$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: nKmTdMGjRpSv44OxiTx0AFW2teUfe6MiWKpiItOQSnk= Subject key identifier: 2B:C3:A6:09:FD:47:F3:EA:5F:1A:C1:84:F6:42:AE:01:24:B2:CF:0E Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 0B86A1D88A17C7388FA93313111DE49941049889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 049B Signing time: Tue 24 Mar 2026 23:41:29 +0000 Manifest this update: Tue 24 Mar 2026 23:36:29 +0000 Manifest next update: Sat 28 Mar 2026 10:55:29 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) 2: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: ut++pge1HPpJC9OEI833SeOzwC9GF54KTfovQ6i49dU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:86:a1:d8:8a:17:c7:38:8f:a9:33:13:11:1d:e4:99:41:04:98:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Mar 24 23:36:29 2026 GMT Not After : Mar 28 10:55:29 2026 GMT Subject: CN=2BC3A609FD47F3EA5F1AC184F642AE0124B2CF0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8b:09:79:cc:1b:12:e6:1d:07:70:73:b8:ec: 8d:3e:4c:52:99:61:ad:f2:c2:82:58:bd:a7:19:f9: e1:2b:70:1c:22:a1:a0:f6:ed:c6:b9:f5:63:83:09: a0:2a:b2:e1:90:28:ca:09:21:52:6c:c7:6c:09:33: af:34:11:ef:c6:b6:9e:76:b3:d9:d1:60:63:68:f2: b8:ba:47:e0:f8:c9:a1:5f:31:6f:d9:5b:4a:ed:cd: 12:fa:73:f1:09:0d:fe:3b:dd:b0:3d:af:bc:ce:ac: e8:e9:81:61:ed:d6:2a:50:5a:4c:dd:14:bf:da:b7: 0f:7b:93:2b:55:62:02:88:eb:0c:ec:51:8b:ed:c1: bb:9e:ac:d0:6c:57:c2:63:1d:fc:ad:0b:eb:93:c7: 1a:10:3a:b4:90:28:c6:65:49:01:5c:97:c6:d6:58: 59:19:e4:97:7b:08:94:a2:c2:11:f2:6d:af:7c:11: e1:de:64:cc:e4:7f:97:2f:e0:c9:d3:9d:3c:a7:ab: 19:7b:dd:c6:27:36:57:90:ea:af:56:b1:84:17:89: 30:87:af:45:2a:ad:58:ae:7c:63:87:66:96:79:43: a1:bb:b2:ad:a9:02:ce:13:e1:60:39:e7:14:56:e5: 48:be:4e:9b:c3:1a:c3:f9:ca:5c:21:f3:13:df:61: 99:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C3:A6:09:FD:47:F3:EA:5F:1A:C1:84:F6:42:AE:01:24:B2:CF:0E X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ee:a1:d7:40:94:a5:8e:a8:f8:34:df:51:a6:ef:5c:b8:48: ae:ac:56:a6:d7:d7:3d:77:56:6a:07:09:80:61:27:7c:66:bd: 55:2c:9f:ca:5e:50:af:cd:7e:a5:65:81:6a:0a:ed:a5:ab:3b: 11:82:83:78:18:c3:47:69:1a:ba:ac:0b:77:b0:f3:aa:19:9c: 60:dc:54:a6:cf:f9:74:29:75:9c:03:ba:5d:db:bc:4c:9e:cf: 3e:88:fe:8a:73:52:07:d9:18:cb:21:9a:0e:36:4e:8c:05:b2: ed:59:d9:c1:81:2a:a6:03:7d:ac:65:4f:25:24:00:8e:97:5f: b5:f6:04:45:0e:b6:ae:22:f1:8b:bb:a4:2b:01:e4:ed:f6:f1: e0:36:80:39:e3:f1:fa:b6:c2:6a:fe:35:6b:b9:c2:a3:dd:02: bf:45:20:2d:68:ac:72:a8:f8:a4:b6:ba:a1:e9:37:1d:3e:79: 35:e5:56:be:46:6f:29:ad:aa:61:10:88:c7:6f:a4:50:0f:14: 9d:99:21:a7:ef:63:11:0a:29:e0:51:ca:2e:97:d5:63:1c:0a: 32:ef:01:f1:b6:b8:55:21:40:25:36:ca:1c:27:25:d3:99:52: 1d:b7:ac:04:c6:46:91:48:09:42:33:12:5c:9c:89:85:7e:ef: 42:e9:84:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4ah2IoXxziPqTMTER3kmUEEmIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNjAzMjQyMzM2MjlaFw0yNjAzMjgxMDU1MjlaMDMxMTAvBgNV BAMTKDJCQzNBNjA5RkQ0N0YzRUE1RjFBQzE4NEY2NDJBRTAxMjRCMkNGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXiwl5zBsS5h0HcHO47I0+TFKZ Ya3ywoJYvacZ+eErcBwioaD27ca59WODCaAqsuGQKMoJIVJsx2wJM680Ee/Gtp52 s9nRYGNo8ri6R+D4yaFfMW/ZW0rtzRL6c/EJDf473bA9r7zOrOjpgWHt1ipQWkzd FL/atw97kytVYgKI6wzsUYvtwbuerNBsV8JjHfytC+uTxxoQOrSQKMZlSQFcl8bW WFkZ5Jd7CJSiwhHyba98EeHeZMzkf5cv4MnTnTynqxl73cYnNleQ6q9WsYQXiTCH r0UqrViufGOHZpZ5Q6G7sq2pAs4T4WA55xRW5Ui+TpvDGsP5ylwh8xPfYZmtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK8OmCf1H8+pfGsGE9kKuASSyzw4wHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAruoddAlKWOqPg031Gm71y4SK6sVqbX1z13 VmoHCYBhJ3xmvVUsn8peUK/NfqVlgWoK7aWrOxGCg3gYw0dpGrqsC3ew86oZnGDc VKbP+XQpdZwDul3bvEyezz6I/opzUgfZGMshmg42TowFsu1Z2cGBKqYDfaxlTyUk AI6XX7X2BEUOtq4i8Yu7pCsB5O328eA2gDnj8fq2wmr+NWu5wqPdAr9FIC1orHKo +KS2uqHpNx0+eTXlVr5GbymtqmEQiMdvpFAPFJ2ZIafvYxEKKeBRyi6X1WMcCjLv AfG2uFUhQCU2yhwnJdOZUh23rATGRpFICUIzElyciYV+70LphNY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:56 2026 by rpki-client