
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
File: BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json)
Hash identifier: LsuhPUm8pcV+/rojDRxiwzccOkW34eLqp3WXKBrmhoM=
Subject key identifier: 63:C4:4D:A5:5F:0E:40:98:4D:7B:45:C8:7A:F8:80:BA:3D:AD:8B:6B
Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20
Certificate issuer: /CN=BE674235014841C34B81D477A887E851CCB5DE20
Certificate serial: 47F0D4FE4F17C0AFAFBF0E57419F7153B1BAC89C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 07:27:43 +0000
Manifest this update: Thu 17 Sep 2026 07:22:43 +0000
Manifest next update: Fri 18 Sep 2026 09:35:43 +0000
Files and hashes: 1: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: u00NKC/SmNvsGQILulW0TZqtR3dbBHvfcI4wp7psA64=)
2: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=)
3: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl
rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f0:d4:fe:4f:17:c0:af:af:bf:0e:57:41:9f:71:53:b1:ba:c8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20
Validity
Not Before: Sep 17 07:22:43 2026 GMT
Not After : Sep 18 09:35:43 2026 GMT
Subject: CN=63C44DA55F0E40984D7B45C87AF880BA3DAD8B6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:70:4e:50:51:e5:db:9b:75:33:a0:f7:e1:dd:
9c:88:b4:ad:6e:4a:c6:14:04:ae:db:b8:5a:29:25:
14:29:d5:cf:f1:eb:79:01:0a:8f:7f:fc:f3:a5:ce:
a6:e9:02:73:04:90:d6:4a:5c:12:51:31:ab:37:68:
dc:c3:54:b3:27:e5:86:84:e0:08:1f:6e:56:d9:53:
6c:16:25:99:e9:0a:f7:b3:33:fa:0d:33:45:fe:20:
c2:f1:42:b8:fb:fe:8f:7d:cc:a5:01:d6:7c:93:3a:
45:71:89:74:c3:15:d4:b2:c7:ea:e5:c5:6c:67:c0:
25:86:fe:eb:6c:c6:2a:00:c0:c8:af:6e:71:bf:ea:
a6:75:99:11:01:02:90:8a:95:90:16:3a:44:ea:95:
af:d1:93:06:54:87:39:aa:89:62:ae:0d:eb:ce:08:
cb:25:4b:c5:3b:6f:b8:07:d5:ba:4c:61:ba:22:60:
10:26:f9:f2:b4:7e:77:5e:ff:1f:65:c8:f9:7d:81:
f0:3b:ed:00:6e:b1:84:ba:19:12:70:6b:b5:22:f5:
0e:bb:29:a8:e1:a1:46:b5:6a:b3:4c:2a:62:c1:e1:
d4:84:0b:b7:70:5d:86:00:2a:21:d9:5f:c5:da:09:
18:60:64:e2:8e:bc:f6:3f:4c:d1:1f:b7:4f:2b:fe:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C4:4D:A5:5F:0E:40:98:4D:7B:45:C8:7A:F8:80:BA:3D:AD:8B:6B
X509v3 Authority Key Identifier:
keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:61:84:45:29:74:47:1a:c1:5e:d6:44:18:e7:c8:43:5a:
4d:3f:14:6b:aa:39:87:50:97:42:ec:15:80:84:ef:5c:16:43:
2b:80:7d:d2:41:e8:87:fe:1a:06:63:90:81:fa:a9:88:28:0a:
39:2e:d2:6b:cf:69:cd:8b:cb:4c:8c:9f:e0:2d:6c:03:e8:cb:
a3:9d:f4:25:52:51:6e:63:bc:54:fe:f0:ce:d5:69:05:4c:3a:
cb:05:53:ac:55:a2:0e:a5:14:62:07:fb:4c:a0:72:1e:32:b2:
35:d7:99:1b:d8:ef:b5:64:f1:4c:ad:ff:c6:d0:5f:fb:5f:2a:
a8:76:cd:eb:a6:e9:97:26:40:5f:2b:36:34:6c:3a:e7:61:52:
f7:db:70:ae:5f:77:e8:47:0f:17:29:31:ed:3e:b1:9d:8e:76:
3b:9b:3a:ee:6a:7f:43:71:e9:52:b3:3c:62:8e:5b:00:0c:bc:
a2:aa:81:8e:98:66:48:e5:b1:97:72:c2:29:cf:f2:84:a6:b4:
8c:93:f2:82:d3:31:e8:92:45:c0:f7:e3:37:88:c1:60:0a:56:
a0:57:ef:1b:14:78:ea:ec:ee:20:df:d2:6b:35:dc:de:a7:39:
ed:4e:e1:e3:a7:87:49:f6:bf:ea:72:af:15:67:20:3d:2e:44:
91:91:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:49:10 2026 by rpki-client