
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft
File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft (raw, json)
Hash identifier: s9gpztlQnwCWyVqQ7NqjkmcH8Zdsap6AB2TP45tkYfU=
Subject key identifier: 77:C3:5A:E2:D2:0D:2F:5E:38:97:D4:C1:AC:03:82:C7:13:82:5A:D7
Authority key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1
Certificate issuer: /CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1
Certificate serial: 3D19EB2A53D189BC1575ECB2BE26AD2369AD5AA4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 11:06:55 +0000
Manifest this update: Tue 12 May 2026 11:01:55 +0000
Manifest next update: Wed 13 May 2026 14:55:55 +0000
Files and hashes: 1: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl (hash: qbPf9dU2UgtV7e1PSUcemNh4QI7mNdidQE2ARXWNcZk=)
2: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Ci+C8lgdBuoIRcX6sBTuz002jYwNdox6i5sko8xMKfo=)
3: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: OpScNhGSGHF9cfh0SvlMC4D5SddDMF64JzbjkAw/z6U=)
4: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: OONf1oH6b7/Al0k4fu2OIqf+coPCbCkVYT8Alt0EfK4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl
rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:19:eb:2a:53:d1:89:bc:15:75:ec:b2:be:26:ad:23:69:ad:5a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1
Validity
Not Before: May 12 11:01:55 2026 GMT
Not After : May 13 14:55:55 2026 GMT
Subject: CN=77C35AE2D20D2F5E3897D4C1AC0382C713825AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:19:45:d6:ca:7b:c9:45:b6:33:e0:34:e2:
a8:f6:cb:0a:14:d4:ad:80:7a:88:f4:2e:44:51:19:
51:9d:e5:0e:c1:2c:44:04:19:56:ef:fa:e7:73:bb:
e0:7e:34:34:ef:6d:98:4e:1f:5f:1a:ff:ee:e3:3e:
b4:2b:93:64:cd:d3:8c:5a:54:34:c4:ec:de:5c:ea:
e8:0f:76:ed:dd:fe:77:fc:46:a3:e9:d5:6d:e1:46:
0c:c0:aa:69:5b:67:fc:87:13:66:92:72:c9:4f:29:
e4:e1:a5:b2:91:a6:56:15:f7:4e:18:38:09:05:20:
ee:1e:03:fb:66:53:5a:ab:75:59:2a:c1:72:a8:2c:
67:a8:02:0a:26:1e:17:e6:71:0e:68:bc:9b:a2:1e:
07:f2:3d:fb:bd:48:36:80:2d:e3:ff:e4:3a:b4:19:
75:f8:60:72:25:60:13:4c:62:83:2b:69:df:89:2b:
ca:69:69:70:cd:aa:86:e1:8b:38:bc:6d:6f:c7:cc:
c8:02:14:0f:3b:77:be:3b:4a:29:4b:4f:3b:43:00:
ed:9e:24:88:ec:7e:90:41:b6:46:21:4d:68:20:bd:
73:29:02:02:91:d3:d7:05:d2:85:d5:35:6d:f5:b2:
3c:15:5b:a6:43:d8:43:06:f3:81:c7:90:52:05:8d:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C3:5A:E2:D2:0D:2F:5E:38:97:D4:C1:AC:03:82:C7:13:82:5A:D7
X509v3 Authority Key Identifier:
keyid:BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:7f:13:a0:7d:78:69:98:60:c7:af:30:83:2b:34:ea:d5:
92:ce:0b:21:19:2b:9d:08:70:43:10:6e:b2:be:9e:c7:29:52:
3a:a1:90:fd:30:18:d6:bb:20:d6:58:16:6d:df:00:ea:36:df:
ea:04:66:05:96:6c:40:20:94:f7:c1:e7:60:a4:5d:e0:ae:c5:
c8:11:2a:ac:96:96:c5:eb:a8:76:79:8d:3e:d0:d2:cc:d5:5d:
c0:36:3d:d5:81:f5:09:2c:7d:2d:ab:b1:58:63:80:31:25:e0:
32:95:81:8e:65:bb:77:9c:59:ee:68:c6:d8:71:c1:e4:5f:38:
26:e2:3d:e3:ff:57:ed:01:c1:65:a2:b8:3a:43:11:ee:63:4b:
e7:f7:31:1e:da:90:5c:80:a7:7a:84:f9:f0:ea:67:7d:e8:09:
8d:1a:67:5e:d4:be:b9:13:11:66:54:d6:05:da:bd:09:49:4e:
fb:41:cf:ad:51:16:01:17:b1:57:96:fd:01:fe:2c:87:bf:b6:
52:1e:9f:c9:c8:a0:3c:ad:50:44:8e:d8:ff:10:48:8f:15:3f:
bd:0e:f3:aa:3e:36:7b:73:82:7c:26:6f:df:34:c3:51:92:e5:
a7:38:06:3f:fa:35:3d:ab:a5:f8:a4:0c:d9:8b:e9:fd:3f:2d:
af:81:7c:0d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPRnrKlPRibwVdeyyviatI2mtWqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0NTVC
NzYxRDdBMTAeFw0yNjA1MTIxMTAxNTVaFw0yNjA1MTMxNDU1NTVaMDMxMTAvBgNV
BAMTKDc3QzM1QUUyRDIwRDJGNUUzODk3RDRDMUFDMDM4MkM3MTM4MjVBRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYhlF1sp7yUW2M+A04qj2ywoU
1K2Aeoj0LkRRGVGd5Q7BLEQEGVbv+udzu+B+NDTvbZhOH18a/+7jPrQrk2TN04xa
VDTE7N5c6ugPdu3d/nf8RqPp1W3hRgzAqmlbZ/yHE2aScslPKeThpbKRplYV904Y
OAkFIO4eA/tmU1qrdVkqwXKoLGeoAgomHhfmcQ5ovJuiHgfyPfu9SDaALeP/5Dq0
GXX4YHIlYBNMYoMrad+JK8ppaXDNqobhizi8bW/HzMgCFA87d747SilLTztDAO2e
JIjsfpBBtkYhTWggvXMpAgKR09cF0oXVNW31sjwVW6ZD2EMG84HHkFIFjfozAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUd8Na4tINL144l9TBrAOCxxOCWtcwHwYDVR0j
BBgwFoAUvsgqo7sNH62qkYZl9d8EVbdh16EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjM2MDY2ZTgtOGUxOS00ZGU3LTk0N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNC
QjBEMUZBREFBOTE4NjY1RjVERjA0NTVCNzYxRDdBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9CRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3NjFE
N0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0
N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0
NTVCNzYxRDdBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADmSfxOgfXhpmGDHrzCDKzTq1ZLOCyEZK50I
cEMQbrK+nscpUjqhkP0wGNa7INZYFm3fAOo23+oEZgWWbEAglPfB52CkXeCuxcgR
KqyWlsXrqHZ5jT7Q0szVXcA2PdWB9QksfS2rsVhjgDEl4DKVgY5lu3ecWe5oxthx
weRfOCbiPeP/V+0BwWWiuDpDEe5jS+f3MR7akFyAp3qE+fDqZ33oCY0aZ17UvrkT
EWZU1gXavQlJTvtBz61RFgEXsVeW/QH+LIe/tlIen8nIoDytUESO2P8QSI8VP70O
86o+Nntzgnwmb980w1GS5ac4Bj/6NT2rpfikDNmL6f0/La+BfA0=
-----END CERTIFICATE-----
Generated at Wed May 13 00:45:26 2026 by rpki-client