
$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json)
Hash identifier: JFWiHY6LZuY4R7dZuIsIGvXrPjS8cxs+4YqyskK32gE=
Subject key identifier: CD:14:FC:02:EC:65:0F:2F:26:26:06:64:AC:3F:BF:50:A4:BA:10:5B
Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4
Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4
Certificate serial: 515A39CB1ABF0ECAE3BC828B2A3AC8853B39450C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
Manifest number: 04FC
Signing time: Thu 16 Apr 2026 15:41:19 +0000
Manifest this update: Thu 16 Apr 2026 15:36:19 +0000
Manifest next update: Sun 19 Apr 2026 21:35:19 +0000
Files and hashes: 1: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: /4dp4UoCOcPEY4HSVxYvOGXZwi1u0keYRiAGWkqtc8M=)
2: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: 5crcrbB/LN7ILCPXkvbBRWMtAP/t3GajDPBToG3xT7s=)
3: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: g+ewJ+/FWnlKat+gPQr1tVTj8PjlEaEamMvWQs+8H98=)
4: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=)
5: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl
rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 21:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:5a:39:cb:1a:bf:0e:ca:e3:bc:82:8b:2a:3a:c8:85:3b:39:45:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4
Validity
Not Before: Apr 16 15:36:19 2026 GMT
Not After : Apr 19 21:35:19 2026 GMT
Subject: CN=CD14FC02EC650F2F26260664AC3FBF50A4BA105B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:2b:cf:58:05:d7:48:d5:96:ea:4f:33:8d:
cf:e8:49:ac:b8:68:56:36:54:4b:85:fa:a4:fe:a4:
2f:69:c2:de:87:57:39:68:dd:cf:49:a4:87:8c:39:
49:be:d4:07:fc:f3:36:6f:9a:5e:f0:fc:6b:8f:14:
8a:e8:fb:b6:44:90:b1:d3:ce:89:c9:e6:3a:4f:48:
8c:43:08:30:18:e6:9c:1b:0e:87:fe:b8:5a:98:7e:
d4:b2:6e:87:07:8c:0b:80:7c:19:78:48:6e:d0:14:
33:e1:7c:d0:45:33:39:2a:ca:e8:45:b5:33:d1:cf:
53:8e:57:d3:79:23:22:94:c8:ba:97:a5:f9:14:57:
a8:15:80:ea:3b:bf:53:f8:19:42:9b:40:4c:8f:7d:
de:00:73:fe:9d:cc:a7:a8:1d:44:b3:89:ed:58:47:
62:25:cc:c0:1a:98:8d:4c:0b:1a:c6:7c:72:83:ac:
f1:15:e5:99:10:31:d0:2f:91:e1:94:50:20:98:76:
e7:dc:5d:6a:25:fd:b7:6a:fd:56:b6:98:2a:91:73:
b8:f8:42:c7:af:db:f1:09:ea:bb:c4:1c:27:da:29:
6a:4b:c2:71:78:5b:7b:30:af:79:08:75:6d:e0:cc:
ca:c6:2c:10:df:7f:14:44:0f:02:68:25:e8:73:00:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:FC:02:EC:65:0F:2F:26:26:06:64:AC:3F:BF:50:A4:BA:10:5B
X509v3 Authority Key Identifier:
keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:59:2f:51:50:62:4c:21:dc:b5:0a:ea:fa:c7:1c:65:7f:6c:
5c:ec:3d:e6:05:31:e5:ee:a4:dc:ec:5c:03:98:4d:f5:20:63:
74:02:45:8b:5a:80:0d:48:ea:d1:3a:11:e2:e1:02:60:2c:f6:
69:bb:90:09:f4:52:e8:bb:d1:11:07:a9:47:32:30:c6:57:ce:
fa:a3:88:1f:7a:bf:46:cb:7b:d9:94:c9:41:74:2b:50:4b:83:
6d:7c:7f:7c:1e:75:4d:18:b7:5b:77:ec:08:01:fe:26:18:60:
d2:c3:69:d5:08:2f:3e:31:5e:5d:62:1c:ba:f2:8f:12:16:ec:
2c:5b:d8:6b:f6:6b:20:b6:ab:46:ac:a2:1a:db:30:c1:57:3c:
9d:ba:50:e4:36:f9:e3:00:0d:16:f3:af:ad:30:2b:ee:4d:07:
1c:b0:74:83:cd:f7:47:00:44:af:e8:cb:79:05:e3:67:6e:02:
22:b2:b9:5c:53:c0:cf:a4:56:80:37:6f:6c:7f:61:0a:ff:93:
17:e8:9f:ab:22:f5:57:37:e4:18:8f:b6:4a:58:07:0f:24:4c:
e8:ba:7f:b2:6e:22:69:3a:a1:f8:1e:6b:8d:ea:3e:44:54:cf:
a9:be:29:1e:19:d8:4e:57:bb:22:ba:7f:4d:b4:78:96:00:69:
a6:d3:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:35 2026 by rpki-client