
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
File: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft (raw, json)
Hash identifier: F+/masMq+EacrFzPTH6O1wAAV1Zel+OcnAfETLOENQU=
Subject key identifier: 84:76:C2:BB:84:AD:75:38:83:30:50:47:B7:32:9E:49:2E:1A:FE:84
Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
Certificate issuer: /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Certificate serial: 12396AB21984D328F0F6000937EA464404B2702B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 15:19:16 +0000
Manifest this update: Fri 19 Jun 2026 15:14:16 +0000
Manifest next update: Sat 20 Jun 2026 16:13:16 +0000
Files and hashes: 1: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: vIEcjw77CIphQaDAYPHv49OItt3hihjyRmA9crPFzrg=)
2: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: clpAyiJg+CNdKPltuUkUa0iDMohvDb510aZlE3T5fdM=)
3: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: /sdcPpV2u273vAuDs0a3qzoz4mqv4YYBgqRWOUy8CPE=)
4: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 55Pgfc5CdrPo/JwquxlSz80gSkyEAvnuVuTU02sK+3E=)
5: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: z6jlGimYEU42w1AAv4WTGHl72QqTJEBb6/46niNS0MM=)
6: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: Ep8qTK0NDLlbE6SNKdL/U9iSghCg+fI8OoOZxYByFbw=)
7: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: DKemgkGfRSsQDIb9t6Dxr8FxG7VecmyFhyl+wtA42dc=)
8: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 6P6QYPdFuq7LsAFOi2tnnEJSwJf9ZQyZm5LNXr5+r6s=)
9: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl (hash: 8/Z6YsDqP6RNzcPujx4DZQ+Cn5/eTL48DQt3C/0GsHw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 16:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:39:6a:b2:19:84:d3:28:f0:f6:00:09:37:ea:46:44:04:b2:70:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Validity
Not Before: Jun 19 15:14:16 2026 GMT
Not After : Jun 20 16:13:16 2026 GMT
Subject: CN=8476C2BB84AD753883305047B7329E492E1AFE84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:c9:a8:41:19:4e:a9:5d:67:bf:c6:08:aa:
8c:d1:d9:85:1c:d5:40:8d:20:ca:52:b1:26:5a:36:
2b:11:55:32:4f:2d:80:c2:e1:ae:78:1b:25:dc:66:
23:32:bc:66:6e:7a:5e:74:2e:97:2f:32:c0:3d:d1:
dc:ee:a3:b7:98:c3:32:10:5e:90:58:26:1f:41:52:
9f:7f:0d:3f:0d:c5:3b:40:7a:63:ee:ed:f8:99:19:
0a:4f:ba:0a:56:58:75:0f:fa:da:b1:7a:57:35:ae:
56:e4:97:72:98:d9:75:51:7e:2b:30:87:3c:89:3f:
72:83:b2:f9:54:e0:37:bd:e8:00:52:e0:a0:9d:df:
13:c2:80:1a:9f:ec:46:f6:e7:2f:47:56:13:6d:0e:
7e:28:01:c9:a4:76:49:45:ac:f4:cc:db:1b:73:23:
ec:af:9b:16:37:6a:36:42:e3:ea:be:33:be:20:f0:
12:0c:aa:eb:eb:39:65:f2:bb:7f:f8:ba:58:7e:ed:
da:e7:cd:ca:0e:1f:f2:95:cf:73:e0:1f:f6:cd:e3:
55:45:00:7b:0c:dc:4a:86:b3:0d:03:9f:09:69:63:
4f:2a:40:5c:ab:ce:50:7f:c4:7d:bf:c9:9a:e3:06:
a0:a7:46:07:da:c3:93:25:75:83:ff:90:19:be:5c:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:76:C2:BB:84:AD:75:38:83:30:50:47:B7:32:9E:49:2E:1A:FE:84
X509v3 Authority Key Identifier:
keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2b:4a:d4:9a:10:81:e5:09:fa:21:b3:5e:e5:9e:81:62:6f:
57:0e:14:d5:2f:54:07:4a:14:cf:71:66:80:22:68:70:f1:f6:
6c:33:5c:ad:fd:64:ef:d0:b6:9d:b2:1b:f5:bb:39:ca:4e:5b:
9a:cc:2b:d8:3e:b9:41:eb:9f:44:a7:90:b4:39:61:9a:ac:4b:
c6:17:46:3a:b2:16:c6:24:71:e6:5c:ba:b0:8a:b7:33:45:74:
d4:43:8e:90:f2:f1:d1:a4:cc:a5:64:10:1c:22:23:a0:0f:cb:
35:e0:00:5c:a7:f3:a2:25:c2:b0:0d:de:2e:4b:e8:d9:fe:8e:
e8:76:14:4a:5c:13:75:7f:16:d8:33:b1:d1:04:8a:90:bf:a9:
fb:b6:52:3f:b5:b0:f2:c0:60:c7:ce:7f:c6:c5:a9:dc:2b:1d:
5c:79:64:5d:b9:e8:d3:b1:43:48:7b:b6:46:d9:9b:d6:76:dc:
ba:7c:1a:cc:a7:84:f7:f4:ef:a5:a7:9a:47:70:aa:64:53:0c:
c7:e5:47:7b:86:ac:ca:47:49:02:38:ef:24:03:3c:19:b0:46:
3d:d2:88:2c:44:b1:e7:c6:ae:07:13:78:ed:d6:7a:71:f5:bd:
63:f2:f2:fb:af:2f:d0:b3:dc:24:2f:5d:58:44:84:af:59:4f:
ff:7d:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:50:18 2026 by rpki-client