$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: SSYifXVLKTsub/KWL28K3RGtk5hVIELf7Z3buivAHQU= Subject key identifier: E5:94:84:3B:2C:1D:5A:B1:02:FD:3F:BB:47:DE:42:EE:F4:52:FD:41 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 62E2177A81C6C861BE874EF3331A36B7E7ABCB72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 0138 Signing time: Fri 05 Sep 2025 20:11:49 +0000 Manifest this update: Fri 05 Sep 2025 20:06:49 +0000 Manifest next update: Mon 08 Sep 2025 20:38:49 +0000 Files and hashes: 1: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: Xzix4WRmc+UFqL3SMZuu4BYMnJJ6GdtfZg7WTYeKfKA=) 2: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: yxophtlLSWqQbr/BiLJDrW2gzXpoJ30HY0j0y9ysTY0=) 3: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: 9C5Ex+7Y1aBAHl+9U/ASSlLW3EKgAd0vb9BPKVqnilg=) 4: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: i+BMvBMmVVTEpYNTmdoQENhpS5cxM86h+HpscKBpaXw=) 5: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: QybRgJegIYGeRxA3jiD0BSJ2fZTSXZHC+zlS6Kajh80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 20:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e2:17:7a:81:c6:c8:61:be:87:4e:f3:33:1a:36:b7:e7:ab:cb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Sep 5 20:06:49 2025 GMT Not After : Sep 8 20:38:49 2025 GMT Subject: CN=E594843B2C1D5AB102FD3FBB47DE42EEF452FD41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:91:5f:32:78:27:29:79:2d:8a:bb:04:22: 65:e2:a3:c5:f5:97:5e:d0:37:3a:d4:de:dd:91:22: 3f:45:18:d5:dc:14:69:66:ba:c0:1d:bb:9f:64:9a: 6b:bf:ac:69:e7:fc:49:e2:1c:f5:72:37:1f:9f:b4: 40:6e:7b:f5:8b:be:ab:9f:59:16:67:bc:4a:a4:5f: e4:4f:c7:f4:57:7e:ad:fe:fb:de:a7:70:cc:6f:fe: 75:80:ce:5c:af:1f:5d:e4:c0:89:96:81:da:05:1d: 06:38:81:a1:3d:3f:8b:f1:38:cd:11:d6:fa:76:10: 31:85:22:31:3b:ed:b1:39:2a:48:7a:3c:40:ca:d7: 17:96:30:21:26:cb:60:c6:2a:5c:50:72:7b:7c:40: 23:59:45:57:04:33:fb:64:c6:f7:f4:fc:4b:58:f6: 8f:8f:6c:3c:d4:e2:03:f9:63:de:5e:c7:82:b5:6c: 01:e8:76:b2:fe:5b:d5:f0:60:fa:b0:15:b6:58:fd: 0b:e0:70:79:36:16:3e:1f:ca:88:e9:6d:61:03:3d: ad:b7:54:b8:2c:44:6e:b8:f2:7a:3e:91:9c:60:00: 91:4a:5e:eb:50:aa:60:9a:0f:57:41:95:3e:53:ce: 31:ae:fd:09:4c:de:ac:ee:3f:4c:80:13:2a:8b:0f: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:94:84:3B:2C:1D:5A:B1:02:FD:3F:BB:47:DE:42:EE:F4:52:FD:41 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:11:6c:e4:b6:20:8e:7a:68:d8:86:bb:b4:1b:94:a7:27:03: c3:1a:7c:4f:cd:4a:a8:11:cd:81:d8:23:55:e1:65:82:d0:25: 3c:b1:f1:ba:d6:08:aa:64:08:12:6a:43:f7:8f:ae:2b:69:04: cf:e3:e7:f9:a5:68:40:0a:71:ad:c4:7a:5c:91:c7:bc:72:ae: 5d:2f:25:23:ee:17:dd:be:a6:c7:16:50:ed:02:2a:7b:59:0c: 93:de:c6:c2:cb:e0:b0:da:60:9f:46:95:88:75:8b:94:15:cf: ab:5f:b8:ac:2d:f6:56:f6:7d:4d:bf:b7:c9:1c:27:97:32:10: 88:81:2d:8e:00:3f:1c:ad:1f:ed:03:48:8e:8e:c8:3f:9c:66: da:b1:ec:6a:2a:d8:25:87:3b:7d:c8:53:7a:7f:ec:12:22:47: af:e5:95:24:1f:77:b0:ce:65:f5:5a:e0:71:55:fd:1a:af:9e: 29:ed:01:77:8c:f8:c3:2c:45:35:46:1e:ce:bb:1b:57:f1:45: 31:70:8c:f9:7d:ec:ee:9c:d5:d6:2c:f1:be:e3:25:d7:14:57: e9:8e:b4:57:0f:d4:04:5d:6f:cd:58:b0:03:b3:a3:3b:9f:32: 30:bb:6b:61:0d:d9:c5:33:e1:46:25:99:17:51:3f:db:b5:fc: 9b:a4:8f:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYuIXeoHGyGG+h07zMxo2t+ery3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTA5MDUyMDA2NDlaFw0yNTA5MDgyMDM4NDlaMDMxMTAvBgNV BAMTKEU1OTQ4NDNCMkMxRDVBQjEwMkZEM0ZCQjQ3REU0MkVFRjQ1MkZENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtH5FfMngnKXktirsEImXio8X1 l17QNzrU3t2RIj9FGNXcFGlmusAdu59kmmu/rGnn/EniHPVyNx+ftEBue/WLvquf WRZnvEqkX+RPx/RXfq3++96ncMxv/nWAzlyvH13kwImWgdoFHQY4gaE9P4vxOM0R 1vp2EDGFIjE77bE5Kkh6PEDK1xeWMCEmy2DGKlxQcnt8QCNZRVcEM/tkxvf0/EtY 9o+PbDzU4gP5Y95ex4K1bAHodrL+W9XwYPqwFbZY/QvgcHk2Fj4fyojpbWEDPa23 VLgsRG648no+kZxgAJFKXutQqmCaD1dBlT5TzjGu/QlM3qzuP0yAEyqLDwiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZSEOywdWrEC/T+7R95C7vRS/UEwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwRbOS2II56aNiGu7QblKcnA8MafE/NSqgR zYHYI1XhZYLQJTyx8brWCKpkCBJqQ/ePritpBM/j5/mlaEAKca3EelyRx7xyrl0v JSPuF92+pscWUO0CKntZDJPexsLL4LDaYJ9GlYh1i5QVz6tfuKwt9lb2fU2/t8kc J5cyEIiBLY4APxytH+0DSI6OyD+cZtqx7Goq2CWHO33IU3p/7BIiR6/llSQfd7DO ZfVa4HFV/RqvnintAXeM+MMsRTVGHs67G1fxRTFwjPl97O6c1dYs8b7jJdcUV+mO tFcP1ARdb81YsAOzozufMjC7a2EN2cUz4UYlmRdRP9u1/Jukj5s= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:47 2025 by rpki-client