
$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
File: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json)
Hash identifier: B4EUNXHmeulwdahLo/TwQtaaOjcp0UpCWw1IEPUyagI=
Subject key identifier: 56:79:19:79:61:CF:73:4B:26:72:F3:CE:B9:07:9D:CA:F5:92:C0:BA
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial: 30C38C872EFD5129450C35DD9434D3B21DA1E17A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
Manifest number: 055C
Signing time: Tue 17 Mar 2026 04:51:27 +0000
Manifest this update: Tue 17 Mar 2026 04:46:27 +0000
Manifest next update: Fri 20 Mar 2026 09:24:27 +0000
Files and hashes: 1: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: frS3InbJAyXvfYFJ9oqdkhlt6S7xP80lfV9ZpnmpcMc=)
2: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: EZ5aOL7mpVTkNbGpU33KXHXodkOhpTQ6YG1hqKJcWtg=)
3: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: MpDUQT8A3dZvwWRQtlzD2B+hHv7+ces35KG+DCb4lSw=)
4: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: WHn5Idf2ndhsjSYR0e6yip5oJYrIfUey6spTehrAtOA=)
5: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: hHPw+Xqwsov7fA4EH++xE5Fe/5zBy6SOylLmX+aVZlE=)
6: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: KMXBXh+Hz9t8Vs+CANui3lrLwoDdVGoivVhKoGTM+n0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 09:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c3:8c:87:2e:fd:51:29:45:0c:35:dd:94:34:d3:b2:1d:a1:e1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Validity
Not Before: Mar 17 04:46:27 2026 GMT
Not After : Mar 20 09:24:27 2026 GMT
Subject: CN=5679197961CF734B2672F3CEB9079DCAF592C0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:71:c4:3a:7a:a5:80:48:45:4e:5e:73:ad:
03:e8:32:69:71:73:d5:75:2c:50:98:7b:e8:74:5c:
25:65:26:bb:a5:5d:68:f3:f5:fe:da:9f:13:88:89:
bb:7a:ce:af:24:51:05:12:13:9e:8a:17:99:9d:64:
6b:6c:30:58:97:40:ba:99:56:dd:da:1a:44:8b:34:
75:c4:a5:9c:7d:70:b0:41:94:37:93:a9:48:68:af:
1d:6a:d2:a8:36:90:70:4b:dc:83:72:a6:fe:c9:0d:
ea:3e:0d:4e:6f:2e:b0:95:20:d1:55:ed:98:df:ab:
68:a4:78:d2:d2:b4:98:b1:67:62:96:5a:8e:89:d7:
82:e6:c7:0e:75:77:d5:6a:8b:9f:32:c0:cd:33:8f:
bc:2c:9d:6d:80:5f:27:88:cb:ee:60:f0:38:4c:a1:
32:f4:18:92:e1:66:46:b9:d8:53:26:1a:7e:9b:16:
ef:17:7c:f4:ce:ea:8e:71:d3:41:cf:8f:f4:8f:d2:
dc:f5:ca:38:c2:be:cb:68:78:47:70:4a:8b:9d:80:
e0:e7:8c:ec:01:2e:b7:6a:c6:dd:d2:db:38:be:6c:
9a:1d:f1:32:33:7d:72:22:1e:6c:bf:59:79:f1:71:
f6:c3:2d:6c:84:05:82:26:2a:86:3a:a4:24:74:58:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:79:19:79:61:CF:73:4B:26:72:F3:CE:B9:07:9D:CA:F5:92:C0:BA
X509v3 Authority Key Identifier:
keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:72:0c:ad:19:d4:7f:6e:34:46:b2:83:a7:12:49:ae:3e:61:
a2:6d:ed:d1:fd:ab:15:07:f8:66:bf:70:20:10:f1:b8:0e:7a:
7e:8f:d9:9d:cf:f4:62:10:17:fd:51:b0:a9:86:86:5c:c6:3e:
73:48:7f:7d:5b:38:0a:2c:a4:04:9b:5d:31:4f:53:2a:39:0b:
a8:72:c7:28:38:eb:da:f5:43:6d:ec:77:40:b2:a0:38:a0:e0:
f5:f0:7a:70:26:6d:cc:89:76:43:5d:d6:54:03:d6:d6:40:de:
1a:2b:87:8d:b8:27:d6:91:f3:fc:90:52:e5:c6:84:58:22:52:
8f:75:cc:9f:94:b3:79:66:29:67:b0:8c:cf:8a:6c:4d:46:4f:
e5:04:ff:6f:d5:7e:7c:28:80:e3:36:9a:66:9b:ff:dd:f0:b0:
c6:eb:12:ce:98:2f:6b:b6:83:b7:27:3b:a6:f4:f2:1b:27:89:
52:a2:9a:b3:c9:59:97:3a:57:5c:d5:03:ac:32:ac:bd:8b:28:
cb:31:9b:f2:c4:bc:49:42:04:9f:1d:92:77:c3:ed:48:d5:02:
3e:ee:30:7b:e2:a8:09:8f:41:6c:a0:f8:5a:a3:3d:91:b9:94:
e3:dd:2d:6f:75:cc:82:77:21:b7:1b:5f:38:00:f5:4b:43:62:
6f:01:89:2a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMMOMhy79USlFDDXdlDTTsh2h4XowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB
OUMwQjZBMDAeFw0yNjAzMTcwNDQ2MjdaFw0yNjAzMjAwOTI0MjdaMDMxMTAvBgNV
BAMTKDU2NzkxOTc5NjFDRjczNEIyNjcyRjNDRUI5MDc5RENBRjU5MkMwQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cXHEOnqlgEhFTl5zrQPoMmlx
c9V1LFCYe+h0XCVlJrulXWjz9f7anxOIibt6zq8kUQUSE56KF5mdZGtsMFiXQLqZ
Vt3aGkSLNHXEpZx9cLBBlDeTqUhorx1q0qg2kHBL3INypv7JDeo+DU5vLrCVINFV
7Zjfq2ikeNLStJixZ2KWWo6J14Lmxw51d9Vqi58ywM0zj7wsnW2AXyeIy+5g8DhM
oTL0GJLhZka52FMmGn6bFu8XfPTO6o5x00HPj/SP0tz1yjjCvstoeEdwSoudgODn
jOwBLrdqxt3S2zi+bJod8TIzfXIiHmy/WXnxcfbDLWyEBYImKoY6pCR0WJiFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVnkZeWHPc0smcvPOuQedyvWSwLowHwYDVR0j
BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG
OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw
QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm
YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw
NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKNyDK0Z1H9uNEayg6cSSa4+YaJt7dH9qxUH
+Ga/cCAQ8bgOen6P2Z3P9GIQF/1RsKmGhlzGPnNIf31bOAospASbXTFPUyo5C6hy
xyg469r1Q23sd0CyoDig4PXwenAmbcyJdkNd1lQD1tZA3horh424J9aR8/yQUuXG
hFgiUo91zJ+Us3lmKWewjM+KbE1GT+UE/2/VfnwogOM2mmab/93wsMbrEs6YL2u2
g7cnO6b08hsniVKimrPJWZc6V1zVA6wyrL2LKMsxm/LEvElCBJ8dknfD7UjVAj7u
MHviqAmPQWyg+FqjPZG5lOPdLW91zIJ3IbcbXzgA9UtDYm8BiSo=
-----END CERTIFICATE-----
Generated at Thu Mar 19 09:25:08 2026 by rpki-client