Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
File:                     51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft (raw, json)
Hash identifier:          OVkKOH9dcRWOvBhw80gEuxDBq29RlpeQ3vdfQjuzUJ8=
Subject key identifier:   BF:B3:F3:86:CF:99:18:BB:CF:C2:43:6C:43:6E:C2:26:3F:53:85:E7
Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
Certificate issuer:       /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Certificate serial:       2B38E8E2083B6B9058A38A1A175688D547970B6F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
Manifest number:          EB
Signing time:             Sat 24 Oct 2026 18:27:09 +0000
Manifest this update:     Sat 24 Oct 2026 18:22:09 +0000
Manifest next update:     Sun 25 Oct 2026 18:37:09 +0000
Files and hashes:         1: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl (hash: T/Yn/3rYdGyAa63gU7yGW78PXRGwVdJuhJ4hODTcCJw=)
                          2: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: /sdcPpV2u273vAuDs0a3qzoz4mqv4YYBgqRWOUy8CPE=)
                          3: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: z6jlGimYEU42w1AAv4WTGHl72QqTJEBb6/46niNS0MM=)
                          4: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 55Pgfc5CdrPo/JwquxlSz80gSkyEAvnuVuTU02sK+3E=)
                          5: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: vIEcjw77CIphQaDAYPHv49OItt3hihjyRmA9crPFzrg=)
                          6: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: clpAyiJg+CNdKPltuUkUa0iDMohvDb510aZlE3T5fdM=)
                          7: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: DKemgkGfRSsQDIb9t6Dxr8FxG7VecmyFhyl+wtA42dc=)
                          8: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 6P6QYPdFuq7LsAFOi2tnnEJSwJf9ZQyZm5LNXr5+r6s=)
                          9: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: Ep8qTK0NDLlbE6SNKdL/U9iSghCg+fI8OoOZxYByFbw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
                          rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 18:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:38:e8:e2:08:3b:6b:90:58:a3:8a:1a:17:56:88:d5:47:97:0b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
        Validity
            Not Before: Oct 24 18:22:09 2026 GMT
            Not After : Oct 25 18:37:09 2026 GMT
        Subject: CN=BFB3F386CF9918BBCFC2436C436EC2263F5385E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7b:7f:90:f9:fa:1e:68:2e:d0:93:f6:9f:71:
                    29:7d:c4:39:bb:2d:87:dd:a9:73:66:93:1d:e0:5e:
                    b2:8a:2b:e8:37:04:b1:2b:6d:ff:76:95:e7:d6:06:
                    73:c4:2b:f3:ca:55:ac:80:06:e5:f8:0c:1d:a8:e9:
                    82:09:1c:29:ea:c5:ba:b1:a8:c3:20:8f:ce:e0:29:
                    91:09:af:24:4e:43:c1:3a:8b:f0:44:4c:7e:8a:f8:
                    c5:d5:98:46:cf:ba:ae:01:c0:6a:ed:ea:18:72:d5:
                    69:84:84:98:f6:70:ba:14:67:a6:86:3e:9c:84:b8:
                    16:f4:3c:05:57:10:af:34:f7:c1:30:5b:01:c3:63:
                    26:22:1d:b1:72:2c:09:8a:7c:32:33:a5:31:72:91:
                    b3:f5:35:a7:59:d3:58:52:e2:63:a9:3b:5b:9d:b7:
                    17:50:d4:24:b1:8d:18:63:03:d6:67:ee:97:c0:e1:
                    f8:1c:5e:21:af:a2:6d:b0:9b:cb:d5:d9:23:17:1f:
                    76:d0:4c:69:58:a4:1c:51:9c:f8:b9:63:a1:32:54:
                    d2:55:30:09:c8:8c:db:b9:cc:48:63:d1:6b:c8:12:
                    12:a6:5c:8e:3d:1a:2c:5a:29:3a:c8:0d:e3:8f:d1:
                    d9:66:4d:03:4c:06:08:d2:43:a8:c9:11:bb:c1:27:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B3:F3:86:CF:99:18:BB:CF:C2:43:6C:43:6E:C2:26:3F:53:85:E7
            X509v3 Authority Key Identifier:
                keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:74:24:00:08:e3:59:8d:b0:67:4a:6c:ac:2b:d7:59:f4:e3:
         73:74:fb:71:ea:55:0b:98:7d:5e:be:3e:34:f4:ea:89:3a:29:
         3e:bb:58:f1:6d:1d:62:9f:6e:67:d1:8c:89:b7:27:2f:f2:a7:
         68:15:cb:b2:ac:52:d7:c6:0a:b4:d6:37:7a:55:21:bd:a6:66:
         1d:0f:ad:81:7c:3a:b4:b0:d9:5c:c0:f3:3a:ef:ac:0d:ff:8b:
         b4:3f:bc:35:de:e8:cb:3e:b8:56:82:3c:66:66:ce:5c:7f:83:
         0d:26:6f:eb:ea:0e:16:44:d8:24:07:3d:50:9c:e0:f2:85:84:
         2a:c5:55:21:ed:f5:fe:48:6d:c4:4a:c0:4c:6a:f1:c1:79:cc:
         3b:f0:db:86:dd:24:81:f0:ee:ee:3b:e1:c9:d4:86:9a:cb:97:
         4f:7e:91:24:81:be:94:75:dd:81:ea:2a:88:38:c5:64:80:59:
         d5:ba:eb:cc:08:1c:f8:94:eb:0f:72:06:f0:9c:80:12:36:8f:
         b2:4a:3a:8a:56:70:3f:71:91:1b:87:8b:25:32:b8:d7:a5:40:
         33:b0:aa:a6:96:63:59:e7:d0:c7:96:33:be:a8:f4:d8:4e:58:
         50:57:78:6d:e9:08:bf:e9:70:6c:c1:86:08:74:ef:7c:55:09:
         5e:b9:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:42:06 2026 by rpki-client