$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft File: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft (raw, json) Hash identifier: oEIQeOcat+gV1lmRplGeZx9z5JBr0z9c06HjayV7bTs= Subject key identifier: F7:B6:60:71:71:83:3E:A0:76:38:74:1D:C1:52:8F:10:AF:26:5F:AF Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C Certificate issuer: /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Certificate serial: 75B5313DA3CBC4EB377B0648981FFCDF9BD53F34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft Manifest number: C4 Signing time: Fri 05 Sep 2025 18:50:46 +0000 Manifest this update: Fri 05 Sep 2025 18:45:46 +0000 Manifest next update: Mon 08 Sep 2025 21:56:46 +0000 Files and hashes: 1: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl (hash: GNsQR+mEiSfR+8EGLkV8h3nizq0nyG+IcWk5C+Az8Rc=) 2: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: VQEEEXuPlisinrBwT/1FJcAfMTnGRscgl2dxnDWnkuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b5:31:3d:a3:cb:c4:eb:37:7b:06:48:98:1f:fc:df:9b:d5:3f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Validity Not Before: Sep 5 18:45:46 2025 GMT Not After : Sep 8 21:56:46 2025 GMT Subject: CN=F7B6607171833EA07638741DC1528F10AF265FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:ef:db:80:85:39:c1:be:a3:49:f0:ff:ae: fc:b6:2a:9b:5a:ab:47:8a:9b:27:73:0b:41:33:fe: 35:7d:a2:e8:b0:ac:41:42:26:ba:73:ad:3d:42:48: f2:a9:1e:79:61:a6:78:40:95:1e:39:6f:98:f0:9c: 4d:5a:dc:36:1d:0d:b3:f8:b9:92:ad:7b:f0:e5:86: 81:ce:49:0e:5f:7b:2e:37:26:4e:38:52:76:05:6d: f8:09:a1:ac:a0:d2:ba:9e:a1:a2:31:bc:c1:6e:21: c1:23:38:0e:17:d8:5c:84:0f:a9:3c:97:14:ab:3a: 86:42:f3:d4:cb:4d:11:b1:5b:66:86:8a:56:01:33: c0:34:2a:36:79:46:32:42:06:37:86:10:f3:94:be: 4c:9f:c0:c0:d9:f6:73:58:08:30:f4:ec:46:82:fd: 90:85:d9:60:aa:8b:95:53:31:6a:6d:75:f3:7d:be: 55:28:0d:7e:da:7c:91:cf:65:83:ee:c5:60:1c:b3: e4:36:39:5f:b7:8f:9c:04:d6:95:4d:15:29:fa:43: 78:a1:6c:9f:70:5e:ac:60:3f:29:f5:ff:f2:e3:0c: f9:bf:da:bf:dd:ea:d3:64:1a:ff:fc:78:90:d7:d3: 7a:c7:e6:6d:24:3b:71:e8:69:2d:5f:f5:4e:76:95: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B6:60:71:71:83:3E:A0:76:38:74:1D:C1:52:8F:10:AF:26:5F:AF X509v3 Authority Key Identifier: keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5b:06:e6:06:51:7b:57:88:73:f1:7c:af:c1:7d:70:51:1f: 38:6d:97:66:0b:38:e0:40:74:f8:62:5f:3a:a6:6c:c1:40:de: b8:78:dd:aa:21:cf:6b:f9:d2:59:0a:8b:c7:f8:06:bc:98:b4: b5:38:68:a0:03:5b:48:29:8f:30:c0:00:7f:62:e6:0c:cd:3a: cd:2c:ea:fa:fa:bd:95:1a:d8:14:ca:9f:1d:16:85:bc:14:a5: 0a:b1:90:a2:3d:28:fa:95:a9:0a:77:49:28:1e:46:a7:65:a3: 82:f0:c7:e0:fa:30:9e:f6:6a:41:22:55:60:2b:6e:7a:b8:5d: 1b:e4:b6:7c:97:0b:32:9e:a1:5f:e8:f1:81:89:ca:9e:5e:46: ca:74:e4:d3:a7:da:9e:e9:12:be:d7:58:3e:f4:8c:e2:1f:5f: 36:46:88:f3:b9:59:79:6a:f5:78:e7:f2:95:50:e1:78:33:72: 4e:e2:b9:f2:b9:0f:a0:8b:a6:b0:49:70:03:e6:42:00:3d:f6: 06:ff:2e:38:38:a1:b8:1a:f2:d9:d2:b5:f4:a1:54:3c:8c:75: 24:e9:3b:b6:64:a5:62:6a:86:a3:b5:ec:e6:64:66:7d:c9:a1: 22:6a:f4:a5:7f:0d:c8:97:2c:97:86:62:4f:69:f6:93:b2:23: 1d:86:95:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbUxPaPLxOs3ewZImB/835vVPzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2 NEJCOTM1QzAeFw0yNTA5MDUxODQ1NDZaFw0yNTA5MDgyMTU2NDZaMDMxMTAvBgNV BAMTKEY3QjY2MDcxNzE4MzNFQTA3NjM4NzQxREMxNTI4RjEwQUYyNjVGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMO/bgIU5wb6jSfD/rvy2Kpta q0eKmydzC0Ez/jV9ouiwrEFCJrpzrT1CSPKpHnlhpnhAlR45b5jwnE1a3DYdDbP4 uZKte/DlhoHOSQ5fey43Jk44UnYFbfgJoayg0rqeoaIxvMFuIcEjOA4X2FyED6k8 lxSrOoZC89TLTRGxW2aGilYBM8A0KjZ5RjJCBjeGEPOUvkyfwMDZ9nNYCDD07EaC /ZCF2WCqi5VTMWptdfN9vlUoDX7afJHPZYPuxWAcs+Q2OV+3j5wE1pVNFSn6Q3ih bJ9wXqxgPyn1//LjDPm/2r/d6tNkGv/8eJDX03rH5m0kO3HoaS1f9U52lQyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU97ZgcXGDPqB2OHQdwVKPEK8mX68wHwYDVR0j BBgwFoAUYLwwfOHdHI7Z2ch9heTYAGS7k1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGRlNmM4Mi1kOTJiLTQwODUtODg5My1kNjQ3NzkxYzI3N2YvMC82MEJDMzA3Q0Ux REQxQzhFRDlEOUM4N0Q4NUU0RDgwMDY0QkI5MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2NEJC OTM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4 MDA2NEJCOTM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJbBuYGUXtXiHPxfK/BfXBRHzhtl2YLOOBA dPhiXzqmbMFA3rh43aohz2v50lkKi8f4BryYtLU4aKADW0gpjzDAAH9i5gzNOs0s 6vr6vZUa2BTKnx0WhbwUpQqxkKI9KPqVqQp3SSgeRqdlo4Lwx+D6MJ72akEiVWAr bnq4XRvktnyXCzKeoV/o8YGJyp5eRsp05NOn2p7pEr7XWD70jOIfXzZGiPO5WXlq 9Xjn8pVQ4Xgzck7iufK5D6CLprBJcAPmQgA99gb/Ljg4obga8tnStfShVDyMdSTp O7ZkpWJqhqO17OZkZn3JoSJq9KV/DciXLJeGYk9p9pOyIx2GleU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:46 2025 by rpki-client