$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: Yw/D8q6YmsdFm33MoExBAXJugXdmpfPqr74diOl5ZYg= Subject key identifier: EE:F4:00:B0:29:F4:64:31:5D:DF:97:2F:05:C3:41:96:34:0B:6B:3E Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 43C7ECFE215F5097E5718A40A1AE1A913E021643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 0525 Signing time: Sun 26 Oct 2025 19:01:55 +0000 Manifest this update: Sun 26 Oct 2025 18:56:55 +0000 Manifest next update: Thu 30 Oct 2025 05:29:55 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) 2: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: wTnpmrlg8msSoFdygB6aaZkCFDFivjWe32NZr1FTcLI=) 3: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 4: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 5: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c7:ec:fe:21:5f:50:97:e5:71:8a:40:a1:ae:1a:91:3e:02:16:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Oct 26 18:56:55 2025 GMT Not After : Oct 30 05:29:55 2025 GMT Subject: CN=EEF400B029F464315DDF972F05C34196340B6B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:69:5c:1d:2a:21:9b:36:10:77:82:e5:aa:37: 20:4e:19:f3:92:c1:45:4f:cc:e0:08:ff:ca:5c:45: 9c:a0:9b:c2:8c:f0:36:31:f3:83:22:1a:78:c5:9c: 9f:32:5f:f7:1d:81:04:66:5e:46:62:0e:d7:15:1d: 34:03:1f:a1:d0:37:31:51:cd:4c:d2:c3:09:3a:69: b9:1d:9a:67:be:7c:36:c0:99:5c:be:49:ad:94:27: 1c:06:13:92:b2:24:20:7a:53:86:b1:d9:ae:e5:8e: 33:eb:87:69:fd:f7:53:21:1d:80:f8:3e:29:de:4e: 2c:e1:73:8f:68:0e:b6:7e:05:e0:a8:b0:13:6c:86: 4c:f6:e1:7f:f3:b8:23:f0:29:c1:34:39:33:de:af: e3:78:e8:48:c1:0e:eb:0f:53:05:0f:56:87:eb:6c: c6:fb:17:c3:85:c1:70:67:7d:0e:7a:15:db:29:74: 48:ab:9f:1a:f8:1a:e1:36:bb:0f:dd:90:c4:e1:2c: af:0c:3a:48:20:50:ed:70:60:b8:2f:4d:74:1c:99: 1c:8d:1e:64:08:22:69:49:d6:24:68:14:a7:70:bd: 08:0e:36:63:5e:50:ae:62:5e:6c:93:cb:fb:5a:ad: dc:96:b0:f6:ec:7e:b4:33:43:68:85:2f:3e:df:d0: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F4:00:B0:29:F4:64:31:5D:DF:97:2F:05:C3:41:96:34:0B:6B:3E X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:18:58:8c:48:69:a4:eb:8c:2c:76:6b:2c:09:b8:81:a0:ea: c0:e5:da:cb:e2:03:a6:00:fa:57:a6:a3:32:bb:d0:31:b0:ad: a4:be:70:af:e9:fd:32:98:d5:0b:86:4d:6d:3f:8b:df:22:92: 41:1f:63:40:7e:16:17:62:c2:dd:3d:86:5e:28:2c:35:10:83: 94:c1:3d:70:37:3b:8a:4c:9e:af:45:bc:3d:ae:0c:28:f1:a1: 04:c6:9f:44:8b:4b:b4:60:a7:9e:f6:89:51:79:8a:2d:ad:6d: 08:20:63:d8:51:70:8e:f3:14:20:82:0e:15:4c:88:25:75:60: a1:cc:23:0f:f1:44:33:1a:b0:38:ea:e2:6f:a6:e7:9b:23:3f: 75:17:8c:0b:a0:cc:eb:9d:c4:ec:0d:30:a0:f4:97:3e:63:eb: 9e:77:ef:05:5c:14:2e:53:c1:b6:66:30:9d:b1:60:55:31:48: 33:5a:ac:89:42:5a:33:bc:a6:da:30:2f:03:16:2a:2b:92:f0: 83:06:f8:dc:69:1f:8b:da:a5:6c:e7:b2:8b:05:59:de:67:82: 62:30:1b:6b:35:66:26:55:46:86:6c:aa:79:fc:e8:eb:fe:8a: fb:fa:9f:60:fd:f4:d6:dd:00:fb:4d:39:4c:74:ff:9e:a1:82: 87:02:2a:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ8fs/iFfUJflcYpAoa4akT4CFkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTEwMjYxODU2NTVaFw0yNTEwMzAwNTI5NTVaMDMxMTAvBgNV BAMTKEVFRjQwMEIwMjlGNDY0MzE1RERGOTcyRjA1QzM0MTk2MzQwQjZCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSaVwdKiGbNhB3guWqNyBOGfOS wUVPzOAI/8pcRZygm8KM8DYx84MiGnjFnJ8yX/cdgQRmXkZiDtcVHTQDH6HQNzFR zUzSwwk6abkdmme+fDbAmVy+Sa2UJxwGE5KyJCB6U4ax2a7ljjPrh2n991MhHYD4 PineTizhc49oDrZ+BeCosBNshkz24X/zuCPwKcE0OTPer+N46EjBDusPUwUPVofr bMb7F8OFwXBnfQ56FdspdEirnxr4GuE2uw/dkMThLK8MOkggUO1wYLgvTXQcmRyN HmQIImlJ1iRoFKdwvQgONmNeUK5iXmyTy/tardyWsPbsfrQzQ2iFLz7f0JINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7vQAsCn0ZDFd35cvBcNBljQLaz4wHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8YWIxIaaTrjCx2aywJuIGg6sDl2sviA6YA +lemozK70DGwraS+cK/p/TKY1QuGTW0/i98ikkEfY0B+Fhdiwt09hl4oLDUQg5TB PXA3O4pMnq9FvD2uDCjxoQTGn0SLS7Rgp572iVF5ii2tbQggY9hRcI7zFCCCDhVM iCV1YKHMIw/xRDMasDjq4m+m55sjP3UXjAugzOudxOwNMKD0lz5j65537wVcFC5T wbZmMJ2xYFUxSDNarIlCWjO8ptowLwMWKiuS8IMG+NxpH4vapWznsosFWd5ngmIw G2s1ZiZVRoZsqnn86Ov+ivv6n2D99NbdAPtNOUx0/56hgocCKsA= -----END CERTIFICATE-----Generated at Mon Oct 27 07:25:42 2025 by rpki-client