
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json)
Hash identifier: KQNg8TbhfnrQNnNbwLUlfrz7TAiCkMOIWD3B8sZPR98=
Subject key identifier: 1E:C0:3A:BD:2F:B5:3A:B6:AE:7E:73:ED:85:64:99:5D:1C:C7:3C:F8
Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41
Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
Certificate serial: 67A474C9DB6033837E74844B9C3ECFFF3A4CCC54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
Manifest number: 011F
Signing time: Sat 28 Feb 2026 06:11:58 +0000
Manifest this update: Sat 28 Feb 2026 06:06:58 +0000
Manifest next update: Tue 03 Mar 2026 14:17:58 +0000
Files and hashes: 1: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=)
2: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: jGcRJ+ZXYcuoVAb0HzARZCjSNFAS4FjoDR+BNXdc9zs=)
3: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl
rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 14:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a4:74:c9:db:60:33:83:7e:74:84:4b:9c:3e:cf:ff:3a:4c:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
Validity
Not Before: Feb 28 06:06:58 2026 GMT
Not After : Mar 3 14:17:58 2026 GMT
Subject: CN=1EC03ABD2FB53AB6AE7E73ED8564995D1CC73CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:92:89:be:28:bd:79:f0:bf:d7:13:0b:41:
e0:4c:c3:eb:88:1b:e8:1d:77:dc:b2:be:ac:0e:c1:
c5:23:58:92:7d:20:11:24:21:8c:5f:43:29:df:15:
e7:cd:7d:6c:c5:f5:69:2b:52:f6:ab:1d:e8:12:60:
03:45:f8:3c:9a:67:1d:62:5d:b6:2d:8d:f0:ad:97:
2f:e3:df:bc:18:6a:f6:5b:f7:2b:7b:9b:f0:53:7f:
92:19:58:b8:c2:5d:aa:7c:1c:77:8d:23:cd:46:25:
3f:f7:3c:1c:11:fd:af:5c:b2:1e:95:ab:e7:c6:97:
70:db:a4:34:a5:e8:8f:53:bc:ee:dc:3b:2f:06:a2:
6a:f5:db:cb:6f:b7:90:37:4b:c4:a6:0e:3d:a5:52:
aa:29:fb:5a:78:50:1c:5b:e5:e2:e0:7e:1e:f9:ad:
08:d5:ce:a1:12:96:74:b4:62:ac:c0:b9:f5:28:cc:
25:a6:33:53:dc:73:b4:76:55:96:3c:fe:0e:62:df:
42:f3:32:7d:8b:c3:c8:4e:0e:fb:bd:65:dc:8f:3b:
07:7e:7c:19:1c:39:7c:1e:88:df:7a:75:ea:87:c7:
41:68:e1:a6:42:6e:64:f8:54:02:74:4c:55:d1:04:
0a:15:6e:97:94:79:9a:db:5f:bc:b7:48:0c:ff:27:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C0:3A:BD:2F:B5:3A:B6:AE:7E:73:ED:85:64:99:5D:1C:C7:3C:F8
X509v3 Authority Key Identifier:
keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9a:ff:73:60:a7:c6:68:c6:71:ca:10:0c:57:58:48:6e:51:
43:e5:12:40:e3:41:cc:6c:25:17:32:7b:54:02:46:da:2d:aa:
ec:9d:b2:e0:47:2f:9b:bf:22:60:76:0f:29:bc:84:ca:e9:d0:
e8:d5:22:58:bd:ed:44:3c:27:59:8e:0c:ac:39:b8:4c:d2:ff:
67:2c:32:26:07:46:e8:5e:9f:3a:14:45:3b:89:c7:00:e2:c2:
9b:c5:be:bc:2d:4a:93:12:07:c2:78:03:49:36:3c:ec:a9:23:
71:7c:30:93:ed:9e:e2:65:84:84:a6:79:e1:94:6c:ab:69:93:
4e:f6:04:ca:b4:6d:c7:30:a8:fb:91:62:89:5c:79:7c:91:9a:
86:b4:3a:09:89:d4:6b:d3:93:cc:ad:5a:f6:f1:b2:57:b8:1f:
ff:e3:7c:81:62:06:ff:59:68:09:cd:52:80:a4:74:dd:31:ce:
e2:e4:13:a2:50:25:1c:cb:3b:3b:06:9c:87:29:c7:cb:d0:d2:
3e:f5:01:b3:04:e6:2a:77:e5:69:51:7d:a2:f2:39:ff:82:d1:
9b:77:d2:a3:c4:86:0e:d1:12:0a:51:92:22:d4:82:ca:2a:13:
5f:94:6e:82:17:8c:b7:6c:74:58:e3:1a:78:dc:cc:f1:26:90:
95:a2:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:20 2026 by rpki-client