
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json)
Hash identifier: uq5Xoa7329u761WMUAJkmnn8LUyC2H1cd3etV9vmDbc=
Subject key identifier: 6C:3C:2B:DE:52:AD:96:4F:EC:81:7E:DC:93:84:D3:50:28:24:74:55
Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Certificate serial: 027FB6A3D1253A9430F07700F995C1FAE0611513
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 12:06:17 +0000
Manifest this update: Mon 20 Jul 2026 12:01:17 +0000
Manifest next update: Tue 21 Jul 2026 14:06:17 +0000
Files and hashes: 1: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=)
2: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=)
3: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=)
4: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=)
5: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: H/gj8Fh5VRkN+eH6kZ/ENmIjnpvBv/5OoO+3sMaKBMk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 14:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7f:b6:a3:d1:25:3a:94:30:f0:77:00:f9:95:c1:fa:e0:61:15:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Validity
Not Before: Jul 20 12:01:17 2026 GMT
Not After : Jul 21 14:06:17 2026 GMT
Subject: CN=6C3C2BDE52AD964FEC817EDC9384D35028247455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:aa:50:9b:32:f0:5f:26:85:66:5a:8c:ee:
86:bf:38:99:d7:28:1b:5e:2b:f7:b1:30:97:b3:0b:
b9:85:0e:37:e7:3e:c2:23:ad:70:28:d7:93:f2:25:
05:87:29:d4:30:22:e1:cc:69:6e:3f:5e:c7:a6:2f:
bc:c6:a4:c8:c9:79:98:1e:9e:b3:f0:cf:80:17:c6:
a5:f7:4e:06:af:e8:30:0d:53:52:5b:ea:01:af:f7:
c4:92:ff:9f:1d:26:8e:b3:49:96:db:86:29:b9:c5:
13:01:c4:21:bc:1a:c1:d4:6d:6f:66:74:14:a0:01:
df:1f:45:56:0c:e4:b6:05:07:76:95:ad:95:f3:50:
ef:04:ec:27:b1:a8:83:be:3a:25:ae:64:07:81:80:
1b:1b:fd:e2:d8:5e:b7:b6:c3:f1:35:bd:5e:73:80:
74:d2:71:5b:f4:ba:69:08:6d:e4:c7:36:16:52:7c:
ee:66:ff:a7:18:50:9b:81:88:09:61:bf:da:b4:b8:
e1:1c:08:da:54:b5:66:32:6c:dc:ad:54:4c:ee:61:
43:09:8f:76:a5:2a:f4:35:9e:42:3c:b1:e7:35:01:
51:22:fb:be:aa:70:df:ff:33:4c:c5:4c:90:5d:2a:
46:00:7f:1c:e1:a8:a8:05:6d:cf:37:5f:7b:fc:7d:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3C:2B:DE:52:AD:96:4F:EC:81:7E:DC:93:84:D3:50:28:24:74:55
X509v3 Authority Key Identifier:
keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:45:04:c0:5c:c9:dd:95:67:0f:3c:3b:e5:c3:31:55:28:79:
c0:03:44:7c:95:8b:22:69:7b:09:e5:c4:d8:b9:8c:c5:25:37:
dd:16:ce:c9:9b:59:40:e1:cc:56:f0:6d:ea:c2:35:c8:a3:de:
e7:b5:0b:ae:9b:b5:b0:cd:1c:11:71:c6:7f:5f:2d:9c:dd:a3:
05:a7:9a:fa:9d:73:fc:9f:e9:07:24:7b:3a:8d:1b:28:2f:7c:
ee:4e:51:d8:32:e1:e9:f7:60:47:87:e6:7f:08:71:ce:f5:fc:
f8:d5:57:43:0f:d0:9f:96:5c:3b:eb:52:29:3f:63:28:66:27:
99:86:62:40:77:88:fb:81:ec:4c:21:58:e9:ca:d3:b7:d0:1f:
13:e1:1d:08:82:5b:16:1c:78:51:7b:8e:55:7b:90:01:3d:84:
5f:00:00:e5:16:85:b7:6b:35:7d:d6:1f:e5:3c:71:49:ca:f0:
f7:3e:a5:01:90:99:be:34:4a:e3:87:d9:1a:c4:61:8d:6d:de:
2e:1a:a7:a0:19:dc:c3:24:80:79:d8:8f:b2:fb:87:c8:28:0d:
87:75:ff:a4:b4:a4:01:c8:fe:82:be:3e:db:9e:6f:99:7b:24:
42:61:a6:82:73:37:dd:bd:a5:24:05:6c:95:0e:d3:6e:13:59:
d5:83:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:12:04 2026 by rpki-client