$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: 6fuyqQKt5WgnKjllrYE8d6MPHUyyGwxtey9dfolmMHs= Subject key identifier: 2F:A5:10:85:AE:F0:EB:6E:AB:2C:0F:01:90:6A:96:C9:9A:3D:F0:FD Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 166741E1059DF291B208DF369CD22B5967187D83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 04E1 Signing time: Tue 17 Mar 2026 14:12:21 +0000 Manifest this update: Tue 17 Mar 2026 14:07:21 +0000 Manifest next update: Fri 20 Mar 2026 23:19:21 +0000 Files and hashes: 1: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) 2: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: Pa5BAIpTf8BAQBa1ptMQZEiSzScVcRVrFd3qdh6gAHc=) 3: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) 4: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) 5: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 23:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:67:41:e1:05:9d:f2:91:b2:08:df:36:9c:d2:2b:59:67:18:7d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Mar 17 14:07:21 2026 GMT Not After : Mar 20 23:19:21 2026 GMT Subject: CN=2FA51085AEF0EB6EAB2C0F01906A96C99A3DF0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:3d:d5:c6:f0:69:18:3c:26:d3:7f:3a:50: 00:f8:14:4a:aa:6c:b0:91:0e:db:b6:ad:fc:56:fc: 8d:d3:8b:a8:0e:f2:02:fe:62:7c:24:cb:c8:0c:82: 4a:35:61:f0:50:1e:79:43:d3:71:e7:38:2c:3f:34: 0c:cb:28:37:0e:12:10:e3:54:24:0f:9f:11:40:a6: 28:8f:71:14:c7:55:6d:cd:9d:35:a9:12:d6:f9:00: fc:02:24:91:af:dc:6a:59:e7:66:87:36:36:cd:02: 2f:d3:58:af:60:da:4f:9d:ce:98:b9:46:07:f0:44: 8e:ea:ed:f2:dc:5c:20:80:53:bf:d2:b4:aa:c6:61: 36:83:91:ba:51:15:e8:aa:4b:55:ac:ee:f5:ba:a7: ff:e4:f3:57:47:b6:c5:21:5f:bc:9f:df:e0:41:a5: 59:e0:ce:82:73:24:e2:56:c6:5b:bb:b6:5d:54:fc: dd:8a:5c:06:9e:05:43:5e:94:42:4a:ae:08:f2:0b: f1:5a:85:96:57:5c:f9:ee:1a:c8:88:11:43:fe:ea: bd:10:7f:ee:19:8b:76:90:bc:ab:9a:8b:11:eb:a6: e3:7c:2f:cf:41:62:33:2b:43:bf:36:28:ac:be:15: e1:40:54:6d:57:f1:53:65:a7:a9:da:0a:04:f8:75: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A5:10:85:AE:F0:EB:6E:AB:2C:0F:01:90:6A:96:C9:9A:3D:F0:FD X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:14:8e:0b:dd:6e:ea:c2:e2:1e:5a:df:6d:d0:8e:1d:c3:41: dd:b1:eb:c3:8e:52:1d:60:1b:a0:61:5a:cb:45:06:2d:2c:86: c9:09:61:89:57:43:fc:e2:28:a2:1a:da:f6:91:ed:77:d4:fe: e6:24:45:ba:04:cd:dd:29:6e:1a:f7:d4:3c:c5:6e:a8:45:32: c9:b3:4a:85:1c:c3:6f:87:26:f5:0c:11:b5:0c:00:eb:f1:7a: 8b:0c:0b:25:56:fc:3d:81:7a:d4:6c:64:2c:ce:a0:db:70:91: 7e:0f:a6:a5:6a:9c:c8:73:cc:cc:8b:34:eb:29:fd:94:97:4f: e7:aa:10:bf:24:91:85:b6:80:72:ea:da:4e:d0:48:a8:ec:ea: 6c:21:90:4d:4a:e8:6b:af:5f:6c:8b:e3:13:92:bf:43:25:83: 70:55:ca:14:00:e3:98:85:be:9a:6b:68:d8:3c:93:af:e0:03: 73:9a:c9:5a:94:1a:4c:84:ee:26:c5:c8:7c:a8:b7:b8:2c:83: 7f:bf:5f:bc:b2:c9:53:74:42:6e:5d:cc:13:9f:1d:6c:16:2a: bc:3b:de:60:e1:36:42:ab:96:8e:be:a6:b0:da:36:c6:79:3c: b0:b3:d7:58:e7:29:a9:bc:58:59:40:12:50:80:ad:44:c2:17: ed:99:8e:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmdB4QWd8pGyCN82nNIrWWcYfYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNjAzMTcxNDA3MjFaFw0yNjAzMjAyMzE5MjFaMDMxMTAvBgNV BAMTKDJGQTUxMDg1QUVGMEVCNkVBQjJDMEYwMTkwNkE5NkM5OUEzREYwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uT3VxvBpGDwm0386UAD4FEqq bLCRDtu2rfxW/I3Ti6gO8gL+Ynwky8gMgko1YfBQHnlD03HnOCw/NAzLKDcOEhDj VCQPnxFApiiPcRTHVW3NnTWpEtb5APwCJJGv3GpZ52aHNjbNAi/TWK9g2k+dzpi5 RgfwRI7q7fLcXCCAU7/StKrGYTaDkbpRFeiqS1Ws7vW6p//k81dHtsUhX7yf3+BB pVngzoJzJOJWxlu7tl1U/N2KXAaeBUNelEJKrgjyC/FahZZXXPnuGsiIEUP+6r0Q f+4Zi3aQvKuaixHrpuN8L89BYjMrQ782KKy+FeFAVG1X8VNlp6naCgT4dRMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL6UQha7w626rLA8BkGqWyZo98P0wHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYUjgvdburC4h5a323Qjh3DQd2x68OOUh1g G6BhWstFBi0shskJYYlXQ/ziKKIa2vaR7XfU/uYkRboEzd0pbhr31DzFbqhFMsmz SoUcw2+HJvUMEbUMAOvxeosMCyVW/D2BetRsZCzOoNtwkX4PpqVqnMhzzMyLNOsp /ZSXT+eqEL8kkYW2gHLq2k7QSKjs6mwhkE1K6GuvX2yL4xOSv0Mlg3BVyhQA45iF vppraNg8k6/gA3OayVqUGkyE7ibFyHyot7gsg3+/X7yyyVN0Qm5dzBOfHWwWKrw7 3mDhNkKrlo6+prDaNsZ5PLCz11jnKam8WFlAElCArUTCF+2Zjjo= -----END CERTIFICATE-----Generated at Thu Mar 19 09:57:12 2026 by rpki-client