$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: igRdkY3Wz3Sg0leYg4kFsT1pUt2OjoBXkpFdiV5wt8A= Subject key identifier: B5:6D:11:DE:58:8B:DE:FC:7F:5C:B3:EE:AD:93:49:51:42:91:B4:34 Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 5946AA454D1CFD63120F56136D9E37EE4D4A6D98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 051D Signing time: Sun 01 Mar 2026 04:11:26 +0000 Manifest this update: Sun 01 Mar 2026 04:06:26 +0000 Manifest next update: Wed 04 Mar 2026 12:35:26 +0000 Files and hashes: 1: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=) 2: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: 8Z8kzSXAasNBGsBab2ssPVUSq8zpXxEBBx8FuXh3MOU=) 3: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=) 4: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:46:aa:45:4d:1c:fd:63:12:0f:56:13:6d:9e:37:ee:4d:4a:6d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Mar 1 04:06:26 2026 GMT Not After : Mar 4 12:35:26 2026 GMT Subject: CN=B56D11DE588BDEFC7F5CB3EEAD9349514291B434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:7a:5d:8a:be:a8:fc:5b:da:d9:0a:84:90: 0f:13:73:27:1a:d4:84:14:1f:d2:a0:a5:fc:61:5d: d7:a0:de:d1:e5:7d:bf:02:18:95:94:43:3e:32:f9: b8:42:8f:cc:5e:c4:b6:b6:c6:23:1d:f4:17:8f:bf: 24:c7:75:aa:1e:1b:f7:a9:08:d7:28:be:f7:31:32: 25:2b:68:73:f4:45:1c:cb:f3:e4:6f:41:c7:1a:8d: b2:5c:45:05:3e:ec:46:b1:45:5f:cb:7c:ce:f9:65: 0d:e2:e3:43:85:bd:11:e4:9b:eb:75:6b:54:5e:ac: c0:89:09:6d:fa:53:52:e4:f9:ab:f7:cd:73:33:e7: 66:e6:f6:c2:1e:6f:3d:48:10:10:9a:89:92:65:34: 1d:67:87:fd:bf:c1:0f:60:47:82:2f:1d:cb:43:8d: af:28:b3:22:12:0e:ee:68:14:be:9e:cd:a2:b2:78: 0f:a8:28:a2:08:29:c9:f1:64:c1:5c:e5:12:5f:c4: e7:e2:0c:cb:40:30:c6:ec:7e:0b:12:d2:8d:9e:94: f0:96:fe:03:65:ba:9e:f3:7c:c9:02:76:9f:ef:51: a4:08:18:95:10:3f:3e:24:e8:bf:30:97:f8:30:b8: 44:0a:38:3c:53:84:a9:36:6b:62:65:8f:bf:87:f0: 34:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6D:11:DE:58:8B:DE:FC:7F:5C:B3:EE:AD:93:49:51:42:91:B4:34 X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:12:e8:66:62:70:8b:0e:25:7b:2c:9b:2d:c5:62:d7:86:4a: 6e:e7:b6:64:46:9b:da:a8:c9:fe:c6:9f:c8:6e:f1:8b:3e:50: ad:70:8e:08:87:42:18:8e:b6:5b:8c:1f:c1:0b:ee:a9:c7:e9: 59:51:5d:69:d0:e3:96:2d:a9:5d:1f:68:d4:1c:52:bb:31:e1: 18:84:ae:77:31:04:c3:e0:3d:2a:1c:94:c9:e3:6a:75:e9:e2: eb:b5:da:8b:05:fc:e5:33:56:d8:28:13:b1:54:6a:67:65:e8: f2:8e:ff:4f:ff:c4:1a:71:50:97:c1:62:d2:dc:52:ab:16:16: f7:b9:03:31:7b:60:4e:6e:09:c8:58:45:68:eb:9f:e9:1c:16: c5:92:da:dd:e9:ab:ed:5b:79:c5:04:51:75:ac:1b:1d:0c:2d: 3f:45:05:3d:ff:ff:02:ca:62:6b:0d:b4:e1:e2:1f:d9:c6:7a: fa:ff:e1:e0:5e:f9:ed:ae:08:4e:d6:d8:61:61:0d:4e:3c:79: 14:15:bc:b9:ed:5c:22:da:33:24:d4:4b:91:40:be:c1:34:be: fb:48:38:99:0c:d7:60:ef:7d:44:00:2c:f3:fd:aa:2e:82:ad: 13:05:9c:0b:e8:fa:7e:0a:b5:1b:54:62:5a:52:3c:86:97:9f: 5f:fc:6a:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUaqRU0c/WMSD1YTbZ437k1KbZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNjAzMDEwNDA2MjZaFw0yNjAzMDQxMjM1MjZaMDMxMTAvBgNV BAMTKEI1NkQxMURFNTg4QkRFRkM3RjVDQjNFRUFEOTM0OTUxNDI5MUI0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUXpdir6o/Fva2QqEkA8Tcyca 1IQUH9KgpfxhXdeg3tHlfb8CGJWUQz4y+bhCj8xexLa2xiMd9BePvyTHdaoeG/ep CNcovvcxMiUraHP0RRzL8+RvQccajbJcRQU+7EaxRV/LfM75ZQ3i40OFvRHkm+t1 a1RerMCJCW36U1Lk+av3zXMz52bm9sIebz1IEBCaiZJlNB1nh/2/wQ9gR4IvHctD ja8osyISDu5oFL6ezaKyeA+oKKIIKcnxZMFc5RJfxOfiDMtAMMbsfgsS0o2elPCW /gNlup7zfMkCdp/vUaQIGJUQPz4k6L8wl/gwuEQKODxThKk2a2Jlj7+H8DSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtW0R3liL3vx/XLPurZNJUUKRtDQwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgS6GZicIsOJXssmy3FYteGSm7ntmRGm9qo yf7Gn8hu8Ys+UK1wjgiHQhiOtluMH8EL7qnH6VlRXWnQ45YtqV0faNQcUrsx4RiE rncxBMPgPSoclMnjanXp4uu12osF/OUzVtgoE7FUamdl6PKO/0//xBpxUJfBYtLc UqsWFve5AzF7YE5uCchYRWjrn+kcFsWS2t3pq+1becUEUXWsGx0MLT9FBT3//wLK YmsNtOHiH9nGevr/4eBe+e2uCE7W2GFhDU48eRQVvLntXCLaMyTUS5FAvsE0vvtI OJkM12DvfUQALPP9qi6CrRMFnAvo+n4KtRtUYlpSPIaXn1/8avk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:58:52 2026 by rpki-client