$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft (raw, json) Hash identifier: gLMjNP5rhHb2LVKmW5ZNpme3eEWdmOwrJ6C4RJFSh8Y= Subject key identifier: 51:33:A5:6E:0B:11:6A:B7:74:30:A6:46:11:06:FE:0B:67:DB:84:56 Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 2723134116C10791A572C31E0D44FBD65DBE9F6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft Manifest number: 01A2 Signing time: Fri 05 Sep 2025 22:00:56 +0000 Manifest this update: Fri 05 Sep 2025 21:55:56 +0000 Manifest next update: Tue 09 Sep 2025 08:33:56 +0000 Files and hashes: 1: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: ZDyxHBlNGIzYgtnVCT1eXLwOr1vFMRFU8WTMZvphid0=) 2: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl (hash: RopoC/riiYVv0K3fX/1UWC3tZaWIe+Yqt06GGPkaj2Y=) 3: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: BdVYdxczoI+ws1l/hFqXFbC3eYppxkpNCDa2zzpcHMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:23:13:41:16:c1:07:91:a5:72:c3:1e:0d:44:fb:d6:5d:be:9f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: Sep 5 21:55:56 2025 GMT Not After : Sep 9 08:33:56 2025 GMT Subject: CN=5133A56E0B116AB77430A6461106FE0B67DB8456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:ce:44:5c:c6:87:7d:d4:3c:80:93:0d:9e: bc:81:3f:05:b7:0d:f0:0b:ed:2b:d8:05:c8:b7:f9: b5:98:96:5a:09:2e:5d:38:18:68:f3:98:11:42:6f: a5:a7:f8:5e:5b:6b:dc:e7:c1:da:cb:63:35:be:17: d3:f0:61:8d:5e:a7:58:e1:a4:6c:da:e9:18:08:91: ce:02:c4:ce:49:58:06:19:6b:0a:37:de:94:f2:fb: ce:56:98:bc:35:71:5a:4e:f5:2b:f8:52:d6:61:09: d4:d6:c1:5b:b0:c6:e1:41:ee:84:94:d3:b0:44:76: 11:6c:0f:65:3a:1c:b7:af:27:25:3c:97:99:1e:77: 76:1a:48:f5:c3:c4:ae:cd:fb:14:12:c6:65:da:79: 36:84:32:84:f7:91:aa:0b:84:8e:f3:4f:16:8b:90: 21:f6:6a:22:12:b1:dd:87:f4:43:c1:64:e7:d4:a8: 8f:d1:7b:ce:ee:1a:33:c6:ea:a4:48:55:35:40:8b: 9a:73:68:d9:d6:8d:ed:cc:84:87:40:ea:cb:e7:b7: f6:16:be:51:ff:41:f9:cb:fe:bb:25:26:92:d2:bd: e2:01:77:74:5d:c2:28:ce:04:65:0b:14:67:f4:80: c0:9e:52:15:72:06:36:27:69:6b:71:49:69:63:80: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:33:A5:6E:0B:11:6A:B7:74:30:A6:46:11:06:FE:0B:67:DB:84:56 X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:64:c7:ac:5d:b0:ff:f0:c9:78:d1:00:ce:e5:f6:f6:e9:f0: 88:56:e1:57:db:86:54:ef:b4:e7:96:27:17:ff:ae:28:f2:8e: e9:ec:83:b7:df:90:8e:51:b6:a7:bc:24:f1:27:57:0d:a0:34: 7a:fa:d7:4b:73:fe:45:da:5a:e3:29:12:92:15:23:d1:e1:db: 0e:e1:b2:3a:61:15:95:fe:1d:c9:95:13:3c:a1:51:b4:66:21: bf:59:39:9b:25:e1:2e:e7:74:6b:f9:7d:9d:52:62:88:44:a5: 79:14:3d:ed:15:70:d0:7a:4c:7b:0a:d3:5f:d9:c8:2b:bc:cd: eb:45:59:d2:01:76:e7:85:e6:60:e5:70:5a:5c:27:0b:b7:61: ed:bf:9c:ef:6c:e4:e2:66:06:4f:c7:6d:29:c2:c4:bc:21:ee: 6e:cb:c4:04:72:63:a3:c7:99:58:d7:27:95:83:f6:30:5f:73: 3a:46:5c:61:c8:07:87:2b:44:4a:02:65:66:e4:b0:91:be:69: 2e:6b:65:d6:dd:6c:72:67:4b:92:0f:fc:2d:4d:91:e0:6f:d2: a6:31:42:48:05:fe:65:9c:f5:6f:4d:f9:00:fc:f4:28:37:75: b7:0c:3a:a6:a0:f2:0b:68:4d:84:c1:8f:b0:aa:f5:78:09:bd: 46:f7:3d:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyMTQRbBB5GlcsMeDUT71l2+n24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNTA5MDUyMTU1NTZaFw0yNTA5MDkwODMzNTZaMDMxMTAvBgNV BAMTKDUxMzNBNTZFMEIxMTZBQjc3NDMwQTY0NjExMDZGRTBCNjdEQjg0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQc5EXMaHfdQ8gJMNnryBPwW3 DfAL7SvYBci3+bWYlloJLl04GGjzmBFCb6Wn+F5ba9znwdrLYzW+F9PwYY1ep1jh pGza6RgIkc4CxM5JWAYZawo33pTy+85WmLw1cVpO9Sv4UtZhCdTWwVuwxuFB7oSU 07BEdhFsD2U6HLevJyU8l5ked3YaSPXDxK7N+xQSxmXaeTaEMoT3kaoLhI7zTxaL kCH2aiISsd2H9EPBZOfUqI/Re87uGjPG6qRIVTVAi5pzaNnWje3MhIdA6svnt/YW vlH/QfnL/rslJpLSveIBd3RdwijOBGULFGf0gMCeUhVyBjYnaWtxSWljgDzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUTOlbgsRard0MKZGEQb+C2fbhFYwHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNF REY4RUIxMTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9kx6xdsP/wyXjRAM7l9vbp8IhW4VfbhlTv tOeWJxf/rijyjunsg7ffkI5Rtqe8JPEnVw2gNHr610tz/kXaWuMpEpIVI9Hh2w7h sjphFZX+HcmVEzyhUbRmIb9ZOZsl4S7ndGv5fZ1SYohEpXkUPe0VcNB6THsK01/Z yCu8zetFWdIBdueF5mDlcFpcJwu3Ye2/nO9s5OJmBk/HbSnCxLwh7m7LxARyY6PH mVjXJ5WD9jBfczpGXGHIB4crREoCZWbksJG+aS5rZdbdbHJnS5IP/C1NkeBv0qYx QkgF/mWc9W9N+QD89Cg3dbcMOqag8gtoTYTBj7Cq9XgJvUb3PTc= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:01 2025 by rpki-client