$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: lhxBWCX4KIvh5g+D1Dea29uOb6jNDQR76//MO3PhJl0= Subject key identifier: 20:BD:C4:DF:92:32:A1:54:E1:40:68:74:AD:46:A9:CA:BD:94:17:4D Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 78C1F395199429DDB25A7BCC5D873F7E628AD100 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 0256 Signing time: Wed 25 Mar 2026 15:01:41 +0000 Manifest this update: Wed 25 Mar 2026 14:56:41 +0000 Manifest next update: Sat 28 Mar 2026 23:26:41 +0000 Files and hashes: 1: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: Z+uPltjZGSJJVlVHwNz2NCUXUIEBHK05ylu6rUY+FMs=) 2: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: CqIPylmMTFxT9LKDeeAZ9ke/tXfZQHAuw2IhdzwOEds=) 3: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: umdrRzgp8Ciqeng1bs/crkT4xOCEEqpUSt3z8J2SnuY=) 4: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: MSA3Izjg6KzN5Q+MKwDBM7mghQbhoAUxxHKShKe7LT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c1:f3:95:19:94:29:dd:b2:5a:7b:cc:5d:87:3f:7e:62:8a:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Mar 25 14:56:41 2026 GMT Not After : Mar 28 23:26:41 2026 GMT Subject: CN=20BDC4DF9232A154E1406874AD46A9CABD94174D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:b0:75:61:b5:c3:25:45:bf:fd:1d:52:81: b4:6c:22:ac:99:4b:a7:b8:45:6b:86:94:03:ec:74: ed:99:cd:07:a1:32:ff:6c:eb:9e:4a:70:3b:cb:98: 85:1a:4b:0f:b3:8f:a0:17:cd:0e:ea:4d:44:0c:4f: 54:a7:dc:50:2d:12:f0:91:a2:5f:f7:a3:5e:ea:7e: 76:5f:0f:ac:26:71:86:39:85:82:f1:a9:2c:bc:97: 73:24:f3:a1:6e:ed:a7:dc:47:53:c1:5b:db:87:3e: 32:e6:1c:f5:86:6c:06:cd:d7:9f:da:0a:24:16:00: 09:96:45:3c:a9:fe:5c:71:37:33:8a:e0:01:fb:6a: e2:de:a5:94:eb:62:75:62:68:f4:8b:8e:07:1e:e1: 45:7d:1b:ab:01:59:76:31:d4:fc:a3:6b:8f:ab:9f: fb:c9:5c:f6:fc:08:2f:da:02:48:0c:f3:65:b8:f1: 48:cf:2b:67:b6:23:0e:b7:cc:90:cb:b4:dc:d9:0e: 32:fe:d4:04:68:c0:cc:e8:d9:8e:aa:0e:72:14:9d: 96:ce:ab:59:c9:14:0f:b3:7f:31:a4:d3:30:a2:5b: cf:08:de:01:18:9a:c2:a0:07:b3:71:d9:26:dd:b6: 0c:cd:b5:01:ce:c1:c8:7e:b1:05:25:73:71:1e:f0: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BD:C4:DF:92:32:A1:54:E1:40:68:74:AD:46:A9:CA:BD:94:17:4D X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:05:0b:56:de:6e:b8:1c:55:e6:fa:db:08:5e:ee:8b:04:ab: 55:ca:63:c9:e4:48:2e:62:6c:d4:01:97:4e:cb:71:82:a2:d5: e8:f2:94:7f:ee:dc:53:38:24:bd:d6:3b:ef:58:b4:35:fc:37: bf:27:4e:74:e7:bc:5e:d3:e3:cd:ac:61:bc:06:56:ac:85:81: 4c:71:4c:c1:62:1a:ca:b1:a0:b2:c9:98:e8:ae:03:ec:63:41: 0f:d7:15:9a:43:6d:52:f8:d5:87:b4:93:87:87:7c:7d:50:25: 2f:11:a0:f5:01:d3:47:ff:a3:73:c0:9a:be:4c:98:b1:54:d3: b5:e0:95:bb:d8:e5:5c:af:b1:b6:2b:1c:43:ce:a5:22:01:02: 29:00:22:b5:b9:9f:a4:e8:b1:e4:0f:b2:9d:a7:ab:b5:46:63: 99:b5:dc:83:07:b5:f9:44:c6:e7:fd:05:7d:ea:e4:53:39:0b: 75:2a:65:45:2b:dc:6c:ef:a4:b2:21:bd:79:80:6e:47:bd:61: e4:f0:bf:70:bb:f0:97:16:f3:f1:97:37:e7:6f:d8:29:84:5a: d8:7f:96:94:c8:df:22:c8:67:57:5a:95:f7:cb:97:a9:93:9e: 5a:2e:13:db:60:95:70:88:c7:af:83:ce:06:f7:a0:78:ee:3c: f5:e0:24:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMHzlRmUKd2yWnvMXYc/fmKK0QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNjAzMjUxNDU2NDFaFw0yNjAzMjgyMzI2NDFaMDMxMTAvBgNV BAMTKDIwQkRDNERGOTIzMkExNTRFMTQwNjg3NEFENDZBOUNBQkQ5NDE3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAELB1YbXDJUW//R1SgbRsIqyZ S6e4RWuGlAPsdO2ZzQehMv9s655KcDvLmIUaSw+zj6AXzQ7qTUQMT1Sn3FAtEvCR ol/3o17qfnZfD6wmcYY5hYLxqSy8l3Mk86Fu7afcR1PBW9uHPjLmHPWGbAbN15/a CiQWAAmWRTyp/lxxNzOK4AH7auLepZTrYnViaPSLjgce4UV9G6sBWXYx1Pyja4+r n/vJXPb8CC/aAkgM82W48UjPK2e2Iw63zJDLtNzZDjL+1ARowMzo2Y6qDnIUnZbO q1nJFA+zfzGk0zCiW88I3gEYmsKgB7Nx2SbdtgzNtQHOwch+sQUlc3Ee8PtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIL3E35IyoVThQGh0rUapyr2UF00wHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwFC1bebrgcVeb62whe7osEq1XKY8nkSC5i bNQBl07LcYKi1ejylH/u3FM4JL3WO+9YtDX8N78nTnTnvF7T482sYbwGVqyFgUxx TMFiGsqxoLLJmOiuA+xjQQ/XFZpDbVL41Ye0k4eHfH1QJS8RoPUB00f/o3PAmr5M mLFU07XglbvY5VyvsbYrHEPOpSIBAikAIrW5n6ToseQPsp2nq7VGY5m13IMHtflE xuf9BX3q5FM5C3UqZUUr3GzvpLIhvXmAbke9YeTwv3C78JcW8/GXN+dv2CmEWth/ lpTI3yLIZ1dalffLl6mTnlouE9tglXCIx6+Dzgb3oHjuPPXgJM4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:16 2026 by rpki-client