$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: d/TwpcVo+KBhet9h0hui35xKBnvE4tdLLrX4fkQD2TE= Subject key identifier: D9:50:08:9B:D2:A2:33:D1:2E:FA:4D:12:AD:F6:7E:47:52:C1:99:16 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 60B5824EC64FFFA2E5AA9B5B764FA66E594E184B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 04A5 Signing time: Thu 16 Apr 2026 17:11:29 +0000 Manifest this update: Thu 16 Apr 2026 17:06:29 +0000 Manifest next update: Sun 19 Apr 2026 17:17:29 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) 2: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: 3TH/rQFArJjzlJD6XbRJ2XHTDlfACQMoHC4K9ZiUzic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b5:82:4e:c6:4f:ff:a2:e5:aa:9b:5b:76:4f:a6:6e:59:4e:18:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Apr 16 17:06:29 2026 GMT Not After : Apr 19 17:17:29 2026 GMT Subject: CN=D950089BD2A233D12EFA4D12ADF67E4752C19916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:4d:c7:8e:c7:34:6d:e8:69:d7:6d:a9:01: 6c:ab:b0:7d:28:39:3f:02:7f:14:63:27:a6:fe:ee: 9d:97:f6:8a:ec:0d:28:42:bd:3c:6f:f5:91:12:2b: 2c:76:ac:99:15:62:9c:ba:94:60:8a:28:ca:14:8b: 06:1f:d3:71:f0:16:48:24:46:83:88:44:43:0e:74: f4:d8:11:87:df:b2:f5:29:79:cd:eb:39:07:33:71: b5:86:09:16:dc:0b:85:39:89:d6:97:d6:bf:7e:fc: 38:76:9a:c5:d3:6f:8f:87:e1:f3:b6:b1:f9:49:c8: 71:fd:fc:7b:5d:9b:56:fc:be:30:07:10:76:85:a4: 96:e9:6d:ef:bb:50:c8:78:80:a4:d4:b3:89:56:f9: 8a:a2:89:aa:50:11:50:5a:30:e4:40:e9:0b:e3:fc: 82:c4:ae:e0:a8:95:d7:56:df:8d:c7:31:a8:f1:13: bf:36:12:47:67:d0:40:eb:c7:99:6a:1b:13:87:f5: 6c:0d:67:2f:bd:a4:33:fb:de:cf:c5:b8:c2:d5:c3: 89:10:42:67:bc:4c:d1:43:af:0a:cc:2b:f6:e0:d2: e6:e8:c5:89:5f:12:d2:2c:e4:d2:3c:43:a9:19:bc: e3:9c:ac:df:3c:c1:27:8a:87:d3:0e:71:98:6e:c5: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:50:08:9B:D2:A2:33:D1:2E:FA:4D:12:AD:F6:7E:47:52:C1:99:16 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:01:85:aa:24:e5:b6:6e:88:39:ca:62:e1:13:64:26:de:7e: 56:2c:85:42:6c:95:61:de:18:5e:0c:9e:6e:46:f7:86:87:50: 47:e5:62:3d:53:00:8b:38:77:66:03:b3:40:ee:f1:ad:e9:63: 29:eb:40:74:eb:d6:a2:1c:6b:57:ea:75:1d:c8:84:6d:ee:5a: 75:3e:29:79:a3:99:36:9f:90:fe:d3:6d:ae:e0:14:bf:3e:3d: 1b:24:40:75:5b:18:c7:73:a4:2e:fb:49:f8:f8:e1:7a:bc:0e: 56:09:85:35:7f:9c:63:26:73:22:3f:e3:24:7c:b8:d4:9a:c8: 82:c6:3f:27:6a:c6:a1:a4:43:a9:45:17:f6:3f:05:e1:72:59: a7:a9:f2:0d:44:cc:9f:77:cf:d0:59:17:b5:ea:ed:9e:ad:d8: f8:6a:47:53:06:63:0a:66:87:bd:3b:91:c3:db:6f:c3:f2:2e: 15:f7:0f:45:59:a2:fe:fe:7c:b9:68:16:e3:1d:20:26:e2:38: 2f:ad:a0:f1:c1:0a:ba:93:5f:20:11:6b:88:08:db:cc:9e:60: 84:51:c5:f9:44:a3:11:29:7f:c0:e1:dc:fb:32:05:9b:ec:42: d8:82:17:cf:f9:2f:0c:54:6d:d7:c7:8b:23:13:12:e6:5f:0f: 64:29:b9:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLWCTsZP/6Llqptbdk+mbllOGEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNjA0MTYxNzA2MjlaFw0yNjA0MTkxNzE3MjlaMDMxMTAvBgNV BAMTKEQ5NTAwODlCRDJBMjMzRDEyRUZBNEQxMkFERjY3RTQ3NTJDMTk5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+03Hjsc0behp122pAWyrsH0o OT8CfxRjJ6b+7p2X9orsDShCvTxv9ZESKyx2rJkVYpy6lGCKKMoUiwYf03HwFkgk RoOIREMOdPTYEYffsvUpec3rOQczcbWGCRbcC4U5idaX1r9+/Dh2msXTb4+H4fO2 sflJyHH9/Htdm1b8vjAHEHaFpJbpbe+7UMh4gKTUs4lW+YqiiapQEVBaMORA6Qvj /ILEruColddW343HMajxE782Ekdn0EDrx5lqGxOH9WwNZy+9pDP73s/FuMLVw4kQ Qme8TNFDrwrMK/bg0uboxYlfEtIs5NI8Q6kZvOOcrN88wSeKh9MOcZhuxVlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2VAIm9KiM9Eu+k0SrfZ+R1LBmRYwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYBhaok5bZuiDnKYuETZCbeflYshUJslWHe GF4Mnm5G94aHUEflYj1TAIs4d2YDs0Du8a3pYynrQHTr1qIca1fqdR3IhG3uWnU+ KXmjmTafkP7Tba7gFL8+PRskQHVbGMdzpC77Sfj44Xq8DlYJhTV/nGMmcyI/4yR8 uNSayILGPydqxqGkQ6lFF/Y/BeFyWaep8g1EzJ93z9BZF7Xq7Z6t2PhqR1MGYwpm h707kcPbb8PyLhX3D0VZov7+fLloFuMdICbiOC+toPHBCrqTXyARa4gI28yeYIRR xflEoxEpf8Dh3PsyBZvsQtiCF8/5LwxUbdfHiyMTEuZfD2QpuZg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:25:59 2026 by rpki-client