$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.mft File: 51B98F16799452BDD8E00D1274ADE2150C9F4138.mft (raw, json) Hash identifier: +c+FbJ0npzHooN1dkkzy6fBy65C1JKLKHmXzZsLC0TM= Subject key identifier: 24:22:B0:78:BD:5C:22:1A:7F:A4:AE:85:6F:76:E2:B8:E0:61:2F:C8 Authority key identifier: 51:B9:8F:16:79:94:52:BD:D8:E0:0D:12:74:AD:E2:15:0C:9F:41:38 Certificate issuer: /CN=51B98F16799452BDD8E00D1274ADE2150C9F4138 Certificate serial: 1A048DB44CE19EB871381E8A9B80D46E76200C67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51B98F16799452BDD8E00D1274ADE2150C9F4138.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:10:27 +0000 Manifest this update: Mon 21 Sep 2026 07:05:27 +0000 Manifest next update: Tue 22 Sep 2026 09:25:27 +0000 Files and hashes: 1: 51B98F16799452BDD8E00D1274ADE2150C9F4138.crl (hash: 52Fnj3xOqvUYVafhT7dXPE9gNhhZ3170mmoxR0OflLo=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: 1rW3LJJP4HTli11FPESZ21Q75XI7V+R6AE+xvtVtdOo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.crl rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51B98F16799452BDD8E00D1274ADE2150C9F4138.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:04:8d:b4:4c:e1:9e:b8:71:38:1e:8a:9b:80:d4:6e:76:20:0c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51B98F16799452BDD8E00D1274ADE2150C9F4138 Validity Not Before: Sep 21 07:05:27 2026 GMT Not After : Sep 22 09:25:27 2026 GMT Subject: CN=2422B078BD5C221A7FA4AE856F76E2B8E0612FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:63:d4:9b:c7:9e:f1:bb:10:5d:3c:03:45:63: b8:f6:6d:22:8c:4a:71:2d:34:7f:fb:38:75:18:51: ae:bf:04:ba:0b:96:d2:31:e6:72:01:8b:48:9d:28: 94:54:56:2b:21:c8:73:1b:0a:70:f4:18:64:18:a7: 69:98:b7:d8:76:44:e7:89:07:28:33:6d:b7:eb:8a: 8e:63:61:5f:e1:07:23:1d:43:5a:ef:7b:af:d7:da: 9d:70:1a:a8:64:b0:b3:9e:1e:e3:53:8d:ae:23:fe: 42:6a:25:5e:ca:44:f4:b5:31:53:94:49:ee:75:b0: 10:4b:e5:e4:63:a4:05:09:b1:c2:31:01:2d:6d:8a: 4c:87:b0:53:8c:15:21:e5:48:0b:21:88:19:bd:ef: 1e:3d:25:01:87:64:56:7f:39:f5:4c:2c:9a:1e:0d: 48:28:8b:b5:c3:81:a8:72:93:b5:22:18:2d:36:06: 88:f4:c3:0c:12:3e:48:7c:6a:7b:5d:7c:f0:a5:c9: ce:ba:9e:0c:21:ce:15:94:dc:82:4c:c7:78:71:6c: 36:11:d0:8c:03:54:c1:08:e1:1e:57:da:45:de:ff: cd:da:21:58:83:0e:be:2f:86:df:52:92:73:0c:98: 64:c1:62:6e:35:de:e1:0d:ea:ae:c1:41:4e:9f:0d: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:22:B0:78:BD:5C:22:1A:7F:A4:AE:85:6F:76:E2:B8:E0:61:2F:C8 X509v3 Authority Key Identifier: keyid:51:B9:8F:16:79:94:52:BD:D8:E0:0D:12:74:AD:E2:15:0C:9F:41:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51B98F16799452BDD8E00D1274ADE2150C9F4138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:50:55:25:16:81:2c:8c:e8:60:ba:e3:50:b0:77:fc:f7:7d: bf:6b:51:a0:3e:b7:6e:dd:da:05:04:a8:ae:1e:3b:4a:46:51: db:20:ca:6a:4a:7f:15:9a:de:ad:02:f1:b6:96:d9:33:58:bb: 1b:6b:af:45:11:df:52:e5:d2:c8:e5:db:6d:22:21:a2:02:9b: 7c:82:c6:7d:ac:c6:b6:9f:50:8f:5c:b9:8f:83:03:f3:4d:06: 2e:e7:32:c8:0c:fc:24:28:c8:96:2b:92:3e:9d:a7:fb:70:e8: 91:b8:84:53:8e:4d:bb:0c:0c:08:4a:c9:8d:10:c8:68:53:bb: 19:cf:00:74:6f:07:55:d0:6b:ce:f0:92:aa:46:30:8b:4a:54: 29:c5:68:91:c0:99:b3:04:ec:70:b7:bb:35:2b:78:48:c2:7d: 62:2a:2f:17:89:f3:5a:ca:e4:8d:5c:8f:20:f0:8f:3d:5e:00: 03:7a:e0:23:65:4b:c2:b7:6c:c6:27:d1:d9:e7:6c:c1:86:61: 71:2d:6f:9f:0d:39:c2:bf:19:bb:31:ac:96:37:77:f2:da:c1: e9:c4:59:42:49:bc:2d:8d:e4:26:01:58:f0:4f:f4:76:fe:63: 53:22:f9:e5:e8:2b:c4:6a:8c:b1:5e:db:86:2d:60:97:83:9c: 6d:50:88:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgSNtEzhnrhxOB6Km4DUbnYgDGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTFCOThGMTY3OTk0NTJCREQ4RTAwRDEyNzRBREUyMTUw QzlGNDEzODAeFw0yNjA5MjEwNzA1MjdaFw0yNjA5MjIwOTI1MjdaMDMxMTAvBgNV BAMTKDI0MjJCMDc4QkQ1QzIyMUE3RkE0QUU4NTZGNzZFMkI4RTA2MTJGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSY9Sbx57xuxBdPANFY7j2bSKM SnEtNH/7OHUYUa6/BLoLltIx5nIBi0idKJRUVishyHMbCnD0GGQYp2mYt9h2ROeJ Bygzbbfrio5jYV/hByMdQ1rve6/X2p1wGqhksLOeHuNTja4j/kJqJV7KRPS1MVOU Se51sBBL5eRjpAUJscIxAS1tikyHsFOMFSHlSAshiBm97x49JQGHZFZ/OfVMLJoe DUgoi7XDgahyk7UiGC02Boj0wwwSPkh8antdfPClyc66ngwhzhWU3IJMx3hxbDYR 0IwDVMEI4R5X2kXe/83aIViDDr4vht9SknMMmGTBYm413uEN6q7BQU6fDTPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCKweL1cIhp/pK6Fb3biuOBhL8gwHwYDVR0j BBgwFoAUUbmPFnmUUr3Y4A0SdK3iFQyfQTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDUwYzg2N2ItMmNiOS00NTdiLTg1NmItYTJhZmEzOGY1N2NjLzAvNTFCOThGMTY3 OTk0NTJCREQ4RTAwRDEyNzRBREUyMTUwQzlGNDEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MUI5OEYxNjc5OTQ1MkJERDhFMDBEMTI3NEFERTIxNTBDOUY0 MTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvNTFCOThGMTY3OTk0NTJCREQ4RTAwRDEyNzRBREUy MTUwQzlGNDEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhQVSUWgSyM6GC641Cwd/z3fb9rUaA+t27d 2gUEqK4eO0pGUdsgympKfxWa3q0C8baW2TNYuxtrr0UR31Ll0sjl220iIaICm3yC xn2sxrafUI9cuY+DA/NNBi7nMsgM/CQoyJYrkj6dp/tw6JG4hFOOTbsMDAhKyY0Q yGhTuxnPAHRvB1XQa87wkqpGMItKVCnFaJHAmbME7HC3uzUreEjCfWIqLxeJ81rK 5I1cjyDwjz1eAAN64CNlS8K3bMYn0dnnbMGGYXEtb58NOcK/GbsxrJY3d/LawenE WUJJvC2N5CYBWPBP9Hb+Y1Mi+eXoK8RqjLFe24YtYJeDnG1QiAs= -----END CERTIFICATE-----Generated at Mon Sep 21 09:54:04 2026 by rpki-client