$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: zbAjfIfyG2B3U56FaqtN7SYa/2nIoUC1z5Wm18Pzx8o= Subject key identifier: F8:49:ED:D6:05:D8:58:8B:83:56:BD:7C:3D:BF:38:BD:39:BF:67:01 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 4692BF325D8A26E452B19CC3E72A88FD9C750C5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 01F1 Signing time: Sat 19 Jul 2025 20:01:19 +0000 Manifest this update: Sat 19 Jul 2025 19:56:19 +0000 Manifest next update: Wed 23 Jul 2025 03:06:19 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: 60Kp1UYT4dYSf52e68k7IKC89bzLJRwr2HboWJ0fcyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:92:bf:32:5d:8a:26:e4:52:b1:9c:c3:e7:2a:88:fd:9c:75:0c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Jul 19 19:56:19 2025 GMT Not After : Jul 23 03:06:19 2025 GMT Subject: CN=F849EDD605D8588B8356BD7C3DBF38BD39BF6701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:2b:42:3a:81:26:5e:59:a6:93:9f:33:13: 62:e6:ab:6d:8a:35:9a:7e:af:65:18:6d:53:c6:f8: 6b:f6:50:fa:e8:6e:32:f7:69:83:9d:43:21:45:c4: ba:18:aa:4e:47:e7:59:ec:f7:ea:b7:d0:34:4e:c7: 6a:48:b2:d1:91:6b:de:89:f3:de:71:5b:d0:42:ad: 57:46:55:e0:de:dd:eb:04:af:a6:61:fa:cf:fe:24: 79:51:02:d3:0b:a4:91:1a:6c:43:39:69:33:2b:99: 8f:07:79:8b:71:f8:ab:7b:24:ca:a1:98:78:b0:6c: 11:6b:a5:4f:ea:ce:6a:aa:6d:0e:55:4b:93:a9:64: 7b:70:74:f1:0e:0c:1a:59:2d:56:65:1a:4a:ff:59: 93:42:8c:db:1c:93:d6:5d:35:f7:d8:3a:00:2d:f0: 21:74:1f:94:2a:f9:8f:ae:f8:6b:38:27:cf:a6:c5: 3e:35:5b:fb:2f:b0:26:67:dc:80:46:a9:53:b6:5c: 22:ee:3b:ff:3f:e4:95:f3:52:41:e8:5a:57:7b:21: 86:7e:84:c1:16:62:e5:86:a3:5d:77:b2:53:ea:94: 2c:ac:26:91:83:28:ed:02:84:e5:96:30:0f:dc:2f: cd:52:77:e6:a5:70:79:e1:31:ab:de:c4:21:60:45: f1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:49:ED:D6:05:D8:58:8B:83:56:BD:7C:3D:BF:38:BD:39:BF:67:01 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1d:90:67:aa:21:7c:bd:94:ab:df:7c:d9:b6:d5:29:fa:8c: 57:a4:7a:f3:00:0a:1a:0a:3b:5e:7a:95:1d:cc:53:83:3b:ef: 1d:0b:fe:f9:5b:de:36:da:3b:c8:57:ac:d9:2e:09:93:83:35: 96:25:23:63:0d:8b:7f:2d:ac:8e:34:1d:b2:5d:d0:da:5a:6b: 0c:41:d0:6c:ee:81:2a:88:a2:ad:fc:10:51:1c:94:29:93:ad: 8c:2a:3b:5d:9f:9c:b7:58:99:a6:d5:75:1f:6f:29:50:36:dd: ca:d0:50:0a:af:fa:76:60:b3:3c:0e:65:3d:2e:f6:2d:7e:ae: c8:72:05:ef:06:77:4d:34:0d:75:d9:fb:33:83:e5:17:41:27: 3e:f4:38:7a:6e:95:a1:92:06:ae:2c:4e:db:32:14:c2:0e:d7: 6b:7c:47:0d:73:26:55:55:0a:6c:1f:d6:20:92:95:f9:af:7b: 17:9d:1a:f9:91:86:0e:85:69:1a:c7:25:ab:bc:22:a5:26:65: bd:ef:80:6d:fd:0e:05:ba:cd:93:cc:5f:83:fd:39:14:f0:a1: 0c:3f:93:ad:64:38:c6:5e:c7:78:73:41:a1:38:26:2a:8d:09: 35:fc:c7:fd:68:04:27:42:2f:11:ec:1e:cf:4a:a9:4e:e0:a5: 24:07:80:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpK/Ml2KJuRSsZzD5yqI/Zx1DF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNTA3MTkxOTU2MTlaFw0yNTA3MjMwMzA2MTlaMDMxMTAvBgNV BAMTKEY4NDlFREQ2MDVEODU4OEI4MzU2QkQ3QzNEQkYzOEJEMzlCRjY3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NCtCOoEmXlmmk58zE2Lmq22K NZp+r2UYbVPG+Gv2UProbjL3aYOdQyFFxLoYqk5H51ns9+q30DROx2pIstGRa96J 895xW9BCrVdGVeDe3esEr6Zh+s/+JHlRAtMLpJEabEM5aTMrmY8HeYtx+Kt7JMqh mHiwbBFrpU/qzmqqbQ5VS5OpZHtwdPEODBpZLVZlGkr/WZNCjNsck9ZdNffYOgAt 8CF0H5Qq+Y+u+Gs4J8+mxT41W/svsCZn3IBGqVO2XCLuO/8/5JXzUkHoWld7IYZ+ hMEWYuWGo113slPqlCysJpGDKO0ChOWWMA/cL81Sd+alcHnhMavexCFgRfHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Ent1gXYWIuDVr18Pb84vTm/ZwEwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4dkGeqIXy9lKvffNm21Sn6jFekevMAChoK O156lR3MU4M77x0L/vlb3jbaO8hXrNkuCZODNZYlI2MNi38trI40HbJd0NpaawxB 0GzugSqIoq38EFEclCmTrYwqO12fnLdYmabVdR9vKVA23crQUAqv+nZgszwOZT0u 9i1+rshyBe8Gd000DXXZ+zOD5RdBJz70OHpulaGSBq4sTtsyFMIO12t8Rw1zJlVV Cmwf1iCSlfmvexedGvmRhg6FaRrHJau8IqUmZb3vgG39DgW6zZPMX4P9ORTwoQw/ k61kOMZex3hzQaE4JiqNCTX8x/1oBCdCLxHsHs9KqU7gpSQHgHI= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:13 2025 by rpki-client