
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json)
Hash identifier: ZKQQW4sjeRhVSsZ0J/s9/X4hDcwDNjr2qYyf/qjU2b0=
Subject key identifier: DC:C0:8A:A0:1F:17:AB:9E:AA:9F:57:C9:F4:9D:02:15:0E:2A:75:74
Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Certificate serial: 52F74ADFFAA2BC4C33A28FF6658BE5400432EAAD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 13:20:50 +0000
Manifest this update: Sat 13 Jun 2026 13:15:50 +0000
Manifest next update: Sun 14 Jun 2026 15:29:50 +0000
Files and hashes: 1: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=)
2: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=)
3: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=)
4: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=)
5: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: KHzU34Z6Th8sxldnp/zil/muy/UWSgAfYR84LpWzXEk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f7:4a:df:fa:a2:bc:4c:33:a2:8f:f6:65:8b:e5:40:04:32:ea:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Validity
Not Before: Jun 13 13:15:50 2026 GMT
Not After : Jun 14 15:29:50 2026 GMT
Subject: CN=DCC08AA01F17AB9EAA9F57C9F49D02150E2A7574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:02:23:fd:73:23:8b:8a:45:0e:e1:f6:a2:
79:7e:c1:8e:38:10:d6:78:9c:6b:dd:25:42:15:22:
ab:83:5a:f5:c5:b9:44:8a:5e:0a:96:bf:fc:79:f2:
64:6f:7d:06:5c:eb:70:43:76:81:ab:6f:5c:34:79:
00:56:fa:9a:0a:d4:0f:cd:f2:0f:66:53:49:f8:4d:
b6:f2:89:ba:ff:57:46:be:b0:32:9b:92:4e:07:1f:
33:30:49:6f:bb:56:f0:f2:c6:21:fc:c1:18:06:45:
5d:dc:1e:c2:dd:ca:2b:fb:cf:15:17:f8:db:f4:88:
17:eb:64:3a:12:75:78:df:d0:e6:ac:3b:3d:e8:3e:
53:55:33:74:72:98:cd:e0:c8:a5:8a:eb:f9:ad:b4:
26:06:49:fe:ed:06:47:f7:d8:67:da:83:da:ba:29:
41:ce:7e:c5:a6:f8:f4:ad:7c:d8:56:68:67:6f:3f:
f3:84:f7:e4:4d:24:a6:f4:7c:11:ea:ff:64:31:71:
1b:36:17:fd:8c:32:52:33:02:f0:13:f8:be:d8:ad:
f0:79:3b:dd:30:7c:18:94:c8:9e:20:49:1d:d5:17:
e5:3c:f2:df:5d:62:97:6c:e6:4f:b1:ba:d1:c9:4e:
6e:1d:f8:14:46:2a:9d:47:ad:fe:86:0c:ff:fb:e7:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C0:8A:A0:1F:17:AB:9E:AA:9F:57:C9:F4:9D:02:15:0E:2A:75:74
X509v3 Authority Key Identifier:
keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cf:81:f4:5e:1a:c6:b4:39:39:be:ee:e0:bd:7e:df:77:98:
a8:76:2b:cc:ae:1f:fc:07:f1:c8:3e:0b:7f:4a:c5:45:2f:85:
ce:ff:a1:12:3e:e3:c1:2a:12:1d:ec:8c:c4:52:8b:f5:6f:4f:
2b:d9:d0:76:89:33:b0:4d:c6:62:bc:fe:84:ef:2d:17:73:c2:
27:83:21:a6:2b:13:87:90:76:87:70:47:ad:43:e9:6c:cd:4e:
66:4e:78:5c:fb:5e:82:e9:bf:73:65:2d:31:54:3d:04:e5:8d:
5c:46:a2:ea:dc:f4:1c:53:08:37:2d:1c:68:8e:a8:f1:42:06:
b8:ca:8e:60:21:26:3b:fb:71:c5:b0:77:70:e2:5f:3a:e8:4e:
da:d2:75:75:ab:07:3d:30:6b:15:b6:42:32:5a:e9:14:8e:ce:
3d:f4:54:1d:e8:72:8b:34:52:3c:34:2f:67:3e:d0:a0:2d:ae:
50:d7:39:e2:49:59:73:7e:be:b3:7e:a3:b3:83:5c:38:8e:87:
8e:89:50:07:87:34:9f:6f:44:ca:73:05:f9:0c:b9:97:65:28:
09:16:d8:00:03:74:ef:c2:9c:25:d4:eb:7a:0b:9c:ca:ba:e3:
c3:ec:cc:fe:7c:8c:35:2b:dd:67:92:1d:49:bd:92:01:d8:56:
7f:4a:f4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:33 2026 by rpki-client