$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: ax+S6bEfGlCIZBJ9uteOn4kztgdVvjxCamp+0KpIzAY= Subject key identifier: 28:94:1B:DC:C9:73:E0:4F:DB:49:F6:CD:38:90:21:DD:21:80:56:E0 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 08FB1067950377F1BAD7FAE2BCFAB298C6FB2D1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 04F7 Signing time: Sat 19 Jul 2025 22:11:43 +0000 Manifest this update: Sat 19 Jul 2025 22:06:43 +0000 Manifest next update: Wed 23 Jul 2025 02:21:43 +0000 Files and hashes: 1: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: pBjimQK1a4pUuqsk1h+LYOtStoD334rR1XJjv8AwE8w=) 2: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) 3: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 4: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) 5: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fb:10:67:95:03:77:f1:ba:d7:fa:e2:bc:fa:b2:98:c6:fb:2d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Jul 19 22:06:43 2025 GMT Not After : Jul 23 02:21:43 2025 GMT Subject: CN=28941BDCC973E04FDB49F6CD389021DD218056E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:10:ec:67:1e:38:0b:fd:3d:5b:bf:22:dc:5e: 84:c9:a3:38:24:27:f0:ed:d4:8c:7c:02:6e:30:a3: 3e:22:d8:85:11:77:6e:00:c1:84:7c:0d:c2:7d:62: bd:89:5d:83:52:b2:19:e3:d8:eb:38:4a:96:3a:fa: a3:41:23:e1:36:f3:e9:7a:14:a2:1f:8f:ea:b4:fc: fd:ec:4e:8a:f1:71:ff:ff:05:e5:f4:a8:95:b3:8b: 24:6b:61:cc:9e:da:3b:35:28:07:59:97:69:99:a7: 7e:93:94:af:98:4b:b7:12:43:14:8d:b6:17:64:94: 4b:92:11:95:63:f3:60:10:62:1e:a9:42:5d:fe:13: 14:bc:cd:f5:11:7f:e1:0c:db:34:cb:60:bc:27:c3: 3f:d5:38:59:6e:d3:74:a8:9a:17:b3:80:bc:49:1e: ac:22:dc:37:f6:e6:66:3f:d0:f1:b2:a7:b2:0d:d1: 46:77:1a:bf:cf:24:40:fd:f2:f0:46:48:1a:44:4a: 30:b5:ff:60:39:0d:77:b1:6a:c7:1f:5a:a9:12:99: 4c:b9:9d:ad:48:c2:4c:9a:5b:b8:bd:91:c7:61:62: 5e:32:86:d5:2e:09:47:6f:91:9b:89:cb:48:f4:24: 0d:d2:26:80:ea:83:2e:56:a0:23:66:c8:36:ca:f2: 39:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:94:1B:DC:C9:73:E0:4F:DB:49:F6:CD:38:90:21:DD:21:80:56:E0 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:58:f7:d2:9b:e2:49:88:b4:0f:09:64:de:b4:cd:03:ed:f1: 30:c8:6e:4b:c9:0f:f7:25:24:94:22:8e:ce:71:b3:f6:6d:ff: 12:fa:d0:be:ef:1d:25:a2:c9:5a:73:b6:f2:48:e0:76:d3:d4: 6a:d8:4d:27:bc:b4:3f:ae:2d:cc:2c:02:9b:c4:6b:ea:e0:77: 2c:2a:39:03:73:62:f1:9c:0a:11:64:a6:90:d4:44:6c:5d:95: aa:f0:36:db:46:48:b3:e6:a6:5c:b5:8a:ee:eb:46:61:0f:d8: 86:6a:b0:c0:12:ab:e1:5f:98:a0:6e:31:69:be:50:65:8b:1c: ca:cd:63:a6:3b:1c:26:65:d8:b8:e6:be:97:20:19:53:e5:f4: 89:b9:be:ca:b4:06:77:d7:02:64:1c:17:dd:66:88:01:7c:dc: 9c:8e:52:a1:43:5e:7b:e7:9c:3d:a5:ad:77:41:b1:17:3e:64: 9e:2a:f4:bf:f4:8f:97:47:94:6a:25:56:09:3e:ba:34:93:27: a4:0b:e9:18:74:9d:bc:37:80:50:92:e1:03:6e:91:0c:be:a9: 6e:9a:32:2b:cb:f3:fb:fb:60:c3:dd:85:5d:24:90:be:e2:4e: c5:57:eb:2a:21:ef:9e:2b:f0:76:a4:71:42:83:18:00:2d:4a: 04:76:53:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPsQZ5UDd/G61/rivPqymMb7LRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTA3MTkyMjA2NDNaFw0yNTA3MjMwMjIxNDNaMDMxMTAvBgNV BAMTKDI4OTQxQkRDQzk3M0UwNEZEQjQ5RjZDRDM4OTAyMUREMjE4MDU2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuEOxnHjgL/T1bvyLcXoTJozgk J/Dt1Ix8Am4woz4i2IURd24AwYR8DcJ9Yr2JXYNSshnj2Os4SpY6+qNBI+E28+l6 FKIfj+q0/P3sTorxcf//BeX0qJWziyRrYcye2js1KAdZl2mZp36TlK+YS7cSQxSN thdklEuSEZVj82AQYh6pQl3+ExS8zfURf+EM2zTLYLwnwz/VOFlu03SomhezgLxJ Hqwi3Df25mY/0PGyp7IN0UZ3Gr/PJED98vBGSBpESjC1/2A5DXexascfWqkSmUy5 na1IwkyaW7i9kcdhYl4yhtUuCUdvkZuJy0j0JA3SJoDqgy5WoCNmyDbK8jlPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJQb3Mlz4E/bSfbNOJAh3SGAVuAwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtY99Kb4kmItA8JZN60zQPt8TDIbkvJD/cl JJQijs5xs/Zt/xL60L7vHSWiyVpztvJI4HbT1GrYTSe8tD+uLcwsApvEa+rgdywq OQNzYvGcChFkppDURGxdlarwNttGSLPmply1iu7rRmEP2IZqsMASq+FfmKBuMWm+ UGWLHMrNY6Y7HCZl2LjmvpcgGVPl9Im5vsq0BnfXAmQcF91miAF83JyOUqFDXnvn nD2lrXdBsRc+ZJ4q9L/0j5dHlGolVgk+ujSTJ6QL6Rh0nbw3gFCS4QNukQy+qW6a MivL8/v7YMPdhV0kkL7iTsVX6yoh754r8HakcUKDGAAtSgR2UyY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:07:03 2025 by rpki-client