$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft File: B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft (raw, json) Hash identifier: +jAVDkBqTPj0DW66iofaJB8GUF7j4EQYOppGHh5izzk= Subject key identifier: 4B:02:6E:4D:41:18:A0:CE:DB:4B:C7:7F:67:BC:EE:48:E9:56:BF:10 Authority key identifier: B5:13:32:A8:B5:18:5A:35:42:E8:56:4F:76:BC:EB:6F:18:6C:D4:B1 Certificate issuer: /CN=B51332A8B5185A3542E8564F76BCEB6F186CD4B1 Certificate serial: 6E71B6A89461F9264A69B46ED2ACB37AD2FB90B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 18:37:51 +0000 Manifest this update: Sat 14 Nov 2026 18:32:51 +0000 Manifest next update: Sun 15 Nov 2026 21:54:51 +0000 Files and hashes: 1: B51332A8B5185A3542E8564F76BCEB6F186CD4B1.crl (hash: YBI6QKSsqc5IPJXrAWGmL9Q2gLwIfDbncAugdBPthHQ=) 2: 3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa (hash: /VFW2nze35yw52Bk15Yjl+x3M7JqSF5rvpX1IPmcw0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.crl rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:71:b6:a8:94:61:f9:26:4a:69:b4:6e:d2:ac:b3:7a:d2:fb:90:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B51332A8B5185A3542E8564F76BCEB6F186CD4B1 Validity Not Before: Nov 14 18:32:51 2026 GMT Not After : Nov 15 21:54:51 2026 GMT Subject: CN=4B026E4D4118A0CEDB4BC77F67BCEE48E956BF10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:00:b7:30:3b:38:8b:87:a0:99:f5:2d:b9: b1:b3:92:cc:48:32:07:13:de:72:9a:9d:dd:64:45: 5b:4a:e5:ce:ea:e0:c2:00:e8:47:72:03:4f:cb:05: c3:25:98:eb:97:22:76:6a:16:57:82:06:cc:57:95: 14:00:89:43:c6:cb:55:88:f0:47:d6:84:28:fc:81: 15:8a:3f:4c:51:03:33:88:27:58:33:71:3b:6b:70: 65:73:ba:51:22:bd:9b:1f:b2:c0:e4:36:93:0b:50: a8:e4:2b:ad:3e:e9:44:93:e2:fa:3d:6f:55:dc:dd: 50:b5:ca:72:9f:12:80:cb:29:41:16:a1:58:49:57: 4d:61:d8:2c:7d:01:76:62:7e:34:30:9d:86:51:4a: 92:99:0c:76:09:9d:69:70:74:ca:59:59:c6:41:51: ad:42:42:f7:a2:28:2d:fa:8b:44:7d:a0:a0:4e:63: bd:48:1e:8f:ce:78:70:61:ed:b9:6e:dd:f5:01:ed: fa:46:50:20:40:38:8a:cb:8a:1d:de:62:c1:b0:af: 6c:ba:27:60:43:03:a4:b5:ba:43:ef:de:47:32:a2: 18:1e:de:ba:fa:3a:96:e5:2d:ee:ac:4e:85:a7:35: 11:ba:1a:c1:fe:c7:5a:6e:fd:57:a0:f9:a3:d7:f7: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:02:6E:4D:41:18:A0:CE:DB:4B:C7:7F:67:BC:EE:48:E9:56:BF:10 X509v3 Authority Key Identifier: keyid:B5:13:32:A8:B5:18:5A:35:42:E8:56:4F:76:BC:EB:6F:18:6C:D4:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/B51332A8B5185A3542E8564F76BCEB6F186CD4B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:6b:be:39:7b:ce:e1:ba:93:2d:74:b7:f6:bb:11:c8:ef:79: 3a:81:fe:ad:20:ce:93:6a:75:9d:36:bc:f9:f9:1b:c3:8c:92: 3d:04:b4:3e:ed:0b:30:16:2f:bc:13:3b:7c:f1:ed:77:01:71: 4d:10:86:6c:fb:2a:4e:a8:4f:55:a5:dd:85:f6:98:3d:77:6e: 34:d4:b2:6f:d7:d6:f7:0a:ab:95:4b:8f:aa:82:8b:d3:25:00: 6e:d2:85:58:3a:5c:57:3c:2c:ee:20:a6:7a:7a:3a:29:78:4d: a5:85:c4:00:05:cd:c8:9e:f5:40:1f:90:48:4a:5f:a5:a0:51: 8b:79:c8:88:14:f1:ef:df:3b:b4:ac:d6:88:41:68:18:a9:5d: 73:94:74:6d:23:a9:d8:77:ee:8c:2d:d3:9a:66:6d:cd:9b:e7: 83:24:bf:1d:cb:4f:4f:90:b0:30:26:6c:46:db:3a:e9:17:1c: 5b:81:62:52:d7:fd:e8:03:65:68:03:cd:c8:9c:63:36:a0:bd: 4d:c5:04:31:be:8d:9f:54:ba:61:af:55:e9:ae:b8:90:77:fa: cb:69:f3:f3:e8:8f:ef:d5:e3:ba:98:45:fb:95:0d:3a:5f:e3: d2:93:81:50:94:71:62:d6:6a:60:7b:82:5c:35:4e:1e:fb:36: 69:1e:20:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnG2qJRh+SZKabRu0qyzetL7kLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxMzMyQThCNTE4NUEzNTQyRTg1NjRGNzZCQ0VCNkYx ODZDRDRCMTAeFw0yNjExMTQxODMyNTFaFw0yNjExMTUyMTU0NTFaMDMxMTAvBgNV BAMTKDRCMDI2RTRENDExOEEwQ0VEQjRCQzc3RjY3QkNFRTQ4RTk1NkJGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wwC3MDs4i4egmfUtubGzksxI MgcT3nKand1kRVtK5c7q4MIA6EdyA0/LBcMlmOuXInZqFleCBsxXlRQAiUPGy1WI 8EfWhCj8gRWKP0xRAzOIJ1gzcTtrcGVzulEivZsfssDkNpMLUKjkK60+6UST4vo9 b1Xc3VC1ynKfEoDLKUEWoVhJV01h2Cx9AXZifjQwnYZRSpKZDHYJnWlwdMpZWcZB Ua1CQveiKC36i0R9oKBOY71IHo/OeHBh7blu3fUB7fpGUCBAOIrLih3eYsGwr2y6 J2BDA6S1ukPv3kcyohge3rr6OpblLe6sToWnNRG6GsH+x1pu/Veg+aPX95E1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSwJuTUEYoM7bS8d/Z7zuSOlWvxAwHwYDVR0j BBgwFoAUtRMyqLUYWjVC6FZPdrzrbxhs1LEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWMyZmMxZDQtMzdhNi00OTQzLWI0YzYtNmQ4ZTliNGU1NTkxLzAvQjUxMzMyQThC NTE4NUEzNTQyRTg1NjRGNzZCQ0VCNkYxODZDRDRCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNTEzMzJBOEI1MTg1QTM1NDJFODU2NEY3NkJDRUI2RjE4NkNE NEIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWMyZmMxZDQtMzdhNi00OTQzLWI0 YzYtNmQ4ZTliNGU1NTkxLzAvQjUxMzMyQThCNTE4NUEzNTQyRTg1NjRGNzZCQ0VC NkYxODZDRDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZrvjl7zuG6ky10t/a7EcjveTqB/q0gzpNq dZ02vPn5G8OMkj0EtD7tCzAWL7wTO3zx7XcBcU0Qhmz7Kk6oT1Wl3YX2mD13bjTU sm/X1vcKq5VLj6qCi9MlAG7ShVg6XFc8LO4gpnp6Oil4TaWFxAAFzcie9UAfkEhK X6WgUYt5yIgU8e/fO7Ss1ohBaBipXXOUdG0jqdh37owt05pmbc2b54Mkvx3LT0+Q sDAmbEbbOukXHFuBYlLX/egDZWgDzcicYzagvU3FBDG+jZ9UumGvVemuuJB3+stp 8/Poj+/V47qYRfuVDTpf49KTgVCUcWLWamB7glw1Th77NmkeIIc= -----END CERTIFICATE-----Generated at Sat Nov 14 22:25:23 2026 by rpki-client