$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: X67b0Lrj440nVh0wsW6eiPgOz5f8xRjuOpPFYKrvXCQ= Subject key identifier: 20:78:BB:E5:EB:4F:27:68:2C:5E:51:DE:43:B8:DC:8D:85:DB:CC:8A Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 6D8552432C395E527A1F65F6C5EFBBDED926312B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 01DD Signing time: Thu 05 Jun 2025 00:01:19 +0000 Manifest this update: Wed 04 Jun 2025 23:56:19 +0000 Manifest next update: Sun 08 Jun 2025 05:24:19 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: R6xbRQsM8e+d78MV5+TdWchqN87ujtaQYucRxFoiCJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:85:52:43:2c:39:5e:52:7a:1f:65:f6:c5:ef:bb:de:d9:26:31:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Jun 4 23:56:19 2025 GMT Not After : Jun 8 05:24:19 2025 GMT Subject: CN=2078BBE5EB4F27682C5E51DE43B8DC8D85DBCC8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:b7:37:61:26:75:6d:e0:c8:2a:3e:75:38: e9:e3:b8:aa:67:70:c9:0f:06:f6:51:e1:de:9a:7c: 99:c9:66:19:5c:bb:64:3f:9e:35:24:d4:c8:92:a2: 27:4a:65:5c:56:91:03:99:8e:12:51:25:d3:9d:74: 80:56:cb:9d:89:d2:27:5a:b4:9d:3d:2b:f9:57:6f: 8f:93:1f:be:3e:15:37:9b:ef:5b:a2:e3:f2:45:2b: 5d:31:4b:ac:81:fa:41:96:ad:00:8d:01:3d:32:a8: 50:a8:ec:b5:0d:69:21:ae:29:c0:f1:f1:88:b9:9a: 1b:82:d8:aa:cd:30:83:0b:85:a2:b5:74:86:78:96: e8:d5:3c:5c:76:32:9c:1b:37:52:2c:ff:90:05:ce: f9:ba:68:d9:02:86:06:39:ea:01:20:a0:47:b0:21: 21:63:78:19:b7:3b:ec:fe:88:92:ba:eb:dd:35:64: 9a:ae:26:f5:41:d1:50:01:5c:af:3b:83:b3:5c:86: df:24:56:f4:a1:92:ea:0e:09:f0:31:46:a5:a8:07: 81:75:7f:50:ed:ca:14:58:6d:75:22:b3:11:bf:82: 0a:50:f1:cb:4a:55:0e:d0:bc:f5:c8:08:9a:90:24: e4:11:7b:98:28:c4:6a:d5:ce:39:17:4e:12:50:5c: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:78:BB:E5:EB:4F:27:68:2C:5E:51:DE:43:B8:DC:8D:85:DB:CC:8A X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:de:72:3f:1d:9e:2c:53:c7:e8:fe:18:e7:e4:fe:4b:fd:9c: bb:77:96:64:80:55:4f:9b:05:5b:f4:17:4f:be:95:b8:71:90: d0:83:5c:d9:24:7f:c6:2b:48:30:e8:a8:25:c4:bb:00:c3:72: 1f:de:df:0e:8d:d1:08:e8:7c:69:66:83:0d:ef:27:97:51:d1: 1d:32:50:f1:05:e6:a7:e6:f0:02:86:30:48:0c:bb:aa:ec:5e: 03:c1:8a:5c:ef:af:fa:6d:86:c4:f8:4a:8d:dd:b5:cd:d0:54: b2:d8:74:8d:c7:54:2e:75:b0:5e:38:58:82:17:e8:a6:b4:67: 81:93:ad:36:81:f2:90:ed:ec:55:88:d6:3c:e4:d5:08:4b:82: 1e:63:c9:89:b0:90:25:dc:37:19:81:67:a6:68:02:91:aa:b0: c1:86:4c:e4:59:14:29:51:65:d7:09:76:e7:91:6c:f7:c7:40: d7:1c:72:aa:3a:d2:ab:a1:ae:05:12:58:a8:e0:a1:db:e8:74: 14:ff:47:45:39:d5:6e:d2:9b:c2:c0:dd:eb:99:a8:47:e9:ce: 81:cf:2d:95:0e:7a:92:f7:5f:f9:c3:e9:94:95:b8:53:de:cf: c3:36:62:da:0d:09:d5:cf:e7:93:bf:91:b4:ab:1e:1a:9a:95: 8a:cb:6b:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYVSQyw5XlJ6H2X2xe+73tkmMSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNTA2MDQyMzU2MTlaFw0yNTA2MDgwNTI0MTlaMDMxMTAvBgNV BAMTKDIwNzhCQkU1RUI0RjI3NjgyQzVFNTFERTQzQjhEQzhEODVEQkNDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwrc3YSZ1beDIKj51OOnjuKpn cMkPBvZR4d6afJnJZhlcu2Q/njUk1MiSoidKZVxWkQOZjhJRJdOddIBWy52J0ida tJ09K/lXb4+TH74+FTeb71ui4/JFK10xS6yB+kGWrQCNAT0yqFCo7LUNaSGuKcDx 8Yi5mhuC2KrNMIMLhaK1dIZ4lujVPFx2MpwbN1Is/5AFzvm6aNkChgY56gEgoEew ISFjeBm3O+z+iJK66901ZJquJvVB0VABXK87g7Ncht8kVvShkuoOCfAxRqWoB4F1 f1DtyhRYbXUisxG/ggpQ8ctKVQ7QvPXICJqQJOQRe5goxGrVzjkXThJQXKrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIHi75etPJ2gsXlHeQ7jcjYXbzIowHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELecj8dnixTx+j+GOfk/kv9nLt3lmSAVU+b BVv0F0++lbhxkNCDXNkkf8YrSDDoqCXEuwDDch/e3w6N0QjofGlmgw3vJ5dR0R0y UPEF5qfm8AKGMEgMu6rsXgPBilzvr/pthsT4So3dtc3QVLLYdI3HVC51sF44WIIX 6Ka0Z4GTrTaB8pDt7FWI1jzk1QhLgh5jyYmwkCXcNxmBZ6ZoApGqsMGGTORZFClR ZdcJdueRbPfHQNcccqo60quhrgUSWKjgodvodBT/R0U51W7Sm8LA3euZqEfpzoHP LZUOepL3X/nD6ZSVuFPez8M2YtoNCdXP55O/kbSrHhqalYrLa34= -----END CERTIFICATE-----Generated at Thu Jun 5 18:37:10 2025 by rpki-client