
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft
File: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft (raw, json)
Hash identifier: H9W6vbUUGyf5UqOK5VsO7FTmHvIRfv9avcvLxRYg0F8=
Subject key identifier: CE:84:59:82:4E:15:70:07:09:E2:87:73:7E:E2:C6:6C:6C:83:ED:E1
Authority key identifier: BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45
Certificate issuer: /CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745
Certificate serial: 4E53CA0D2CA13BCE17C14E73F9C83DBD53AD4144
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft
Manifest number: C6
Signing time: Mon 28 Sep 2026 11:54:26 +0000
Manifest this update: Mon 28 Sep 2026 11:49:26 +0000
Manifest next update: Tue 29 Sep 2026 15:48:26 +0000
Files and hashes: 1: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl (hash: AF246dTdY4z5IC8VC7oY0n/jxNLKyTT2G2Ns7E+phJc=)
2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: Ss8Z74NcLd0rpIK/JHzU1301o8kGJWxsqzL+GJXa3z0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl
rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 08:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:53:ca:0d:2c:a1:3b:ce:17:c1:4e:73:f9:c8:3d:bd:53:ad:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745
Validity
Not Before: Sep 28 11:49:26 2026 GMT
Not After : Sep 29 15:48:26 2026 GMT
Subject: CN=CE8459824E15700709E287737EE2C66C6C83EDE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:bf:f6:2b:24:9e:ca:2c:a3:62:9f:f7:a6:
25:64:a7:0d:1b:02:ff:8e:8b:97:f5:6e:96:d9:f9:
31:03:f7:17:04:28:c6:78:45:be:8f:eb:d4:c9:cf:
b9:d2:64:5c:d0:10:a3:cd:7e:80:9b:a2:62:ae:48:
e6:66:35:8e:f9:ff:c1:6e:52:27:ee:44:bf:02:ba:
61:2c:d4:44:74:1d:08:ec:22:2f:35:c0:8b:81:49:
14:ed:46:18:4f:48:34:50:35:44:30:d8:4f:fb:99:
75:35:f2:aa:5c:97:03:83:67:80:de:a9:1a:ce:4d:
2b:8f:11:cf:60:e0:7d:5b:65:cd:40:4c:8f:89:01:
1a:90:b6:4f:84:f4:3d:af:b1:ea:7d:21:25:b9:2f:
ee:ae:2f:09:1b:d6:17:42:12:2f:e3:23:8e:8d:d6:
f3:ab:57:4c:dd:72:05:ee:b9:27:b2:40:45:e8:e5:
ac:03:cf:57:5e:21:0b:c7:73:98:e7:b9:2b:dc:18:
1e:98:60:a3:84:91:83:cf:ef:89:ee:86:52:74:93:
9d:a8:f7:fb:31:2f:dd:f0:06:7d:1c:26:5e:3b:26:
47:64:ad:21:93:d9:fa:3f:d3:c3:2a:59:f2:1d:f5:
00:db:7e:53:71:a7:fa:31:88:78:e2:b1:f7:dd:a3:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:59:82:4E:15:70:07:09:E2:87:73:7E:E2:C6:6C:6C:83:ED:E1
X509v3 Authority Key Identifier:
keyid:BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:1d:6e:f9:83:42:53:1e:ed:87:86:64:a4:9b:d4:d7:85:
57:27:a8:b5:29:6b:19:aa:9f:85:95:d9:42:ee:75:8d:bc:9e:
6d:68:1f:ab:f0:bf:37:38:9e:cf:df:1b:20:8b:75:42:d9:1e:
9e:34:86:ec:68:d1:60:77:80:2c:c2:4b:5a:37:81:3f:d2:20:
ed:29:ea:e6:e8:6c:40:d8:c7:47:66:ce:70:72:fb:96:cf:2f:
c7:f0:e8:9b:60:e5:31:c1:f1:c6:87:9d:a2:07:33:7b:9f:2d:
61:eb:7b:88:d1:84:3c:79:de:67:ac:41:19:7f:49:77:f4:47:
41:e8:d4:f9:ee:d7:6c:82:08:cf:de:b8:eb:b7:94:1b:b6:49:
ef:8f:29:b3:c3:e4:81:06:ee:ee:5e:53:e5:51:ac:9e:ab:62:
99:2e:d4:a5:bb:b8:91:35:a8:67:69:9b:8b:8d:90:8b:9a:20:
54:31:84:87:3e:df:1c:2e:3a:5f:76:d8:59:5a:50:b1:d6:f5:
3e:7f:ea:0d:4e:5f:68:d1:66:73:dc:f2:1b:0f:bc:ef:e2:7f:
ff:10:34:7b:49:aa:92:c4:20:ef:20:4e:43:10:21:27:70:53:
d5:59:c9:d3:4f:e3:2e:be:66:e7:bf:a2:1b:16:25:2f:38:f0:
ca:69:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:41:41 2026 by rpki-client