
$ rpki-client -vvf rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
File: 51D2872389FAB3963625D56D9C53751581B4095A.mft (raw, json)
Hash identifier: gR1IA2sY7y1y6n5WeoYW0s5QzU6g2XNbaWUhN8EotwI=
Subject key identifier: 8B:EC:C9:B1:B0:E5:14:04:27:4D:4E:B7:5B:74:5F:0A:8F:6A:3E:5C
Authority key identifier: 51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
Certificate issuer: /CN=51D2872389FAB3963625D56D9C53751581B4095A
Certificate serial: 4F073679654E104D2B4B3210DE768A5F9AA502AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 16:57:30 +0000
Manifest this update: Mon 20 Jul 2026 16:52:30 +0000
Manifest next update: Tue 21 Jul 2026 19:02:30 +0000
Files and hashes: 1: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: 8nfqVf8K62If0oVwSrWfcY/25sPP59HiQxAYVsP0CsI=)
2: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: sF9q1f3M6qWl1bUGKFEMzAqrj77WF6tSCHN75m99gpo=)
3: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: g1g7MtGRy5qSqIwWinTtOXc9I8nzo7Y/GPnyXI8unxU=)
4: 51D2872389FAB3963625D56D9C53751581B4095A.crl (hash: WxfjZsWnhcIBWAZ8HmwzJbEEu0O3V8DWjqM//Ada7Ow=)
5: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: 7GHOz1ylbdZGh0QV7pltHYzAZILZEP8/dZbie4U2PnE=)
6: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: B8wFxDYdDhj0bVN1Mv977ycTYWUiqiZS21F8KsySBWY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 19:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:07:36:79:65:4e:10:4d:2b:4b:32:10:de:76:8a:5f:9a:a5:02:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51D2872389FAB3963625D56D9C53751581B4095A
Validity
Not Before: Jul 20 16:52:30 2026 GMT
Not After : Jul 21 19:02:30 2026 GMT
Subject: CN=8BECC9B1B0E51404274D4EB75B745F0A8F6A3E5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:5d:35:91:7c:71:da:c5:cd:6c:8a:5b:92:
c7:a7:a4:d3:ab:a0:8c:0f:fc:9b:1a:fe:ff:2e:ac:
8f:d4:18:fb:60:e4:2f:15:ab:0e:03:55:4b:14:a5:
4a:95:05:b8:19:c7:06:0c:f8:f8:02:72:6f:75:67:
b5:a3:b2:06:47:30:c8:02:0a:20:9c:a6:f4:5d:39:
9d:cc:bf:ca:6b:a6:70:91:85:06:3e:b7:c8:27:ab:
3e:ad:70:86:a0:ff:76:45:e4:84:74:a4:23:db:55:
1a:d7:25:f3:cf:bf:5a:48:0e:41:8a:ee:89:bb:cc:
ce:b9:df:0b:93:ed:b7:39:5c:b9:b0:80:11:5b:c4:
fc:10:3f:72:26:17:93:47:e8:d5:79:de:cd:ac:4a:
67:60:f4:32:b1:51:36:76:00:df:db:63:f0:57:6c:
b1:3d:f6:18:cf:ae:c0:98:21:c9:7d:d0:4a:f5:2a:
f1:91:ac:f0:35:51:26:c6:a2:17:0f:35:fd:e0:d4:
98:44:23:f8:e7:a9:c9:2f:91:36:f4:96:16:fb:ac:
cc:bd:f3:dd:35:23:0b:fa:14:3b:81:ac:bd:89:6e:
84:ff:b4:5b:13:29:46:ad:53:b4:aa:21:f3:5a:0d:
56:9f:44:70:d2:6e:d2:e0:a0:6d:f0:47:1a:77:8a:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EC:C9:B1:B0:E5:14:04:27:4D:4E:B7:5B:74:5F:0A:8F:6A:3E:5C
X509v3 Authority Key Identifier:
keyid:51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d3:7e:01:10:ec:46:04:fa:95:a9:72:70:15:33:d7:0e:90:
1a:3e:10:19:2d:6f:5c:4d:d7:f5:a5:ca:42:e4:3c:73:ed:13:
34:cc:30:53:be:0a:e2:28:79:9c:a7:cf:c3:8c:79:71:c5:65:
4f:11:3e:20:e2:64:4b:a3:3d:21:ff:f7:57:35:23:2c:77:56:
45:2f:2d:8a:74:4b:82:4d:4e:d8:1b:37:02:d6:f2:1a:dd:8c:
04:28:c8:84:3b:ac:82:4d:74:d7:39:d2:f9:7f:77:b8:9f:49:
2a:02:f6:5c:8e:56:60:39:c9:dc:d2:d6:16:db:e4:8f:99:96:
92:03:fb:d0:9a:79:5e:86:d2:3e:40:c2:ab:9b:bf:5a:6c:0c:
33:ec:e2:ad:58:30:10:52:12:dc:ab:76:1f:4c:5d:47:99:a3:
13:74:2f:d3:b4:57:b1:c3:7f:dd:db:c6:f2:89:df:c6:b8:0a:
a9:d6:b4:d5:e8:69:fa:74:b2:67:6b:f9:87:cd:eb:35:20:fc:
17:b6:ab:65:35:f5:7d:d2:c8:e0:a3:c1:95:29:5c:0c:58:8c:
e8:e0:29:1c:16:33:a5:99:42:1a:66:8e:f5:2f:32:79:6c:5b:
32:02:5d:7a:61:46:b8:25:11:16:51:ef:67:26:b4:02:e5:4a:
66:a3:11:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:33:13 2026 by rpki-client