
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
File: 51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft (raw, json)
Hash identifier: /GKYIQW9UDFFJtlneQhQaawOBbmim1VjnZMAl3bCtbQ=
Subject key identifier: 12:87:A7:D5:DB:2B:DC:33:80:15:D0:50:9E:4E:CA:49:B4:55:07:17
Authority key identifier: 51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1
Certificate issuer: /CN=51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1
Certificate serial: 17C6267737D06936661D2FF4908C7D6567B0A277
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 19:31:09 +0000
Manifest this update: Sun 25 Oct 2026 19:26:09 +0000
Manifest next update: Mon 26 Oct 2026 20:12:09 +0000
Files and hashes: 1: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: /PcX6luK6vmk98qhiFYynRPuJ2KBptynddU1KiAJS6w=)
2: 51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl (hash: WmQf2hKiMVW7TMZIXMApUDRWMHlRTwGxzQe7bFp1XEM=)
3: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: mSdi1JVXAeBd7ee4i/as65R8EvvnBWeaatN97ha7qSA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl
rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c6:26:77:37:d0:69:36:66:1d:2f:f4:90:8c:7d:65:67:b0:a2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1
Validity
Not Before: Oct 25 19:26:09 2026 GMT
Not After : Oct 26 20:12:09 2026 GMT
Subject: CN=1287A7D5DB2BDC338015D0509E4ECA49B4550717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:a1:ae:0e:0a:5b:d3:30:02:d2:40:2b:a4:
a4:ab:98:7e:f3:a7:9f:70:1f:e0:5a:cc:7b:aa:05:
77:4c:58:28:5a:cb:fb:5e:d3:31:4f:2d:45:89:c5:
67:1b:ba:14:d2:31:99:04:82:f5:d6:4f:11:95:66:
25:60:25:51:8c:8d:d7:70:83:b2:92:cd:17:5b:b2:
ba:56:5a:bc:22:17:c1:90:23:c9:46:e1:34:43:22:
9e:e1:5e:02:df:4e:21:72:27:47:d3:77:c8:da:88:
7d:90:cd:5b:02:8f:1b:92:6f:55:9c:49:ae:cb:20:
e0:99:1b:ce:56:ce:60:e7:54:31:70:d0:be:a0:a2:
1e:da:db:37:aa:24:16:7f:59:23:7d:68:30:cd:0a:
82:8f:f1:fd:0f:13:7f:ed:7e:5c:09:e4:e8:94:f6:
d1:02:e6:48:60:4d:9e:d3:81:c4:79:28:3a:76:60:
f1:d0:d1:76:f7:8a:31:9f:30:07:63:52:ec:3d:de:
a7:ff:87:49:b9:71:40:7c:55:62:41:75:93:af:52:
fb:08:70:00:37:e2:f1:34:9b:e5:4e:37:c3:6e:79:
e9:d3:74:a3:69:d2:ae:da:bb:bb:6e:4f:c1:2c:1c:
e3:be:51:36:73:17:1b:f1:96:fb:b3:8a:21:54:f4:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:A7:D5:DB:2B:DC:33:80:15:D0:50:9E:4E:CA:49:B4:55:07:17
X509v3 Authority Key Identifier:
keyid:51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:eb:e8:13:ee:37:b7:04:02:af:fe:0b:7c:81:6f:e9:2f:be:
a8:9e:82:7b:33:07:58:30:79:21:f3:92:c2:3c:2e:aa:fe:c8:
7f:88:09:12:af:73:94:4a:cc:cb:31:24:7a:43:6c:a6:aa:78:
3f:c1:b4:3b:27:1d:6e:66:57:a7:a2:e4:c7:49:f3:0f:ec:7c:
5f:60:a2:ac:b1:af:bb:c5:1b:c5:bd:e4:ca:74:c7:b8:b7:02:
0c:f0:f7:24:67:53:45:38:8f:23:8c:e5:18:00:22:93:ef:b2:
0f:36:76:7c:87:d4:19:a5:e7:4b:97:6d:92:c3:32:ed:86:1b:
4d:a1:d7:cd:20:49:9c:59:d3:78:67:0d:25:36:25:20:bf:bb:
81:a6:0e:82:72:0d:2d:a9:fe:38:41:32:b8:97:6a:87:6b:70:
74:44:0f:ba:ea:1c:1e:6a:43:10:86:3c:8f:8e:c0:3d:b7:2e:
14:47:6e:1f:5a:0f:68:ec:36:7b:f8:1d:72:82:ca:6d:28:e0:
af:e8:9d:8b:d1:0f:d6:98:4c:95:e4:55:8c:bf:33:13:58:00:
49:7f:a6:d7:56:e9:ad:fa:05:cb:e7:71:e5:c2:22:92:5e:e0:
be:f1:fe:b7:a0:9e:8e:a6:18:78:5a:7e:76:65:e9:39:0b:9d:
eb:fb:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:40 2026 by rpki-client