$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: cjPDnrF+SqILa7Cl/Uqn5hmkE0aAisWJiATHJ49wBz4= Subject key identifier: AD:01:C8:0A:CE:43:C6:8F:B0:C0:A3:68:8C:A5:B6:C0:4B:B7:A9:2F Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 607B103694E158ACD0F69AC6674B05EF0A583B79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 0491 Signing time: Sun 01 Mar 2026 23:31:26 +0000 Manifest this update: Sun 01 Mar 2026 23:26:26 +0000 Manifest next update: Thu 05 Mar 2026 09:58:26 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) 2: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: tlcEIGHcuv4G60tP3zTdJm8QJG8cDKuyYNUZfVrT5aw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7b:10:36:94:e1:58:ac:d0:f6:9a:c6:67:4b:05:ef:0a:58:3b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Mar 1 23:26:26 2026 GMT Not After : Mar 5 09:58:26 2026 GMT Subject: CN=AD01C80ACE43C68FB0C0A3688CA5B6C04BB7A92F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:48:ab:2d:47:a6:84:e3:03:1f:e8:e7:4f:58: 60:bf:74:0b:aa:d9:1a:f3:bc:e6:54:9c:e7:cb:89: 5c:e0:c4:ff:42:ea:aa:68:71:62:ed:6a:0e:a1:97: dc:cd:2a:e6:91:94:c9:55:8b:5b:d2:9e:ea:9e:c4: aa:02:f2:7a:db:30:a8:85:49:33:d6:9a:12:b8:40: da:24:10:1f:4b:4b:9f:65:26:e6:53:30:f3:fc:0b: e2:25:cb:14:7a:2e:42:4d:e0:79:cc:2d:3d:e4:cf: 22:89:f8:82:1f:14:eb:68:0a:e6:33:77:19:6e:d5: 60:f7:83:e5:1a:1b:c8:f1:d9:3c:ea:33:70:9d:64: 58:85:2f:a6:05:a5:be:00:f9:95:5f:80:b3:d6:d6: d6:de:66:49:a0:41:85:f0:e3:eb:9e:76:db:8c:b2: 14:45:12:6e:fb:fa:a0:a7:7e:0a:fa:63:e1:d5:cb: 86:7d:fe:db:5b:53:a3:fb:86:7e:48:e4:e7:75:7d: 4c:c5:31:81:a8:a1:0a:86:a8:c1:a1:7c:6c:4f:33: 29:02:a5:5a:c4:f6:6a:8b:da:0b:0f:89:8f:b6:3e: b4:33:81:de:7f:e8:fe:4a:31:f9:ca:ca:ab:b9:77: 0e:f7:66:fb:e0:12:a8:b2:34:1f:6a:88:6d:6e:c5: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:01:C8:0A:CE:43:C6:8F:B0:C0:A3:68:8C:A5:B6:C0:4B:B7:A9:2F X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:81:83:96:39:aa:59:fb:62:20:13:c5:14:31:7b:36:ef:fe: 0b:7e:13:09:e0:29:0c:a2:29:d4:fd:9b:32:8a:cd:16:c9:77: 0c:17:f9:07:bc:d5:5a:d5:ec:ce:b7:32:9c:10:ca:dc:2b:6d: b3:8b:46:89:86:c3:ab:30:09:38:72:5c:4c:86:55:8e:ae:d6: 06:37:73:a3:e6:d5:33:73:7f:cc:4c:4c:04:ae:5d:b9:fe:61: 24:97:9f:34:df:53:b1:fe:d3:10:35:da:ce:40:35:f9:cf:de: ba:86:13:6b:23:85:32:a3:73:34:87:af:43:28:33:79:d9:0f: 54:71:5f:80:eb:50:fb:57:be:2b:5e:27:36:dd:dc:6c:bf:48: a1:60:57:4f:d1:64:23:8b:a3:ae:c8:7b:c0:b0:17:cf:d2:0f: 22:4c:5e:62:61:c4:79:52:20:b1:51:93:2d:90:0d:85:74:38: 8f:06:cf:88:42:59:c0:41:b8:ee:2d:93:d1:f5:72:5b:44:d1: 19:59:e6:54:12:07:89:95:0c:9a:e9:45:9f:96:9d:f5:49:59: 72:59:0b:de:82:78:32:5d:e5:5c:c6:a1:26:f8:7a:e2:22:78: cc:ef:d2:b4:50:6b:1f:13:a7:d0:b0:22:de:bd:5b:a2:87:5c: 80:c7:05:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHsQNpThWKzQ9prGZ0sF7wpYO3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNjAzMDEyMzI2MjZaFw0yNjAzMDUwOTU4MjZaMDMxMTAvBgNV BAMTKEFEMDFDODBBQ0U0M0M2OEZCMEMwQTM2ODhDQTVCNkMwNEJCN0E5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSKstR6aE4wMf6OdPWGC/dAuq 2RrzvOZUnOfLiVzgxP9C6qpocWLtag6hl9zNKuaRlMlVi1vSnuqexKoC8nrbMKiF STPWmhK4QNokEB9LS59lJuZTMPP8C+IlyxR6LkJN4HnMLT3kzyKJ+IIfFOtoCuYz dxlu1WD3g+UaG8jx2TzqM3CdZFiFL6YFpb4A+ZVfgLPW1tbeZkmgQYXw4+uedtuM shRFEm77+qCnfgr6Y+HVy4Z9/ttbU6P7hn5I5Od1fUzFMYGooQqGqMGhfGxPMykC pVrE9mqL2gsPiY+2PrQzgd5/6P5KMfnKyqu5dw73ZvvgEqiyNB9qiG1uxYgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrQHICs5Dxo+wwKNojKW2wEu3qS8wHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6Bg5Y5qln7YiATxRQxezbv/gt+EwngKQyi KdT9mzKKzRbJdwwX+Qe81VrV7M63MpwQytwrbbOLRomGw6swCThyXEyGVY6u1gY3 c6Pm1TNzf8xMTASuXbn+YSSXnzTfU7H+0xA12s5ANfnP3rqGE2sjhTKjczSHr0Mo M3nZD1RxX4DrUPtXviteJzbd3Gy/SKFgV0/RZCOLo67Ie8CwF8/SDyJMXmJhxHlS ILFRky2QDYV0OI8Gz4hCWcBBuO4tk9H1cltE0RlZ5lQSB4mVDJrpRZ+WnfVJWXJZ C96CeDJd5VzGoSb4euIieMzv0rRQax8Tp9CwIt69W6KHXIDHBRM= -----END CERTIFICATE-----Generated at Mon Mar 2 07:46:06 2026 by rpki-client