$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: t0qr/jdPzaqczEO3XYBN4xJo8lZYHJuhka2mM/lQqtE= Subject key identifier: 3D:AC:DC:2F:46:D1:D8:4A:CA:F6:C3:98:B3:7B:54:E0:33:52:BC:3F Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 364E184B254F3E313092770D82A5CE1087E6FE11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: DB Signing time: Sun 01 Mar 2026 18:22:11 +0000 Manifest this update: Sun 01 Mar 2026 18:17:11 +0000 Manifest next update: Wed 04 Mar 2026 19:47:11 +0000 Files and hashes: 1: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: qP5p1JtLajQU4tMkK8i4H4Q7vMTKK0pWmbujRAH0CW4=) 2: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: R0jNeZREOH7PdH08cIX9FXJ07BU9g/y14/QiKIW3zDQ=) 3: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: D1j1lCivRx4MpFMf1wJtpmY2c2+VbcHJ9Y4DtgTsc+k=) 4: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: /rrVT8+7vMAShEA29/a83w5natJXQZ8dbakSMPveJCo=) 5: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: VAnw+IQz4FqdXNUOHDDuCfFrYIlUCJXqKxBhZx1i50w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4e:18:4b:25:4f:3e:31:30:92:77:0d:82:a5:ce:10:87:e6:fe:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Mar 1 18:17:11 2026 GMT Not After : Mar 4 19:47:11 2026 GMT Subject: CN=3DACDC2F46D1D84ACAF6C398B37B54E03352BC3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0b:d8:a1:c2:79:d5:ea:ca:e5:db:d2:c0:8e: d7:54:f3:95:26:1f:ac:79:7d:1d:9a:d3:fe:97:40: 87:e8:e7:da:8b:22:3a:6c:87:eb:a7:34:04:56:44: 01:25:85:2f:5b:72:17:ed:d8:fe:b0:29:3e:b9:d5: 88:fb:8c:d0:55:85:14:6f:8d:2a:eb:03:18:49:2a: fb:15:b0:c8:dc:e7:4c:03:da:dd:09:dd:94:ea:b6: e5:fe:8f:5b:59:91:3a:e0:a2:a3:dd:df:08:2b:4c: 45:b0:52:23:42:48:a3:65:56:4c:73:4b:f7:0b:4f: 86:5e:3b:12:2d:d0:9a:f3:e1:ca:25:6c:d4:ea:97: 59:2a:44:c1:8f:b1:71:a8:44:1e:50:e0:27:f1:bf: 2a:63:30:ca:2e:2d:06:9b:c6:86:75:ed:42:e0:ab: e3:08:c4:06:0e:b6:3d:87:bd:d1:6e:63:bb:09:63: 13:a3:1e:47:51:0b:28:56:42:c7:d3:8a:5e:76:88: 38:a8:56:fc:59:04:ae:20:b1:26:49:67:c9:97:36: e0:bf:fe:9e:ca:93:f7:c0:65:58:aa:e1:cd:57:d4: 6d:df:c4:58:dd:c3:bf:77:c8:9e:0b:32:2b:00:fb: 3a:ff:1e:87:0f:d3:4b:92:ed:02:da:0a:1a:f8:76: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AC:DC:2F:46:D1:D8:4A:CA:F6:C3:98:B3:7B:54:E0:33:52:BC:3F X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e0:99:b2:d1:f7:25:68:fd:80:09:ab:be:d1:10:0d:47:87: 94:d4:b5:aa:8c:ab:5f:a8:7f:7a:a1:ae:2c:e2:b9:00:36:ba: f0:53:94:d4:83:60:2f:93:b5:71:2a:92:ee:27:7e:63:0f:b6: a2:f2:c1:b8:17:84:b1:1b:87:c6:02:8e:c0:9e:d2:5e:a3:a5: f1:59:d8:ce:01:ed:d1:a8:1b:0d:ac:83:b4:09:a3:21:62:1c: 6a:aa:d7:02:97:ba:4a:9f:16:0e:2f:63:40:e4:79:0d:31:45: db:db:27:53:d1:f9:47:e3:89:c4:91:11:35:a6:74:c0:14:3e: 7f:62:09:03:30:cb:1b:1f:60:2a:4f:aa:ca:de:dc:c4:9b:f1: b9:04:47:d8:91:be:6c:e3:b2:1f:cd:d5:35:20:2d:a6:e2:6f: e5:7c:7d:58:94:5b:df:5b:eb:73:1a:7b:97:28:a0:90:4c:ec: 9a:88:31:0e:b4:a8:d4:6f:97:99:37:68:db:13:ab:64:5e:24: 93:95:83:eb:70:4e:21:47:a3:2c:24:05:ff:9e:05:b2:9f:19: 25:9c:21:02:fe:a5:9b:a7:1c:f0:c6:7d:d8:98:11:dc:2a:bb: 61:8b:33:17:01:1d:0b:1e:dd:f3:08:0e:c6:79:88:cf:4d:b9: d2:36:4f:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNk4YSyVPPjEwkncNgqXOEIfm/hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNjAzMDExODE3MTFaFw0yNjAzMDQxOTQ3MTFaMDMxMTAvBgNV BAMTKDNEQUNEQzJGNDZEMUQ4NEFDQUY2QzM5OEIzN0I1NEUwMzM1MkJDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaC9ihwnnV6srl29LAjtdU85Um H6x5fR2a0/6XQIfo59qLIjpsh+unNARWRAElhS9bchft2P6wKT651Yj7jNBVhRRv jSrrAxhJKvsVsMjc50wD2t0J3ZTqtuX+j1tZkTrgoqPd3wgrTEWwUiNCSKNlVkxz S/cLT4ZeOxIt0Jrz4colbNTql1kqRMGPsXGoRB5Q4CfxvypjMMouLQabxoZ17ULg q+MIxAYOtj2HvdFuY7sJYxOjHkdRCyhWQsfTil52iDioVvxZBK4gsSZJZ8mXNuC/ /p7Kk/fAZViq4c1X1G3fxFjdw793yJ4LMisA+zr/HocP00uS7QLaChr4dppDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPazcL0bR2ErK9sOYs3tU4DNSvD8wHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXgmbLR9yVo/YAJq77REA1Hh5TUtaqMq1+o f3qhriziuQA2uvBTlNSDYC+TtXEqku4nfmMPtqLywbgXhLEbh8YCjsCe0l6jpfFZ 2M4B7dGoGw2sg7QJoyFiHGqq1wKXukqfFg4vY0DkeQ0xRdvbJ1PR+UfjicSRETWm dMAUPn9iCQMwyxsfYCpPqsre3MSb8bkER9iRvmzjsh/N1TUgLabib+V8fViUW99b 63Mae5cooJBM7JqIMQ60qNRvl5k3aNsTq2ReJJOVg+twTiFHoywkBf+eBbKfGSWc IQL+pZunHPDGfdiYEdwqu2GLMxcBHQse3fMIDsZ5iM9NudI2T3U= -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:40 2026 by rpki-client