
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft
File: B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft (raw, json)
Hash identifier: c4NiT3njW6dymkyo4wmGkO0SEcR32zzUD9Fx/yyzg9c=
Subject key identifier: A6:E3:C8:02:FB:2F:A9:CC:49:A4:60:7B:A7:51:B0:60:F9:52:66:33
Authority key identifier: B5:13:32:A8:B5:18:5A:35:42:E8:56:4F:76:BC:EB:6F:18:6C:D4:B1
Certificate issuer: /CN=B51332A8B5185A3542E8564F76BCEB6F186CD4B1
Certificate serial: 14D759FAFEB61EA6AB5E0D43D8ECC91BEED7E10B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 07:50:55 +0000
Manifest this update: Wed 23 Sep 2026 07:45:55 +0000
Manifest next update: Thu 24 Sep 2026 08:29:55 +0000
Files and hashes: 1: 3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa (hash: /VFW2nze35yw52Bk15Yjl+x3M7JqSF5rvpX1IPmcw0s=)
2: B51332A8B5185A3542E8564F76BCEB6F186CD4B1.crl (hash: ChOJUqtpM9JraF+MEY72TZwtjv4KPPJgyj8hLAhqaz4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.crl
rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 06:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d7:59:fa:fe:b6:1e:a6:ab:5e:0d:43:d8:ec:c9:1b:ee:d7:e1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B51332A8B5185A3542E8564F76BCEB6F186CD4B1
Validity
Not Before: Sep 23 07:45:55 2026 GMT
Not After : Sep 24 08:29:55 2026 GMT
Subject: CN=A6E3C802FB2FA9CC49A4607BA751B060F9526633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:4a:91:56:4b:f2:fe:8c:2e:11:0b:36:13:
75:f0:00:52:f2:2f:50:19:00:b0:ec:a6:7e:d5:33:
12:bf:9d:49:6e:38:f3:70:5a:e3:ce:7c:7e:f5:67:
34:22:8b:66:30:b6:c2:f0:39:69:4c:31:a5:d4:b9:
e8:31:2d:c5:0c:64:9a:d9:7f:ea:c8:a3:ad:62:6c:
a1:6c:ed:33:16:f5:5e:1b:8a:b1:36:02:de:f2:06:
d7:43:61:3e:3f:6d:47:d8:4f:d9:50:74:78:cf:e5:
7e:32:ed:85:0d:de:8a:e8:e6:5c:09:f8:c1:19:89:
bc:4b:ef:d4:68:24:e2:f6:27:09:20:95:e2:c7:48:
bc:c2:dd:4b:4d:16:f8:bb:93:b4:0d:e8:8e:31:53:
bc:63:2d:cb:a6:47:48:83:f0:04:bb:e5:2b:cb:03:
5f:e5:a1:5b:6f:04:c9:81:5a:14:cc:f8:6b:d2:59:
19:e8:9c:22:07:8e:74:57:9b:47:ae:9e:6b:c6:80:
1a:34:1f:34:67:bc:76:7d:3d:f7:66:af:f6:d9:d4:
a4:e6:75:41:c2:4e:76:95:b4:3d:6e:01:40:21:74:
81:ef:e1:b9:f3:b7:95:14:4e:ae:9b:4f:4a:6b:d9:
40:f1:0c:bd:2d:df:e9:59:be:8c:1e:93:1b:78:b2:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E3:C8:02:FB:2F:A9:CC:49:A4:60:7B:A7:51:B0:60:F9:52:66:33
X509v3 Authority Key Identifier:
keyid:B5:13:32:A8:B5:18:5A:35:42:E8:56:4F:76:BC:EB:6F:18:6C:D4:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:38:aa:59:c8:71:de:c3:c5:38:fb:d7:65:2f:f1:80:ef:04:
b0:84:da:25:5f:8a:b5:fc:26:7f:64:f4:62:6d:f2:4c:6f:f4:
e7:7a:e6:3f:79:18:60:2d:ae:f2:15:bc:a7:5d:4b:b5:7c:bf:
9b:3c:a4:fe:60:d8:85:13:d8:89:4e:78:94:8c:bf:d7:84:7d:
61:f3:4f:03:cd:4d:90:de:24:83:d8:6f:11:6f:7e:70:a3:30:
73:97:fa:1f:5e:0a:d7:1e:93:87:cb:49:be:79:33:05:d5:2c:
2a:b9:3e:de:89:15:a2:9d:fd:94:48:c9:25:6a:41:c4:84:c2:
62:cf:58:e6:63:05:15:cd:27:4b:81:0f:a4:2a:df:72:de:83:
ab:04:a6:87:20:e8:1f:30:ae:7b:d0:b2:e8:b1:22:a3:2d:cb:
85:54:f7:19:a3:f4:73:7d:ef:67:cd:c5:af:7d:c1:9d:68:4f:
9d:f7:ed:f6:af:17:2c:de:9f:49:1f:b7:e8:57:67:f6:08:b1:
56:74:2c:4c:b3:af:94:4c:c5:cf:0e:e3:0f:e7:35:8e:39:83:
f4:e7:21:6f:71:51:cf:d5:bf:38:6c:74:59:f0:f5:8e:af:4b:
f5:ca:72:49:54:bd:c5:3b:2a:a0:d3:a5:e4:93:03:58:24:58:
c4:85:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:15:45 2026 by rpki-client