
$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json)
Hash identifier: ZjapQru542PMuh/YzcjCJdpRGy94OsB1rvlfoIjLJ2A=
Subject key identifier: 29:9D:70:33:A9:A5:2C:4E:FB:D9:22:13:60:12:9C:52:BC:EA:94:FD
Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4
Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4
Certificate serial: 660FCD81A1AD1B59BE17018EA32F07B27C45CD2C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
Manifest number: 04EF
Signing time: Thu 19 Mar 2026 04:11:18 +0000
Manifest this update: Thu 19 Mar 2026 04:06:18 +0000
Manifest next update: Sun 22 Mar 2026 06:09:18 +0000
Files and hashes: 1: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: g+ewJ+/FWnlKat+gPQr1tVTj8PjlEaEamMvWQs+8H98=)
2: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=)
3: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=)
4: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: NtIMtUhwnAsSO6aN+1OG7UEEJYXmblTqa/h117q++2k=)
5: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: 5crcrbB/LN7ILCPXkvbBRWMtAP/t3GajDPBToG3xT7s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl
rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 06:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:0f:cd:81:a1:ad:1b:59:be:17:01:8e:a3:2f:07:b2:7c:45:cd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4
Validity
Not Before: Mar 19 04:06:18 2026 GMT
Not After : Mar 22 06:09:18 2026 GMT
Subject: CN=299D7033A9A52C4EFBD9221360129C52BCEA94FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:27:6a:73:19:0c:9e:c0:82:b0:6f:7f:e0:
93:85:cf:f4:65:46:a8:5f:33:78:50:93:fb:79:9a:
c0:f8:b5:a1:35:7c:86:31:dc:42:a6:df:4a:0a:64:
97:10:09:47:c9:19:0a:03:1e:28:30:49:9b:db:3d:
a4:f0:67:64:17:19:25:7b:40:c7:69:a4:d8:cc:e1:
7f:68:2f:e5:06:b9:1b:04:8a:cf:f8:91:8a:5b:82:
b6:ef:5a:85:be:2a:26:0f:b7:74:eb:91:16:cd:17:
33:32:8c:18:10:cc:66:9d:53:16:3f:a9:b2:a1:d6:
61:b5:3a:32:69:35:95:53:b2:21:8e:38:7f:7c:76:
3b:42:e7:22:d2:e3:34:83:11:f7:00:f6:60:74:0f:
3a:35:a3:89:2f:16:ba:39:09:df:c4:31:3a:88:4f:
a0:46:a5:b1:51:3d:00:57:a3:49:ed:54:e8:d0:e7:
96:dd:dd:43:4d:9d:ac:2d:60:c0:d5:4a:30:82:02:
c5:86:59:e1:c0:ac:00:fc:87:8b:8b:d1:4d:86:bf:
ad:6b:5b:ae:86:0e:51:2d:cf:0f:3b:7f:d3:9d:70:
83:f0:77:20:ac:74:19:d7:b3:5e:a5:c7:bc:8c:6c:
bc:30:c1:c0:fc:cb:37:dd:08:29:49:1c:bc:18:2d:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9D:70:33:A9:A5:2C:4E:FB:D9:22:13:60:12:9C:52:BC:EA:94:FD
X509v3 Authority Key Identifier:
keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:47:e4:44:f3:f0:79:60:4c:1f:79:ba:f1:02:ca:31:dc:
36:47:4f:57:2e:32:d1:0f:b4:96:b4:fc:70:87:ad:39:08:81:
ee:1a:bc:41:fe:25:28:2b:be:8b:00:ab:b4:0b:16:d4:0f:8d:
5e:92:08:79:d7:29:35:d6:db:24:a6:0a:bb:42:5b:77:8d:d6:
d1:1a:c7:ca:58:23:72:3f:86:49:0a:41:7c:f5:6b:89:0f:55:
e7:fa:d8:d5:5c:4a:8b:cb:19:15:6f:b6:d0:92:74:f6:2a:06:
d7:ac:6e:88:df:82:2b:6a:23:64:d2:e9:8d:87:33:df:15:a7:
e9:57:d0:8f:89:f5:de:40:f3:ba:80:fc:43:1e:61:a7:a7:7e:
af:96:e7:6e:a4:e4:d5:c6:df:ea:50:c9:24:74:f0:2c:40:8c:
3e:3d:ec:2d:57:49:99:85:fb:e2:26:fa:e4:5f:78:d5:d5:19:
85:4a:2c:b5:3e:e4:b8:13:28:52:24:c7:41:2a:72:9d:10:f4:
09:9a:cd:b5:80:79:19:db:96:b3:ae:ac:c7:b9:43:b0:ed:9d:
72:b2:2a:11:e2:5b:65:b4:dd:9b:2f:17:e3:f5:be:15:15:1b:
13:c1:06:3a:95:24:7c:da:ad:e2:3e:ee:a7:df:c9:5e:7f:cb:
87:34:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 01:34:47 2026 by rpki-client