
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft
File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json)
Hash identifier: vbVAm1NCIm1k0gxHlbQfqcIUJbbKhoAL9DaFkcvHjlc=
Subject key identifier: 77:98:66:6D:FD:75:79:74:0F:8C:C1:9D:2B:0E:A8:9A:39:8B:80:C8
Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C
Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C
Certificate serial: 10C5848B25539F9E6757FB4CBC30051BCCE14074
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft
Manifest number: 0281
Signing time: Sun 19 Apr 2026 03:11:20 +0000
Manifest this update: Sun 19 Apr 2026 03:06:20 +0000
Manifest next update: Wed 22 Apr 2026 04:41:20 +0000
Files and hashes: 1: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: BfE//xvVejg3fdCudp6ObvOH+VIRGgD97l2vlDnmK9k=)
2: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: aPzO2S47rEH8Rqa/mTpjDk1jWWE66Gh7o9AcZG+0dFI=)
3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: TDJsbNMl+lAMAT0NLVIT8psIHchVbCcnWDmPVMhPBr8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl
rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c5:84:8b:25:53:9f:9e:67:57:fb:4c:bc:30:05:1b:cc:e1:40:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C
Validity
Not Before: Apr 19 03:06:20 2026 GMT
Not After : Apr 22 04:41:20 2026 GMT
Subject: CN=7798666DFD7579740F8CC19D2B0EA89A398B80C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:02:ba:37:d9:56:92:9d:66:94:6a:7a:41:
02:7f:d1:25:87:df:74:53:74:36:2c:0d:1e:4a:df:
30:d6:9d:24:05:18:bf:ca:89:c1:2a:b0:d9:80:13:
66:05:31:aa:8e:ee:b7:0d:8e:30:f2:8a:9c:5a:09:
5b:cd:ae:f1:1c:97:30:16:8b:4a:a0:6d:f0:3f:6c:
b6:29:dc:ac:f6:8c:97:4b:2c:87:ad:d1:78:78:8f:
3e:31:87:c1:01:33:f8:8c:f9:23:bc:32:65:fe:ab:
88:c8:bb:34:23:d3:08:0a:26:ce:db:42:a2:ca:ca:
18:63:7d:19:c1:3d:50:0b:f5:ce:ee:ab:c3:c3:6d:
c9:d4:38:7f:24:a1:ee:08:fc:3a:a9:5a:49:07:e7:
82:9b:2e:0e:2f:ae:76:81:15:7f:05:e5:ce:8b:13:
3a:34:10:5c:a2:23:83:96:44:54:76:64:d6:d7:ff:
d7:ed:73:07:2e:3f:7e:03:a2:5d:8d:15:cd:ac:c5:
2c:50:c8:56:7c:68:57:27:94:28:03:1b:68:fc:22:
a6:ab:aa:81:29:b6:eb:d0:a0:7a:1d:f6:0c:fa:b2:
22:77:1e:e8:7a:8e:9f:da:4c:9f:2d:20:c1:2d:ed:
fe:9b:3d:31:bc:dc:16:70:09:bc:01:3e:ac:6b:2e:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:98:66:6D:FD:75:79:74:0F:8C:C1:9D:2B:0E:A8:9A:39:8B:80:C8
X509v3 Authority Key Identifier:
keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:37:d2:2f:90:d9:3f:be:03:37:5a:0a:6d:2d:96:47:94:1a:
60:5e:ec:39:da:9a:92:2f:6a:79:a4:cd:e0:c1:4c:91:bc:98:
a1:1f:ff:e6:c7:02:5c:4e:cd:b3:aa:52:a6:9b:42:86:8d:67:
08:5f:35:49:c7:0d:eb:85:9b:ed:a7:6f:ad:53:1f:d8:5e:d8:
7f:74:1d:2c:76:a2:43:f4:46:16:cd:38:76:04:6b:39:cd:67:
8b:d4:a0:0a:57:4d:50:2c:50:0c:1e:89:1b:96:28:c0:95:80:
3f:1d:d7:90:58:ee:f6:2f:6c:24:7d:86:f4:a5:40:16:a6:fd:
53:95:da:93:d6:07:e8:6a:b6:cd:26:61:b5:62:e2:31:31:bd:
e8:37:9b:f4:4b:78:f0:32:8e:0b:f3:d0:d5:35:98:d6:20:4d:
ee:f8:f5:c4:7c:76:e0:65:1d:dc:10:38:27:a8:01:ec:5d:2d:
35:ec:08:37:15:8a:0a:50:9f:07:95:31:23:ac:c8:d9:db:61:
65:a8:98:13:f2:af:16:d2:2e:8a:23:f4:ae:44:c8:83:05:bd:
e9:db:f1:28:03:6a:67:10:f8:c9:49:17:55:5d:7a:b8:2e:24:
08:de:88:22:27:5f:dd:1a:af:08:b6:1b:36:2c:43:8b:4d:39:
5a:be:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:05 2026 by rpki-client