$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft (raw, json) Hash identifier: qyOm/LP4KBUZOMdunP8EDVUDszYcIflpqUe/1bWhJyg= Subject key identifier: 0B:32:6D:EC:E5:6D:E9:A3:94:FA:1A:EB:7E:93:69:C7:50:14:6C:5B Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 24E37591E923D211C810033810560C2678894A16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft Manifest number: 018D Signing time: Sat 19 Jul 2025 13:00:55 +0000 Manifest this update: Sat 19 Jul 2025 12:55:55 +0000 Manifest next update: Tue 22 Jul 2025 20:53:55 +0000 Files and hashes: 1: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl (hash: vOX+ypj36QDCmBeNOY56jk9Wlt637OJQfV3Afm8x5Ok=) 2: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: ZDyxHBlNGIzYgtnVCT1eXLwOr1vFMRFU8WTMZvphid0=) 3: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: BdVYdxczoI+ws1l/hFqXFbC3eYppxkpNCDa2zzpcHMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e3:75:91:e9:23:d2:11:c8:10:03:38:10:56:0c:26:78:89:4a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: Jul 19 12:55:55 2025 GMT Not After : Jul 22 20:53:55 2025 GMT Subject: CN=0B326DECE56DE9A394FA1AEB7E9369C750146C5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:e1:13:62:06:3c:ce:ed:bb:8f:da:86:a2: c0:3b:c2:78:65:88:1e:aa:51:56:be:cf:71:e6:14: 20:57:8e:5d:4a:ef:2d:df:bb:28:48:b4:48:fd:92: 47:44:9f:50:53:f0:9c:21:50:cb:b7:6a:6e:7c:96: ca:9f:f8:5a:9f:e8:47:a5:fa:0f:f1:2f:68:f2:76: 60:7b:8d:bb:88:17:09:58:b6:f7:25:c1:e7:b8:e7: 8b:3d:93:ac:fb:af:b2:78:92:bc:47:6c:b9:fd:17: 6f:b9:67:c7:67:a4:5c:95:98:35:1d:95:05:2b:51: 51:57:c5:a4:ec:25:06:0f:4e:39:c1:a1:48:ac:5b: b2:69:fe:1b:40:7a:8d:31:26:fb:9b:ec:93:79:91: a0:91:d1:a2:fb:61:30:20:42:b2:e5:81:b6:5d:61: 0c:72:ce:58:d8:9e:7c:ae:84:93:15:8b:25:55:c8: c7:22:52:49:05:8b:8c:1c:ad:ac:f9:db:ae:a5:1c: 4d:52:29:f3:a7:3a:13:ce:ae:f1:7d:92:0a:40:09: 09:d6:09:24:90:59:46:ef:50:99:39:b9:f0:dd:bd: 0b:53:ed:0f:56:a5:39:a9:fa:d3:7b:62:ad:dd:0e: 32:ad:b5:50:cb:6d:6f:49:8b:20:2d:d9:ae:d0:86: 22:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:32:6D:EC:E5:6D:E9:A3:94:FA:1A:EB:7E:93:69:C7:50:14:6C:5B X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ac:0f:90:19:14:b7:e4:9d:9a:53:3b:b3:db:d8:aa:85:b9: e4:e6:3c:3a:08:6d:42:24:d5:6e:fb:e9:67:57:43:87:3b:67: 47:67:c1:00:94:28:33:69:46:a1:1f:ae:96:69:38:19:75:2a: 40:97:85:1d:17:9e:97:ec:07:40:d7:cf:cc:e8:57:9b:01:23: a5:38:06:00:da:34:14:54:57:32:b5:a3:84:71:a8:0e:61:d4: 85:0a:fb:09:26:a8:fc:d8:57:ae:07:96:3a:f9:35:80:c3:6a: 0f:4d:1c:f0:44:69:19:71:67:df:6f:4d:76:39:81:4f:6e:7a: 59:68:9f:25:93:c3:6b:d7:42:78:28:74:af:97:fb:c1:e2:b2: 91:29:d5:06:fb:36:3f:ea:52:a9:f7:62:9e:5a:5c:28:8f:92: 87:89:23:d7:27:69:19:3f:61:d3:6c:79:46:37:c5:94:e0:9f: 2a:3c:79:53:0d:12:57:99:a4:91:5a:de:95:32:25:05:8a:cd: f4:66:61:f7:38:f9:a1:b6:13:81:6a:60:c4:2d:cd:24:a9:c2: b4:c7:70:61:f9:3c:7c:92:ff:41:f3:10:37:1f:19:3f:12:bb: 08:16:8b:05:00:38:59:8a:8e:b3:33:79:ac:be:8e:3f:2d:86: c6:bb:f6:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJON1kekj0hHIEAM4EFYMJniJShYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNTA3MTkxMjU1NTVaFw0yNTA3MjIyMDUzNTVaMDMxMTAvBgNV BAMTKDBCMzI2REVDRTU2REU5QTM5NEZBMUFFQjdFOTM2OUM3NTAxNDZDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTY+ETYgY8zu27j9qGosA7wnhl iB6qUVa+z3HmFCBXjl1K7y3fuyhItEj9kkdEn1BT8JwhUMu3am58lsqf+Fqf6Eel +g/xL2jydmB7jbuIFwlYtvclwee454s9k6z7r7J4krxHbLn9F2+5Z8dnpFyVmDUd lQUrUVFXxaTsJQYPTjnBoUisW7Jp/htAeo0xJvub7JN5kaCR0aL7YTAgQrLlgbZd YQxyzljYnnyuhJMViyVVyMciUkkFi4wcraz5266lHE1SKfOnOhPOrvF9kgpACQnW CSSQWUbvUJk5ufDdvQtT7Q9WpTmp+tN7Yq3dDjKttVDLbW9JiyAt2a7QhiILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCzJt7OVt6aOU+hrrfpNpx1AUbFswHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNF REY4RUIxMTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6sD5AZFLfknZpTO7Pb2KqFueTmPDoIbUIk 1W776WdXQ4c7Z0dnwQCUKDNpRqEfrpZpOBl1KkCXhR0XnpfsB0DXz8zoV5sBI6U4 BgDaNBRUVzK1o4RxqA5h1IUK+wkmqPzYV64Hljr5NYDDag9NHPBEaRlxZ99vTXY5 gU9uellonyWTw2vXQngodK+X+8HispEp1Qb7Nj/qUqn3Yp5aXCiPkoeJI9cnaRk/ YdNseUY3xZTgnyo8eVMNEleZpJFa3pUyJQWKzfRmYfc4+aG2E4FqYMQtzSSpwrTH cGH5PHyS/0HzEDcfGT8SuwgWiwUAOFmKjrMzeay+jj8thsa79ng= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:30 2025 by rpki-client