$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: fj75KqTLQeIFxfBIQw0eadBVOaU2xnWUcm2umZKzt+U= Subject key identifier: 60:F3:1E:30:BB:AA:D0:24:AF:7D:4B:C1:86:58:DC:62:6D:30:FE:A9 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 3E1EF3BD6A632A1F91C678929096C8A79E38B756 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 03CA Signing time: Tue 24 Mar 2026 18:12:33 +0000 Manifest this update: Tue 24 Mar 2026 18:07:33 +0000 Manifest next update: Fri 27 Mar 2026 22:39:33 +0000 Files and hashes: 1: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: 0xuu+1HN2ml5wKfJHqx3lpFF6/r8Re1IPte99V0aWgw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1e:f3:bd:6a:63:2a:1f:91:c6:78:92:90:96:c8:a7:9e:38:b7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Mar 24 18:07:33 2026 GMT Not After : Mar 27 22:39:33 2026 GMT Subject: CN=60F31E30BBAAD024AF7D4BC18658DC626D30FEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:eb:3a:30:7f:79:bc:2d:bf:b0:7e:53:2e: 96:c9:49:43:ef:8a:86:9f:19:a7:a8:bd:39:e5:9a: b0:9d:4d:25:ef:7f:33:bd:09:29:d3:4e:4c:90:c4: f2:5c:b0:66:34:d8:50:ab:f4:01:00:e4:c0:a8:5d: 83:57:ee:9e:16:21:d7:a2:5b:1a:8b:f7:b3:a7:36: 04:84:49:1d:de:31:a1:3a:75:f7:9a:22:c3:60:a2: 99:6f:9d:35:0d:d1:25:cb:7e:e8:02:91:b7:83:03: cd:23:76:96:e3:75:73:8d:ee:ad:e3:b6:12:70:9b: 30:bd:9a:34:c5:6c:1f:48:0e:b4:b9:e4:55:6d:d7: b0:72:93:a8:af:e6:22:02:c0:98:cc:d9:4f:35:59: 94:99:6e:59:21:5a:16:0d:a8:29:eb:51:94:a8:60: 94:2d:04:36:e4:5d:50:ef:d3:ad:df:ad:2f:ef:06: 57:96:f5:9c:09:3b:dd:88:32:5d:ff:84:b5:a5:cb: 29:ae:71:68:1e:b4:64:c9:2d:11:8c:18:ca:a6:32: 70:67:6e:74:c3:0a:2e:8c:d4:46:21:b1:c5:ae:80: b2:cc:ec:56:01:aa:02:f8:a9:66:07:14:d8:de:0e: ba:1f:48:25:bb:c9:c4:f9:d3:05:2a:8f:26:05:6b: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F3:1E:30:BB:AA:D0:24:AF:7D:4B:C1:86:58:DC:62:6D:30:FE:A9 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d3:9a:01:2b:54:bc:30:c0:20:f4:9e:1f:64:b5:a9:3e:10: 74:93:f0:90:a1:e7:ac:19:a5:0e:df:91:1d:e4:6f:bd:89:72: 56:87:51:9a:d2:4c:ea:05:a4:43:16:24:7c:a8:fe:c1:27:14: 7c:31:e9:c0:5b:5b:33:54:56:5e:49:e7:84:2a:9b:9c:c1:c9: 4a:12:10:48:6a:81:b5:44:5b:51:7b:c9:8c:b7:cd:93:89:36: e5:81:4f:91:6b:3b:1f:d4:b9:5b:e6:fb:81:52:dd:49:34:bf: ce:d3:65:2b:f6:88:15:92:2a:f4:74:64:7b:eb:4f:55:15:22: f9:12:47:d0:08:0b:be:e8:f9:52:3e:3b:b8:3e:ad:0e:86:0c: fd:ce:df:69:c0:bd:1a:8d:71:52:09:1b:25:0c:ed:b8:7a:0a: 9e:c5:25:5a:54:f0:40:00:f4:04:c1:63:62:00:6d:3a:0d:57: 2c:76:21:82:82:7f:54:e0:06:7d:13:5b:2a:cc:16:c9:9f:12: c9:f9:9b:3f:f6:69:fd:ee:5a:b6:6c:8a:f4:77:91:10:fa:7e: f0:0b:e7:95:34:62:be:33:e6:13:a3:ee:9a:fb:4e:36:71:da: e4:86:d0:03:38:bb:c3:f3:9e:bc:54:56:94:14:a1:22:26:03: 32:ad:fe:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPh7zvWpjKh+RxniSkJbIp544t1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNjAzMjQxODA3MzNaFw0yNjAzMjcyMjM5MzNaMDMxMTAvBgNV BAMTKDYwRjMxRTMwQkJBQUQwMjRBRjdENEJDMTg2NThEQzYyNkQzMEZFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2+s6MH95vC2/sH5TLpbJSUPv ioafGaeovTnlmrCdTSXvfzO9CSnTTkyQxPJcsGY02FCr9AEA5MCoXYNX7p4WIdei WxqL97OnNgSESR3eMaE6dfeaIsNgoplvnTUN0SXLfugCkbeDA80jdpbjdXON7q3j thJwmzC9mjTFbB9IDrS55FVt17Byk6iv5iICwJjM2U81WZSZblkhWhYNqCnrUZSo YJQtBDbkXVDv063frS/vBleW9ZwJO92IMl3/hLWlyymucWgetGTJLRGMGMqmMnBn bnTDCi6M1EYhscWugLLM7FYBqgL4qWYHFNjeDrofSCW7ycT50wUqjyYFawghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPMeMLuq0CSvfUvBhljcYm0w/qkwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLTmgErVLwwwCD0nh9ktak+EHST8JCh56wZ pQ7fkR3kb72JclaHUZrSTOoFpEMWJHyo/sEnFHwx6cBbWzNUVl5J54Qqm5zByUoS EEhqgbVEW1F7yYy3zZOJNuWBT5FrOx/UuVvm+4FS3Uk0v87TZSv2iBWSKvR0ZHvr T1UVIvkSR9AIC77o+VI+O7g+rQ6GDP3O32nAvRqNcVIJGyUM7bh6Cp7FJVpU8EAA 9ATBY2IAbToNVyx2IYKCf1TgBn0TWyrMFsmfEsn5mz/2af3uWrZsivR3kRD6fvAL 55U0Yr4z5hOj7pr7TjZx2uSG0AM4u8PznrxUVpQUoSImAzKt/is= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:58 2026 by rpki-client