$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: TsU1LCol2CUiM4mbARr1xjlCW2ShC0/1nHMmmV3I81c= Subject key identifier: 60:33:2B:4E:63:D4:5D:B6:2D:00:34:84:F4:42:11:EC:BB:75:B4:96 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 7822CC0C9EFE27A4860CAEDBC088CAED4A78FFAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 050D Signing time: Sat 06 Sep 2025 10:41:45 +0000 Manifest this update: Sat 06 Sep 2025 10:36:45 +0000 Manifest next update: Tue 09 Sep 2025 21:07:45 +0000 Files and hashes: 1: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: 1J6J/CCjC2WQ4FBrZDqMefNQodRQC8nw9D3tYs6imZg=) 2: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) 3: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) 4: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) 5: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:22:cc:0c:9e:fe:27:a4:86:0c:ae:db:c0:88:ca:ed:4a:78:ff:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Sep 6 10:36:45 2025 GMT Not After : Sep 9 21:07:45 2025 GMT Subject: CN=60332B4E63D45DB62D003484F44211ECBB75B496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:df:ae:83:3e:a4:e2:bc:bb:00:48:ef:05: 0b:a4:92:05:8c:29:64:95:1f:6f:43:90:fc:af:61: 60:83:01:dc:bf:e1:cc:3e:fd:6a:a0:68:35:3c:ac: f0:1b:3c:8a:c0:01:0d:8e:2b:35:d2:1b:44:61:2b: 62:0e:a7:10:d5:27:fd:dd:8b:a8:a6:11:ac:43:39: 46:10:4b:c3:11:0f:a5:ea:87:2e:95:78:58:3d:d9: 4b:fb:44:8b:05:1e:68:bf:49:ee:38:d5:bb:dc:64: ef:fb:26:2b:f4:fa:99:15:f2:e6:5f:97:b6:a1:0f: 16:bd:60:cb:c8:0e:a6:9c:5c:5d:5a:c4:d4:a0:34: 84:54:f1:f4:cf:ff:19:aa:67:b0:d1:84:b6:a0:e4: be:35:13:03:c0:cf:52:da:3c:1c:5b:3c:7e:21:1f: c8:27:cb:fd:86:32:1d:be:40:3c:68:05:1a:12:4f: 7d:4c:ea:78:b0:ed:19:69:a6:08:22:ab:6d:27:72: b3:be:5c:46:74:18:3f:f4:3e:b6:2b:4c:6c:12:ef: d0:aa:f0:00:3b:fc:b2:89:d7:2e:ba:fb:01:76:c2: 45:8f:c0:ca:b7:84:61:5b:06:26:de:26:9c:ec:c5: 5a:e6:ba:96:b1:14:7f:a1:64:62:19:df:21:09:9b: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:2B:4E:63:D4:5D:B6:2D:00:34:84:F4:42:11:EC:BB:75:B4:96 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ba:93:eb:c3:c5:1f:2a:3b:1c:eb:73:ca:65:b7:f1:e7:93: 2f:84:29:71:01:07:e2:de:46:9e:33:07:c1:32:f6:df:f1:5f: 91:d2:ce:34:a6:82:03:b8:0d:31:1f:06:5a:c7:a5:1a:93:4d: 9e:c5:f0:4a:dc:83:23:3c:24:2c:9d:0c:04:ac:ed:7d:27:d9: 60:2e:f9:03:ed:55:3d:b6:b6:d1:e7:7b:cf:1c:0c:eb:5e:d2: 25:d6:1a:21:94:1b:2b:5f:a4:c6:90:44:1a:68:dc:c6:cb:75: eb:ee:60:d4:90:ca:72:bc:62:54:e5:97:3c:b2:a6:38:a6:cb: 3e:92:86:d0:8c:15:1a:f7:01:1d:fa:25:e7:47:5d:82:1d:cc: 9e:86:4d:e5:c9:ea:ab:16:72:b5:db:ae:55:42:09:2d:e0:76: 7f:65:d9:89:fe:17:82:30:13:76:7d:ee:60:07:10:41:4a:83: 61:25:a0:42:bc:59:e6:19:11:a8:43:7e:93:22:50:93:cd:39: bb:58:e6:12:03:4b:86:f6:57:8e:e0:0c:be:86:95:af:1a:e2: 34:31:2a:9f:d1:de:82:16:b8:e1:16:65:37:fd:df:0f:0a:5e: 58:5f:6a:5e:8a:ec:64:ec:b4:05:ff:cc:e7:05:f1:31:4e:e1: 53:3d:2f:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCLMDJ7+J6SGDK7bwIjK7Up4/6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTA5MDYxMDM2NDVaFw0yNTA5MDkyMTA3NDVaMDMxMTAvBgNV BAMTKDYwMzMyQjRFNjNENDVEQjYyRDAwMzQ4NEY0NDIxMUVDQkI3NUI0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi79+ugz6k4ry7AEjvBQukkgWM KWSVH29DkPyvYWCDAdy/4cw+/WqgaDU8rPAbPIrAAQ2OKzXSG0RhK2IOpxDVJ/3d i6imEaxDOUYQS8MRD6Xqhy6VeFg92Uv7RIsFHmi/Se441bvcZO/7Jiv0+pkV8uZf l7ahDxa9YMvIDqacXF1axNSgNIRU8fTP/xmqZ7DRhLag5L41EwPAz1LaPBxbPH4h H8gny/2GMh2+QDxoBRoST31M6niw7Rlppggiq20ncrO+XEZ0GD/0PrYrTGwS79Cq 8AA7/LKJ1y66+wF2wkWPwMq3hGFbBibeJpzsxVrmupaxFH+hZGIZ3yEJm0gtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYDMrTmPUXbYtADSE9EIR7Lt1tJYwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy6k+vDxR8qOxzrc8plt/Hnky+EKXEBB+Le Rp4zB8Ey9t/xX5HSzjSmggO4DTEfBlrHpRqTTZ7F8ErcgyM8JCydDASs7X0n2WAu +QPtVT22ttHne88cDOte0iXWGiGUGytfpMaQRBpo3MbLdevuYNSQynK8YlTllzyy pjimyz6ShtCMFRr3AR36JedHXYIdzJ6GTeXJ6qsWcrXbrlVCCS3gdn9l2Yn+F4Iw E3Z97mAHEEFKg2EloEK8WeYZEahDfpMiUJPNObtY5hIDS4b2V47gDL6Gla8a4jQx Kp/R3oIWuOEWZTf93w8KXlhfal6K7GTstAX/zOcF8TFO4VM9L9Y= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:41 2025 by rpki-client