$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft File: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json) Hash identifier: tVJU+xOPE/NEtCVlnFiv5qWylga3wE41zw6nEpdR1Uo= Subject key identifier: 41:F0:E4:B8:29:25:DE:79:90:0B:E7:54:F6:4A:35:A0:CF:A6:FB:79 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 27EB6C55F5B8040B8EAD56CF4D0436080799BE10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft Manifest number: 04E2 Signing time: Sun 15 Jun 2025 06:11:13 +0000 Manifest this update: Sun 15 Jun 2025 06:06:13 +0000 Manifest next update: Wed 18 Jun 2025 13:25:13 +0000 Files and hashes: 1: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: hHPw+Xqwsov7fA4EH++xE5Fe/5zBy6SOylLmX+aVZlE=) 2: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: E70nlSvwN/YRzt3ipt5eUpiof5ZiDppc9oAiJGHFIb4=) 3: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: MpDUQT8A3dZvwWRQtlzD2B+hHv7+ces35KG+DCb4lSw=) 4: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: KMXBXh+Hz9t8Vs+CANui3lrLwoDdVGoivVhKoGTM+n0=) 5: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: GSClA7IL1JyVGUn07pSx30K3I6HJMuKcse75Nhmpg1g=) 6: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: frS3InbJAyXvfYFJ9oqdkhlt6S7xP80lfV9ZpnmpcMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:eb:6c:55:f5:b8:04:0b:8e:ad:56:cf:4d:04:36:08:07:99:be:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: Jun 15 06:06:13 2025 GMT Not After : Jun 18 13:25:13 2025 GMT Subject: CN=41F0E4B82925DE79900BE754F64A35A0CFA6FB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:66:ed:ca:b9:3d:a1:c6:0c:ce:8f:48:2f: f6:7f:44:b5:f8:51:7c:c6:69:17:16:b5:1a:12:d2: 26:63:65:1f:d9:18:10:e0:64:ac:72:7c:97:b5:20: 0d:72:2c:91:5c:93:3b:70:40:7e:5c:f1:4c:36:6f: cd:ed:18:77:a6:36:6a:c0:a4:ef:84:23:b3:e2:80: 39:ad:b8:a9:01:f8:f2:f0:73:ad:c4:d8:f9:bc:17: 22:9f:55:b8:2d:0e:ab:ea:ff:9f:d1:ef:d4:17:18: 16:a7:6e:21:74:02:79:45:76:72:c0:a3:db:1a:b1: 4f:c2:64:1c:fe:88:3c:73:b6:9c:b1:62:98:f7:bd: 6f:c6:f2:fa:72:c4:f4:01:7e:c8:54:9c:4a:97:9d: f7:81:69:f0:06:40:29:85:48:0e:63:06:5b:39:54: 1e:b9:6f:ac:ca:68:40:79:21:9d:3b:52:e6:be:29: 15:30:a8:2b:30:7f:86:a2:27:77:48:e2:81:d5:c0: ed:98:40:fa:46:8c:2f:76:f9:df:3b:aa:6e:08:53: 75:14:5f:1c:37:27:08:10:4c:e9:0a:e6:12:67:f8: 96:3a:e7:db:43:57:bb:c4:3a:cf:ba:34:31:76:48: ce:1a:76:b2:25:b9:89:ae:43:4d:2b:5d:b3:52:c4: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F0:E4:B8:29:25:DE:79:90:0B:E7:54:F6:4A:35:A0:CF:A6:FB:79 X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6e:ba:c8:d6:81:c4:04:20:f7:69:b1:04:c5:20:dc:fd:ee: ba:b4:5b:25:ba:8d:5a:a3:93:d3:28:ee:27:e5:d2:99:1e:fb: d6:da:f1:d6:4d:73:26:6b:ce:66:9c:54:95:a4:a3:0d:04:5f: 62:71:86:a8:26:49:2f:5f:64:ee:6c:64:d6:36:aa:06:ec:62: b8:38:2b:f6:58:b3:fd:2a:69:a8:c4:df:cf:22:2d:7e:8d:19: bf:bc:65:49:19:b8:ae:2b:92:ba:2c:7f:fb:5c:f8:91:ca:7a: 32:9e:22:f6:da:ee:f2:4f:a6:f8:0b:c4:57:e9:7a:d4:f2:2e: fa:af:e7:e7:21:f6:d7:aa:41:40:49:e0:ec:08:0e:9e:ad:d0: 63:35:4f:40:55:64:0d:0a:67:cd:52:eb:25:ad:ba:7d:f6:fe: 05:36:26:c3:9c:ff:8c:3f:c5:8e:94:b6:dd:83:58:ea:60:68: 37:c5:f8:a9:44:6c:18:5a:bc:d3:04:6d:9b:28:db:f7:55:56: 78:79:b5:5b:5e:ed:41:59:b2:27:87:40:d3:fa:e4:04:b8:91: 2e:b3:96:dc:f5:09:7f:91:5f:d0:07:79:e3:16:dd:73:19:62: be:62:ee:c9:b7:d1:62:ca:3a:89:ec:12:4d:3a:af:f0:cc:8c: 3d:f8:99:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+tsVfW4BAuOrVbPTQQ2CAeZvhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yNTA2MTUwNjA2MTNaFw0yNTA2MTgxMzI1MTNaMDMxMTAvBgNV BAMTKDQxRjBFNEI4MjkyNURFNzk5MDBCRTc1NEY2NEEzNUEwQ0ZBNkZCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6Gbtyrk9ocYMzo9IL/Z/RLX4 UXzGaRcWtRoS0iZjZR/ZGBDgZKxyfJe1IA1yLJFckztwQH5c8Uw2b83tGHemNmrA pO+EI7PigDmtuKkB+PLwc63E2Pm8FyKfVbgtDqvq/5/R79QXGBanbiF0AnlFdnLA o9sasU/CZBz+iDxztpyxYpj3vW/G8vpyxPQBfshUnEqXnfeBafAGQCmFSA5jBls5 VB65b6zKaEB5IZ07Uua+KRUwqCswf4aiJ3dI4oHVwO2YQPpGjC92+d87qm4IU3UU Xxw3JwgQTOkK5hJn+JY659tDV7vEOs+6NDF2SM4adrIluYmuQ00rXbNSxHlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQfDkuCkl3nmQC+dU9ko1oM+m+3kwHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhuusjWgcQEIPdpsQTFINz97rq0WyW6jVqj k9Mo7ifl0pke+9ba8dZNcyZrzmacVJWkow0EX2JxhqgmSS9fZO5sZNY2qgbsYrg4 K/ZYs/0qaajE388iLX6NGb+8ZUkZuK4rkrosf/tc+JHKejKeIvba7vJPpvgLxFfp etTyLvqv5+ch9teqQUBJ4OwIDp6t0GM1T0BVZA0KZ81S6yWtun32/gU2JsOc/4w/ xY6Utt2DWOpgaDfF+KlEbBhavNMEbZso2/dVVnh5tVte7UFZsieHQNP65AS4kS6z ltz1CX+RX9AHeeMW3XMZYr5i7sm30WLKOonsEk06r/DMjD34mXg= -----END CERTIFICATE-----Generated at Mon Jun 16 00:38:44 2025 by rpki-client