$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: utCCx5dByDd76G1XHzh3UcD0zMyLy67+2f3V0wVYHbU= Subject key identifier: 0B:95:FF:61:98:84:17:81:C1:97:81:1A:81:6A:AC:6F:E2:FE:0E:80 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 7791E5E80D946400DB6532D4DE7E08D99A731FA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 019B Signing time: Thu 16 Apr 2026 10:41:54 +0000 Manifest this update: Thu 16 Apr 2026 10:36:54 +0000 Manifest next update: Sun 19 Apr 2026 13:28:54 +0000 Files and hashes: 1: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: ql2DMmk3Cd/mLZT47YkENPpJhqHsTuK/IzHMImRZTwo=) 2: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: QybRgJegIYGeRxA3jiD0BSJ2fZTSXZHC+zlS6Kajh80=) 3: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: 9C5Ex+7Y1aBAHl+9U/ASSlLW3EKgAd0vb9BPKVqnilg=) 4: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: i+BMvBMmVVTEpYNTmdoQENhpS5cxM86h+HpscKBpaXw=) 5: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: Xzix4WRmc+UFqL3SMZuu4BYMnJJ6GdtfZg7WTYeKfKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:91:e5:e8:0d:94:64:00:db:65:32:d4:de:7e:08:d9:9a:73:1f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Apr 16 10:36:54 2026 GMT Not After : Apr 19 13:28:54 2026 GMT Subject: CN=0B95FF6198841781C197811A816AAC6FE2FE0E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:60:3f:de:bc:4f:9b:49:c6:f4:4b:e4:8b: 25:df:c1:47:7f:35:b2:c0:35:b4:cc:c0:f9:3e:5c: 35:fe:fd:14:8a:f3:05:7d:be:81:e3:a5:00:92:ca: f8:af:1d:5d:b8:17:22:2c:06:c3:ac:04:b3:be:d8: 53:89:94:3b:d2:3a:5d:a7:b6:26:85:ce:26:91:a8: a7:2d:fc:ac:27:72:e0:1b:42:eb:33:3b:b1:b3:b1: a6:48:9e:7f:0c:06:44:5f:90:85:32:43:9b:b5:80: f5:ab:e5:3b:ed:0e:0c:a0:99:cf:88:a1:13:7f:9e: ed:86:06:e0:5d:da:2a:f0:07:f6:44:ac:ec:f1:f4: 29:fb:69:06:ad:0c:02:42:b6:ea:6f:ac:58:fe:f7: 96:1f:61:42:a8:02:be:89:4e:61:86:54:d0:92:c1: 70:0c:fe:6b:f7:e4:22:99:94:3a:88:7c:d5:d8:3f: c9:b8:7f:98:bd:a1:a4:96:aa:0f:75:0d:b2:f6:aa: 82:0f:35:8e:0e:0d:08:46:7e:36:8e:fc:a5:d6:02: 66:c8:8d:eb:db:b6:7f:3a:9e:42:83:c7:fe:e0:e1: ad:76:9e:4a:dd:d5:cc:c4:82:d7:61:d6:7e:58:08: ca:bb:b7:76:b2:7d:e7:1d:39:fb:2f:40:29:2d:e5: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:95:FF:61:98:84:17:81:C1:97:81:1A:81:6A:AC:6F:E2:FE:0E:80 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:df:43:86:de:08:d1:0a:ec:46:7b:d0:ae:ee:1f:6e:dc:c3: 41:34:96:41:5f:56:ff:59:a7:4a:50:93:78:36:8b:1c:19:15: 61:f1:42:be:0c:1f:84:9d:0b:82:29:69:94:49:73:77:86:ad: 21:e5:0e:67:8c:d9:68:be:7a:dd:81:a0:f3:5d:db:8a:94:6f: 3e:70:90:e3:e2:9d:00:de:6a:24:c3:03:01:ab:97:5c:6a:02: 57:f9:e5:5d:6d:8b:c1:16:21:00:f3:ae:e6:5f:5b:8a:4d:50: 26:cc:69:95:40:b2:53:f6:65:ef:c3:d6:df:ab:7b:b1:0d:4f: d8:95:5a:b2:df:ba:09:e5:24:bd:25:4d:7d:82:d0:d3:68:5a: b3:a6:e1:c6:8f:9c:39:98:aa:bf:e1:99:31:08:f0:c0:30:2e: 51:94:94:1e:d5:48:3d:90:29:09:44:77:f6:df:f2:9d:28:b4: 4e:7e:d1:de:d5:c5:6c:c5:1e:c4:3d:00:93:08:27:43:ec:8d: 4a:15:7c:c1:a5:88:bc:a3:21:2f:ce:e4:7e:54:dd:96:d6:d7: c0:9d:38:a9:89:68:9a:21:53:96:c3:88:37:2a:23:66:01:d5: 16:29:f0:05:dc:18:05:df:2c:f1:ce:ee:f6:e6:ff:3f:5c:bb: 41:0e:60:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5Hl6A2UZADbZTLU3n4I2ZpzH6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNjA0MTYxMDM2NTRaFw0yNjA0MTkxMzI4NTRaMDMxMTAvBgNV BAMTKDBCOTVGRjYxOTg4NDE3ODFDMTk3ODExQTgxNkFBQzZGRTJGRTBFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6WA/3rxPm0nG9EvkiyXfwUd/ NbLANbTMwPk+XDX+/RSK8wV9voHjpQCSyvivHV24FyIsBsOsBLO+2FOJlDvSOl2n tiaFziaRqKct/KwncuAbQuszO7GzsaZInn8MBkRfkIUyQ5u1gPWr5TvtDgygmc+I oRN/nu2GBuBd2irwB/ZErOzx9Cn7aQatDAJCtupvrFj+95YfYUKoAr6JTmGGVNCS wXAM/mv35CKZlDqIfNXYP8m4f5i9oaSWqg91DbL2qoIPNY4ODQhGfjaO/KXWAmbI jevbtn86nkKDx/7g4a12nkrd1czEgtdh1n5YCMq7t3ayfecdOfsvQCkt5Xc7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC5X/YZiEF4HBl4EagWqsb+L+DoAwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvfQ4beCNEK7EZ70K7uH27cw0E0lkFfVv9Z p0pQk3g2ixwZFWHxQr4MH4SdC4IpaZRJc3eGrSHlDmeM2Wi+et2BoPNd24qUbz5w kOPinQDeaiTDAwGrl1xqAlf55V1ti8EWIQDzruZfW4pNUCbMaZVAslP2Ze/D1t+r e7ENT9iVWrLfugnlJL0lTX2C0NNoWrOm4caPnDmYqr/hmTEI8MAwLlGUlB7VSD2Q KQlEd/bf8p0otE5+0d7VxWzFHsQ9AJMIJ0PsjUoVfMGliLyjIS/O5H5U3ZbW18Cd OKmJaJohU5bDiDcqI2YB1RYp8AXcGAXfLPHO7vbm/z9cu0EOYFM= -----END CERTIFICATE-----Generated at Fri Apr 17 08:04:56 2026 by rpki-client