$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: PibfFoOOmtdDSZ3NnKyPoWnqBHV/P3y+GGhFFQgVrJg= Subject key identifier: D3:ED:20:62:A9:94:6D:42:43:65:36:BE:B0:77:30:31:44:5C:0B:FF Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 11C3358AB2F644ABEC0D8D2450B01C83A09045AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 04C8 Signing time: Sat 05 Apr 2025 02:11:44 +0000 Manifest this update: Sat 05 Apr 2025 02:06:44 +0000 Manifest next update: Tue 08 Apr 2025 05:46:44 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) 2: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: /KD1NSufFFTIKqNNtXgva0rhwcpjF10Tsdk1ogxQ2LU=) 3: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) 4: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) 5: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c3:35:8a:b2:f6:44:ab:ec:0d:8d:24:50:b0:1c:83:a0:90:45:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Apr 5 02:06:44 2025 GMT Not After : Apr 8 05:46:44 2025 GMT Subject: CN=D3ED2062A9946D42436536BEB0773031445C0BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:6c:c1:74:1f:78:46:35:04:3d:d9:51:93: e7:91:99:ff:50:01:f6:86:14:21:be:19:11:16:97: a3:71:e9:25:d2:48:41:03:fd:a0:c4:e0:dc:3d:82: 3f:67:10:90:79:1e:3a:4b:5f:3d:74:09:4e:6a:a6: d2:cf:b6:a9:7c:ab:1e:f3:d6:e4:0e:bc:dc:30:b3: 40:4b:95:71:20:30:2e:dc:2e:29:f8:a9:70:eb:d2: 7d:38:77:88:7f:7b:5c:74:c1:f3:31:24:af:d7:d3: 05:b3:e9:45:fa:d1:91:d2:88:e3:d5:0b:cd:e1:01: 6a:f6:25:b2:b4:52:0d:c0:00:21:07:ab:8d:78:5d: 23:c1:99:a4:ba:93:fe:35:80:2b:9f:89:88:ce:b6: b1:0e:ee:74:94:e8:c5:12:fd:b7:c0:14:c7:0b:fd: 7e:5e:ae:66:98:76:dd:89:eb:7e:82:c1:c7:57:32: 79:d2:b9:ea:59:fd:c1:e7:08:d6:8b:76:98:c8:88: 7d:13:f7:1e:25:61:1a:69:79:82:32:88:3c:07:c2: 08:cd:ac:80:40:0b:9f:f3:3e:68:13:f8:ca:22:09: 44:1c:ea:e0:3e:d6:ed:c9:6a:4e:2c:bd:fe:3f:20: 47:81:8f:24:93:33:23:77:34:e4:59:eb:0b:27:3a: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:ED:20:62:A9:94:6D:42:43:65:36:BE:B0:77:30:31:44:5C:0B:FF X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b7:a5:b5:60:01:ff:b9:66:76:b4:6b:a2:2f:71:85:f4:6d: ad:7c:ce:be:18:0a:33:8e:f8:29:3a:d6:5a:b0:11:09:0f:ca: c5:b3:fa:74:df:51:d1:e6:2d:92:f7:5d:30:0d:2c:5e:12:cb: 84:85:db:20:e8:8f:12:71:85:26:da:8d:a5:7a:f8:e9:4c:17: 25:4f:73:1a:6e:fe:7d:23:a1:c2:1b:9f:26:83:32:a1:83:ab: 9e:c8:2d:a2:97:87:48:fb:9f:d1:f5:9b:bb:cf:b0:8b:ff:b5: 92:61:0f:93:cb:2c:92:ac:5a:19:d5:a9:83:0a:73:49:2b:d1: ca:51:b5:f1:9d:35:2a:ed:28:6d:a1:53:34:0e:98:46:a6:f5: 9c:16:20:e4:99:e7:15:3d:26:dd:41:41:16:8b:09:3a:d2:5e: ad:8a:94:37:f9:06:c3:b0:90:94:71:16:8e:d4:17:29:f3:4c: 72:a1:47:11:43:8e:b8:3e:c0:c3:e5:f2:63:bd:24:55:af:9b: 8a:b9:c9:b0:cb:22:29:ea:93:bc:7c:4d:88:3c:27:62:31:86: 6d:bb:49:64:7a:cf:b2:40:82:bb:4d:a2:1f:69:b4:43:02:57: ac:d1:34:61:b7:f0:bb:83:fd:11:e4:34:9b:93:a0:de:f0:62: ce:89:27:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcM1irL2RKvsDY0kULAcg6CQRaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTA0MDUwMjA2NDRaFw0yNTA0MDgwNTQ2NDRaMDMxMTAvBgNV BAMTKEQzRUQyMDYyQTk5NDZENDI0MzY1MzZCRUIwNzczMDMxNDQ1QzBCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ5GzBdB94RjUEPdlRk+eRmf9Q AfaGFCG+GREWl6Nx6SXSSEED/aDE4Nw9gj9nEJB5HjpLXz10CU5qptLPtql8qx7z 1uQOvNwws0BLlXEgMC7cLin4qXDr0n04d4h/e1x0wfMxJK/X0wWz6UX60ZHSiOPV C83hAWr2JbK0Ug3AACEHq414XSPBmaS6k/41gCufiYjOtrEO7nSU6MUS/bfAFMcL /X5ermaYdt2J636CwcdXMnnSuepZ/cHnCNaLdpjIiH0T9x4lYRppeYIyiDwHwgjN rIBAC5/zPmgT+MoiCUQc6uA+1u3Jak4svf4/IEeBjySTMyN3NORZ6wsnOvwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+0gYqmUbUJDZTa+sHcwMURcC/8wHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe3pbVgAf+5Zna0a6IvcYX0ba18zr4YCjOO +Ck61lqwEQkPysWz+nTfUdHmLZL3XTANLF4Sy4SF2yDojxJxhSbajaV6+OlMFyVP cxpu/n0jocIbnyaDMqGDq57ILaKXh0j7n9H1m7vPsIv/tZJhD5PLLJKsWhnVqYMK c0kr0cpRtfGdNSrtKG2hUzQOmEam9ZwWIOSZ5xU9Jt1BQRaLCTrSXq2KlDf5BsOw kJRxFo7UFynzTHKhRxFDjrg+wMPl8mO9JFWvm4q5ybDLIinqk7x8TYg8J2Ixhm27 SWR6z7JAgrtNoh9ptEMCV6zRNGG38LuD/RHkNJuToN7wYs6JJ7A= -----END CERTIFICATE-----Generated at Sat Apr 5 22:30:52 2025 by rpki-client