$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: FUy5S/X8d5MY+HeWQj4AB1TRDZR43ztJqiUIpzMawFs= Subject key identifier: 51:13:C6:56:7C:B5:DD:44:7C:52:75:99:24:CF:9B:F0:A6:B3:EB:79 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 3C903577FE7F5690F753A20BEB1DA02BC0CE03C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 03D5 Signing time: Sat 18 Apr 2026 04:12:42 +0000 Manifest this update: Sat 18 Apr 2026 04:07:42 +0000 Manifest next update: Tue 21 Apr 2026 09:39:42 +0000 Files and hashes: 1: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: OyOVOW5sEknaivYfP/EykgJ9PJnzP8g0vcmSet0PU6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:90:35:77:fe:7f:56:90:f7:53:a2:0b:eb:1d:a0:2b:c0:ce:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Apr 18 04:07:42 2026 GMT Not After : Apr 21 09:39:42 2026 GMT Subject: CN=5113C6567CB5DD447C52759924CF9BF0A6B3EB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3a:bb:b1:50:17:52:a6:4a:8e:02:52:f1:24: 37:26:a5:3f:16:4a:cb:9a:92:b3:b5:4b:d1:35:ac: d5:59:fc:a7:e8:91:59:e0:79:85:77:22:5b:cc:07: 25:96:bd:4c:68:97:0d:b3:ca:fb:99:6e:48:44:27: 80:82:d7:47:d4:d2:26:f1:8f:b2:fc:5d:3b:2f:21: a4:15:db:79:f3:0d:53:0b:25:7f:e0:a2:59:e9:db: 26:41:d2:8e:dc:df:94:28:bd:66:2b:40:56:df:cb: f3:6d:d4:19:38:50:63:3b:c0:b2:7b:a3:56:0e:ea: 27:6b:4f:af:b0:27:cc:81:fc:e7:05:39:9d:b2:92: 7c:47:76:bb:d1:1b:3f:88:35:ca:b7:09:c8:a0:59: 9f:45:83:ed:f5:31:dd:b7:f3:0f:06:23:68:cb:92: 50:a4:ec:c7:38:a8:87:be:df:87:6b:7e:17:2e:25: 2b:0b:48:cd:82:47:ea:76:89:53:28:13:06:26:e4: c8:94:c3:0b:df:b3:9c:1c:d9:50:8b:98:58:59:98: c1:47:f3:a1:a0:a9:57:a0:34:b9:34:0d:f3:90:30: 98:d4:9d:da:65:c2:c2:64:d2:d0:92:57:23:b7:49: 27:a5:cb:29:ce:cf:f7:57:b2:1f:fe:7b:3f:ff:7e: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:13:C6:56:7C:B5:DD:44:7C:52:75:99:24:CF:9B:F0:A6:B3:EB:79 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:96:cb:92:80:fa:23:6c:3f:bc:1c:86:e1:f8:2f:20:4d:2b: b6:68:ed:de:99:a9:a2:d6:6a:df:39:6d:83:5e:26:6d:28:f2: 5e:16:d4:b3:8d:c1:23:33:cb:ab:18:ae:a3:b5:97:c9:74:65: 9b:58:7d:97:a9:3a:ee:53:80:28:0f:9a:f0:f4:65:77:4a:cb: 60:e4:32:77:65:c8:38:31:03:ad:a4:72:21:ed:18:ec:8d:23: 7a:e4:ae:99:ab:a2:b7:1c:eb:2d:aa:61:33:0e:67:61:d9:6c: d0:c1:a1:0b:e3:9d:13:db:1f:22:5e:c1:41:f2:66:3c:ac:a4: 27:70:89:5d:c1:94:85:d9:25:c4:09:ca:3f:7c:20:01:41:0c: c8:42:96:00:39:d4:64:18:63:92:d7:f0:69:c1:2f:a9:c7:3c: 8e:d9:38:9c:99:b5:b1:0e:e7:5e:89:1f:55:c9:5a:35:51:69: 19:dc:08:ef:1e:dc:46:18:e6:25:21:ed:c1:0f:8a:5d:b9:15: 5f:93:d7:7e:91:d9:37:31:88:8a:13:99:a6:d1:96:41:c4:47: d8:9c:d6:7c:f6:bc:50:37:96:a5:d0:9c:80:24:33:92:40:8e: 99:53:47:f9:f3:68:6b:84:76:12:cf:0c:82:17:66:0b:c1:db: 16:4a:4f:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJA1d/5/VpD3U6IL6x2gK8DOA8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNjA0MTgwNDA3NDJaFw0yNjA0MjEwOTM5NDJaMDMxMTAvBgNV BAMTKDUxMTNDNjU2N0NCNURENDQ3QzUyNzU5OTI0Q0Y5QkYwQTZCM0VCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOruxUBdSpkqOAlLxJDcmpT8W SsuakrO1S9E1rNVZ/KfokVngeYV3IlvMByWWvUxolw2zyvuZbkhEJ4CC10fU0ibx j7L8XTsvIaQV23nzDVMLJX/golnp2yZB0o7c35QovWYrQFbfy/Nt1Bk4UGM7wLJ7 o1YO6idrT6+wJ8yB/OcFOZ2yknxHdrvRGz+INcq3CcigWZ9Fg+31Md238w8GI2jL klCk7Mc4qIe+34drfhcuJSsLSM2CR+p2iVMoEwYm5MiUwwvfs5wc2VCLmFhZmMFH 86GgqVegNLk0DfOQMJjUndplwsJk0tCSVyO3SSelyynOz/dXsh/+ez//fu2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUURPGVny13UR8UnWZJM+b8Kaz63kwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaWy5KA+iNsP7wchuH4LyBNK7Zo7d6ZqaLW at85bYNeJm0o8l4W1LONwSMzy6sYrqO1l8l0ZZtYfZepOu5TgCgPmvD0ZXdKy2Dk MndlyDgxA62kciHtGOyNI3rkrpmrorcc6y2qYTMOZ2HZbNDBoQvjnRPbHyJewUHy ZjyspCdwiV3BlIXZJcQJyj98IAFBDMhClgA51GQYY5LX8GnBL6nHPI7ZOJyZtbEO 516JH1XJWjVRaRncCO8e3EYY5iUh7cEPil25FV+T136R2TcxiIoTmabRlkHER9ic 1nz2vFA3lqXQnIAkM5JAjplTR/nzaGuEdhLPDIIXZgvB2xZKT2g= -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:00 2026 by rpki-client