$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft (raw, json) Hash identifier: /RApnZ7Vz0ByBe4ExgTCd1MQfLHoB3TpDOIiLAdYiOA= Subject key identifier: C1:2A:8B:5F:08:FA:C4:E6:8D:4D:F1:CE:14:23:F5:F8:27:F3:ED:BC Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 3A25A56E73401A558A8D9E68773FFC2AD303F605 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft Manifest number: 015E Signing time: Sat 05 Apr 2025 02:30:55 +0000 Manifest this update: Sat 05 Apr 2025 02:25:55 +0000 Manifest next update: Tue 08 Apr 2025 11:01:55 +0000 Files and hashes: 1: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl (hash: F76XgbdANTT0FdWpixWS9IM7G1Oei/OkFn+wB2TBmHA=) 2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: 0uc+kOCgK/ThUQQa26NKJhz1A+pFk8KkCK2KrDxl9cs=) 3: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: ZDyxHBlNGIzYgtnVCT1eXLwOr1vFMRFU8WTMZvphid0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:25:a5:6e:73:40:1a:55:8a:8d:9e:68:77:3f:fc:2a:d3:03:f6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: Apr 5 02:25:55 2025 GMT Not After : Apr 8 11:01:55 2025 GMT Subject: CN=C12A8B5F08FAC4E68D4DF1CE1423F5F827F3EDBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:50:6c:33:f4:12:20:af:16:60:aa:d8:4a: 96:2d:22:83:52:9f:0e:af:61:de:c5:99:a3:72:2e: e2:09:8f:6d:ca:46:95:5b:90:10:8d:0d:7a:43:fe: 98:87:bf:8b:08:84:c6:03:e3:69:ac:d4:c8:04:31: dd:e4:84:6a:df:4b:20:f3:32:5a:0d:46:89:3e:22: 6e:7e:f0:0a:c3:07:1a:c8:89:7b:4e:db:79:8f:49: 93:3a:a5:54:7a:6b:d3:df:2f:b9:ff:13:25:a1:de: 01:4b:4d:2b:c4:9d:83:84:02:8b:35:9a:19:91:a9: 23:29:56:86:e0:71:fa:96:73:7c:8d:5b:a4:73:77: a5:73:7a:56:38:07:50:52:31:53:d2:5a:1e:16:40: d3:3c:c8:4d:18:c9:5f:9a:c4:45:27:dd:66:27:bc: c4:3f:8b:b1:65:de:db:42:61:8c:ca:ef:4e:f5:fe: 1d:2c:04:88:83:cb:b8:8b:1c:42:7f:02:e2:c1:9b: d9:a0:48:25:47:24:9c:1a:55:aa:c3:05:df:36:82: f2:e1:4d:f3:c5:e8:13:86:e2:0b:5f:aa:ef:09:f6: f1:c8:3d:d9:cb:e2:41:c2:63:b0:93:98:60:cc:8c: af:97:e5:10:42:4d:ee:76:55:be:e5:ab:9a:a5:ea: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2A:8B:5F:08:FA:C4:E6:8D:4D:F1:CE:14:23:F5:F8:27:F3:ED:BC X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:38:4e:d7:f6:28:09:84:35:ac:15:96:60:82:84:89:76:0f: 8c:94:a7:39:68:77:7b:80:c7:18:b1:20:78:d1:e3:7d:c3:e0: ec:6a:18:48:a9:2a:6a:a1:38:00:00:b9:a1:0d:3c:e1:b3:9b: 2d:0f:d0:d8:29:43:e0:f6:da:5e:33:c5:65:12:96:e4:a8:48: 1b:d6:21:54:9c:b8:cb:3b:24:5f:9b:0b:9a:aa:d8:46:07:e4: 25:95:6c:b8:49:03:63:ad:f4:36:7e:38:b0:54:28:35:43:a1: 75:97:d2:60:b7:b6:1f:b3:96:f0:85:e1:87:29:26:3c:34:7d: 73:b6:8d:88:4e:c1:98:4d:77:c0:7a:07:27:2e:19:06:df:15: 6e:c2:8f:5f:31:dc:8e:e0:a9:43:7d:1b:2e:4b:34:49:67:ff: f0:e5:db:e7:a5:34:c9:bb:c9:5c:45:61:ab:64:80:10:9b:c7: d5:48:ec:ac:ee:8e:cc:50:e1:62:63:dc:36:f6:32:1b:7f:8a: f8:9b:9e:2d:26:cb:d8:5f:31:59:ae:81:ac:ed:1f:d4:11:be: 72:c1:3c:f3:0a:61:f4:04:dc:ce:5b:ad:49:38:01:e5:b7:36: 60:71:2d:69:e8:5c:86:8b:43:f8:ba:62:36:1d:c9:ba:6f:b7: ea:13:d3:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiWlbnNAGlWKjZ5odz/8KtMD9gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNTA0MDUwMjI1NTVaFw0yNTA0MDgxMTAxNTVaMDMxMTAvBgNV BAMTKEMxMkE4QjVGMDhGQUM0RTY4RDRERjFDRTE0MjNGNUY4MjdGM0VEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfFBsM/QSIK8WYKrYSpYtIoNS nw6vYd7FmaNyLuIJj23KRpVbkBCNDXpD/piHv4sIhMYD42ms1MgEMd3khGrfSyDz MloNRok+Im5+8ArDBxrIiXtO23mPSZM6pVR6a9PfL7n/EyWh3gFLTSvEnYOEAos1 mhmRqSMpVobgcfqWc3yNW6Rzd6VzelY4B1BSMVPSWh4WQNM8yE0YyV+axEUn3WYn vMQ/i7Fl3ttCYYzK7071/h0sBIiDy7iLHEJ/AuLBm9mgSCVHJJwaVarDBd82gvLh TfPF6BOG4gtfqu8J9vHIPdnL4kHCY7CTmGDMjK+X5RBCTe52Vb7lq5ql6skRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwSqLXwj6xOaNTfHOFCP1+Cfz7bwwHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNF REY4RUIxMTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI44Ttf2KAmENawVlmCChIl2D4yUpzlod3uA xxixIHjR433D4OxqGEipKmqhOAAAuaENPOGzmy0P0NgpQ+D22l4zxWUSluSoSBvW IVScuMs7JF+bC5qq2EYH5CWVbLhJA2Ot9DZ+OLBUKDVDoXWX0mC3th+zlvCF4Ycp Jjw0fXO2jYhOwZhNd8B6BycuGQbfFW7Cj18x3I7gqUN9Gy5LNEln//Dl2+elNMm7 yVxFYatkgBCbx9VI7KzujsxQ4WJj3Db2Mht/ivibni0my9hfMVmugaztH9QRvnLB PPMKYfQE3M5brUk4AeW3NmBxLWnoXIaLQ/i6YjYdybpvt+oT02o= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:11 2025 by rpki-client