$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: j2i6R3CWCS73F7OEA23f+2W0p4pLVq1f55k70MPBsQ0= Subject key identifier: 89:14:2E:6D:7E:B0:96:58:BE:14:48:00:B7:15:3B:77:24:CC:91:C7 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 31BF4632E66D480D4FFDE2CBE84EBFDE76F90CE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 014B Signing time: Sat 18 Oct 2025 17:11:40 +0000 Manifest this update: Sat 18 Oct 2025 17:06:40 +0000 Manifest next update: Wed 22 Oct 2025 02:48:40 +0000 Files and hashes: 1: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: QybRgJegIYGeRxA3jiD0BSJ2fZTSXZHC+zlS6Kajh80=) 2: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: i+BMvBMmVVTEpYNTmdoQENhpS5cxM86h+HpscKBpaXw=) 3: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: 9C5Ex+7Y1aBAHl+9U/ASSlLW3EKgAd0vb9BPKVqnilg=) 4: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: Xzix4WRmc+UFqL3SMZuu4BYMnJJ6GdtfZg7WTYeKfKA=) 5: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: SCuHdm3nF84fY+BnGRLSTW3OBY4lep/g82F3vff+bfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bf:46:32:e6:6d:48:0d:4f:fd:e2:cb:e8:4e:bf:de:76:f9:0c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Oct 18 17:06:40 2025 GMT Not After : Oct 22 02:48:40 2025 GMT Subject: CN=89142E6D7EB09658BE144800B7153B7724CC91C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:7d:e0:0c:cd:2b:68:57:59:5d:bd:4c:b3: 7c:17:c6:11:c9:c0:71:22:f7:69:b5:68:1a:07:29: d8:0c:54:73:a3:01:3f:4e:34:d1:ea:5e:0e:d0:44: 96:4f:df:06:ea:b5:3c:b0:1e:6b:ac:89:03:11:07: 5c:78:30:1e:34:c6:b4:c1:33:e9:52:45:ec:a9:3c: 98:b9:db:b3:1f:2d:4f:ed:82:77:85:60:40:e3:1d: e1:ac:e0:36:47:0e:75:16:96:fb:c1:ef:f5:60:8f: 00:86:de:2c:a8:17:2f:7c:f1:aa:45:7e:79:81:30: 9c:b7:4a:57:1a:7d:90:cd:2d:64:e5:43:cb:40:2a: c7:68:e3:11:6c:4b:ba:9f:72:57:6a:21:b2:e0:b7: 02:a2:a2:7b:9e:33:62:4a:fa:58:b3:89:80:2d:93: 47:4b:72:73:e8:0b:fb:82:e2:d9:32:3c:c4:21:e3: 27:48:dd:58:52:c9:cc:33:36:86:dd:9d:91:95:02: 5a:e0:0f:06:e8:8b:c6:b0:ad:7d:3f:e2:1f:ac:34: 46:7a:6e:f1:4c:ae:e7:dd:a0:1a:dc:33:df:67:51: 25:4e:09:82:76:7f:51:b5:47:d0:06:d7:31:01:48: 65:79:c3:0a:6b:35:ea:0d:f2:61:5c:65:99:66:c4: ab:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:14:2E:6D:7E:B0:96:58:BE:14:48:00:B7:15:3B:77:24:CC:91:C7 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d9:7d:a3:3c:65:93:14:98:64:44:a8:3a:77:88:ba:b6:49: da:da:af:37:74:ea:0a:28:86:f1:08:9b:d0:2b:00:57:08:16: f5:49:9e:de:4f:11:6e:a3:1a:13:2f:85:57:fc:50:a0:10:6a: d6:62:5f:12:e1:b8:a1:e2:1b:44:0b:6e:ee:12:09:10:8f:29: 8a:03:05:84:b9:55:a5:13:f0:3f:b2:29:0c:cb:d2:20:d2:6c: c9:bc:d1:c6:fe:76:6e:c2:fa:31:52:de:30:9d:40:13:a2:49: 03:68:12:6e:c3:ea:65:a3:51:5f:8a:b1:95:6b:93:dc:bc:9a: 59:75:b7:8c:47:86:2f:0d:91:0a:8d:49:28:29:d6:b7:75:69: 49:44:e5:eb:ae:ca:f7:07:89:82:03:95:90:1b:fc:c1:94:a7: 8c:64:e8:48:af:a6:06:1e:a2:05:81:75:b3:6e:1a:4d:07:86: 36:ef:fd:72:d8:56:27:b8:e7:47:93:15:f1:b9:a9:5a:3b:41: 69:9c:db:c9:fd:dc:6b:d1:24:9a:48:8f:8f:bd:74:33:e6:e9: f5:82:a8:be:fc:e1:97:7b:87:85:a5:0f:48:d0:9b:5b:6e:71: 9b:e6:65:05:77:40:74:c7:c9:85:cb:86:05:9a:3a:fe:a6:42: ba:96:7e:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMb9GMuZtSA1P/eLL6E6/3nb5DOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTEwMTgxNzA2NDBaFw0yNTEwMjIwMjQ4NDBaMDMxMTAvBgNV BAMTKDg5MTQyRTZEN0VCMDk2NThCRTE0NDgwMEI3MTUzQjc3MjRDQzkxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5n3gDM0raFdZXb1Ms3wXxhHJ wHEi92m1aBoHKdgMVHOjAT9ONNHqXg7QRJZP3wbqtTywHmusiQMRB1x4MB40xrTB M+lSReypPJi527MfLU/tgneFYEDjHeGs4DZHDnUWlvvB7/VgjwCG3iyoFy988apF fnmBMJy3SlcafZDNLWTlQ8tAKsdo4xFsS7qfcldqIbLgtwKionueM2JK+liziYAt k0dLcnPoC/uC4tkyPMQh4ydI3VhSycwzNobdnZGVAlrgDwboi8awrX0/4h+sNEZ6 bvFMrufdoBrcM99nUSVOCYJ2f1G1R9AG1zEBSGV5wwprNeoN8mFcZZlmxKtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRQubX6wlli+FEgAtxU7dyTMkccwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXZfaM8ZZMUmGREqDp3iLq2Sdrarzd06goo hvEIm9ArAFcIFvVJnt5PEW6jGhMvhVf8UKAQatZiXxLhuKHiG0QLbu4SCRCPKYoD BYS5VaUT8D+yKQzL0iDSbMm80cb+dm7C+jFS3jCdQBOiSQNoEm7D6mWjUV+KsZVr k9y8mll1t4xHhi8NkQqNSSgp1rd1aUlE5euuyvcHiYIDlZAb/MGUp4xk6EivpgYe ogWBdbNuGk0Hhjbv/XLYVie450eTFfG5qVo7QWmc28n93GvRJJpIj4+9dDPm6fWC qL784Zd7h4WlD0jQm1tucZvmZQV3QHTHyYXLhgWaOv6mQrqWftk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:15 2025 by rpki-client