
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
File: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft (raw, json)
Hash identifier: mAA/XYuvvbWdOdZ3QsdwY91HfuPFwK3R7qJJJWQPLIg=
Subject key identifier: EB:FE:2A:CE:DC:3A:4B:D5:1D:07:92:B0:8C:E1:57:C9:85:2F:99:3A
Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
Certificate issuer: /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Certificate serial: 0DB3C2FBCE6D857915B05607D77B4341583B4700
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 17:20:06 +0000
Manifest this update: Tue 16 Jun 2026 17:15:06 +0000
Manifest next update: Wed 17 Jun 2026 18:50:06 +0000
Files and hashes: 1: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: DKemgkGfRSsQDIb9t6Dxr8FxG7VecmyFhyl+wtA42dc=)
2: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: z6jlGimYEU42w1AAv4WTGHl72QqTJEBb6/46niNS0MM=)
3: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 55Pgfc5CdrPo/JwquxlSz80gSkyEAvnuVuTU02sK+3E=)
4: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 6P6QYPdFuq7LsAFOi2tnnEJSwJf9ZQyZm5LNXr5+r6s=)
5: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: vIEcjw77CIphQaDAYPHv49OItt3hihjyRmA9crPFzrg=)
6: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: Ep8qTK0NDLlbE6SNKdL/U9iSghCg+fI8OoOZxYByFbw=)
7: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: /sdcPpV2u273vAuDs0a3qzoz4mqv4YYBgqRWOUy8CPE=)
8: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl (hash: U8/2cgOJeYqEVJd7I6DErSarHII408p0xcyzWsJoj7Y=)
9: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: clpAyiJg+CNdKPltuUkUa0iDMohvDb510aZlE3T5fdM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b3:c2:fb:ce:6d:85:79:15:b0:56:07:d7:7b:43:41:58:3b:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Validity
Not Before: Jun 16 17:15:06 2026 GMT
Not After : Jun 17 18:50:06 2026 GMT
Subject: CN=EBFE2ACEDC3A4BD51D0792B08CE157C9852F993A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:bc:e7:fb:14:01:45:d0:24:1e:54:f8:8a:
b8:74:ae:f4:28:2a:5d:39:b0:08:9e:3f:e8:ba:c8:
97:a1:47:e1:e1:53:83:6d:eb:80:2a:b9:96:f0:ac:
6d:4b:0d:c9:df:f2:e9:04:37:ff:60:94:3d:db:5a:
12:b3:2c:92:fb:7d:6a:02:86:d1:3f:12:c1:2e:68:
0f:71:d2:23:de:aa:8a:16:45:f4:5a:93:4f:0e:ce:
d5:05:b7:fb:d0:a9:4e:29:68:c7:b0:4d:ac:d5:55:
48:9e:dd:a2:99:d7:2b:1e:9c:f2:e4:19:2f:aa:40:
9f:16:77:99:97:68:8b:65:17:e5:f2:b4:a2:c3:39:
44:b3:23:05:c1:15:64:3e:63:eb:8a:ed:fd:e3:c9:
af:5a:3d:65:41:6a:90:a5:3b:42:a3:31:4f:90:4c:
33:9f:31:34:03:73:63:39:64:09:d5:b9:77:2b:5e:
6b:05:d6:0b:1c:56:51:2c:26:25:56:2a:a4:f4:e1:
c5:f7:de:08:bc:07:95:4d:61:bb:3f:2a:45:25:24:
ea:5e:bc:1b:e7:1a:95:ca:10:34:75:60:9d:df:71:
0a:f9:9f:d9:f1:fd:ac:64:b2:cf:e3:a7:b6:17:16:
c7:43:3a:62:fb:c7:52:6c:c8:7e:2c:ea:54:f0:47:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:2A:CE:DC:3A:4B:D5:1D:07:92:B0:8C:E1:57:C9:85:2F:99:3A
X509v3 Authority Key Identifier:
keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ff:ac:38:34:1f:f7:bc:43:de:1f:41:7c:19:ea:a2:92:ea:
25:a2:19:3c:45:76:a9:b1:94:45:ef:99:80:c1:11:c0:e9:31:
3d:2d:af:1d:08:70:e1:1c:95:e6:a4:68:76:06:56:da:2b:44:
60:ad:81:40:f1:42:b3:41:b4:cc:2c:a0:bc:f0:75:40:9c:02:
bb:34:d6:e1:07:8e:ae:9e:e2:19:95:3c:89:55:82:04:06:f2:
16:de:01:36:b0:11:83:1d:db:de:98:63:ee:af:1b:be:1b:11:
b2:78:6e:05:0b:15:9b:18:28:4e:0d:68:61:11:82:f0:d9:73:
81:7a:34:0e:86:aa:38:b8:67:31:1d:f2:d9:0e:b2:72:d3:f2:
78:07:b4:28:1c:8f:7e:b4:b8:13:de:28:25:68:d8:ee:6b:ff:
d2:32:41:06:ab:58:20:cc:96:95:b5:fe:da:4e:a9:ba:2e:61:
ca:82:42:84:16:b2:b8:f6:18:a3:fe:51:7b:54:fe:08:f9:86:
a1:94:df:38:d2:d0:3a:46:f2:4a:75:72:6f:83:3d:04:03:50:
8e:fd:56:ab:e1:40:3b:cf:8f:0e:b5:04:8b:08:80:e8:b6:20:
82:f3:24:21:28:0b:cd:c9:5a:61:53:fd:b6:59:ad:fd:ce:82:
9e:de:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:54 2026 by rpki-client