$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft (raw, json) Hash identifier: ylGQP8KfzSIQmDACEn2eo4A1xDbUPUGTwEfzB++bsKE= Subject key identifier: 36:0D:83:8B:DB:EA:E4:5B:9B:44:DA:01:63:C3:A5:22:50:C5:93:F1 Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 0DF2B44F46E1A9B25D2DAD799F9050E088123D7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft Manifest number: 0179 Signing time: Wed 04 Jun 2025 14:10:56 +0000 Manifest this update: Wed 04 Jun 2025 14:05:56 +0000 Manifest next update: Sat 07 Jun 2025 20:24:56 +0000 Files and hashes: 1: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: ZDyxHBlNGIzYgtnVCT1eXLwOr1vFMRFU8WTMZvphid0=) 2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: BdVYdxczoI+ws1l/hFqXFbC3eYppxkpNCDa2zzpcHMc=) 3: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl (hash: 9bn42VSOxJz/9zsEq0WXsv5L2PSiIlYB1L3017yBwbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f2:b4:4f:46:e1:a9:b2:5d:2d:ad:79:9f:90:50:e0:88:12:3d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: Jun 4 14:05:56 2025 GMT Not After : Jun 7 20:24:56 2025 GMT Subject: CN=360D838BDBEAE45B9B44DA0163C3A52250C593F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:26:e4:e5:d3:70:de:57:df:34:6f:2a:a3: f5:77:43:10:82:a7:03:74:9c:74:c6:78:23:7f:f7: d6:40:a6:07:a6:a2:f7:97:c6:bc:6a:9a:63:09:33: a2:d5:9b:16:59:79:26:61:4c:0b:a6:c5:5b:65:2b: db:ce:fe:e8:cc:32:81:88:15:55:12:06:88:b2:35: ed:37:11:b3:f1:0e:35:b6:27:dd:4a:75:e8:b5:39: 99:c2:88:4c:1c:8c:b3:88:fb:ff:03:6a:77:9c:a8: 80:5a:fa:4d:eb:74:f6:1c:25:a7:79:1a:fe:6d:bf: 8e:19:d4:49:71:14:43:ff:92:05:8b:fb:0e:67:ba: 4f:89:44:42:3e:20:38:71:cf:14:bc:da:94:7c:78: a0:88:12:68:62:00:49:13:d2:73:04:a9:80:30:2d: db:82:03:41:03:10:c0:e3:cb:98:28:c1:f1:96:47: 7b:90:c7:2e:49:23:e2:f7:66:dd:27:45:72:0b:1d: 55:8b:91:0f:a4:b2:6e:ac:c1:74:b4:b5:b9:67:e8: 88:af:3c:8f:11:12:73:98:ab:f3:07:9b:77:c8:bd: 44:93:cf:1a:df:57:a1:99:ef:ce:50:30:29:9c:88: e8:bc:83:8d:a5:d0:5a:2a:ab:9f:3f:07:b7:87:07: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0D:83:8B:DB:EA:E4:5B:9B:44:DA:01:63:C3:A5:22:50:C5:93:F1 X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f5:2d:e6:29:6e:c8:1e:74:3e:bc:d6:d1:c5:98:23:54:e4: cc:dc:ea:15:c7:c3:dd:3d:56:26:8b:69:47:2f:92:46:69:df: 77:91:68:22:d4:af:ad:f2:79:ff:c4:71:63:5e:57:4c:1d:b5: 78:2b:9c:fa:f5:26:d2:ab:2f:78:d2:8d:a5:1e:89:e8:22:36: 2d:14:5c:43:39:d2:8c:d2:fe:9f:db:23:f1:6a:49:aa:42:3a: 14:3b:ab:56:f4:9a:b5:a0:57:b4:ea:5f:08:b9:0b:49:ce:a8: 71:cd:b9:ff:36:13:c0:ac:e1:f0:3b:7c:1b:4b:7a:bb:93:46: ff:3e:c9:60:bd:38:5c:64:49:81:2a:80:c2:8f:8d:b6:46:64: 1c:4c:e6:32:8f:84:f3:32:8c:f4:d7:2e:3f:77:13:f3:aa:60: f3:e5:58:25:ca:18:78:e3:78:39:36:93:db:aa:1f:3f:f1:37: e8:2b:75:94:04:4e:26:cd:f8:91:94:0f:94:5b:cd:72:e6:2a: 71:83:3c:2d:a2:ba:19:8a:de:a3:9f:f0:50:dd:73:e1:1b:2c: 22:fd:8c:c3:37:f4:39:0e:84:ba:55:71:41:96:a0:7b:cc:1c: be:d5:36:50:83:0e:c5:0a:ec:43:87:1f:13:e3:d1:59:a1:c3: ae:8b:e3:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfK0T0bhqbJdLa15n5BQ4IgSPXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNTA2MDQxNDA1NTZaFw0yNTA2MDcyMDI0NTZaMDMxMTAvBgNV BAMTKDM2MEQ4MzhCREJFQUU0NUI5QjQ0REEwMTYzQzNBNTIyNTBDNTkzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgSbk5dNw3lffNG8qo/V3QxCC pwN0nHTGeCN/99ZApgemoveXxrxqmmMJM6LVmxZZeSZhTAumxVtlK9vO/ujMMoGI FVUSBoiyNe03EbPxDjW2J91Kdei1OZnCiEwcjLOI+/8DanecqIBa+k3rdPYcJad5 Gv5tv44Z1ElxFEP/kgWL+w5nuk+JREI+IDhxzxS82pR8eKCIEmhiAEkT0nMEqYAw LduCA0EDEMDjy5gowfGWR3uQxy5JI+L3Zt0nRXILHVWLkQ+ksm6swXS0tbln6Iiv PI8REnOYq/MHm3fIvUSTzxrfV6GZ785QMCmciOi8g42l0Foqq58/B7eHB9xjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNg2Di9vq5FubRNoBY8OlIlDFk/EwHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNF REY4RUIxMTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADL1LeYpbsgedD681tHFmCNU5Mzc6hXHw909 ViaLaUcvkkZp33eRaCLUr63yef/EcWNeV0wdtXgrnPr1JtKrL3jSjaUeiegiNi0U XEM50ozS/p/bI/FqSapCOhQ7q1b0mrWgV7TqXwi5C0nOqHHNuf82E8Cs4fA7fBtL eruTRv8+yWC9OFxkSYEqgMKPjbZGZBxM5jKPhPMyjPTXLj93E/OqYPPlWCXKGHjj eDk2k9uqHz/xN+grdZQETibN+JGUD5RbzXLmKnGDPC2iuhmK3qOf8FDdc+EbLCL9 jMM39DkOhLpVcUGWoHvMHL7VNlCDDsUK7EOHHxPj0Vmhw66L4w4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:54 2025 by rpki-client