$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: xUjMZTF4fl7HHwdB92i4jNhsKY3E9BUL80bvc8ONk50= Subject key identifier: BF:C9:41:D6:B8:6D:43:4D:20:97:C1:6D:CB:FF:06:52:64:7E:44:C6 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 63486483660DE33D361C1C016A0607A016C807F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 0187 Signing time: Mon 02 Mar 2026 00:41:50 +0000 Manifest this update: Mon 02 Mar 2026 00:36:50 +0000 Manifest next update: Thu 05 Mar 2026 07:04:50 +0000 Files and hashes: 1: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: sc5obBtv/+kRGEOqRbeyubfoDH4IL/r7kWQHxG2w7MA=) 2: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: Xzix4WRmc+UFqL3SMZuu4BYMnJJ6GdtfZg7WTYeKfKA=) 3: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: i+BMvBMmVVTEpYNTmdoQENhpS5cxM86h+HpscKBpaXw=) 4: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: 9C5Ex+7Y1aBAHl+9U/ASSlLW3EKgAd0vb9BPKVqnilg=) 5: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: QybRgJegIYGeRxA3jiD0BSJ2fZTSXZHC+zlS6Kajh80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:48:64:83:66:0d:e3:3d:36:1c:1c:01:6a:06:07:a0:16:c8:07:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Mar 2 00:36:50 2026 GMT Not After : Mar 5 07:04:50 2026 GMT Subject: CN=BFC941D6B86D434D2097C16DCBFF0652647E44C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:c1:c4:75:47:dc:90:c2:4a:24:e5:46:3b: 39:af:d4:61:7e:ec:8a:37:97:93:cc:63:97:1e:db: 5f:58:23:cc:1c:68:6f:21:b3:7d:ce:1b:7c:ff:6e: b4:0b:20:fb:2a:6b:3f:f1:eb:bd:55:6b:f2:af:46: fa:5d:22:84:6f:40:ec:42:4b:12:1b:d9:99:1f:95: 55:fc:d4:21:e6:df:d4:3e:74:86:52:46:25:b9:8a: 13:cf:ba:f1:38:2c:76:21:30:83:b9:39:9a:6b:be: 23:1a:b1:b6:fa:55:d0:1e:59:0d:e5:13:db:aa:5a: d5:01:0b:9e:12:36:bf:3c:a2:9e:bf:a7:d5:d3:3e: bc:d9:37:c7:99:81:1d:78:78:14:84:6b:e5:5d:34: af:91:6e:79:4a:0d:5f:40:14:7f:19:8d:28:6b:bb: dd:10:e6:f6:25:bb:34:c5:86:7b:a3:89:1f:82:f5: d9:f1:2e:e7:a6:5c:c7:8d:fd:c8:a5:95:99:56:8c: 3d:e8:19:30:1f:b7:9e:45:56:2c:54:92:e0:da:68: b3:46:d3:5c:74:f4:c8:f8:46:d2:36:a0:cd:f4:c1: 4c:2c:ee:e3:b9:26:af:8c:2e:a0:cd:b5:90:2b:f6: 26:01:a0:64:67:ed:32:f2:07:94:29:43:b1:3f:d3: 15:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C9:41:D6:B8:6D:43:4D:20:97:C1:6D:CB:FF:06:52:64:7E:44:C6 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:af:c8:5f:d6:aa:1f:84:e8:dd:e4:78:b5:1e:6d:8f:0e:cd: 23:8f:20:de:eb:bd:e6:ee:ae:d4:d2:39:91:90:41:eb:4d:d3: 07:38:ba:31:df:38:d1:9a:a9:c1:5c:4c:55:a1:8c:12:48:4a: ca:b6:e1:72:9b:5e:b6:83:c1:fd:ef:85:45:78:f5:6d:5f:fc: 8f:98:40:00:13:eb:9d:e6:5e:c4:3f:2e:0e:ea:f4:6a:ca:bb: e5:b0:cb:e0:21:79:0e:8e:42:15:e6:47:7d:a8:1c:04:22:1f: fc:8d:06:a2:80:c9:dc:a8:50:f7:8a:b4:5d:48:28:19:f6:9c: f7:5a:cd:26:9a:07:e3:ef:37:8a:a3:f2:a1:4f:9e:4d:89:58: c5:8e:2f:31:53:8f:04:e8:88:ec:df:61:34:c3:cc:44:37:20: bf:d5:33:d0:2c:45:29:9a:cc:a0:d8:3c:b9:c1:18:a0:4d:46: e3:17:eb:89:5c:63:14:09:96:e5:4d:19:0e:69:0c:d2:95:db: 93:0c:c9:d3:06:ac:31:48:c9:7b:9b:a4:da:0e:96:cd:eb:c3: a1:d9:a8:86:c5:ff:65:e9:81:6c:7d:0e:1e:84:2f:3a:20:2f: 6a:10:58:45:53:1d:a5:65:d2:3f:62:66:05:14:4b:af:90:ac: 1b:54:b3:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0hkg2YN4z02HBwBagYHoBbIB/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNjAzMDIwMDM2NTBaFw0yNjAzMDUwNzA0NTBaMDMxMTAvBgNV BAMTKEJGQzk0MUQ2Qjg2RDQzNEQyMDk3QzE2RENCRkYwNjUyNjQ3RTQ0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSyMHEdUfckMJKJOVGOzmv1GF+ 7Io3l5PMY5ce219YI8wcaG8hs33OG3z/brQLIPsqaz/x671Va/KvRvpdIoRvQOxC SxIb2ZkflVX81CHm39Q+dIZSRiW5ihPPuvE4LHYhMIO5OZprviMasbb6VdAeWQ3l E9uqWtUBC54SNr88op6/p9XTPrzZN8eZgR14eBSEa+VdNK+RbnlKDV9AFH8ZjShr u90Q5vYluzTFhnujiR+C9dnxLuemXMeN/cillZlWjD3oGTAft55FVixUkuDaaLNG 01x09Mj4RtI2oM30wUws7uO5Jq+MLqDNtZAr9iYBoGRn7TLyB5QpQ7E/0xVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv8lB1rhtQ00gl8Fty/8GUmR+RMYwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyvyF/Wqh+E6N3keLUebY8OzSOPIN7rvebu rtTSOZGQQetN0wc4ujHfONGaqcFcTFWhjBJISsq24XKbXraDwf3vhUV49W1f/I+Y QAAT653mXsQ/Lg7q9GrKu+Wwy+AheQ6OQhXmR32oHAQiH/yNBqKAydyoUPeKtF1I KBn2nPdazSaaB+PvN4qj8qFPnk2JWMWOLzFTjwToiOzfYTTDzEQ3IL/VM9AsRSma zKDYPLnBGKBNRuMX64lcYxQJluVNGQ5pDNKV25MMydMGrDFIyXubpNoOls3rw6HZ qIbF/2XpgWx9Dh6ELzogL2oQWEVTHaVl0j9iZgUUS6+QrBtUs7U= -----END CERTIFICATE-----Generated at Mon Mar 2 06:03:19 2026 by rpki-client