$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft File: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft (raw, json) Hash identifier: 4WvTaHk1WWmPGZ+0lIiOAVVQrLx4RBgvf0fOB0jbCEM= Subject key identifier: 6F:B8:F9:B7:16:45:E4:24:8F:B2:D8:A1:BA:6E:62:23:5B:95:0B:99 Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F Certificate issuer: /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F Certificate serial: 58A8658B2BFC3A89F806A8918DB9323D62BE377D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 18:04:53 +0000 Manifest this update: Wed 02 Sep 2026 17:59:53 +0000 Manifest next update: Thu 03 Sep 2026 21:38:53 +0000 Files and hashes: 1: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 55Pgfc5CdrPo/JwquxlSz80gSkyEAvnuVuTU02sK+3E=) 2: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: DKemgkGfRSsQDIb9t6Dxr8FxG7VecmyFhyl+wtA42dc=) 3: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: z6jlGimYEU42w1AAv4WTGHl72QqTJEBb6/46niNS0MM=) 4: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: clpAyiJg+CNdKPltuUkUa0iDMohvDb510aZlE3T5fdM=) 5: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: vIEcjw77CIphQaDAYPHv49OItt3hihjyRmA9crPFzrg=) 6: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: Ep8qTK0NDLlbE6SNKdL/U9iSghCg+fI8OoOZxYByFbw=) 7: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: /sdcPpV2u273vAuDs0a3qzoz4mqv4YYBgqRWOUy8CPE=) 8: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl (hash: NHc12oPzNnJ5cflsRzoPDihXo9PdtR41hjrIvI/F6LA=) 9: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 6P6QYPdFuq7LsAFOi2tnnEJSwJf9ZQyZm5LNXr5+r6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a8:65:8b:2b:fc:3a:89:f8:06:a8:91:8d:b9:32:3d:62:be:37:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F Validity Not Before: Sep 2 17:59:53 2026 GMT Not After : Sep 3 21:38:53 2026 GMT Subject: CN=6FB8F9B71645E4248FB2D8A1BA6E62235B950B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:c4:a9:29:62:a6:13:a0:f0:61:b7:b1:fc: 56:5d:9b:f1:1b:98:28:95:b8:36:3e:4f:24:1c:69: 13:86:d2:f3:4d:1d:fa:61:52:c6:8e:6b:3a:0e:a9: 65:4f:c2:97:27:09:b0:0c:35:64:e8:43:33:91:b7: 8d:a9:b4:02:3c:dc:5d:37:44:61:5a:3e:29:ff:7c: f7:c2:f3:43:7c:af:01:5b:fe:8b:75:54:09:79:af: 51:5c:e0:96:80:65:ec:34:a2:7d:75:d8:5b:5c:7e: 23:47:83:06:65:8e:83:3f:80:4d:96:f1:bf:72:59: 70:52:f4:3d:dc:61:1a:74:7a:42:70:27:d7:2f:e8: 40:6e:ea:64:28:c3:b6:a7:74:92:36:a1:0f:9b:cd: c6:c3:17:2d:8c:49:d0:d6:e8:48:ff:54:ed:47:f8: ff:92:21:bc:11:44:9f:b4:69:0d:6e:10:93:54:17: 86:bb:77:09:52:40:f5:1c:d3:73:52:2c:8a:e7:ef: 1e:67:c4:cc:07:31:6c:38:f7:7c:87:be:e3:d9:3e: e2:8b:6d:64:5f:f5:e7:28:83:68:48:6b:b7:e9:07: b9:ff:36:06:14:72:08:5d:d9:04:86:b0:e4:0c:f7: 04:37:9b:dc:ec:29:b0:f9:d8:f1:0b:29:79:c1:ee: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B8:F9:B7:16:45:E4:24:8F:B2:D8:A1:BA:6E:62:23:5B:95:0B:99 X509v3 Authority Key Identifier: keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7d:19:02:bd:3a:f0:80:f4:76:87:90:51:70:61:57:44:61: 84:20:c0:e4:41:8d:9b:54:5e:e7:85:df:1b:de:9a:ca:cd:7c: a2:20:07:7c:3f:f8:71:c6:d8:2e:66:1f:98:3a:35:c3:60:3a: ab:96:8f:b4:03:3d:8b:8f:9c:dc:0b:5f:a3:3c:60:15:ab:0b: e0:f8:00:82:5e:a8:d5:1b:b7:03:ff:05:05:39:28:f1:68:53: aa:3d:11:61:2a:0d:11:c3:61:2d:46:a1:54:49:e4:98:d6:cb: b8:e2:b6:4c:6e:e0:fb:98:dc:d2:f7:b1:63:e3:1b:90:72:38: 6e:f2:d5:97:3c:cf:f9:33:ad:71:e2:1d:d8:9d:c7:ae:11:58: 15:9a:77:cc:f8:58:6a:b3:4c:bf:2f:a6:90:55:d4:30:54:51: d0:07:f4:9e:e4:b1:96:92:a6:21:db:bb:0c:41:ef:41:cf:ae: 3f:42:71:cd:82:dd:3a:e2:e5:96:bf:10:cb:48:51:e1:e0:de: 61:22:ab:d0:fd:d0:ee:19:22:d4:71:80:0e:54:5e:73:01:6a: 16:88:db:d8:d4:2b:9f:cd:53:7d:e7:3a:7a:27:c1:bd:91:75: d2:ec:e8:41:5f:d3:82:f4:c2:20:4f:c7:a4:8e:63:7e:71:25: c6:aa:4e:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKhliyv8Oon4BqiRjbkyPWK+N30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTFGNTExRTQ1NkI0Q0E5OUNBN0JEMUM5MUI2NTFGRERD NUMwMjY4RjAeFw0yNjA5MDIxNzU5NTNaFw0yNjA5MDMyMTM4NTNaMDMxMTAvBgNV BAMTKDZGQjhGOUI3MTY0NUU0MjQ4RkIyRDhBMUJBNkU2MjIzNUI5NTBCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbp8SpKWKmE6DwYbex/FZdm/Eb mCiVuDY+TyQcaROG0vNNHfphUsaOazoOqWVPwpcnCbAMNWToQzORt42ptAI83F03 RGFaPin/fPfC80N8rwFb/ot1VAl5r1Fc4JaAZew0on112FtcfiNHgwZljoM/gE2W 8b9yWXBS9D3cYRp0ekJwJ9cv6EBu6mQow7andJI2oQ+bzcbDFy2MSdDW6Ej/VO1H +P+SIbwRRJ+0aQ1uEJNUF4a7dwlSQPUc03NSLIrn7x5nxMwHMWw493yHvuPZPuKL bWRf9ecog2hIa7fpB7n/NgYUcghd2QSGsOQM9wQ3m9zsKbD52PELKXnB7soRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7j5txZF5CSPstihum5iI1uVC5kwHwYDVR0j BBgwFoAUUfUR5Fa0ypnKe9HJG2Uf3cXAJo8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY2MjgwOWMtYmZiNi00ZmU3LThkZDYtY2E2MDIyY2RkNTQwLzAvNTFGNTExRTQ1 NkI0Q0E5OUNBN0JEMUM5MUI2NTFGRERDNUMwMjY4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MUY1MTFFNDU2QjRDQTk5Q0E3QkQxQzkxQjY1MUZEREM1QzAy NjhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY2MjgwOWMtYmZiNi00ZmU3LThk ZDYtY2E2MDIyY2RkNTQwLzAvNTFGNTExRTQ1NkI0Q0E5OUNBN0JEMUM5MUI2NTFG RERDNUMwMjY4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJ9GQK9OvCA9HaHkFFwYVdEYYQgwORBjZtU XueF3xvemsrNfKIgB3w/+HHG2C5mH5g6NcNgOquWj7QDPYuPnNwLX6M8YBWrC+D4 AIJeqNUbtwP/BQU5KPFoU6o9EWEqDRHDYS1GoVRJ5JjWy7jitkxu4PuY3NL3sWPj G5ByOG7y1Zc8z/kzrXHiHdidx64RWBWad8z4WGqzTL8vppBV1DBUUdAH9J7ksZaS piHbuwxB70HPrj9Ccc2C3Tri5Za/EMtIUeHg3mEiq9D90O4ZItRxgA5UXnMBahaI 29jUK5/NU33nOnonwb2RddLs6EFf04L0wiBPx6SOY35xJcaqTmE= -----END CERTIFICATE-----Generated at Thu Sep 3 12:36:45 2026 by rpki-client