$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: uN0kf9YR1Fce9/QBGTWCeI5I5m9Ap92cIIBI2Bs3D3g= Subject key identifier: 88:2A:CE:C4:23:5F:2E:EF:B3:4A:79:B0:A3:BC:2E:1C:02:B8:2F:1D Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 625FF6B752FFC5785FBE70E1A6224548E7849795 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: E6 Signing time: Wed 25 Mar 2026 17:32:13 +0000 Manifest this update: Wed 25 Mar 2026 17:27:13 +0000 Manifest next update: Sun 29 Mar 2026 00:18:13 +0000 Files and hashes: 1: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: /rrVT8+7vMAShEA29/a83w5natJXQZ8dbakSMPveJCo=) 2: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: svKPFmRvs/N/0naEp1hdZGcZdCG2wi/8Nso7HAw6qOg=) 3: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: D1j1lCivRx4MpFMf1wJtpmY2c2+VbcHJ9Y4DtgTsc+k=) 4: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: R0jNeZREOH7PdH08cIX9FXJ07BU9g/y14/QiKIW3zDQ=) 5: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: qP5p1JtLajQU4tMkK8i4H4Q7vMTKK0pWmbujRAH0CW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:5f:f6:b7:52:ff:c5:78:5f:be:70:e1:a6:22:45:48:e7:84:97:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Mar 25 17:27:13 2026 GMT Not After : Mar 29 00:18:13 2026 GMT Subject: CN=882ACEC4235F2EEFB34A79B0A3BC2E1C02B82F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:32:ed:92:a0:63:56:11:6d:f1:dd:b9:10:9a: a5:98:93:6c:22:6e:67:6d:97:1c:40:d7:2c:36:09: 9b:4b:20:e4:7c:64:c4:ab:1e:f2:d4:90:9d:d0:06: 9f:a5:6b:70:60:e6:51:9a:25:ad:c6:85:17:bc:70: cc:0a:ef:e9:b7:84:22:b0:6d:29:52:f5:06:1a:98: a2:d4:df:c7:12:c0:23:2b:03:ba:87:7f:79:18:88: b5:f9:4d:3d:48:0e:89:81:43:79:3f:9f:78:eb:58: 9c:64:b4:03:df:bf:18:bd:24:ef:b2:0c:ad:c4:18: c7:08:c1:62:df:1e:2f:58:17:ae:21:f3:fb:f0:32: b9:2b:46:0f:9c:32:db:b3:bb:c5:89:2f:f9:ea:fd: 4c:5a:45:15:6f:cf:f0:2a:30:df:2a:93:12:ea:2b: 23:8b:96:14:54:ab:a9:c7:2a:00:88:58:c7:e2:64: 0b:79:7e:c9:e7:ad:2f:53:94:27:68:96:9c:7a:43: b2:87:51:70:d5:e5:17:1c:cd:80:a3:54:a1:d7:42: 9c:c1:fe:70:17:b0:60:2b:7a:0b:3e:ad:6f:7a:c4: 63:5d:f2:64:bd:3b:00:27:91:92:04:81:91:e3:d6: 4f:19:ba:14:df:c5:b6:20:d7:96:77:f4:79:d8:af: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2A:CE:C4:23:5F:2E:EF:B3:4A:79:B0:A3:BC:2E:1C:02:B8:2F:1D X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:04:06:d3:07:0e:1d:21:0b:96:55:e6:d1:ef:e5:7e:a9:4c: 2b:ce:b5:3a:3b:ad:6f:2c:00:ff:0c:6f:bc:a0:1c:6b:bd:8c: 92:8a:ac:29:3b:f4:dd:fa:f1:11:41:cc:06:d6:c4:12:ec:03: 1c:d3:6f:ee:d8:a5:b7:c5:f1:93:95:f8:f9:4b:fa:aa:c0:dc: 11:5d:4f:0a:39:e0:35:20:90:f9:c4:4a:fd:a1:ef:44:b7:14: de:4e:7b:29:e2:75:28:21:7b:6d:c6:10:06:0c:eb:83:d7:5a: ff:20:ac:f2:ec:b6:7c:df:16:cc:25:cb:21:2e:6a:78:88:43: 17:f7:f6:73:ff:f9:9d:fe:ca:33:14:ea:43:3c:c9:a1:a4:02: 1a:b9:d3:a6:c7:ed:8e:bc:b7:61:6c:f0:7b:b6:78:b0:1e:f4: a2:03:b8:17:bb:87:75:fc:76:d4:2c:1c:b0:8a:8a:b5:30:ad: 55:e0:25:42:5b:6f:0c:18:fb:d9:36:ad:d9:98:03:29:a9:29: 2a:da:e4:80:cc:89:fe:33:c7:54:68:9d:3b:a5:a0:41:be:a1: 72:41:47:d2:35:59:de:0d:5a:54:1f:74:94:ad:99:91:86:33: d6:0d:0e:30:64:87:e2:aa:63:12:9e:19:9d:a4:d9:24:23:fa: e0:84:23:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYl/2t1L/xXhfvnDhpiJFSOeEl5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNjAzMjUxNzI3MTNaFw0yNjAzMjkwMDE4MTNaMDMxMTAvBgNV BAMTKDg4MkFDRUM0MjM1RjJFRUZCMzRBNzlCMEEzQkMyRTFDMDJCODJGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhMu2SoGNWEW3x3bkQmqWYk2wi bmdtlxxA1yw2CZtLIOR8ZMSrHvLUkJ3QBp+la3Bg5lGaJa3GhRe8cMwK7+m3hCKw bSlS9QYamKLU38cSwCMrA7qHf3kYiLX5TT1IDomBQ3k/n3jrWJxktAPfvxi9JO+y DK3EGMcIwWLfHi9YF64h8/vwMrkrRg+cMtuzu8WJL/nq/UxaRRVvz/AqMN8qkxLq KyOLlhRUq6nHKgCIWMfiZAt5fsnnrS9TlCdolpx6Q7KHUXDV5RcczYCjVKHXQpzB /nAXsGAregs+rW96xGNd8mS9OwAnkZIEgZHj1k8ZuhTfxbYg15Z39HnYr0IFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiCrOxCNfLu+zSnmwo7wuHAK4Lx0wHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYEBtMHDh0hC5ZV5tHv5X6pTCvOtTo7rW8s AP8Mb7ygHGu9jJKKrCk79N368RFBzAbWxBLsAxzTb+7YpbfF8ZOV+PlL+qrA3BFd Two54DUgkPnESv2h70S3FN5OeynidSghe23GEAYM64PXWv8grPLstnzfFswlyyEu aniIQxf39nP/+Z3+yjMU6kM8yaGkAhq506bH7Y68t2Fs8Hu2eLAe9KIDuBe7h3X8 dtQsHLCKirUwrVXgJUJbbwwY+9k2rdmYAympKSra5IDMif4zx1RonTuloEG+oXJB R9I1Wd4NWlQfdJStmZGGM9YNDjBkh+KqYxKeGZ2k2SQj+uCEIyY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:53 2026 by rpki-client