
$ rpki-client -vvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
File: BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json)
Hash identifier: RoYsG6Y/ku/dWcAJnVQWxzQiEHCOyVPvdUuTPEeJafg=
Subject key identifier: 75:6B:9D:F6:1C:46:30:6F:04:86:67:9E:BA:59:06:FD:B9:2C:7A:B2
Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20
Certificate issuer: /CN=BE674235014841C34B81D477A887E851CCB5DE20
Certificate serial: 30E1B69B3F839FE9C90629C6A094F940C4FF9475
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 13:31:03 +0000
Manifest this update: Sat 13 Jun 2026 13:26:03 +0000
Manifest next update: Sun 14 Jun 2026 14:16:03 +0000
Files and hashes: 1: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=)
2: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=)
3: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: J3WG1MXSe/SlfI1BeT3BoQ9UyLnUGlkLHQ7DE7F/YQU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl
rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e1:b6:9b:3f:83:9f:e9:c9:06:29:c6:a0:94:f9:40:c4:ff:94:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20
Validity
Not Before: Jun 13 13:26:03 2026 GMT
Not After : Jun 14 14:16:03 2026 GMT
Subject: CN=756B9DF61C46306F0486679EBA5906FDB92C7AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:3e:64:6d:5c:0a:d1:10:03:5e:b0:d8:f7:
b3:a7:fc:fa:5c:7f:63:b6:0c:ea:79:77:16:4c:82:
de:7b:d5:ab:49:ea:d5:c3:2f:67:5a:2d:10:4c:ca:
13:a0:44:ea:c4:de:69:4d:29:34:05:f1:39:a1:ed:
a3:7c:11:19:4f:24:7f:7a:07:23:0d:c2:f5:dd:8a:
ee:99:bb:f2:95:d6:31:b2:31:44:33:83:59:99:24:
c2:95:4f:e7:b4:4e:63:8f:de:ac:3a:ba:3c:ef:e2:
0e:a0:91:a9:47:5b:83:2d:0d:03:68:46:00:42:72:
50:4b:13:93:d7:9d:a1:1f:d6:b9:e0:08:5c:4f:0a:
a4:ac:e1:96:73:9f:0e:70:20:df:64:c0:54:12:7a:
79:08:f3:36:e8:cd:78:05:b0:b8:74:76:5f:25:16:
ce:5b:70:db:44:a3:5c:71:07:07:20:ee:ff:5f:8c:
1a:bb:86:e8:b2:ef:f5:a6:55:dd:00:37:c7:eb:0e:
de:c6:84:c2:bb:1d:68:8c:88:bf:61:c1:c3:52:4d:
10:c8:53:5a:8f:53:e5:1b:2f:c1:b9:f1:14:d9:11:
ee:ed:f4:c7:97:09:b9:bd:b9:62:d5:1d:32:32:42:
d3:59:d9:05:85:ec:06:44:2a:67:c5:9e:e8:c8:7a:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6B:9D:F6:1C:46:30:6F:04:86:67:9E:BA:59:06:FD:B9:2C:7A:B2
X509v3 Authority Key Identifier:
keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:69:f9:a9:20:8e:87:03:eb:70:05:8c:68:29:45:e1:39:7a:
8f:ef:b6:b9:88:15:53:f0:dd:35:bc:90:c8:4b:36:7e:cb:69:
60:38:6f:24:7e:75:b7:d2:b3:ea:7e:31:34:a9:8b:f2:17:c8:
0c:0c:12:bc:f8:10:e7:93:c1:ec:1c:d0:dd:cd:7c:97:08:b9:
33:5f:72:0d:6c:9b:11:d0:5e:1c:e8:5e:01:80:6d:c6:19:18:
c4:79:1a:e9:0a:0f:06:6d:90:e3:a8:af:63:01:3e:74:f8:d8:
a1:59:83:11:eb:f3:27:30:ca:de:eb:16:96:92:8d:6f:76:d1:
5c:91:b5:69:1b:e9:b5:10:5c:96:c4:9e:b6:ce:f9:ff:2e:88:
7c:ac:37:89:60:b6:18:4b:8c:4f:5e:7c:c0:fc:96:ac:8e:3e:
af:50:5b:d0:90:b5:d6:c9:00:30:ed:77:ff:be:ce:f8:6a:23:
1a:d9:01:4a:ee:13:ec:6d:52:ac:37:c8:f5:0b:a6:fe:36:c4:
15:73:79:f9:7b:bf:b9:a6:07:9b:bc:eb:2e:d7:32:a9:20:06:
d0:0b:dd:70:22:0c:92:a0:dd:72:f8:54:49:0d:96:af:b3:cb:
5b:3f:a2:b2:e0:1c:ac:02:a5:7a:7f:e5:0f:b1:6c:a5:00:c5:
fb:4f:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:03:12 2026 by rpki-client