
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json)
Hash identifier: vETdK40yM1UQNhsR77ECmH1ufnZ1s4NMu4YK7YYzOXk=
Subject key identifier: 03:EE:39:A9:4E:4F:98:A3:D2:F0:35:06:8F:64:F9:B0:45:83:13:08
Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C
Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C
Certificate serial: 0668BF89F365A70D019B79071EE97A33C829945A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
Manifest number: F0
Signing time: Fri 17 Apr 2026 03:02:17 +0000
Manifest this update: Fri 17 Apr 2026 02:57:17 +0000
Manifest next update: Mon 20 Apr 2026 11:21:17 +0000
Files and hashes: 1: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: V/HgFKhmphcTLMwiUIPt320MdSRWzjTrxnpjjMHAQcM=)
2: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: /rrVT8+7vMAShEA29/a83w5natJXQZ8dbakSMPveJCo=)
3: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: qP5p1JtLajQU4tMkK8i4H4Q7vMTKK0pWmbujRAH0CW4=)
4: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: R0jNeZREOH7PdH08cIX9FXJ07BU9g/y14/QiKIW3zDQ=)
5: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: D1j1lCivRx4MpFMf1wJtpmY2c2+VbcHJ9Y4DtgTsc+k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl
rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 11:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:68:bf:89:f3:65:a7:0d:01:9b:79:07:1e:e9:7a:33:c8:29:94:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C
Validity
Not Before: Apr 17 02:57:17 2026 GMT
Not After : Apr 20 11:21:17 2026 GMT
Subject: CN=03EE39A94E4F98A3D2F035068F64F9B045831308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:56:f5:43:cb:57:0d:28:93:c2:37:c1:cf:
e5:36:df:aa:1b:ff:1f:94:bc:41:e7:b4:ee:1e:b4:
0c:9a:e2:69:2f:a9:56:cd:4a:28:5c:9e:15:18:c3:
2b:3f:1d:2b:7f:31:ec:a5:5b:73:b5:e7:da:d5:ba:
0c:e4:c8:96:c6:6a:fb:1b:67:ef:3e:8c:76:a6:21:
1b:19:be:da:51:17:67:c5:0c:24:6c:a1:05:b8:b8:
4b:d3:1d:bc:86:f3:48:49:0e:ba:35:2b:d5:7a:3f:
9d:e3:d8:f6:84:8e:32:22:99:f8:fb:79:da:9f:1a:
d1:f5:97:44:96:bf:31:85:d2:e3:c7:be:1a:2b:d9:
cd:ce:b3:7c:f9:ff:a9:9c:1f:83:2b:f6:92:27:5e:
f6:6c:07:2e:51:e0:76:54:53:7c:29:bd:d4:2c:40:
41:3f:f3:2f:a7:25:e8:a5:26:0b:f0:49:24:f0:0e:
4c:ac:b2:2c:05:12:95:91:52:b9:e3:a3:b1:33:66:
4a:91:06:5b:7e:04:1e:ad:fc:69:10:c6:af:f8:bc:
8d:74:14:d3:29:83:85:3e:94:6a:1a:67:ab:31:9d:
3f:4e:c0:36:91:71:eb:9b:9d:9b:76:ca:11:10:36:
52:90:5c:fc:ab:2c:f4:88:d2:c1:f1:2a:a7:dd:16:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EE:39:A9:4E:4F:98:A3:D2:F0:35:06:8F:64:F9:B0:45:83:13:08
X509v3 Authority Key Identifier:
keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:cf:78:d0:96:57:c5:e2:6f:41:71:dc:26:20:de:19:2e:
2d:d1:2e:79:6f:8c:fb:4f:cf:19:9f:bb:e9:5a:d5:15:e2:98:
76:3e:f7:63:89:a9:42:c7:6d:4b:08:cc:a3:71:6d:18:80:b0:
65:bf:9f:56:b7:a9:3e:66:bb:c4:c3:4b:18:17:9e:dd:ea:c4:
f9:73:13:24:5c:f8:e1:06:23:a3:0d:0d:1a:23:16:36:e0:82:
34:12:11:ed:1c:99:90:5c:46:17:42:e1:92:ca:47:0c:37:dd:
59:b2:8e:ae:f1:11:c4:e1:1c:34:8f:d2:3f:18:6e:b1:9c:38:
58:66:b9:be:5a:c0:39:96:8b:9e:c0:ff:06:3d:f8:be:09:b8:
a4:eb:97:c5:79:5e:db:d6:bb:5f:e7:4e:5a:f7:09:43:57:6f:
d6:fc:b6:78:e0:dc:5b:c4:99:7c:81:f5:8f:63:e0:0a:4a:b2:
0a:4e:28:84:fe:71:00:25:91:c4:8f:e1:ed:0d:07:6c:08:a3:
af:fe:a8:13:7f:9b:1e:d3:d0:75:f2:fc:f6:03:c2:99:74:33:
6d:05:1e:cb:f4:12:d9:d5:7a:04:00:47:a2:9e:68:5a:4b:bd:
4a:ad:b3:ca:81:12:b2:91:c8:98:c1:cb:a3:25:4a:ba:3f:6f:
7c:d8:41:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBmi/ifNlpw0Bm3kHHul6M8gplFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3
RTFENzIxQzAeFw0yNjA0MTcwMjU3MTdaFw0yNjA0MjAxMTIxMTdaMDMxMTAvBgNV
BAMTKDAzRUUzOUE5NEU0Rjk4QTNEMkYwMzUwNjhGNjRGOUIwNDU4MzEzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfVb1Q8tXDSiTwjfBz+U236ob
/x+UvEHntO4etAya4mkvqVbNSihcnhUYwys/HSt/MeylW3O159rVugzkyJbGavsb
Z+8+jHamIRsZvtpRF2fFDCRsoQW4uEvTHbyG80hJDro1K9V6P53j2PaEjjIimfj7
edqfGtH1l0SWvzGF0uPHvhor2c3Os3z5/6mcH4Mr9pInXvZsBy5R4HZUU3wpvdQs
QEE/8y+nJeilJgvwSSTwDkyssiwFEpWRUrnjo7EzZkqRBlt+BB6t/GkQxq/4vI10
FNMpg4U+lGoaZ6sxnT9OwDaRceubnZt2yhEQNlKQXPyrLPSI0sHxKqfdFsSDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUA+45qU5PmKPS8DUGj2T5sEWDEwgwHwYDVR0j
BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5
QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE
NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh
YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF
RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGNbz3jQllfF4m9BcdwmIN4ZLi3RLnlvjPtP
zxmfu+la1RXimHY+92OJqULHbUsIzKNxbRiAsGW/n1a3qT5mu8TDSxgXnt3qxPlz
EyRc+OEGI6MNDRojFjbggjQSEe0cmZBcRhdC4ZLKRww33Vmyjq7xEcThHDSP0j8Y
brGcOFhmub5awDmWi57A/wY9+L4JuKTrl8V5XtvWu1/nTlr3CUNXb9b8tnjg3FvE
mXyB9Y9j4ApKsgpOKIT+cQAlkcSP4e0NB2wIo6/+qBN/mx7T0HXy/PYDwpl0M20F
Hsv0EtnVegQAR6KeaFpLvUqts8qBErKRyJjBy6MlSro/b3zYQRU=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:00 2026 by rpki-client