
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
File: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft (raw, json)
Hash identifier: z1YJdA9wjNdQnlVF6F5MkYMwoszkPUxEntZEVp0ZAU4=
Subject key identifier: DD:CA:8E:80:2F:FC:41:AA:19:CF:DD:36:EB:60:7F:DA:FB:64:6C:24
Authority key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3
Certificate issuer: /CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3
Certificate serial: 089FAE69439E79E7F1051769EE83D4AF08BC99A8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
Manifest number: 43
Signing time: Fri 19 Jun 2026 22:58:46 +0000
Manifest this update: Fri 19 Jun 2026 22:53:46 +0000
Manifest next update: Sat 20 Jun 2026 23:44:46 +0000
Files and hashes: 1: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: u+9c9rKVTMexnUms/phLxZrmwAGKCx7eW2MRZawsvKg=)
2: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl (hash: nerrRaEB9ZFNfs0zipvGTwRo0mh8fzOB2BL4GJtHu6E=)
3: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: Od8V+mQHuU8EzMntRRnJoN07uXL+m/YOXljtK8BGjHw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl
rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 23:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9f:ae:69:43:9e:79:e7:f1:05:17:69:ee:83:d4:af:08:bc:99:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3
Validity
Not Before: Jun 19 22:53:46 2026 GMT
Not After : Jun 20 23:44:46 2026 GMT
Subject: CN=DDCA8E802FFC41AA19CFDD36EB607FDAFB646C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:15:e0:e7:19:c2:85:0b:bb:6d:7f:7d:0b:
da:0f:f4:60:84:76:4c:5a:00:dd:9e:33:08:24:7c:
b4:ed:26:56:57:a4:3b:0a:66:76:f8:fa:95:3d:8a:
aa:5c:38:28:19:b2:27:23:fe:f0:de:91:46:54:5a:
36:78:28:fc:ea:7c:9e:2a:b3:a2:cd:3d:a7:73:01:
45:25:ea:13:8c:12:74:41:57:fe:d4:ef:a4:ff:f7:
33:c6:39:af:90:e1:7e:c3:74:c3:22:2f:51:68:ba:
1f:11:77:54:fd:a0:dd:ae:3a:8e:12:62:6d:e5:61:
de:5c:2e:b4:87:d1:2d:a7:50:f2:d0:c6:54:d5:ce:
ef:33:2f:c7:f6:4b:23:df:16:d9:fa:38:be:f1:2c:
f0:1e:d2:26:5f:2c:3c:1b:8a:62:be:e1:42:51:a7:
a5:67:98:80:91:be:94:d9:72:ef:9a:d6:0b:c4:04:
bc:d3:0c:d2:db:a2:ff:51:5c:04:eb:76:82:e9:e9:
e1:b8:6c:45:18:3e:55:a0:53:c8:3b:e2:3c:52:86:
d3:cd:fc:a7:48:8f:9d:8b:9c:20:49:35:72:01:2f:
4e:8e:77:93:67:f3:0d:d3:83:b8:00:2c:d1:4d:28:
1e:97:f7:51:c9:4a:0e:be:b3:58:19:1c:c9:a2:c9:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CA:8E:80:2F:FC:41:AA:19:CF:DD:36:EB:60:7F:DA:FB:64:6C:24
X509v3 Authority Key Identifier:
keyid:BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:23:ac:bc:dd:6d:f1:c1:bf:be:78:97:92:e3:f8:e5:d8:
29:5a:27:75:b9:3f:0f:02:c2:ff:e6:03:f1:cc:83:d2:83:d9:
98:2e:5c:23:74:98:bc:10:8d:fb:40:85:4e:da:ab:77:eb:ea:
45:cd:e4:95:c1:12:1b:ba:3f:1c:50:5a:f3:c4:1a:6f:5a:70:
65:31:7e:6b:94:cf:e0:9d:f8:70:e0:97:83:d7:ef:dc:94:f5:
b7:1d:f1:9b:7d:ab:74:20:68:e6:83:5a:02:aa:07:eb:c6:51:
30:19:ab:59:f5:c9:ad:0a:6b:81:d4:a2:26:15:61:70:4d:8b:
13:63:77:53:9d:b2:4b:da:2b:2e:0e:22:c0:31:1e:6b:99:2f:
be:9d:8e:6e:59:43:c5:86:cb:d2:3c:5d:9e:0d:04:5f:be:f3:
2e:15:89:a2:80:e7:73:86:16:c2:fe:b6:b2:aa:6c:e2:eb:0e:
07:98:e8:b5:b6:fa:40:5c:c0:d5:af:2b:39:42:a4:da:c0:09:
1e:6d:67:d3:81:c5:d5:25:0d:f6:4f:2a:b5:16:84:08:08:49:
f5:d4:f7:33:d1:8d:05:fb:11:33:51:82:59:d4:b9:da:d6:8e:
a5:17:a9:5c:e1:16:0d:eb:35:0c:ff:ca:00:65:2b:d8:f7:b1:
fe:f9:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:17:17 2026 by rpki-client