$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: BGSC0Lus8Qd6TNXwwIDmRGQabGUa319WIvECkIPX2c0= Subject key identifier: 01:62:C8:35:9C:7D:1F:FA:39:16:A7:72:71:9F:FC:A8:18:21:B7:68 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 66A954186C25103833E521DFA977EF1DB53C5A18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 03C0 Signing time: Mon 02 Mar 2026 01:22:31 +0000 Manifest this update: Mon 02 Mar 2026 01:17:31 +0000 Manifest next update: Thu 05 Mar 2026 11:52:31 +0000 Files and hashes: 1: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: S8PtwPwTwTCqa1lmrndUotLo5E5q84r7qp0G8HdcLQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a9:54:18:6c:25:10:38:33:e5:21:df:a9:77:ef:1d:b5:3c:5a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Mar 2 01:17:31 2026 GMT Not After : Mar 5 11:52:31 2026 GMT Subject: CN=0162C8359C7D1FFA3916A772719FFCA81821B768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:65:c8:4d:fc:bd:a6:07:85:3e:db:a0:2b: 29:93:14:bd:99:e2:ae:30:8e:a6:48:c9:25:fd:8c: 64:f4:73:60:02:f6:35:ed:83:ed:4f:65:6a:b9:a8: d1:60:01:5f:29:82:bb:5f:a7:89:2f:97:d8:1b:23: b2:15:5e:25:95:05:0d:fe:f1:88:ad:a1:af:c0:59: d6:a5:3e:ba:56:0f:26:46:55:ff:f7:81:6f:33:d5: 52:8e:88:92:64:c4:a9:b5:6f:24:b4:b5:2c:88:c5: f8:44:af:80:6a:d6:c0:f9:73:a7:db:39:c6:f4:b2: 93:53:ef:79:32:a0:4f:ef:9f:fe:c0:91:f6:c4:0b: d6:86:65:ab:ea:85:9d:51:c0:4d:ad:63:d1:17:8e: eb:06:8d:01:87:4e:7c:7c:a9:5a:3e:f2:d6:e3:b6: 24:31:5c:f3:c5:23:23:f8:9a:11:09:be:5b:3c:a6: 98:e1:fc:08:62:a1:ec:32:4b:4d:3d:34:8e:5d:58: 5e:cc:36:aa:4b:ce:56:90:86:6b:c3:3b:78:3e:da: 95:dc:0d:f6:e6:be:31:88:44:1a:03:7f:1a:e9:1c: 4c:9e:00:f6:f0:30:94:e7:85:12:06:95:6f:bf:b8: 99:67:27:41:79:c6:76:88:a6:89:fc:2f:c6:16:fd: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:62:C8:35:9C:7D:1F:FA:39:16:A7:72:71:9F:FC:A8:18:21:B7:68 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a5:ed:1a:f4:ee:22:7e:6a:23:ed:12:05:0c:72:72:7e:a2: 46:b6:79:b1:52:e2:76:57:67:9f:94:da:58:f3:83:b0:54:ed: 84:86:46:1e:93:5a:e4:52:6d:49:f9:a2:b5:5d:e7:b5:10:9d: 33:21:10:62:2b:21:4c:c7:16:98:3c:dc:74:de:59:9b:b1:45: 63:87:41:52:7a:fb:81:10:bb:fc:3f:c3:d4:a7:09:13:5e:a4: c6:dc:7c:0a:03:59:a5:e8:56:f2:63:b9:72:8a:55:b3:29:15: 43:27:c5:ac:34:15:5f:00:47:be:4e:d8:8a:c1:3b:df:5b:9f: b3:bd:90:b4:9d:f6:64:c5:b0:21:90:36:8a:45:92:29:55:5e: 0e:92:ba:6b:db:de:7a:25:25:73:95:ac:08:a1:b8:45:dd:80: 58:7f:7b:a6:6f:f2:bb:05:30:27:98:29:10:e3:1c:82:e3:47: 0e:41:67:49:68:ed:09:49:cb:b3:6c:5b:93:70:b1:dd:bc:10: 29:bf:0d:f7:6f:22:a7:3a:d8:5f:83:3c:e3:8c:55:46:bc:e5: 2c:b4:43:2e:3c:a0:d0:30:7a:06:98:60:bc:37:ff:89:90:60: ee:6c:ee:2f:f2:6e:de:7b:40:e6:d1:c9:d6:07:dd:9c:de:f1: 44:62:9c:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqlUGGwlEDgz5SHfqXfvHbU8WhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNjAzMDIwMTE3MzFaFw0yNjAzMDUxMTUyMzFaMDMxMTAvBgNV BAMTKDAxNjJDODM1OUM3RDFGRkEzOTE2QTc3MjcxOUZGQ0E4MTgyMUI3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/mXITfy9pgeFPtugKymTFL2Z 4q4wjqZIySX9jGT0c2AC9jXtg+1PZWq5qNFgAV8pgrtfp4kvl9gbI7IVXiWVBQ3+ 8Yitoa/AWdalPrpWDyZGVf/3gW8z1VKOiJJkxKm1byS0tSyIxfhEr4Bq1sD5c6fb Ocb0spNT73kyoE/vn/7AkfbEC9aGZavqhZ1RwE2tY9EXjusGjQGHTnx8qVo+8tbj tiQxXPPFIyP4mhEJvls8ppjh/AhioewyS009NI5dWF7MNqpLzlaQhmvDO3g+2pXc DfbmvjGIRBoDfxrpHEyeAPbwMJTnhRIGlW+/uJlnJ0F5xnaIpon8L8YW/a2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAWLINZx9H/o5FqdycZ/8qBght2gwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSl7Rr07iJ+aiPtEgUMcnJ+oka2ebFS4nZX Z5+U2ljzg7BU7YSGRh6TWuRSbUn5orVd57UQnTMhEGIrIUzHFpg83HTeWZuxRWOH QVJ6+4EQu/w/w9SnCRNepMbcfAoDWaXoVvJjuXKKVbMpFUMnxaw0FV8AR75O2IrB O99bn7O9kLSd9mTFsCGQNopFkilVXg6Sumvb3nolJXOVrAihuEXdgFh/e6Zv8rsF MCeYKRDjHILjRw5BZ0lo7QlJy7NsW5Nwsd28ECm/DfdvIqc62F+DPOOMVUa85Sy0 Qy48oNAwegaYYLw3/4mQYO5s7i/ybt57QObRydYH3Zze8URinC8= -----END CERTIFICATE-----Generated at Mon Mar 2 05:52:11 2026 by rpki-client