$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft File: D51AA8B3D72CDB71C90345B767919665E60A217F.mft (raw, json) Hash identifier: FPo54NN1Hc2+8NRqfVLEHGoYddADt57PkDTLzWZNUkU= Subject key identifier: F3:25:E1:96:91:95:9B:B1:6E:65:B4:73:E9:37:2A:BE:7A:A8:6B:5A Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F Certificate issuer: /CN=D51AA8B3D72CDB71C90345B767919665E60A217F Certificate serial: 5794A96D11309CF2DFB3C86D9A16808D26A66B3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft Manifest number: BA Signing time: Thu 17 Sep 2026 08:54:33 +0000 Manifest this update: Thu 17 Sep 2026 08:49:33 +0000 Manifest next update: Fri 18 Sep 2026 09:51:33 +0000 Files and hashes: 1: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: qWXJBwwFjRlNPlzGu34yKlzyWtSJkvJR6tTW+DXklsI=) 3: D51AA8B3D72CDB71C90345B767919665E60A217F.crl (hash: 8STRL+XJ9gMemg0CXKfPuhZSn+HFPBI/TmcV1b8Ge+c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:94:a9:6d:11:30:9c:f2:df:b3:c8:6d:9a:16:80:8d:26:a6:6b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F Validity Not Before: Sep 17 08:49:33 2026 GMT Not After : Sep 18 09:51:33 2026 GMT Subject: CN=F325E19691959BB16E65B473E9372ABE7AA86B5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:79:74:1e:bf:87:bd:ac:95:ef:71:b9:b7: f0:6f:16:7b:91:78:2e:7f:db:a4:f5:4a:db:6e:79: 2e:30:37:12:3d:5b:a5:a1:04:7f:98:40:6b:17:8f: be:5f:46:00:06:df:8f:f0:8d:48:3a:e4:68:2c:97: ce:3d:d4:0c:8d:16:0c:af:b2:ee:70:5e:64:99:9f: 29:7d:c8:69:e8:71:72:b4:b0:77:49:0e:ca:6c:a7: 7e:ff:b4:5f:2c:18:bc:39:c8:f7:59:6a:25:46:52: a8:70:f3:cc:7a:51:bc:7a:7c:4e:c3:0a:71:fa:7b: 1f:f1:6d:fe:e5:74:79:fe:9e:11:c7:1e:76:f3:44: e6:f3:2f:3b:54:04:89:2e:e7:47:65:78:9a:63:75: 4a:0e:75:88:6a:f6:5a:ff:09:2d:e1:be:d3:b6:5c: b0:00:ac:31:d8:b1:31:26:ee:ec:af:16:6a:39:5f: 38:7e:e2:7c:d5:2d:40:b4:79:98:30:aa:42:04:8b: 9e:a8:a5:b9:bb:97:b5:40:ba:9b:c3:9d:29:55:07: b3:34:a7:88:f4:61:bc:fa:58:8c:9a:a2:51:31:15: 17:3d:d2:7d:da:6a:f3:e5:42:b0:e8:02:a2:18:74: cd:21:f8:1d:4a:aa:75:3f:79:61:dd:f4:47:29:dd: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:25:E1:96:91:95:9B:B1:6E:65:B4:73:E9:37:2A:BE:7A:A8:6B:5A X509v3 Authority Key Identifier: keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:01:76:4b:90:6f:e7:a1:46:5a:14:5e:d9:e8:b4:f1:d4:ac: 0f:b7:6b:70:8a:8c:ea:43:74:68:45:ac:7d:80:52:9e:85:61: 37:2f:f1:0f:bc:e6:2f:3d:7c:74:c4:72:f6:0e:6e:91:ab:80: 8c:ca:96:1b:4b:10:46:59:4d:be:f1:08:45:ce:2d:c2:f5:80: a6:1f:31:4b:3e:3b:ac:cb:b9:35:0a:be:bf:a9:5b:52:61:51: 25:7e:18:54:8e:7c:25:91:6f:37:e8:f8:d3:50:6f:58:b0:f0: b3:b4:fd:20:2d:0e:ec:05:88:cf:a1:3b:9c:40:98:1f:c0:d2: 1d:4b:2f:5a:88:6f:96:71:ba:a8:49:2e:96:47:8d:cb:0f:fe: 77:80:eb:d5:af:94:e6:aa:50:24:51:a6:33:0d:a2:9b:a4:c0: f5:24:fb:cf:ef:78:39:72:6d:70:fd:b3:12:ea:09:27:b6:8b: 66:72:d2:d0:6e:98:fc:cf:74:f2:81:a3:c8:82:f8:87:13:91: 3f:db:e1:fc:e1:00:5f:d3:13:14:2b:fc:d0:05:a1:0f:8f:ba: 9b:43:a8:e7:bc:0c:7d:03:c2:c4:bd:c5:12:72:4f:74:3a:2f: f5:50:60:78:02:08:d4:69:87:aa:28:9f:2d:72:76:e1:3b:9d: 53:0b:03:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5SpbREwnPLfs8htmhaAjSamazowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2NjVF NjBBMjE3RjAeFw0yNjA5MTcwODQ5MzNaFw0yNjA5MTgwOTUxMzNaMDMxMTAvBgNV BAMTKEYzMjVFMTk2OTE5NTlCQjE2RTY1QjQ3M0U5MzcyQUJFN0FBODZCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBnl0Hr+HvayV73G5t/BvFnuR eC5/26T1SttueS4wNxI9W6WhBH+YQGsXj75fRgAG34/wjUg65Ggsl8491AyNFgyv su5wXmSZnyl9yGnocXK0sHdJDspsp37/tF8sGLw5yPdZaiVGUqhw88x6Ubx6fE7D CnH6ex/xbf7ldHn+nhHHHnbzRObzLztUBIku50dleJpjdUoOdYhq9lr/CS3hvtO2 XLAArDHYsTEm7uyvFmo5Xzh+4nzVLUC0eZgwqkIEi56opbm7l7VAupvDnSlVB7M0 p4j0Ybz6WIyaolExFRc90n3aavPlQrDoAqIYdM0h+B1KqnU/eWHd9Ecp3V9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8yXhlpGVm7FuZbRz6Tcqvnqoa1owHwYDVR0j BBgwFoAU1Rqos9cs23HJA0W3Z5GWZeYKIX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NTJiYzYtOGJiNi00ZjI2LTg4YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNE NzJDREI3MUM5MDM0NUI3Njc5MTk2NjVFNjBBMjE3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTFBQThCM0Q3MkNEQjcxQzkwMzQ1Qjc2NzkxOTY2NUU2MEEy MTdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2 NjVFNjBBMjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkBdkuQb+ehRloUXtnotPHUrA+3a3CKjOpD dGhFrH2AUp6FYTcv8Q+85i89fHTEcvYObpGrgIzKlhtLEEZZTb7xCEXOLcL1gKYf MUs+O6zLuTUKvr+pW1JhUSV+GFSOfCWRbzfo+NNQb1iw8LO0/SAtDuwFiM+hO5xA mB/A0h1LL1qIb5ZxuqhJLpZHjcsP/neA69WvlOaqUCRRpjMNopukwPUk+8/veDly bXD9sxLqCSe2i2Zy0tBumPzPdPKBo8iC+IcTkT/b4fzhAF/TExQr/NAFoQ+PuptD qOe8DH0DwsS9xRJyT3Q6L/VQYHgCCNRph6oony1yduE7nVMLA/s= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:45 2026 by rpki-client