
$ rpki-client -vvf rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
File: 51D2872389FAB3963625D56D9C53751581B4095A.mft (raw, json)
Hash identifier: d08z8glF1L38xmW0pXRkrPtOUURrtW+F4UCYWguDfi4=
Subject key identifier: 60:DB:FF:20:3B:5E:07:A0:D7:A1:1E:C7:16:89:80:A1:95:13:11:3D
Authority key identifier: 51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
Certificate issuer: /CN=51D2872389FAB3963625D56D9C53751581B4095A
Certificate serial: 31BC6B07100678B019AD4CE3F26E3805BE818D5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 22:48:34 +0000
Manifest this update: Tue 02 Jun 2026 22:43:34 +0000
Manifest next update: Wed 03 Jun 2026 22:55:34 +0000
Files and hashes: 1: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: 7GHOz1ylbdZGh0QV7pltHYzAZILZEP8/dZbie4U2PnE=)
2: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: B8wFxDYdDhj0bVN1Mv977ycTYWUiqiZS21F8KsySBWY=)
3: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: 8nfqVf8K62If0oVwSrWfcY/25sPP59HiQxAYVsP0CsI=)
4: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: g1g7MtGRy5qSqIwWinTtOXc9I8nzo7Y/GPnyXI8unxU=)
5: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: sF9q1f3M6qWl1bUGKFEMzAqrj77WF6tSCHN75m99gpo=)
6: 51D2872389FAB3963625D56D9C53751581B4095A.crl (hash: BqloDhtI4rV9MniZZtoyG61w1IIW5PoII+Sm10nf524=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 22:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bc:6b:07:10:06:78:b0:19:ad:4c:e3:f2:6e:38:05:be:81:8d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51D2872389FAB3963625D56D9C53751581B4095A
Validity
Not Before: Jun 2 22:43:34 2026 GMT
Not After : Jun 3 22:55:34 2026 GMT
Subject: CN=60DBFF203B5E07A0D7A11EC7168980A19513113D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:e2:f0:f1:aa:fd:ca:95:c8:71:6f:42:43:
4f:bc:32:dc:41:ab:d6:9e:6d:5d:dc:25:17:e3:9c:
74:6c:bf:9e:1f:36:c5:81:fc:5f:dd:5c:d7:82:5a:
24:f7:3d:68:39:9c:74:df:d7:ff:3d:5b:6d:d2:fe:
fb:9e:7b:42:90:e5:b6:b7:76:e0:79:25:a5:6e:c4:
f9:90:f0:ce:be:26:a6:b4:35:fe:20:b8:de:73:a6:
74:ac:68:91:b4:85:ef:0f:45:dd:09:99:dc:c1:37:
c0:24:e0:91:f1:14:9c:3e:b3:a1:b3:81:2a:db:f7:
0c:15:4f:27:5d:c4:64:e6:26:5a:2f:ff:08:e0:80:
9a:49:26:69:47:af:57:3d:6a:87:f0:08:75:c3:5f:
93:13:f7:00:16:d1:d8:75:6f:57:77:32:66:c2:bf:
c0:95:5b:2c:35:6b:60:2b:00:27:62:2b:c7:d3:84:
00:a1:ab:0d:2d:e1:59:1b:5f:ec:a8:53:9f:1a:cf:
2c:c8:c5:5e:95:94:c8:b6:9b:3f:58:7b:29:2f:a5:
2b:e4:aa:7b:98:1a:98:7e:a3:29:fd:65:37:a8:2c:
84:40:50:38:b7:2d:f3:11:21:44:b5:55:9f:ed:42:
fc:c0:ea:42:11:ec:be:2a:f1:a2:c6:be:05:e0:37:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:FF:20:3B:5E:07:A0:D7:A1:1E:C7:16:89:80:A1:95:13:11:3D
X509v3 Authority Key Identifier:
keyid:51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5c:9a:bb:3b:f0:97:7c:f1:48:31:12:d5:1d:1d:36:f3:d3:
d1:46:02:32:6f:a8:ad:ba:d2:2a:9a:bb:a3:d7:31:c4:96:5a:
9d:ba:fd:93:cb:48:b4:a1:16:27:dc:95:31:32:52:c6:60:01:
2c:e1:ff:7c:70:f3:26:e4:c1:bc:8c:27:27:c5:eb:f2:5e:ec:
dc:9e:2e:6e:c0:2d:df:15:3c:08:c2:bc:d8:ac:13:3a:f8:06:
1b:1f:c4:ec:a1:1a:bf:81:53:26:eb:41:fe:99:4c:ea:23:26:
fd:99:1e:de:49:93:2e:75:0f:98:bd:a7:2d:9a:d6:89:78:1b:
d1:85:72:5f:8f:27:19:c9:68:7d:85:70:46:de:9f:3c:15:70:
85:4c:32:b2:1d:73:ef:e2:dc:f1:28:09:e2:70:ee:57:08:b6:
bc:ee:c4:36:bd:63:d9:56:38:01:a8:74:ad:54:22:28:de:b8:
ce:4e:04:24:63:cd:65:93:04:b9:4b:0b:a3:b0:fd:95:fc:e4:
b7:c0:ee:01:f3:59:6a:84:5b:13:db:7d:d4:76:cb:d1:d4:47:
74:4a:5c:bf:02:15:9f:d8:d0:f4:98:cf:ca:1d:d8:f7:5e:6a:
d3:3f:42:48:fb:eb:3c:02:e8:cd:a1:08:54:11:bb:55:4c:87:
44:a2:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:23:07 2026 by rpki-client