
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
File: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft (raw, json)
Hash identifier: Mdrqx+lWpeIlClaBjlnxf5Xv3mkErQAM6DaBkHwHDag=
Subject key identifier: 02:5B:C3:0D:19:CF:75:48:97:95:65:E5:29:87:2F:4B:FE:D1:F9:54
Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
Certificate issuer: /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Certificate serial: 225792B147BDD1815006D1D90E9E7E911D8C74BB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 09:12:54 +0000
Manifest this update: Mon 21 Sep 2026 09:07:54 +0000
Manifest next update: Tue 22 Sep 2026 09:19:54 +0000
Files and hashes: 1: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: clpAyiJg+CNdKPltuUkUa0iDMohvDb510aZlE3T5fdM=)
2: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: /sdcPpV2u273vAuDs0a3qzoz4mqv4YYBgqRWOUy8CPE=)
3: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: DKemgkGfRSsQDIb9t6Dxr8FxG7VecmyFhyl+wtA42dc=)
4: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 55Pgfc5CdrPo/JwquxlSz80gSkyEAvnuVuTU02sK+3E=)
5: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: z6jlGimYEU42w1AAv4WTGHl72QqTJEBb6/46niNS0MM=)
6: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl (hash: JVxZ4c94Th6dI5iHTTrzvsBx5fRPSXQ20/+BA2F3xQU=)
7: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: vIEcjw77CIphQaDAYPHv49OItt3hihjyRmA9crPFzrg=)
8: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 6P6QYPdFuq7LsAFOi2tnnEJSwJf9ZQyZm5LNXr5+r6s=)
9: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: Ep8qTK0NDLlbE6SNKdL/U9iSghCg+fI8OoOZxYByFbw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:57:92:b1:47:bd:d1:81:50:06:d1:d9:0e:9e:7e:91:1d:8c:74:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Validity
Not Before: Sep 21 09:07:54 2026 GMT
Not After : Sep 22 09:19:54 2026 GMT
Subject: CN=025BC30D19CF7548979565E529872F4BFED1F954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:75:fe:ed:23:9d:57:40:e4:71:bc:49:1a:
02:14:35:e0:e6:c2:94:58:be:03:86:14:fa:95:59:
96:ae:98:28:41:e3:ad:87:9e:fa:66:68:2e:cc:16:
a4:f9:af:6e:87:2f:03:da:99:f0:68:06:37:61:e8:
f4:ba:24:a9:48:66:4c:87:c5:b2:c8:ea:3f:b2:d3:
0c:60:ef:d5:2b:1a:eb:10:e7:77:7e:ad:39:41:f7:
c9:a4:32:48:ef:3d:b7:ae:ea:5e:fc:b7:08:a6:e1:
f3:6a:b4:e2:ea:27:85:57:0e:da:d8:db:21:b5:8c:
f5:ad:7d:87:c3:e9:bf:e1:c4:df:11:50:8f:e9:6c:
64:4a:fd:12:d8:1b:d9:4d:aa:e0:ea:0f:70:f4:e0:
f2:fb:d3:53:5e:7c:3b:fc:39:88:f2:5f:e3:d0:6c:
f9:cf:8f:97:08:b9:ab:30:07:12:e8:38:f9:79:ee:
14:56:87:5e:5e:3e:d1:13:5f:6a:6e:a7:88:f0:d9:
86:8a:be:cd:db:4d:32:6e:88:63:35:f7:f4:b5:ae:
ed:cc:1f:46:8f:95:db:29:fe:f7:49:48:1e:f3:07:
07:cb:6b:eb:08:a6:65:fb:fa:9a:1b:4a:b8:48:c5:
00:04:fe:f4:67:2b:c1:08:4e:ec:3c:5e:77:09:8a:
eb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:C3:0D:19:CF:75:48:97:95:65:E5:29:87:2F:4B:FE:D1:F9:54
X509v3 Authority Key Identifier:
keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b6:24:06:61:4d:63:76:45:ac:9c:d5:17:f5:ec:8f:c9:e2:
1a:62:d9:49:97:32:dc:77:2d:2c:3b:a4:15:ed:ea:3c:f3:38:
55:33:f8:21:91:55:07:d5:7e:2c:41:28:8e:7a:7e:00:37:ef:
8c:89:70:26:28:2f:30:1b:6d:6b:f5:67:57:b7:9f:26:63:74:
01:48:80:ed:c2:9e:8c:c5:38:2e:07:ad:a6:58:aa:28:81:c8:
23:25:39:19:1d:af:89:78:d9:88:df:68:01:0b:2d:cd:f5:f0:
b3:44:2a:d4:8b:08:65:44:d9:06:33:1b:48:38:75:9a:c2:16:
b6:1a:87:a8:c5:a9:03:3f:0a:91:fe:3c:b6:67:05:44:e1:26:
fb:67:e1:a5:5a:59:fc:ae:8e:45:cb:a8:c9:42:af:83:76:06:
ec:69:83:b2:ef:8a:11:3f:89:d0:8c:70:18:9b:21:bf:72:c1:
ae:1d:d9:d4:eb:c8:3c:4d:f3:05:91:14:94:06:e3:83:7c:00:
c4:6b:17:23:cb:94:40:f6:51:2b:83:24:65:d9:65:71:96:c4:
ad:20:c2:5b:3d:c3:5d:7c:ac:6d:5b:3f:66:85:8a:97:40:97:
3a:8a:c3:38:81:c2:69:fe:49:4c:01:22:66:f2:84:33:63:f0:
bb:59:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:59:26 2026 by rpki-client