$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft File: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft (raw, json) Hash identifier: EqcGXemJwoDBbW2FS6kXvfzfeetnneWPEmaqW6ODrMc= Subject key identifier: C1:42:06:56:04:94:7D:9F:EC:77:76:89:4E:3C:44:0C:FE:AB:B1:B9 Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C Certificate issuer: /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Certificate serial: 266480C51DFAC8FAC6B07EC379151E0DFA8A5661 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft Manifest number: 9C Signing time: Fri 06 Jun 2025 00:30:47 +0000 Manifest this update: Fri 06 Jun 2025 00:25:46 +0000 Manifest next update: Mon 09 Jun 2025 08:04:46 +0000 Files and hashes: 1: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl (hash: Gfn+pKu+mCmRzEzh7w/jmAFAhrgNo24KyUosDoMxEpc=) 2: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: VQEEEXuPlisinrBwT/1FJcAfMTnGRscgl2dxnDWnkuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 08:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:64:80:c5:1d:fa:c8:fa:c6:b0:7e:c3:79:15:1e:0d:fa:8a:56:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Validity Not Before: Jun 6 00:25:46 2025 GMT Not After : Jun 9 08:04:46 2025 GMT Subject: CN=C142065604947D9FEC7776894E3C440CFEABB1B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:17:37:b0:9e:f7:28:da:de:b9:62:5e:ef: 42:4e:80:69:a1:dc:ac:bb:3f:3a:10:95:bb:ed:05: b8:9a:59:0a:11:99:de:3d:de:ab:21:46:d3:c6:e9: 6b:aa:5a:4e:78:79:32:62:30:cf:a0:d6:cd:44:75: a1:84:a7:ef:5d:1b:f9:e3:db:86:5e:0f:a4:ac:d1: 4f:48:48:67:b3:e1:1b:d5:ed:bf:dd:0a:01:b4:67: 59:35:de:01:4a:d6:3a:e8:c4:25:3a:b2:99:e2:62: b7:00:1b:53:d9:9c:a2:ca:a7:45:02:be:9f:5c:8e: 9c:b7:16:8d:9f:4e:08:42:8f:8d:5c:14:61:ee:19: 56:e3:a5:e8:13:ac:b0:40:d6:03:61:13:06:b7:15: e5:b4:e3:81:45:fe:19:7f:41:83:88:d1:23:01:81: a3:bf:27:57:f0:09:88:68:37:92:30:9b:d4:40:5d: 62:a1:52:5a:35:ee:79:6c:07:d6:68:59:1f:5e:8d: 32:e0:92:90:7b:90:b3:66:f1:ee:24:5f:88:be:7b: af:4d:a0:e3:40:7c:cf:d7:32:4f:4f:44:4c:3c:5b: 2a:42:c4:04:66:2c:2f:73:fd:e7:ea:ff:c9:00:4f: 10:b1:97:0d:e5:51:57:61:57:92:82:24:eb:fd:a6: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:42:06:56:04:94:7D:9F:EC:77:76:89:4E:3C:44:0C:FE:AB:B1:B9 X509v3 Authority Key Identifier: keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:39:06:65:56:a5:1e:16:17:18:17:da:b6:e3:28:ae:ad:f9: 0e:74:b6:cd:59:f1:8a:8e:3f:d8:0a:b2:8d:a8:b1:87:31:4a: c0:3c:83:8a:21:91:a7:ad:2e:75:90:96:87:86:4e:80:ad:10: 6a:d3:bc:24:05:9a:f6:bd:c6:84:b5:86:08:70:78:8f:20:eb: a9:ac:bc:0b:60:31:06:0d:d5:c2:6f:aa:66:66:c5:bb:a9:00: 66:d0:40:88:7e:ec:28:57:9e:a8:85:9e:55:a6:3a:8e:b1:24: c6:f1:17:53:4b:72:60:cf:f0:ee:0f:29:98:fb:e6:4d:0c:c7: ef:fb:d6:2f:58:fb:06:16:54:27:43:d2:42:80:66:53:51:6a: 78:72:a8:2d:f0:ef:54:41:c0:3d:7d:35:3a:37:ab:aa:0a:ba: 49:a1:36:75:05:64:2f:af:ae:33:f9:a5:da:e0:6e:04:ba:a7: 82:42:a2:92:ab:d5:ec:e8:78:cf:70:d8:64:51:01:10:c0:d3: a9:c7:83:af:e4:fa:c2:f7:84:f6:7f:3f:24:67:85:ab:c7:df: e1:db:32:11:9c:72:62:b4:62:7d:b8:b0:2d:4f:da:c5:b7:7f: 95:c6:de:d2:b1:ef:74:64:5f:78:be:f3:86:9d:a1:42:bd:5e: 34:a2:81:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmSAxR36yPrGsH7DeRUeDfqKVmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2 NEJCOTM1QzAeFw0yNTA2MDYwMDI1NDZaFw0yNTA2MDkwODA0NDZaMDMxMTAvBgNV BAMTKEMxNDIwNjU2MDQ5NDdEOUZFQzc3NzY4OTRFM0M0NDBDRkVBQkIxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ahc3sJ73KNreuWJe70JOgGmh 3Ky7PzoQlbvtBbiaWQoRmd493qshRtPG6WuqWk54eTJiMM+g1s1EdaGEp+9dG/nj 24ZeD6Ss0U9ISGez4RvV7b/dCgG0Z1k13gFK1jroxCU6spniYrcAG1PZnKLKp0UC vp9cjpy3Fo2fTghCj41cFGHuGVbjpegTrLBA1gNhEwa3FeW044FF/hl/QYOI0SMB gaO/J1fwCYhoN5Iwm9RAXWKhUlo17nlsB9ZoWR9ejTLgkpB7kLNm8e4kX4i+e69N oONAfM/XMk9PREw8WypCxARmLC9z/efq/8kATxCxlw3lUVdhV5KCJOv9ppMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwUIGVgSUfZ/sd3aJTjxEDP6rsbkwHwYDVR0j BBgwFoAUYLwwfOHdHI7Z2ch9heTYAGS7k1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGRlNmM4Mi1kOTJiLTQwODUtODg5My1kNjQ3NzkxYzI3N2YvMC82MEJDMzA3Q0Ux REQxQzhFRDlEOUM4N0Q4NUU0RDgwMDY0QkI5MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2NEJC OTM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4 MDA2NEJCOTM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo5BmVWpR4WFxgX2rbjKK6t+Q50ts1Z8YqO P9gKso2osYcxSsA8g4ohkaetLnWQloeGToCtEGrTvCQFmva9xoS1hghweI8g66ms vAtgMQYN1cJvqmZmxbupAGbQQIh+7ChXnqiFnlWmOo6xJMbxF1NLcmDP8O4PKZj7 5k0Mx+/71i9Y+wYWVCdD0kKAZlNRanhyqC3w71RBwD19NTo3q6oKukmhNnUFZC+v rjP5pdrgbgS6p4JCopKr1ezoeM9w2GRRARDA06nHg6/k+sL3hPZ/PyRnhavH3+Hb MhGccmK0Yn24sC1P2sW3f5XG3tKx73RkX3i+84adoUK9XjSigWY= -----END CERTIFICATE-----Generated at Sat Jun 7 04:11:01 2025 by rpki-client