$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft File: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json) Hash identifier: VmxhR2ObFxlb4wpS+0K/ELRkNMNP4mfLpsLsFO2gP1g= Subject key identifier: 2F:E6:4D:2A:4A:3A:0E:35:7E:6C:6B:1D:2B:C6:18:DA:3B:2D:48:27 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 5866347E1997EB6F3C016BEE06279AFDC49971AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft Manifest number: 0507 Signing time: Sat 06 Sep 2025 16:21:16 +0000 Manifest this update: Sat 06 Sep 2025 16:16:15 +0000 Manifest next update: Tue 09 Sep 2025 22:32:15 +0000 Files and hashes: 1: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: KMXBXh+Hz9t8Vs+CANui3lrLwoDdVGoivVhKoGTM+n0=) 2: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: HFUM7fJZTKa+qdGe9ZPkIHEII2AAGVJCtZhO38Uq688=) 3: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: MpDUQT8A3dZvwWRQtlzD2B+hHv7+ces35KG+DCb4lSw=) 4: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: frS3InbJAyXvfYFJ9oqdkhlt6S7xP80lfV9ZpnmpcMc=) 5: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: E70nlSvwN/YRzt3ipt5eUpiof5ZiDppc9oAiJGHFIb4=) 6: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: hHPw+Xqwsov7fA4EH++xE5Fe/5zBy6SOylLmX+aVZlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:66:34:7e:19:97:eb:6f:3c:01:6b:ee:06:27:9a:fd:c4:99:71:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: Sep 6 16:16:15 2025 GMT Not After : Sep 9 22:32:15 2025 GMT Subject: CN=2FE64D2A4A3A0E357E6C6B1D2BC618DA3B2D4827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:52:72:44:d0:4f:e1:39:98:34:dd:ba:ea: 82:3b:8e:c8:40:5f:1b:9e:bf:85:6b:da:e3:ff:0d: d0:8f:44:e3:fa:c1:c4:13:54:5b:88:47:12:f8:1b: b7:39:ee:d8:c2:47:fa:f6:37:dd:c7:00:33:44:85: 47:d5:cd:22:d4:d6:7b:14:66:9a:2e:da:b5:8d:36: 3d:2a:9a:8a:48:76:1b:15:ae:5f:2a:25:c5:2b:c8: df:ce:ae:8f:a2:32:a0:54:bd:f6:89:f8:36:69:b6: ca:9e:ff:90:ba:d3:a4:15:bd:4e:a0:9d:65:76:17: ee:82:9d:74:4c:1e:a1:7c:45:4a:89:6b:bb:c7:fc: b6:36:03:08:ad:f6:b1:5a:5f:0e:20:23:64:f7:93: df:d8:62:93:9b:78:85:21:6e:f8:46:c1:6d:28:0d: 78:e0:86:ee:6b:42:72:64:c9:e5:86:1b:9b:54:60: 2c:ce:04:da:86:70:31:b2:49:b9:08:2d:93:a3:72: 81:6d:34:c1:d3:33:f7:4d:1c:bb:22:a5:fd:47:60: dc:4b:0e:05:ee:91:94:96:a0:30:1a:77:3a:fa:17: 75:2b:ec:5e:0d:16:84:89:b2:13:89:b3:f3:62:cb: 16:56:ee:c8:ad:1a:33:89:85:8c:86:e3:75:00:ce: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E6:4D:2A:4A:3A:0E:35:7E:6C:6B:1D:2B:C6:18:DA:3B:2D:48:27 X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:3e:fc:88:73:de:bd:6f:6a:e7:43:0e:24:4a:e1:e1:0c:c7: 90:d4:2e:2f:c1:af:02:ac:9c:d8:d0:9b:e3:e4:cd:60:b1:31: f7:27:fd:75:6c:2e:a4:ce:37:38:90:61:e0:6a:24:93:c9:b2: 2d:e4:44:72:75:69:3c:7e:5e:9c:f6:96:96:67:67:29:5e:ac: ec:96:c9:f3:2a:12:2c:73:f7:35:88:77:4d:b7:b9:ba:ee:b7: 26:8b:8b:5b:64:6d:61:f8:a3:85:2b:be:20:00:d1:2b:a8:94: f1:5e:35:de:87:ee:96:b7:3f:b9:67:50:f8:63:9b:c3:9c:10: 9c:74:5f:d1:79:6d:2a:ca:70:ea:5d:b7:3f:bc:15:46:c3:6a: 0f:63:5c:13:73:42:f5:5b:54:3a:88:30:4d:9a:46:dd:d9:1a: 3d:0c:16:87:0d:b9:d1:2f:cf:52:d7:cd:18:df:5c:18:eb:0c: df:cc:c4:32:4f:67:4b:a0:10:15:4a:db:4c:41:99:27:b3:50: fc:ce:c5:6c:94:e9:73:29:db:7c:a8:8c:02:99:c7:1b:9a:67: 6d:a1:8d:3e:40:0f:91:15:d2:e8:f2:78:7c:7e:6c:4a:27:67: a2:e8:6a:da:0a:30:0e:e9:81:ad:e4:3c:dd:38:53:1f:41:27: 3c:a0:73:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGY0fhmX6288AWvuBiea/cSZcaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yNTA5MDYxNjE2MTVaFw0yNTA5MDkyMjMyMTVaMDMxMTAvBgNV BAMTKDJGRTY0RDJBNEEzQTBFMzU3RTZDNkIxRDJCQzYxOERBM0IyRDQ4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPFJyRNBP4TmYNN266oI7jshA Xxuev4Vr2uP/DdCPROP6wcQTVFuIRxL4G7c57tjCR/r2N93HADNEhUfVzSLU1nsU Zpou2rWNNj0qmopIdhsVrl8qJcUryN/Oro+iMqBUvfaJ+DZptsqe/5C606QVvU6g nWV2F+6CnXRMHqF8RUqJa7vH/LY2Awit9rFaXw4gI2T3k9/YYpObeIUhbvhGwW0o DXjghu5rQnJkyeWGG5tUYCzOBNqGcDGySbkILZOjcoFtNMHTM/dNHLsipf1HYNxL DgXukZSWoDAadzr6F3Ur7F4NFoSJshOJs/NiyxZW7sitGjOJhYyG43UAzkDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL+ZNKko6DjV+bGsdK8YY2jstSCcwHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQ+/Ihz3r1vaudDDiRK4eEMx5DULi/BrwKs nNjQm+PkzWCxMfcn/XVsLqTONziQYeBqJJPJsi3kRHJ1aTx+Xpz2lpZnZylerOyW yfMqEixz9zWId023ubrutyaLi1tkbWH4o4UrviAA0SuolPFeNd6H7pa3P7lnUPhj m8OcEJx0X9F5bSrKcOpdtz+8FUbDag9jXBNzQvVbVDqIME2aRt3ZGj0MFocNudEv z1LXzRjfXBjrDN/MxDJPZ0ugEBVK20xBmSezUPzOxWyU6XMp23yojAKZxxuaZ22h jT5AD5EV0ujyeHx+bEonZ6LoatoKMA7pga3kPN04Ux9BJzygcwY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:11 2025 by rpki-client