$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: DUOOMEs4PXgjaihkuB99+byms3BcvLkngKwJXuKLwvU= Subject key identifier: A6:11:FB:07:B1:43:4B:C5:BD:FB:7F:07:83:A7:C9:34:7F:D5:68:C9 Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 0D3D676ED83EC018EF1D75FB674CD98098E8CBC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: 0123 Signing time: Thu 26 Mar 2026 15:32:25 +0000 Manifest this update: Thu 26 Mar 2026 15:27:25 +0000 Manifest next update: Sun 29 Mar 2026 15:32:25 +0000 Files and hashes: 1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: pQ+VvFu3yGs7yLIwlfmBEKEBxXQkAHZGwLdCDZ+aha0=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3d:67:6e:d8:3e:c0:18:ef:1d:75:fb:67:4c:d9:80:98:e8:cb:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Mar 26 15:27:25 2026 GMT Not After : Mar 29 15:32:25 2026 GMT Subject: CN=A611FB07B1434BC5BDFB7F0783A7C9347FD568C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1c:32:e0:fb:a7:04:72:3d:ce:16:a5:dc:72: a5:6e:71:c0:2d:8c:6c:4d:13:c2:6b:02:47:9c:1c: 79:4e:66:cc:4d:e4:4a:0f:05:f3:aa:bd:88:98:bd: 18:92:b9:fd:7f:1c:2d:9e:1f:20:af:3f:96:41:1d: 5c:fe:1b:ed:9e:19:26:e5:ad:40:cd:89:07:fb:e6: e9:bd:2a:da:86:b8:eb:84:4c:d8:92:fd:ea:22:41: be:af:26:fc:2d:ed:23:df:9b:d3:1b:0a:d7:e8:2a: 97:47:0e:86:86:02:b5:99:86:62:02:21:81:62:a9: b8:08:72:a1:ea:0a:ee:4a:0a:ca:f0:af:f2:83:c2: 8a:a4:23:45:2b:cf:dd:fe:31:9c:68:8b:a1:2a:c8: 85:ee:79:e9:b7:25:59:13:66:20:1b:b7:3a:ca:c0: 84:9d:f3:14:fb:56:8c:2e:d8:22:c6:5e:82:d0:24: 94:45:be:da:1a:8c:50:7a:51:f8:3e:8b:d8:67:06: 51:11:00:d3:99:97:f1:cc:ff:3d:a7:8e:b1:75:83: 38:6e:1a:24:e2:1e:02:aa:c7:63:45:46:a6:33:5a: ee:22:7b:92:d2:58:e2:a6:61:71:3a:13:69:08:ca: e1:01:6f:8b:12:31:b6:ae:73:88:e7:3d:0d:b4:6d: 72:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:11:FB:07:B1:43:4B:C5:BD:FB:7F:07:83:A7:C9:34:7F:D5:68:C9 X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:06:b5:03:dd:ff:d7:5e:7d:3b:04:8e:8d:90:c1:74:3a:b5: 44:21:0e:40:2c:b7:76:8b:d3:bd:4f:a9:24:7a:67:a5:c3:59: e6:25:a2:3b:a8:f1:f5:75:b7:92:eb:66:cc:f7:ec:52:6c:75: e0:34:58:69:1e:ea:72:ae:48:3d:c1:ce:34:48:7f:e3:bd:9e: 43:ba:d4:4b:e8:51:0a:e2:5a:81:9e:10:fe:5d:1e:15:a1:41: 12:da:70:6d:c2:dc:b8:73:1a:b1:c2:36:09:a0:bc:a7:47:5c: 9c:d6:d2:6b:c6:9e:c1:b1:44:13:22:e7:02:90:08:54:52:05: 8e:06:9d:58:43:5e:c4:38:eb:22:cb:a9:14:59:e5:60:5b:bc: b0:98:20:05:6a:1b:92:b9:a3:fc:0b:fc:d0:ad:b3:7f:17:10: 3c:0a:f4:7a:ad:6c:cb:27:7b:77:77:f1:06:19:91:b7:c0:84: 74:36:1c:f4:dd:0b:92:95:d4:35:1e:6e:8b:88:d1:11:f3:91: a8:e1:24:f9:46:7a:44:45:76:4c:16:84:7f:83:25:e5:15:82: 1e:f6:c0:0c:fe:7b:71:12:b6:3c:4c:45:b5:f2:06:91:00:24: ab:b9:f6:bb:53:65:0f:05:05:a3:ce:a1:b0:a2:b0:b5:5f:d6: a9:1b:f8:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDT1nbtg+wBjvHXX7Z0zZgJjoy8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNjAzMjYxNTI3MjVaFw0yNjAzMjkxNTMyMjVaMDMxMTAvBgNV BAMTKEE2MTFGQjA3QjE0MzRCQzVCREZCN0YwNzgzQTdDOTM0N0ZENTY4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHDLg+6cEcj3OFqXccqVuccAt jGxNE8JrAkecHHlOZsxN5EoPBfOqvYiYvRiSuf1/HC2eHyCvP5ZBHVz+G+2eGSbl rUDNiQf75um9KtqGuOuETNiS/eoiQb6vJvwt7SPfm9MbCtfoKpdHDoaGArWZhmIC IYFiqbgIcqHqCu5KCsrwr/KDwoqkI0Urz93+MZxoi6EqyIXueem3JVkTZiAbtzrK wISd8xT7Vowu2CLGXoLQJJRFvtoajFB6Ufg+i9hnBlERANOZl/HM/z2njrF1gzhu GiTiHgKqx2NFRqYzWu4ie5LSWOKmYXE6E2kIyuEBb4sSMbauc4jnPQ20bXJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUphH7B7FDS8W9+38Hg6fJNH/VaMkwHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4GtQPd/9defTsEjo2QwXQ6tUQhDkAst3aL 071PqSR6Z6XDWeYlojuo8fV1t5LrZsz37FJsdeA0WGke6nKuSD3BzjRIf+O9nkO6 1EvoUQriWoGeEP5dHhWhQRLacG3C3LhzGrHCNgmgvKdHXJzW0mvGnsGxRBMi5wKQ CFRSBY4GnVhDXsQ46yLLqRRZ5WBbvLCYIAVqG5K5o/wL/NCts38XEDwK9HqtbMsn e3d38QYZkbfAhHQ2HPTdC5KV1DUebouI0RHzkajhJPlGekRFdkwWhH+DJeUVgh72 wAz+e3EStjxMRbXyBpEAJKu59rtTZQ8FBaPOobCisLVf1qkb+Nk= -----END CERTIFICATE-----Generated at Fri Mar 27 03:44:56 2026 by rpki-client