$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: kCrjMDvvJHSHtIv/R+zgh4iftophy83rHsk+6j+i6go= Subject key identifier: 4A:07:CC:53:91:9E:BF:AB:F0:9A:A2:7A:93:B7:5C:C6:86:E2:B0:C4 Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 63B6E3C0656419EE41218B6C124845A86D0E7055 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 04DA Signing time: Mon 02 Mar 2026 00:12:17 +0000 Manifest this update: Mon 02 Mar 2026 00:07:17 +0000 Manifest next update: Thu 05 Mar 2026 06:27:17 +0000 Files and hashes: 1: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) 2: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) 3: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) 4: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) 5: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: 7zxFYLGDuBF3AxT3o/xSdZr0PechWm64aQJVZsDAt7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b6:e3:c0:65:64:19:ee:41:21:8b:6c:12:48:45:a8:6d:0e:70:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Mar 2 00:07:17 2026 GMT Not After : Mar 5 06:27:17 2026 GMT Subject: CN=4A07CC53919EBFABF09AA27A93B75CC686E2B0C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:2c:b0:44:fe:20:99:13:37:d5:36:86:80: ff:4e:40:62:34:90:bd:72:db:6b:52:0e:b5:74:f8: ab:c3:d0:8a:10:09:b1:48:58:cf:36:d6:b1:83:4e: 0e:0e:cc:13:e7:49:e0:af:d5:13:61:b2:fb:5c:08: c7:64:39:cb:d3:54:a2:5e:51:fe:9d:57:c8:d0:b8: de:3a:70:c0:40:ec:e7:06:83:6f:fb:c5:33:c2:d2: 63:e5:e0:59:f5:61:5c:95:ba:40:93:e7:2a:f5:ed: 3b:21:cb:dd:43:d2:72:df:6d:a9:7f:ea:38:fe:07: f7:3f:b9:e8:2d:9d:b2:3c:82:70:b6:70:80:cc:2a: ca:b8:71:98:8b:27:f1:56:7c:29:99:66:b2:e6:83: bb:f8:ea:b1:d2:34:e5:c0:80:b5:c0:7a:e9:48:b2: 21:81:1e:1a:85:88:c9:58:e2:ae:49:14:52:cd:63: 39:02:b7:dd:cb:9d:19:db:9a:12:a5:0d:b1:dd:7a: ca:41:8a:a3:43:88:23:bb:0c:8f:40:2e:80:4f:1f: 72:ef:33:c2:cf:a4:ba:6c:5a:ba:c7:92:a2:87:c5: f7:41:02:01:95:46:2a:11:20:27:2b:8f:37:02:fb: da:ea:f6:55:74:fb:64:d7:0a:da:55:b4:14:df:21: 41:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:07:CC:53:91:9E:BF:AB:F0:9A:A2:7A:93:B7:5C:C6:86:E2:B0:C4 X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a3:02:fc:fb:0a:7c:b3:9e:24:9c:bc:a7:c7:d9:56:00:12: 18:29:af:4c:82:d9:34:33:d6:35:61:bf:9d:44:c6:e8:a1:ad: 03:f8:0e:6e:e4:76:de:75:d0:3f:ea:53:5e:1e:7c:fe:bb:ce: 6e:75:88:d7:e4:cb:60:cc:40:ff:9f:ac:ab:ad:ec:5e:45:69: 8d:41:78:22:ba:7e:cc:85:d1:59:6f:98:a7:77:39:e1:5e:47: da:21:a4:0a:c7:59:d5:b4:9f:79:03:76:e2:fd:a5:db:0e:29: a6:f3:7d:11:d5:a1:95:04:50:a0:9d:27:4a:f8:d6:77:ac:7c: bd:91:05:42:e2:8b:36:6c:75:2e:de:2d:e7:62:30:35:60:1e: f6:4b:d9:c1:e0:a0:d9:97:05:99:e9:58:51:7b:d6:1f:45:59: 4c:f5:f9:45:c6:90:c4:6c:9c:58:63:63:1f:ae:50:9d:86:bb: 40:6c:b9:31:9a:aa:a0:95:25:8d:05:a1:d7:97:28:0c:7b:c4: 96:77:fb:02:c1:d3:30:0c:70:b2:5f:f4:1f:a7:23:81:28:89: 5f:db:d6:96:1e:c0:72:9f:45:94:52:37:2d:ee:42:4f:4b:fd: c4:e9:94:f2:c9:d2:20:fc:c0:34:dc:61:34:39:c7:b7:cd:5c: 1d:eb:56:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7bjwGVkGe5BIYtsEkhFqG0OcFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNjAzMDIwMDA3MTdaFw0yNjAzMDUwNjI3MTdaMDMxMTAvBgNV BAMTKDRBMDdDQzUzOTE5RUJGQUJGMDlBQTI3QTkzQjc1Q0M2ODZFMkIwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4SywRP4gmRM31TaGgP9OQGI0 kL1y22tSDrV0+KvD0IoQCbFIWM821rGDTg4OzBPnSeCv1RNhsvtcCMdkOcvTVKJe Uf6dV8jQuN46cMBA7OcGg2/7xTPC0mPl4Fn1YVyVukCT5yr17Tshy91D0nLfbal/ 6jj+B/c/uegtnbI8gnC2cIDMKsq4cZiLJ/FWfCmZZrLmg7v46rHSNOXAgLXAeulI siGBHhqFiMlY4q5JFFLNYzkCt93LnRnbmhKlDbHdespBiqNDiCO7DI9ALoBPH3Lv M8LPpLpsWrrHkqKHxfdBAgGVRioRICcrjzcC+9rq9lV0+2TXCtpVtBTfIUElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSgfMU5Gev6vwmqJ6k7dcxobisMQwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6jAvz7CnyzniScvKfH2VYAEhgpr0yC2TQz 1jVhv51ExuihrQP4Dm7kdt510D/qU14efP67zm51iNfky2DMQP+frKut7F5FaY1B eCK6fsyF0VlvmKd3OeFeR9ohpArHWdW0n3kDduL9pdsOKabzfRHVoZUEUKCdJ0r4 1nesfL2RBULiizZsdS7eLediMDVgHvZL2cHgoNmXBZnpWFF71h9FWUz1+UXGkMRs nFhjYx+uUJ2Gu0BsuTGaqqCVJY0FodeXKAx7xJZ3+wLB0zAMcLJf9B+nI4EoiV/b 1pYewHKfRZRSNy3uQk9L/cTplPLJ0iD8wDTcYTQ5x7fNXB3rVgA= -----END CERTIFICATE-----Generated at Mon Mar 2 07:48:56 2026 by rpki-client