:86:5a:ea:11:c8:2c:c6:da:df:4f:c7:
6d:78:37:76:48:1b:a5:f3:4d:0a:c0:a1:c3:f1:2a:ac:3d:05:
7d:9f:d3:b9:5f:83:af:17:d0:c4:f6:52:d2:62:fa:dd:9c:36:
43:ed:4f:34:9c:a8:f0:d2:60:01:86:56:04:55:32:5c:83:87:
e6:2a:69:94:a0:8d:a6:c0:f7:44:f5:7a:73:e5:d7:c7:d9:68:
bb:39:5f:5e:82:69:2d:0f:f2:7e:64:fe:11:58:98:76:2b:a6:
e7:d0:f6:4c:21:49:74:af:a7:85:c3:e2:14:52:d6:b6:00:29:
df:80:ce:72:ca:8b:a7:d5:09:1a:db:fc:77:55:ef:06:d5:28:
28:ce:38:ee:75:d0:4b:eb:f3:77:1c:26:03:6f:9f:9c:77:0c:
04:59:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:55 2026 by rpki-client