$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft File: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json) Hash identifier: sFozd9S0Sh0Bnh1MNMU/1BK0z3iTapthOllkSCn3xvI= Subject key identifier: 2A:2F:97:8C:61:C2:74:6A:52:53:A0:50:A7:B2:A9:48:C2:AD:C8:52 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 3BC2A57F26F08DEB51708AAE3AD20DE2C4A1706D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft Manifest number: 056A Signing time: Fri 17 Apr 2026 17:21:27 +0000 Manifest this update: Fri 17 Apr 2026 17:16:27 +0000 Manifest next update: Tue 21 Apr 2026 02:46:27 +0000 Files and hashes: 1: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: 1kySu/8vA7c9TEhxA11WzQ01Cs5nvlhSxRFV/dwT85A=) 2: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: hHPw+Xqwsov7fA4EH++xE5Fe/5zBy6SOylLmX+aVZlE=) 3: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: MpDUQT8A3dZvwWRQtlzD2B+hHv7+ces35KG+DCb4lSw=) 4: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: KMXBXh+Hz9t8Vs+CANui3lrLwoDdVGoivVhKoGTM+n0=) 5: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: EZ5aOL7mpVTkNbGpU33KXHXodkOhpTQ6YG1hqKJcWtg=) 6: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: frS3InbJAyXvfYFJ9oqdkhlt6S7xP80lfV9ZpnmpcMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c2:a5:7f:26:f0:8d:eb:51:70:8a:ae:3a:d2:0d:e2:c4:a1:70:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: Apr 17 17:16:27 2026 GMT Not After : Apr 21 02:46:27 2026 GMT Subject: CN=2A2F978C61C2746A5253A050A7B2A948C2ADC852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:43:26:a5:52:23:89:a6:1a:0d:fd:15:9d: 8d:2e:56:40:c5:9a:a1:71:25:4d:29:c5:12:1e:0f: 3d:0a:5d:7d:df:93:43:70:18:f7:d5:3e:4c:dc:e3: 75:88:d3:58:ae:cc:7a:59:00:f7:e7:07:d3:ac:3e: e4:56:46:c8:27:35:1d:f6:a1:1c:de:b2:ae:80:c7: db:65:48:da:d1:b0:40:dc:1a:e7:f8:a0:be:00:f4: 59:09:e2:ad:9a:a9:82:3f:ed:c9:13:54:5c:87:4e: fe:a3:6a:65:3f:a0:21:c2:92:43:37:82:2e:5b:ff: 44:94:44:48:3f:10:19:42:7d:2a:ce:2b:e3:dc:31: b0:09:d9:1d:ea:7f:ad:c7:1d:58:56:5d:7e:d9:7f: be:9b:ec:f1:c8:c3:64:22:d3:12:ff:d8:17:71:91: 4c:c9:c9:93:70:a7:77:52:b1:7e:0f:25:82:9e:89: 0d:12:3a:e8:b8:f9:f3:18:dc:59:b5:bc:07:1e:bb: 4d:61:ae:96:d5:db:86:58:f7:26:0f:01:85:8c:c8: 2b:34:79:63:84:42:09:18:a7:45:da:91:1c:13:57: a9:66:95:2a:00:2e:8b:3a:c4:6a:f0:f3:d6:53:93: fc:a0:b0:8e:04:c7:db:9a:59:05:81:e9:41:cb:68: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2F:97:8C:61:C2:74:6A:52:53:A0:50:A7:B2:A9:48:C2:AD:C8:52 X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a4:72:00:37:85:65:69:53:09:12:72:e3:ff:3c:fe:e4:09: c4:65:cf:ad:c7:de:bd:0d:bf:a6:dd:d7:8e:d9:90:d5:b4:61: 6d:6a:a1:d7:85:55:09:56:0a:8b:21:4b:d3:2e:e7:61:0a:a9: 9b:4e:14:79:2f:a2:4e:82:f4:71:7a:6b:83:e3:98:3d:da:b1: a5:3e:26:91:8e:c5:02:fe:5c:9f:5c:52:5d:2d:c3:9a:21:61: 1a:e5:a9:24:b0:23:18:a6:78:c2:ca:f6:74:63:4f:0d:26:d8: 07:d5:e8:06:ee:a7:9a:44:a9:bd:44:55:25:9a:02:77:a8:11: 89:d5:25:2c:38:19:b9:f8:e0:b8:a8:56:bb:8d:fa:de:29:64: 5d:06:89:e6:85:ca:03:0d:7d:04:fc:35:b9:5d:16:33:62:5f: 0a:fa:01:51:a0:57:8c:5a:0c:cb:2e:b4:fb:b5:ee:66:05:cc: 17:0c:78:de:39:7e:ee:7c:88:c3:62:a9:89:0f:9d:3a:80:ba: d2:8a:11:36:09:88:97:ca:29:c7:27:96:a4:ab:6f:93:89:a0: e4:07:fc:52:c4:eb:8d:6e:fc:9e:b0:43:36:93:5e:70:c0:07: 88:d5:90:14:2b:94:bb:2b:cd:3b:2a:02:f7:e2:91:2d:5a:f9: 2d:b3:df:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8KlfybwjetRcIquOtIN4sShcG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yNjA0MTcxNzE2MjdaFw0yNjA0MjEwMjQ2MjdaMDMxMTAvBgNV BAMTKDJBMkY5NzhDNjFDMjc0NkE1MjUzQTA1MEE3QjJBOTQ4QzJBREM4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWhUMmpVIjiaYaDf0VnY0uVkDF mqFxJU0pxRIeDz0KXX3fk0NwGPfVPkzc43WI01iuzHpZAPfnB9OsPuRWRsgnNR32 oRzesq6Ax9tlSNrRsEDcGuf4oL4A9FkJ4q2aqYI/7ckTVFyHTv6jamU/oCHCkkM3 gi5b/0SUREg/EBlCfSrOK+PcMbAJ2R3qf63HHVhWXX7Zf76b7PHIw2Qi0xL/2Bdx kUzJyZNwp3dSsX4PJYKeiQ0SOui4+fMY3Fm1vAceu01hrpbV24ZY9yYPAYWMyCs0 eWOEQgkYp0XakRwTV6lmlSoALos6xGrw89ZTk/ygsI4Ex9uaWQWB6UHLaKg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKi+XjGHCdGpSU6BQp7KpSMKtyFIwHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGkcgA3hWVpUwkScuP/PP7kCcRlz63H3r0N v6bd147ZkNW0YW1qodeFVQlWCoshS9Mu52EKqZtOFHkvok6C9HF6a4PjmD3asaU+ JpGOxQL+XJ9cUl0tw5ohYRrlqSSwIximeMLK9nRjTw0m2AfV6Abup5pEqb1EVSWa AneoEYnVJSw4Gbn44LioVruN+t4pZF0GieaFygMNfQT8NbldFjNiXwr6AVGgV4xa DMsutPu17mYFzBcMeN45fu58iMNiqYkPnTqAutKKETYJiJfKKccnlqSrb5OJoOQH /FLE641u/J6wQzaTXnDAB4jVkBQrlLsrzTsqAvfikS1a+S2z35M= -----END CERTIFICATE-----Generated at Sat Apr 18 06:15:06 2026 by rpki-client