
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
File: 51D2872389FAB3963625D56D9C53751581B4095A.mft (raw, json)
Hash identifier: kLAa/lrFrFLGpD/8yP1lCgezbgjC5QekZ1GQUb/yMa4=
Subject key identifier: 0F:EB:CB:57:90:2E:C1:26:2D:CC:F2:5D:4B:F1:DA:62:03:B6:F8:1D
Authority key identifier: 51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
Certificate issuer: /CN=51D2872389FAB3963625D56D9C53751581B4095A
Certificate serial: 2E9C8B748544AD268AB8BF69F3488C0A3A9E1F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
Manifest number: F8
Signing time: Tue 03 Nov 2026 13:35:03 +0000
Manifest this update: Tue 03 Nov 2026 13:30:03 +0000
Manifest next update: Wed 04 Nov 2026 14:31:03 +0000
Files and hashes: 1: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: 7GHOz1ylbdZGh0QV7pltHYzAZILZEP8/dZbie4U2PnE=)
2: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: 8nfqVf8K62If0oVwSrWfcY/25sPP59HiQxAYVsP0CsI=)
3: 51D2872389FAB3963625D56D9C53751581B4095A.crl (hash: klzQ99h6z3AXZraopDJZWUyoSdk92tvIwZ2sIWwSVA8=)
4: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: g1g7MtGRy5qSqIwWinTtOXc9I8nzo7Y/GPnyXI8unxU=)
5: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: sF9q1f3M6qWl1bUGKFEMzAqrj77WF6tSCHN75m99gpo=)
6: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: B8wFxDYdDhj0bVN1Mv977ycTYWUiqiZS21F8KsySBWY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 10:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:9c:8b:74:85:44:ad:26:8a:b8:bf:69:f3:48:8c:0a:3a:9e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51D2872389FAB3963625D56D9C53751581B4095A
Validity
Not Before: Nov 3 13:30:03 2026 GMT
Not After : Nov 4 14:31:03 2026 GMT
Subject: CN=0FEBCB57902EC1262DCCF25D4BF1DA6203B6F81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:bf:8a:43:1c:56:93:83:46:28:ca:5c:6a:
bb:e6:f3:75:a6:40:8b:ae:db:bb:e8:e3:c6:e9:15:
3c:ee:df:a6:60:0d:7a:b1:84:dd:e0:e3:08:fa:ff:
36:ec:08:4c:39:5d:26:d2:67:ff:2f:1b:3a:94:78:
71:40:09:16:56:39:8e:f5:ff:bd:b3:bb:80:4c:5d:
01:bf:b2:7d:f4:3c:ad:6b:4e:00:7f:3b:b7:4d:9c:
61:74:d5:70:d8:86:b6:40:35:c4:ba:12:45:a3:c2:
d9:5a:43:30:c0:40:fd:70:f9:0a:11:f1:43:38:21:
5f:4b:6b:53:a4:f1:b0:c7:03:31:af:75:58:6b:85:
2e:2c:b4:b2:2a:87:b6:60:b0:60:74:c1:ed:bd:f0:
8c:a8:e4:d9:94:55:7b:6e:1c:eb:69:b9:bb:23:74:
b2:17:78:69:e3:5a:bf:2a:de:9c:80:62:64:f0:4c:
79:9d:c4:18:0e:c4:ff:b6:05:3b:33:f0:dc:84:ca:
e2:1e:ef:80:bd:e6:d3:16:c4:7e:c4:ca:32:58:dc:
82:11:42:f3:22:4f:8a:47:14:f7:d7:84:f0:e6:d9:
dd:74:8c:50:57:1e:52:d7:4a:7c:29:6b:f1:54:6d:
3d:fc:8d:7f:01:f8:9c:f4:ce:3e:3d:e6:8e:26:b2:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EB:CB:57:90:2E:C1:26:2D:CC:F2:5D:4B:F1:DA:62:03:B6:F8:1D
X509v3 Authority Key Identifier:
keyid:51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:94:9d:83:73:23:f0:4d:eb:12:7b:32:db:f0:f5:6c:a0:a1:
f5:02:3f:f8:49:d1:f5:eb:02:6e:25:9b:70:47:5c:9c:18:8b:
a6:12:e1:ee:34:52:ad:94:7b:20:5b:42:de:ff:ee:8b:7a:79:
ae:c8:66:cc:a4:1c:52:a3:89:01:79:92:45:4f:a0:cd:f5:6a:
a8:34:df:4e:f6:f0:b8:35:cf:05:c5:3d:41:99:d4:21:3f:7c:
f9:60:37:9d:16:c1:a4:eb:b9:c5:20:8f:af:30:1b:66:75:be:
7a:af:51:88:ec:4e:49:a8:38:27:99:9a:55:9e:b0:ae:0a:a4:
7c:9d:2d:f3:dd:f9:40:ab:5f:9d:08:f1:e7:81:33:b9:ad:37:
08:58:dc:20:8e:8e:d8:c8:c6:b2:0b:20:46:8a:82:16:c5:2d:
e4:69:4a:d3:ac:5e:62:72:74:9f:86:2d:1e:31:5a:14:2b:69:
95:3c:1a:cd:64:93:1e:76:b2:6c:21:96:56:c5:98:f2:24:9e:
1b:35:50:e1:f5:db:4a:e9:09:39:f4:83:cf:0b:9e:40:93:f3:
db:ef:89:b0:85:ab:60:11:09:45:1c:1e:27:18:4a:cf:9d:12:
a5:f3:3a:22:3e:29:c9:64:c3:a4:6d:dd:b8:8a:6b:88:dd:4e:
72:40:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:42:28 2026 by rpki-client