$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: pIlhgqcjRrYERQ96iTqwn9xZu3vgjCxsRbNG9W/GxPE= Subject key identifier: 1A:F1:7A:72:49:B1:56:04:D5:31:53:CC:93:FA:D2:86:7A:D0:59:C4 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 6949710D222CCDAA770FA0DE7C69B855CE2ACD99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 0191 Signing time: Wed 25 Mar 2026 09:01:57 +0000 Manifest this update: Wed 25 Mar 2026 08:56:57 +0000 Manifest next update: Sat 28 Mar 2026 11:52:57 +0000 Files and hashes: 1: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: 0lFC9xY0YewQ772N2FNjtyZYFVOf6qjqYYSYMPRZhHQ=) 2: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: Xzix4WRmc+UFqL3SMZuu4BYMnJJ6GdtfZg7WTYeKfKA=) 3: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: QybRgJegIYGeRxA3jiD0BSJ2fZTSXZHC+zlS6Kajh80=) 4: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: i+BMvBMmVVTEpYNTmdoQENhpS5cxM86h+HpscKBpaXw=) 5: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: 9C5Ex+7Y1aBAHl+9U/ASSlLW3EKgAd0vb9BPKVqnilg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:49:71:0d:22:2c:cd:aa:77:0f:a0:de:7c:69:b8:55:ce:2a:cd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Mar 25 08:56:57 2026 GMT Not After : Mar 28 11:52:57 2026 GMT Subject: CN=1AF17A7249B15604D53153CC93FAD2867AD059C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:ba:94:e7:9f:dd:65:1c:4e:45:6c:08:7f: 05:67:5a:b8:9b:19:af:f7:03:4b:ba:33:92:e9:0e: 76:09:b8:94:e6:04:d3:ba:8a:10:b3:2d:49:61:a1: 44:6e:8f:f6:eb:6f:5e:12:cd:38:43:d4:d8:a5:fd: 51:fb:bc:a9:5c:92:1a:92:34:07:d8:f2:ba:5b:22: 7c:e0:ad:a2:ad:85:4a:c9:8c:09:88:17:e7:7a:86: 1a:37:27:5a:43:9e:dc:6d:6d:aa:dd:3d:92:f4:b6: 0f:1e:40:ae:19:df:76:a2:b0:11:af:3d:f2:10:a3: 56:69:ab:82:a8:61:ff:a3:a2:2b:af:d3:ac:21:9d: 90:ff:74:f4:dc:c0:ec:14:84:67:74:93:b1:d3:54: 9e:47:0f:f0:50:bb:16:2c:52:58:ee:55:6d:2e:42: ae:0c:e9:93:6f:4b:7b:be:a4:61:73:09:ce:9d:91: da:62:3a:f7:db:e6:c5:ae:fc:18:3f:fe:93:60:25: eb:45:04:22:06:cc:25:fd:0c:4c:5f:a4:98:c4:d7: 4c:cc:3e:f6:02:2d:bd:bb:a0:95:c3:4a:ba:1a:0c: b1:0b:16:b6:cf:4f:7b:5f:54:cd:c3:c0:80:08:ff: 4c:ec:dd:41:1a:09:be:39:24:d9:ba:57:0a:c4:b3: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F1:7A:72:49:B1:56:04:D5:31:53:CC:93:FA:D2:86:7A:D0:59:C4 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:50:81:ee:a1:8c:09:9c:02:b1:40:eb:36:0a:69:5a:b2:3f: 5c:ab:33:04:77:e9:6d:0b:21:7b:08:a8:fe:0b:9f:4f:82:1f: 0b:77:14:d1:63:4c:c8:0d:5a:60:84:c4:b9:56:c4:10:3b:db: 0c:61:c1:92:e1:26:f2:52:89:22:6e:a2:27:eb:75:a5:b2:44: 6a:cc:11:7c:27:48:5e:47:f1:44:3e:10:db:db:c8:e1:7c:83: b7:84:6e:ac:2e:8c:48:d9:4b:8f:18:87:2c:6b:b7:59:ef:dd: 00:f1:fc:af:b4:1a:b6:d0:b5:e5:e7:8f:5f:fa:29:e9:03:a2: 15:b1:f9:50:01:aa:bc:e6:98:32:cb:65:06:18:eb:a9:9a:5c: 17:ed:d4:54:ee:e4:37:15:2a:6f:81:bb:3f:75:4f:57:d9:6e: 1c:a4:71:6d:f5:a7:aa:0a:c6:d5:b7:a3:e3:21:f5:0a:7c:df: 9a:f9:00:e8:8b:0c:59:0d:a2:33:03:cd:e4:34:2e:49:2a:52: ce:46:4b:0c:92:72:aa:a1:4c:7e:ef:ed:86:63:1b:fe:96:2f: 34:55:f4:e7:cd:03:3c:94:b6:29:97:e3:bd:f3:33:2e:ad:a1: 35:a4:ea:56:2b:ff:e3:69:82:e0:37:1e:3a:fa:5e:69:4e:c5: 5f:a0:cb:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUlxDSIszap3D6DefGm4Vc4qzZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNjAzMjUwODU2NTdaFw0yNjAzMjgxMTUyNTdaMDMxMTAvBgNV BAMTKDFBRjE3QTcyNDlCMTU2MDRENTMxNTNDQzkzRkFEMjg2N0FEMDU5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk97qU55/dZRxORWwIfwVnWrib Ga/3A0u6M5LpDnYJuJTmBNO6ihCzLUlhoURuj/brb14SzThD1Nil/VH7vKlckhqS NAfY8rpbInzgraKthUrJjAmIF+d6hho3J1pDntxtbardPZL0tg8eQK4Z33aisBGv PfIQo1Zpq4KoYf+joiuv06whnZD/dPTcwOwUhGd0k7HTVJ5HD/BQuxYsUljuVW0u Qq4M6ZNvS3u+pGFzCc6dkdpiOvfb5sWu/Bg//pNgJetFBCIGzCX9DExfpJjE10zM PvYCLb27oJXDSroaDLELFrbPT3tfVM3DwIAI/0zs3UEaCb45JNm6VwrEs16jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGvF6ckmxVgTVMVPMk/rShnrQWcQwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFQge6hjAmcArFA6zYKaVqyP1yrMwR36W0L IXsIqP4Ln0+CHwt3FNFjTMgNWmCExLlWxBA72wxhwZLhJvJSiSJuoifrdaWyRGrM EXwnSF5H8UQ+ENvbyOF8g7eEbqwujEjZS48Yhyxrt1nv3QDx/K+0GrbQteXnj1/6 KekDohWx+VABqrzmmDLLZQYY66maXBft1FTu5DcVKm+Buz91T1fZbhykcW31p6oK xtW3o+Mh9Qp835r5AOiLDFkNojMDzeQ0LkkqUs5GSwyScqqhTH7v7YZjG/6WLzRV 9OfNAzyUtimX473zMy6toTWk6lYr/+NpguA3Hjr6XmlOxV+gy/Q= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:29 2026 by rpki-client