$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: eBf+b44/ZYLtaZO+0wJg6+szcmxbe8O+nr4VKKIn6Jg= Subject key identifier: 91:60:A2:BB:A2:22:18:D2:B8:D8:2E:D2:EE:96:3C:08:97:86:A4:D6 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 19983FA36D6AB91ED22BCB95BDFA2AD2B2A25FF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 01C2 Signing time: Sat 05 Apr 2025 06:31:17 +0000 Manifest this update: Sat 05 Apr 2025 06:26:17 +0000 Manifest next update: Tue 08 Apr 2025 18:14:17 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: B2R51v4i25N+5MbyNT3XDUcSVheGXZP31SNT0ecfcHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:98:3f:a3:6d:6a:b9:1e:d2:2b:cb:95:bd:fa:2a:d2:b2:a2:5f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Apr 5 06:26:17 2025 GMT Not After : Apr 8 18:14:17 2025 GMT Subject: CN=9160A2BBA22218D2B8D82ED2EE963C089786A4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:93:16:e2:e6:53:ad:e6:ae:4e:8e:92:82:b5: b8:1d:49:cd:90:aa:fa:6d:c0:5d:24:ee:de:af:7c: e6:e6:c5:47:b3:6d:f4:6e:d2:de:1d:08:29:8e:60: f8:2c:f4:32:f6:8a:60:b3:ce:1e:31:0c:1d:7d:de: 24:9d:92:44:d2:64:c7:80:b8:f4:f5:75:fd:1a:6e: 4c:0f:44:a4:ce:fb:a5:b5:bf:64:ba:d2:50:20:9e: e2:ed:38:50:05:0f:dd:dc:64:58:6e:7d:67:3c:ea: c7:c3:c6:be:e4:3a:e1:8e:80:f9:84:02:28:79:ed: 77:dd:13:ee:40:01:97:93:90:ab:31:ce:5e:4a:40: 52:98:c4:2d:0f:d1:ca:83:a9:87:b2:cc:c5:49:9a: fb:45:01:0e:21:79:2d:8e:0b:c6:1e:a4:7a:5c:a0: 9a:bc:f4:77:f6:55:c8:61:6b:c7:a4:d4:c3:d6:b4: 58:e1:b1:e7:93:b2:3d:e9:9b:8d:d0:ad:23:cd:3a: 79:1d:72:94:0f:7a:6a:43:bf:c2:a9:cf:cd:60:2e: 9b:3d:24:1b:c8:6e:77:07:5d:dc:70:c5:83:95:2a: 84:5a:18:9e:77:de:37:ac:3e:9d:b6:c9:9b:9d:57: 89:ad:3a:7f:55:81:99:41:ac:bf:82:9e:c0:fa:57: 8e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:A2:BB:A2:22:18:D2:B8:D8:2E:D2:EE:96:3C:08:97:86:A4:D6 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3c:76:21:bd:5e:11:03:98:40:be:95:e2:09:15:6c:52:75: a4:df:ad:9c:84:78:f2:00:aa:3e:db:e2:07:65:e1:f8:12:20: 9d:81:9a:3c:42:f3:51:5a:4a:b0:f5:09:79:87:d8:11:2e:25: d1:8d:e0:e6:30:f9:e5:cd:77:28:6a:79:93:52:c6:8d:ed:d2: ee:ac:87:64:50:a3:b0:18:97:2a:e8:d1:2d:62:33:e4:6e:3a: 6e:83:bc:9b:23:0e:07:d3:3a:93:c5:e9:ba:bf:79:df:d9:b6: 40:d3:43:bc:2f:81:cb:37:9d:4e:ad:aa:d1:49:8d:3e:25:ea: 64:15:af:83:e3:06:c7:e9:7e:12:5e:1f:82:20:d9:6f:f8:c1: bf:0a:a1:22:b0:df:c7:62:fc:06:c6:4f:4b:78:30:1d:4e:fc: 46:7b:76:bf:5e:c1:2f:bd:3a:40:55:b7:53:21:d4:fc:75:63: 59:18:c0:23:aa:01:e4:87:28:77:d1:f4:4d:ab:e2:a4:f0:37: ff:11:e0:45:ff:70:6b:16:29:23:f6:01:52:9a:78:d1:9d:4a: 12:00:7a:88:04:0b:1d:b6:da:ae:b1:0b:c5:2e:23:e3:bf:a6: 3c:98:b8:b3:02:2f:18:57:84:27:a1:c0:be:b3:cb:98:40:d0: fb:92:9f:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZg/o21quR7SK8uVvfoq0rKiX/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNTA0MDUwNjI2MTdaFw0yNTA0MDgxODE0MTdaMDMxMTAvBgNV BAMTKDkxNjBBMkJCQTIyMjE4RDJCOEQ4MkVEMkVFOTYzQzA4OTc4NkE0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkxbi5lOt5q5OjpKCtbgdSc2Q qvptwF0k7t6vfObmxUezbfRu0t4dCCmOYPgs9DL2imCzzh4xDB193iSdkkTSZMeA uPT1df0abkwPRKTO+6W1v2S60lAgnuLtOFAFD93cZFhufWc86sfDxr7kOuGOgPmE Aih57XfdE+5AAZeTkKsxzl5KQFKYxC0P0cqDqYeyzMVJmvtFAQ4heS2OC8YepHpc oJq89Hf2Vchha8ek1MPWtFjhseeTsj3pm43QrSPNOnkdcpQPempDv8Kpz81gLps9 JBvIbncHXdxwxYOVKoRaGJ533jesPp22yZudV4mtOn9VgZlBrL+CnsD6V45XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkWCiu6IiGNK42C7S7pY8CJeGpNYwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADM8diG9XhEDmEC+leIJFWxSdaTfrZyEePIA qj7b4gdl4fgSIJ2BmjxC81FaSrD1CXmH2BEuJdGN4OYw+eXNdyhqeZNSxo3t0u6s h2RQo7AYlyro0S1iM+RuOm6DvJsjDgfTOpPF6bq/ed/ZtkDTQ7wvgcs3nU6tqtFJ jT4l6mQVr4PjBsfpfhJeH4Ig2W/4wb8KoSKw38di/AbGT0t4MB1O/EZ7dr9ewS+9 OkBVt1Mh1Px1Y1kYwCOqAeSHKHfR9E2r4qTwN/8R4EX/cGsWKSP2AVKaeNGdShIA eogECx222q6xC8UuI+O/pjyYuLMCLxhXhCehwL6zy5hA0PuSn70= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:51 2025 by rpki-client