
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
File: BE64AB23612B159BE54939807CB20423D340D326.mft (raw, json)
Hash identifier: uxLrSLsD8S118nWEGXDjt9ni/ViNc0kc6zSCTYGFcSw=
Subject key identifier: 65:C3:91:33:C9:6C:C6:0B:B8:3C:41:96:6B:B0:B0:99:46:D2:07:1F
Authority key identifier: BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26
Certificate issuer: /CN=BE64AB23612B159BE54939807CB20423D340D326
Certificate serial: 517FEEBA1DDDE6C4CB0DFE8A6B1149AA78740B24
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 11:49:39 +0000
Manifest this update: Tue 02 Jun 2026 11:44:39 +0000
Manifest next update: Wed 03 Jun 2026 13:40:39 +0000
Files and hashes: 1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: gqKKZqiveBSyuWNd8uxps6/yl/at9bVMTgVKSVDM6XY=)
2: BE64AB23612B159BE54939807CB20423D340D326.crl (hash: D/0fbaFCYlkagELoaolPCB9ZSvbF21YQOnAF7t2M0Vs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl
rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 13:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7f:ee:ba:1d:dd:e6:c4:cb:0d:fe:8a:6b:11:49:aa:78:74:0b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE64AB23612B159BE54939807CB20423D340D326
Validity
Not Before: Jun 2 11:44:39 2026 GMT
Not After : Jun 3 13:40:39 2026 GMT
Subject: CN=65C39133C96CC60BB83C41966BB0B09946D2071F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:26:50:f8:36:bd:83:cf:49:aa:b6:b5:d5:ce:
e6:09:d7:25:89:87:1a:24:72:10:4b:d4:ce:2b:e6:
94:15:a0:eb:85:5b:4f:3a:60:f0:e8:af:0b:5a:e4:
2f:fa:d8:46:24:57:09:73:10:a2:13:54:c4:b1:c2:
17:05:4f:05:79:38:74:15:b6:2d:99:ea:1f:df:f7:
83:bd:17:c9:7f:84:7a:3c:a5:6c:9b:a5:f4:0c:b5:
4f:4f:35:b4:c0:6e:78:63:06:1e:0f:4f:72:bd:94:
6c:f7:e0:67:2b:b1:c7:3e:57:42:4a:9d:59:5f:dc:
78:ba:91:f9:c1:5a:04:01:88:a4:3d:88:68:8e:62:
c7:49:70:64:d5:c1:11:5f:3e:64:3c:63:61:e8:63:
8d:c4:46:72:b3:2f:04:7c:d1:d3:66:dd:91:41:a3:
7f:8d:58:d6:4c:7d:df:ea:3b:a6:bc:70:40:cc:4c:
d4:78:92:b0:2a:81:f1:b2:32:ed:74:67:2f:47:59:
68:34:a5:0e:31:d9:48:3b:11:95:b6:3a:e4:13:41:
a9:9a:05:5b:eb:4b:f8:eb:7e:08:f3:8a:d5:a5:4f:
45:72:9e:cd:d0:92:98:da:ff:58:64:08:3d:04:0f:
92:ae:dd:2d:66:d9:12:ea:f9:40:46:c4:93:0c:b8:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:91:33:C9:6C:C6:0B:B8:3C:41:96:6B:B0:B0:99:46:D2:07:1F
X509v3 Authority Key Identifier:
keyid:BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0e:19:40:0c:0e:30:e1:de:3e:81:13:61:0c:69:d7:0a:f6:
a9:5c:21:71:09:e4:d4:21:58:f1:8e:3f:ea:ff:b5:08:99:7a:
b6:91:d7:65:28:48:d5:61:c3:4f:9e:d5:f6:01:66:3e:e6:79:
aa:08:3c:29:1b:4d:b5:55:96:77:63:aa:ec:15:a4:a9:37:6d:
da:32:70:9c:27:2b:ee:59:66:7e:57:8b:56:bd:f9:50:a6:e5:
99:58:b8:b2:c0:5c:e5:53:d0:2c:33:25:ad:b9:a1:5d:aa:00:
16:1f:fd:80:4b:3a:de:b7:12:15:6e:40:9b:c6:cc:98:d7:0e:
3f:63:78:4e:d7:c4:f0:0d:4c:ed:5e:bf:9c:bf:74:ad:9d:4b:
18:ee:23:69:62:c4:9d:69:8b:99:7f:1f:45:3f:d5:69:39:f0:
81:4d:74:3f:53:f6:4c:5b:66:7a:5d:33:fa:62:07:0c:3a:40:
68:a7:bf:2d:6f:68:e0:b3:11:0c:40:3f:48:8e:62:3a:a9:69:
e5:00:f8:d8:7b:3d:2c:d2:ca:ed:a5:10:2f:c1:3f:d6:b1:d4:
1f:55:42:cd:89:1c:1d:0a:c1:af:72:d2:fd:73:0f:43:d3:e1:
6d:6c:f8:18:2e:09:3c:00:88:d9:c4:b7:aa:cc:65:7b:65:d2:
d0:c6:40:99
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUX/uuh3d5sTLDf6KaxFJqnh0CyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2NEFCMjM2MTJCMTU5QkU1NDkzOTgwN0NCMjA0MjNE
MzQwRDMyNjAeFw0yNjA2MDIxMTQ0MzlaFw0yNjA2MDMxMzQwMzlaMDMxMTAvBgNV
BAMTKDY1QzM5MTMzQzk2Q0M2MEJCODNDNDE5NjZCQjBCMDk5NDZEMjA3MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0JlD4Nr2Dz0mqtrXVzuYJ1yWJ
hxokchBL1M4r5pQVoOuFW086YPDorwta5C/62EYkVwlzEKITVMSxwhcFTwV5OHQV
ti2Z6h/f94O9F8l/hHo8pWybpfQMtU9PNbTAbnhjBh4PT3K9lGz34Gcrscc+V0JK
nVlf3Hi6kfnBWgQBiKQ9iGiOYsdJcGTVwRFfPmQ8Y2HoY43ERnKzLwR80dNm3ZFB
o3+NWNZMfd/qO6a8cEDMTNR4krAqgfGyMu10Zy9HWWg0pQ4x2Ug7EZW2OuQTQama
BVvrS/jrfgjzitWlT0Vyns3Qkpja/1hkCD0ED5Ku3S1m2RLq+UBGxJMMuOx5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZcORM8lsxgu4PEGWa7CwmUbSBx8wHwYDVR0j
BBgwFoAUvmSrI2ErFZvlSTmAfLIEI9NA0yYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzZkOGEwZmEtNWQ0YS00ODNiLWFmODktMGVmNDBkZWIwNWYzLzAvQkU2NEFCMjM2
MTJCMTU5QkU1NDkzOTgwN0NCMjA0MjNEMzQwRDMyNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CRTY0QUIyMzYxMkIxNTlCRTU0OTM5ODA3Q0IyMDQyM0QzNDBE
MzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm
ODktMGVmNDBkZWIwNWYzLzAvQkU2NEFCMjM2MTJCMTU5QkU1NDkzOTgwN0NCMjA0
MjNEMzQwRDMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMkOGUAMDjDh3j6BE2EMadcK9qlcIXEJ5NQh
WPGOP+r/tQiZeraR12UoSNVhw0+e1fYBZj7meaoIPCkbTbVVlndjquwVpKk3bdoy
cJwnK+5ZZn5Xi1a9+VCm5ZlYuLLAXOVT0CwzJa25oV2qABYf/YBLOt63EhVuQJvG
zJjXDj9jeE7XxPANTO1ev5y/dK2dSxjuI2lixJ1pi5l/H0U/1Wk58IFNdD9T9kxb
ZnpdM/piBww6QGinvy1vaOCzEQxAP0iOYjqpaeUA+Nh7PSzSyu2lEC/BP9ax1B9V
Qs2JHB0Kwa9y0v1zD0PT4W1s+BguCTwAiNnEt6rMZXtl0tDGQJk=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:48:53 2026 by rpki-client