$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: V+MZR3exJQXdxj1kGiihrSBJ+5zRerWA/3fbGM6xm6E= Subject key identifier: D4:6B:79:30:5F:4D:DB:E3:80:73:AF:9C:65:A5:DB:B3:7B:13:E0:F2 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 19CC49C5C240495C556E04D539FDD20455818F45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 026C Signing time: Sun 01 Mar 2026 18:01:19 +0000 Manifest this update: Sun 01 Mar 2026 17:56:19 +0000 Manifest next update: Thu 05 Mar 2026 01:46:19 +0000 Files and hashes: 1: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: BfE//xvVejg3fdCudp6ObvOH+VIRGgD97l2vlDnmK9k=) 2: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: f2aqBmkYL2nq2pmmyb8skk1lkHyVNld2Hp4PMAacApI=) 3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: TDJsbNMl+lAMAT0NLVIT8psIHchVbCcnWDmPVMhPBr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cc:49:c5:c2:40:49:5c:55:6e:04:d5:39:fd:d2:04:55:81:8f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Mar 1 17:56:19 2026 GMT Not After : Mar 5 01:46:19 2026 GMT Subject: CN=D46B79305F4DDBE38073AF9C65A5DBB37B13E0F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5e:4b:89:92:d1:df:c2:6c:c1:e1:50:af:32: 4d:9d:a7:28:bd:3d:3f:7c:28:a3:28:a1:14:1b:e0: 3b:57:4f:7d:a6:35:da:76:3b:72:38:90:3d:fb:b6: 49:6a:6d:ff:c8:1d:cc:2e:62:fb:ba:ff:26:f8:09: 2f:6e:5e:17:29:59:c6:95:e7:e3:83:ba:30:c7:6b: 53:f8:4d:fe:33:8b:56:fe:9e:ac:21:6e:2e:e5:f6: 2b:ce:95:90:82:48:11:dc:91:d5:a9:18:a3:74:ea: a4:79:ec:76:db:57:01:8e:be:05:fb:bb:62:bf:23: 25:49:65:fe:cb:f5:f0:d6:c0:f4:70:07:64:29:4e: 05:c4:a3:8d:e7:a4:d0:11:3b:27:ee:c1:91:b0:87: ca:cb:48:87:9d:df:78:a2:68:f1:d5:9e:b4:33:62: 89:50:db:ed:97:9e:8f:d5:b1:eb:02:c7:bb:70:97: 9b:98:fb:e0:32:26:89:bb:1d:a0:f0:fe:2a:69:f8: eb:17:c8:07:e7:cb:e9:2a:1a:7c:32:a3:d4:7e:41: 31:60:b2:b2:68:c3:44:ec:1e:94:94:56:5b:a3:9a: 38:4a:0d:79:0c:f1:aa:00:17:38:94:2c:a1:a8:ed: 3e:ea:44:d3:b8:ad:61:a5:72:9b:36:a5:da:f3:2d: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6B:79:30:5F:4D:DB:E3:80:73:AF:9C:65:A5:DB:B3:7B:13:E0:F2 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e8:eb:bd:58:f3:46:00:3c:a8:f0:1d:3d:45:86:0d:30:30: 42:a8:c2:f6:88:3c:b3:69:48:f8:07:82:66:17:6b:f7:3c:e4: 48:e9:08:03:5d:66:26:af:73:e1:56:81:84:45:19:69:a2:57: ef:b0:5d:2d:f0:25:2c:07:88:b1:b7:cb:d5:fd:9b:7a:7d:79: 70:87:fb:f5:ce:a9:9c:0e:ec:a3:0b:25:49:cf:19:6d:cb:1d: c2:bb:24:2c:d3:33:9b:6b:04:46:10:9c:4a:e2:21:0f:0c:ac: 3f:74:79:fc:02:51:31:e5:f8:cb:48:9e:6f:1d:c2:e5:be:3c: 3c:03:d2:22:1c:25:cd:47:1d:3f:d4:27:3f:b6:ea:f4:e7:f2: 20:4e:6a:4b:d7:4b:52:d9:a6:ed:dc:b9:8b:98:03:59:cc:09: 4f:db:32:8d:42:98:b3:c2:b3:2f:60:67:20:27:a0:27:39:12: 55:e9:14:73:32:ef:18:65:5a:50:0a:e6:0d:c6:3c:38:b9:ac: 98:cf:c0:9a:8b:4b:57:7d:ae:eb:2f:66:e9:00:ee:80:86:de: ce:05:09:d3:d2:b6:01:d9:4b:77:67:e5:26:b5:2d:71:28:01: 5e:d7:a4:d4:4a:79:cc:45:14:00:e0:c7:64:50:d0:fa:22:c9: 66:6c:07:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcxJxcJASVxVbgTVOf3SBFWBj0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNjAzMDExNzU2MTlaFw0yNjAzMDUwMTQ2MTlaMDMxMTAvBgNV BAMTKEQ0NkI3OTMwNUY0RERCRTM4MDczQUY5QzY1QTVEQkIzN0IxM0UwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhXkuJktHfwmzB4VCvMk2dpyi9 PT98KKMooRQb4DtXT32mNdp2O3I4kD37tklqbf/IHcwuYvu6/yb4CS9uXhcpWcaV 5+ODujDHa1P4Tf4zi1b+nqwhbi7l9ivOlZCCSBHckdWpGKN06qR57HbbVwGOvgX7 u2K/IyVJZf7L9fDWwPRwB2QpTgXEo43npNAROyfuwZGwh8rLSIed33iiaPHVnrQz YolQ2+2Xno/VsesCx7twl5uY++AyJom7HaDw/ipp+OsXyAfny+kqGnwyo9R+QTFg srJow0TsHpSUVlujmjhKDXkM8aoAFziULKGo7T7qRNO4rWGlcps2pdrzLb0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Gt5MF9N2+OAc6+cZaXbs3sT4PIwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTo671Y80YAPKjwHT1Fhg0wMEKowvaIPLNp SPgHgmYXa/c85EjpCANdZiavc+FWgYRFGWmiV++wXS3wJSwHiLG3y9X9m3p9eXCH +/XOqZwO7KMLJUnPGW3LHcK7JCzTM5trBEYQnEriIQ8MrD90efwCUTHl+MtInm8d wuW+PDwD0iIcJc1HHT/UJz+26vTn8iBOakvXS1LZpu3cuYuYA1nMCU/bMo1CmLPC sy9gZyAnoCc5ElXpFHMy7xhlWlAK5g3GPDi5rJjPwJqLS1d9rusvZukA7oCG3s4F CdPStgHZS3dn5Sa1LXEoAV7XpNRKecxFFADgx2RQ0PoiyWZsB7o= -----END CERTIFICATE-----Generated at Mon Mar 2 09:32:22 2026 by rpki-client