$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: YykBE6zExi14/xqVcUOjj3VXrdIPq/Je7FCFvOFOPEQ= Subject key identifier: 82:72:EB:B3:17:EA:9F:5B:23:4C:8F:3D:DD:03:D8:21:59:B4:87:66 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 05D34F1135A3C111AB95C49CEB80A511136DAAAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 04E2 Signing time: Mon 02 Jun 2025 20:31:49 +0000 Manifest this update: Mon 02 Jun 2025 20:26:49 +0000 Manifest next update: Fri 06 Jun 2025 08:05:49 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) 2: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: RTAnTAKf9gQyzIbqjDAQvNdP29K/jj0F92xGq3bnmFE=) 3: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) 4: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 5: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 08:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d3:4f:11:35:a3:c1:11:ab:95:c4:9c:eb:80:a5:11:13:6d:aa:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Jun 2 20:26:49 2025 GMT Not After : Jun 6 08:05:49 2025 GMT Subject: CN=8272EBB317EA9F5B234C8F3DDD03D82159B48766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:c1:13:ef:61:b3:01:35:5a:bf:f2:c6:fb: 5b:96:5d:28:6f:06:eb:02:61:e5:0d:87:22:44:a4: 3a:b1:09:00:16:88:39:74:80:ac:28:ad:e1:76:43: a0:0b:af:03:93:85:f2:38:8b:de:74:c2:99:b5:c8: 9b:51:95:7e:35:09:48:fb:20:fe:bd:75:f1:ec:ae: 0f:c1:34:4f:44:22:99:2a:89:bc:2f:73:99:8d:47: 16:f8:59:e9:9e:f0:59:86:54:b6:ca:79:42:ea:e0: a9:c6:0b:41:7c:7d:ec:de:16:08:d2:b2:d8:48:30: 80:05:2c:16:fa:45:13:a7:43:4f:72:b0:c5:31:28: 6a:ef:a6:b6:3c:fc:c6:f9:ef:4a:b7:ca:b0:f7:19: de:f3:b8:70:92:cf:e6:31:2c:d5:91:61:93:22:df: 92:73:f2:59:7b:21:00:3d:8c:55:e6:0a:03:8d:2b: 6d:e6:77:04:43:e2:31:c6:f5:f8:19:b5:a3:3b:13: 47:3a:01:6e:2d:da:f0:d1:91:b2:5a:7b:ff:49:fb: fb:6b:22:27:a5:35:3e:fa:4a:07:35:35:0c:cc:51: 0f:dd:90:f3:f5:3c:7e:68:7e:44:1a:42:8f:66:08: 7e:51:f5:f4:1d:c4:ce:2b:d1:f6:86:ed:c4:da:b3: 86:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:EB:B3:17:EA:9F:5B:23:4C:8F:3D:DD:03:D8:21:59:B4:87:66 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b8:7a:89:6f:4f:d6:5a:e8:85:92:09:41:dd:75:24:5a:9a: ce:06:ba:6b:a1:92:15:c7:62:df:bf:53:d7:c1:4e:5f:dc:d1: 55:b1:a4:0e:9c:be:02:1d:38:36:a0:fc:ad:ba:a4:a7:1e:cd: 31:42:48:24:b7:35:f5:c7:c8:0f:cf:36:f0:e7:51:81:b9:d2: b3:f5:49:a4:d4:80:43:b9:ec:02:e4:73:0a:6a:11:5a:ed:43: fc:25:18:81:41:66:d7:2d:6a:0c:a5:ad:d7:f0:42:e8:cf:67: f6:31:35:e3:8c:8d:b1:be:7b:d6:01:b8:f9:17:9f:06:f9:1e: 02:7a:c9:1c:bb:a9:a6:c2:8b:c9:6b:ac:ad:35:37:e6:12:e6: c3:c6:7c:85:13:6d:69:73:e1:4e:aa:75:18:e6:8d:da:bf:c2: 3f:9f:e3:46:35:28:c4:c8:4c:44:fc:28:49:22:85:68:fe:17: a3:70:ba:c3:33:14:af:32:5b:c6:19:ca:5a:7b:76:8e:eb:b8: ae:ee:92:b2:6e:1d:d0:f7:9c:d8:8b:66:7c:c7:aa:58:19:26: bb:b8:c2:6d:04:97:9c:53:82:85:6f:d4:e6:52:7d:9c:ff:16: 7c:40:ac:80:90:40:5a:03:83:9f:b4:66:79:2a:4b:4e:2e:b4: 70:a4:ee:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdNPETWjwRGrlcSc64ClERNtqqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTA2MDIyMDI2NDlaFw0yNTA2MDYwODA1NDlaMDMxMTAvBgNV BAMTKDgyNzJFQkIzMTdFQTlGNUIyMzRDOEYzREREMDNEODIxNTlCNDg3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAMET72GzATVav/LG+1uWXShv BusCYeUNhyJEpDqxCQAWiDl0gKworeF2Q6ALrwOThfI4i950wpm1yJtRlX41CUj7 IP69dfHsrg/BNE9EIpkqibwvc5mNRxb4Weme8FmGVLbKeULq4KnGC0F8fezeFgjS sthIMIAFLBb6RROnQ09ysMUxKGrvprY8/Mb570q3yrD3Gd7zuHCSz+YxLNWRYZMi 35Jz8ll7IQA9jFXmCgONK23mdwRD4jHG9fgZtaM7E0c6AW4t2vDRkbJae/9J+/tr IielNT76Sgc1NQzMUQ/dkPP1PH5ofkQaQo9mCH5R9fQdxM4r0faG7cTas4bhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgnLrsxfqn1sjTI893QPYIVm0h2YwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADe4eolvT9Za6IWSCUHddSRams4GumuhkhXH Yt+/U9fBTl/c0VWxpA6cvgIdODag/K26pKcezTFCSCS3NfXHyA/PNvDnUYG50rP1 SaTUgEO57ALkcwpqEVrtQ/wlGIFBZtctagylrdfwQujPZ/YxNeOMjbG+e9YBuPkX nwb5HgJ6yRy7qabCi8lrrK01N+YS5sPGfIUTbWlz4U6qdRjmjdq/wj+f40Y1KMTI TET8KEkihWj+F6NwusMzFK8yW8YZylp7do7ruK7ukrJuHdD3nNiLZnzHqlgZJru4 wm0El5xTgoVv1OZSfZz/FnxArICQQFoDg5+0ZnkqS04utHCk7jk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:44 2025 by rpki-client