$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft File: B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft (raw, json) Hash identifier: RGPc9GaPEbg/63Ba9qnDS650bnVFqoLOLBT59kFjGAM= Subject key identifier: 31:61:7D:CB:FA:C4:6F:CB:8D:E1:78:9E:10:4D:23:93:D7:E5:CE:CC Authority key identifier: B5:13:32:A8:B5:18:5A:35:42:E8:56:4F:76:BC:EB:6F:18:6C:D4:B1 Certificate issuer: /CN=B51332A8B5185A3542E8564F76BCEB6F186CD4B1 Certificate serial: 5956DC752199A9C01B6ECAA5D05DCCAAC7D5D2A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft Manifest number: BE Signing time: Sun 20 Sep 2026 13:28:36 +0000 Manifest this update: Sun 20 Sep 2026 13:23:36 +0000 Manifest next update: Mon 21 Sep 2026 14:49:36 +0000 Files and hashes: 1: 3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa (hash: /VFW2nze35yw52Bk15Yjl+x3M7JqSF5rvpX1IPmcw0s=) 2: B51332A8B5185A3542E8564F76BCEB6F186CD4B1.crl (hash: 1dlj2UQCY2b6hLJoj3LCdWlY9TR4JTaQ+ANTXie85X0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.crl rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:56:dc:75:21:99:a9:c0:1b:6e:ca:a5:d0:5d:cc:aa:c7:d5:d2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B51332A8B5185A3542E8564F76BCEB6F186CD4B1 Validity Not Before: Sep 20 13:23:36 2026 GMT Not After : Sep 21 14:49:36 2026 GMT Subject: CN=31617DCBFAC46FCB8DE1789E104D2393D7E5CECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:e2:54:72:94:15:66:4e:02:36:f8:11:57: 5d:cb:c9:6e:8e:7c:be:5c:4a:1b:a1:c8:46:f8:70: 9f:e0:88:77:51:6a:5e:21:01:93:82:a9:5b:48:16: 79:f7:f3:32:7a:a1:21:8f:00:83:10:9d:3d:34:b7: 28:89:84:02:cb:29:ab:5a:3a:4b:70:3d:78:c3:9f: 6e:9f:a9:0e:d2:82:d3:73:17:97:fa:2f:54:e8:4b: a4:df:af:09:dc:31:6b:4e:22:22:af:e0:5c:81:c6: 62:a8:af:2f:25:57:fc:0e:3f:c3:42:51:b6:1f:3b: 69:aa:2f:52:d0:62:b4:74:ad:84:42:74:7f:eb:a4: fb:98:a5:58:92:6d:c8:03:54:3b:5d:9c:23:cf:a8: 8d:7e:e5:02:c1:0a:b7:ae:9a:e7:9a:cc:21:71:b0: e5:65:f0:68:1c:30:5b:02:d3:c9:22:12:ad:a6:0d: 8f:2d:6f:57:e3:e8:10:55:a1:28:77:e6:cd:99:67: 0a:2e:f0:20:b8:c4:85:aa:da:4b:25:45:54:89:7c: 47:1f:13:e3:54:6a:7b:a3:d5:88:5d:66:b8:53:32: 71:b1:22:03:8f:9a:45:ec:1b:eb:78:1b:cf:b8:05: 25:a8:b1:b9:01:0c:1d:11:e5:1a:c1:19:a8:02:bc: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:61:7D:CB:FA:C4:6F:CB:8D:E1:78:9E:10:4D:23:93:D7:E5:CE:CC X509v3 Authority Key Identifier: keyid:B5:13:32:A8:B5:18:5A:35:42:E8:56:4F:76:BC:EB:6F:18:6C:D4:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:08:52:98:69:88:9c:a8:ea:69:e1:0a:ef:2b:c4:a1:d9:42: 1f:48:9b:a8:ad:65:a2:7a:55:3c:b8:f6:04:2b:3a:b9:03:65: 89:f4:28:e5:c8:fa:43:05:e6:0c:60:64:5b:01:dd:aa:bc:47: a2:3e:89:bb:85:c7:bc:0d:b1:5e:1b:49:79:0c:51:6e:be:43: d8:ff:11:72:c1:11:be:a1:b5:40:48:25:cc:65:c6:d8:a1:94: 15:03:2a:a9:59:ab:b8:88:20:d7:fa:76:e0:6c:be:89:33:1b: 81:c4:ac:82:9c:2b:06:fb:ad:56:bc:bb:f7:cb:bf:d7:b9:23: 47:b9:8b:e8:bc:58:eb:2f:0b:b7:66:a3:66:73:eb:48:45:3b: 4c:32:e7:aa:5f:4a:cf:92:91:5e:e7:4a:53:fa:05:4a:d4:ff: 7c:fc:90:a6:66:0c:5a:94:07:38:36:7b:44:fc:fe:6a:4c:47: ea:50:7e:cd:ae:b5:80:f0:27:dd:ac:87:75:ec:d1:52:3a:e1: 7b:de:a0:c3:fd:41:5d:94:bc:8e:c6:27:b1:46:a8:17:72:60: 78:fb:98:2d:da:f0:2a:3d:22:00:d0:79:87:99:39:6b:2c:ed: 5c:12:78:90:5c:a6:51:b6:88:49:f8:a0:c0:2e:a8:06:f7:85: ee:aa:a7:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVbcdSGZqcAbbsql0F3MqsfV0qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxMzMyQThCNTE4NUEzNTQyRTg1NjRGNzZCQ0VCNkYx ODZDRDRCMTAeFw0yNjA5MjAxMzIzMzZaFw0yNjA5MjExNDQ5MzZaMDMxMTAvBgNV BAMTKDMxNjE3RENCRkFDNDZGQ0I4REUxNzg5RTEwNEQyMzkzRDdFNUNFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1r+JUcpQVZk4CNvgRV13LyW6O fL5cShuhyEb4cJ/giHdRal4hAZOCqVtIFnn38zJ6oSGPAIMQnT00tyiJhALLKata OktwPXjDn26fqQ7SgtNzF5f6L1ToS6TfrwncMWtOIiKv4FyBxmKory8lV/wOP8NC UbYfO2mqL1LQYrR0rYRCdH/rpPuYpViSbcgDVDtdnCPPqI1+5QLBCreumueazCFx sOVl8GgcMFsC08kiEq2mDY8tb1fj6BBVoSh35s2ZZwou8CC4xIWq2kslRVSJfEcf E+NUanuj1YhdZrhTMnGxIgOPmkXsG+t4G8+4BSWosbkBDB0R5RrBGagCvEiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWF9y/rEb8uN4XieEE0jk9flzswwHwYDVR0j BBgwFoAUtRMyqLUYWjVC6FZPdrzrbxhs1LEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWMyZmMxZDQtMzdhNi00OTQzLWI0YzYtNmQ4ZTliNGU1NTkxLzAvQjUxMzMyQThC NTE4NUEzNTQyRTg1NjRGNzZCQ0VCNkYxODZDRDRCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTEzMzJBOEI1MTg1QTM1NDJFODU2NEY3NkJDRUI2RjE4NkNE NEIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWMyZmMxZDQtMzdhNi00OTQzLWI0 YzYtNmQ4ZTliNGU1NTkxLzAvQjUxMzMyQThCNTE4NUEzNTQyRTg1NjRGNzZCQ0VC NkYxODZDRDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4IUphpiJyo6mnhCu8rxKHZQh9Im6itZaJ6 VTy49gQrOrkDZYn0KOXI+kMF5gxgZFsB3aq8R6I+ibuFx7wNsV4bSXkMUW6+Q9j/ EXLBEb6htUBIJcxlxtihlBUDKqlZq7iIINf6duBsvokzG4HErIKcKwb7rVa8u/fL v9e5I0e5i+i8WOsvC7dmo2Zz60hFO0wy56pfSs+SkV7nSlP6BUrU/3z8kKZmDFqU Bzg2e0T8/mpMR+pQfs2utYDwJ92sh3Xs0VI64XveoMP9QV2UvI7GJ7FGqBdyYHj7 mC3a8Co9IgDQeYeZOWss7VwSeJBcplG2iEn4oMAuqAb3he6qp08= -----END CERTIFICATE-----Generated at Mon Sep 21 02:12:46 2026 by rpki-client