$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft File: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json) Hash identifier: rVV4+jB8WmmxU4aDzdRxDnDe6PMbbdL4Fea7JHsuQIQ= Subject key identifier: CE:71:8D:91:42:EA:96:9A:0C:0D:53:65:08:80:0A:D1:AE:7B:52:B2 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 1AC2AB0FA90070B7084751C318496E11BBA8D5E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft Manifest number: 0555 Signing time: Sun 01 Mar 2026 06:32:32 +0000 Manifest this update: Sun 01 Mar 2026 06:27:31 +0000 Manifest next update: Wed 04 Mar 2026 15:49:31 +0000 Files and hashes: 1: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: KMXBXh+Hz9t8Vs+CANui3lrLwoDdVGoivVhKoGTM+n0=) 2: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: frS3InbJAyXvfYFJ9oqdkhlt6S7xP80lfV9ZpnmpcMc=) 3: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: MpDUQT8A3dZvwWRQtlzD2B+hHv7+ces35KG+DCb4lSw=) 4: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: hHPw+Xqwsov7fA4EH++xE5Fe/5zBy6SOylLmX+aVZlE=) 5: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: E70nlSvwN/YRzt3ipt5eUpiof5ZiDppc9oAiJGHFIb4=) 6: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: ezBkPJDAkZ1/lL5WxSk4kq822TkRMOnKASdNhyCV7x4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c2:ab:0f:a9:00:70:b7:08:47:51:c3:18:49:6e:11:bb:a8:d5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: Mar 1 06:27:31 2026 GMT Not After : Mar 4 15:49:31 2026 GMT Subject: CN=CE718D9142EA969A0C0D536508800AD1AE7B52B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:12:e5:6d:52:a2:90:ef:ab:11:7d:53:c6: 4a:f3:a0:da:cf:63:7d:01:35:92:f6:23:44:60:e4: 8d:fa:19:90:7e:4b:31:23:cb:53:b4:cf:9c:79:4a: 23:43:1d:b5:c5:77:34:20:4b:27:88:da:70:1f:3a: 58:8f:76:6f:3d:7f:26:84:d5:9f:ab:cc:eb:d5:d1: 56:51:26:e5:93:fe:c6:5c:a4:da:f2:f4:c3:8a:17: e8:1a:00:88:50:0a:43:07:ba:b1:fe:47:bc:9f:c1: bc:43:2e:06:46:92:3e:ef:cc:bf:9f:f5:ab:b7:99: b1:75:b8:58:42:84:99:a6:05:eb:1d:9c:52:30:cb: 08:2c:88:ed:35:9b:28:7b:0d:13:93:94:82:b1:60: 27:0c:be:99:e7:ae:a9:ba:de:d2:b9:61:6e:78:4f: 79:12:0e:57:fe:cb:48:f4:8e:55:a9:50:66:97:2b: 81:f1:1c:8b:ed:2b:cf:d8:20:ed:3b:f3:76:30:ac: 41:31:c3:f3:9c:65:e5:b9:5c:18:74:5d:4c:b4:04: 81:59:f6:e0:a1:16:e0:67:cd:8d:56:6b:18:b1:a3: c6:04:1b:31:4d:15:3d:d0:39:b9:be:1a:6d:c7:64: 3b:92:93:03:79:f0:b0:dc:fe:7c:09:67:2d:58:f3: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:71:8D:91:42:EA:96:9A:0C:0D:53:65:08:80:0A:D1:AE:7B:52:B2 X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:38:f4:db:ff:27:17:e6:1a:6b:ac:b6:9f:c7:1a:b8:8b:88: dd:61:4a:2a:93:e5:70:5e:7c:57:2b:46:75:a4:74:ad:f4:2d: db:bf:3d:01:2d:28:51:88:05:ce:f3:dc:c7:8e:14:0d:c2:29: 1a:83:54:44:18:ef:4f:ec:41:a7:fe:f6:c9:42:46:07:eb:53: 37:54:45:5e:83:bc:d5:fd:5e:d3:43:fa:b4:5f:cb:5f:f6:2f: be:72:50:01:02:7a:57:60:db:8a:a7:61:b0:60:e6:db:37:06: 72:94:8d:d7:19:0b:b6:fc:7c:dd:f3:73:0f:7b:b8:26:df:a3: de:84:ca:e2:d3:71:78:22:67:51:fa:9f:10:56:9c:0c:79:ba: 77:27:eb:2f:66:54:27:4e:07:02:4b:59:7b:3f:4d:09:f6:e1: a0:f1:f7:51:78:2a:51:01:da:a2:5f:9e:b1:95:2d:36:0e:cc: 04:db:d9:67:5b:15:ec:c9:c2:bf:80:9e:66:ce:4d:32:9a:bb: d7:17:ab:25:d1:e8:b1:f4:cb:09:f5:e8:bb:a1:be:f0:43:23: 68:d0:45:08:34:63:79:13:2b:42:38:e2:6d:6a:5d:81:67:55: af:cd:7a:fe:bc:0f:7e:ef:67:e1:dd:27:d1:b8:ea:e0:51:f3: 14:5c:1d:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsKrD6kAcLcIR1HDGEluEbuo1eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yNjAzMDEwNjI3MzFaFw0yNjAzMDQxNTQ5MzFaMDMxMTAvBgNV BAMTKENFNzE4RDkxNDJFQTk2OUEwQzBENTM2NTA4ODAwQUQxQUU3QjUyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkRLlbVKikO+rEX1TxkrzoNrP Y30BNZL2I0Rg5I36GZB+SzEjy1O0z5x5SiNDHbXFdzQgSyeI2nAfOliPdm89fyaE 1Z+rzOvV0VZRJuWT/sZcpNry9MOKF+gaAIhQCkMHurH+R7yfwbxDLgZGkj7vzL+f 9au3mbF1uFhChJmmBesdnFIwywgsiO01myh7DROTlIKxYCcMvpnnrqm63tK5YW54 T3kSDlf+y0j0jlWpUGaXK4HxHIvtK8/YIO0783YwrEExw/OcZeW5XBh0XUy0BIFZ 9uChFuBnzY1Waxixo8YEGzFNFT3QObm+Gm3HZDuSkwN58LDc/nwJZy1Y8wW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUznGNkULqlpoMDVNlCIAK0a57UrIwHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY49Nv/JxfmGmustp/HGriLiN1hSiqT5XBe fFcrRnWkdK30Ldu/PQEtKFGIBc7z3MeOFA3CKRqDVEQY70/sQaf+9slCRgfrUzdU RV6DvNX9XtND+rRfy1/2L75yUAECeldg24qnYbBg5ts3BnKUjdcZC7b8fN3zcw97 uCbfo96EyuLTcXgiZ1H6nxBWnAx5uncn6y9mVCdOBwJLWXs/TQn24aDx91F4KlEB 2qJfnrGVLTYOzATb2WdbFezJwr+AnmbOTTKau9cXqyXR6LH0ywn16LuhvvBDI2jQ RQg0Y3kTK0I44m1qXYFnVa/Nev68D37vZ+HdJ9G46uBR8xRcHcA= -----END CERTIFICATE-----Generated at Mon Mar 2 16:31:51 2026 by rpki-client